{"version":1,"pages":[{"id":"JsKd452Nu8XTrHz68zaF","title":"Home","pathname":"/","siteSpaceId":"sitesp_VtovL","lang":"en","description":"Welcome to your team’s developer platform","breadcrumbs":[{"label":"Home","icon":"house"}]},{"id":"duulmCe6Z45RM4n018E0","title":"1. Mapping Authentication Events","pathname":"/1.-mapping-authentication-events","siteSpaceId":"sitesp_VtovL","lang":"en","description":"Map SSO and SaaS application logs to the XDM authentication schema to automatically build authentication stories.","breadcrumbs":[{"label":"Home","icon":"house"}]},{"id":"81t0sQjF023aiiVA1PjT","title":"Cortex XSIAM Documentation","pathname":"/cortex-xsiam-docs","siteSpaceId":"sitesp_q8DIo","icon":"books","description":"Find Cortex XSIAM product guides, references, and release information.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex XSIAM","icon":"head-side-gear"}]},{"id":"JsKd452Nu8XTrHz68zaF","title":"Cortex XDR Documentation","pathname":"/cortex-xdr-docs","siteSpaceId":"sitesp_yip4F","icon":"books","description":"Find Cortex XDR product guides, references, and release information.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex XDR","icon":"shield-halved"}]},{"id":"JsKd452Nu8XTrHz68zaF","title":"Cortex Cloud Documentation","pathname":"/cortex-cloud-docs","siteSpaceId":"sitesp_0bhmd","icon":"books","description":"Find Cortex Cloud product documentation, references, and release information.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex Cloud","icon":"cloud"}]},{"id":"JsKd452Nu8XTrHz68zaF","title":"Cortex XDR Agent","pathname":"/cortex-xdr-agent-docs","siteSpaceId":"sitesp_LgiFA","icon":"books","description":"Cortex XDR Agent guides, releases, compatibility, and reference information.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex XDR Agent","icon":"user-hat-tie"}]},{"id":"QLrP1ygBD3scwgcGwZm8","title":"Cortex AgentiX","pathname":"/cortex-agentix-docs","siteSpaceId":"sitesp_cwRtu","icon":"books","description":"Cortex AgentiX documentation, release notes, and API references.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex AgentiX","icon":"user-robot"}]},{"id":"Dieg6oDpxlgg5IGZssG5","title":"What's New","pathname":"/cortex-agentix-docs/whats-new","siteSpaceId":"sitesp_cwRtu","icon":"star","description":"Latest Cortex AgentiX release notes.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex AgentiX","icon":"user-robot"}]},{"id":"lFkZEctYqLTMZRc24sM7","title":"Cortex Gateway Admin Guide","pathname":"/cortex-agentix-docs/cortex-gateway-admin-guide","siteSpaceId":"sitesp_cwRtu","icon":"user-shield","description":"Manage permissions, RBAC, and user groups across Cortex products.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex AgentiX","icon":"user-robot"}]},{"id":"g5hE39YDjX2LHBMRY6rT","title":"Release Notes","pathname":"/cortex-agentix-docs/release-notes","siteSpaceId":"sitesp_cwRtu","icon":"bullhorn","description":"Latest Cortex AgentiX features and known issues.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex AgentiX","icon":"user-robot"}]},{"id":"lrvHHD1VQSXn7fwRwWkB","title":"Cortex AgentiX Documentation","pathname":"/cortex-agentix-docs/cortex-agentix-documentation","siteSpaceId":"sitesp_cwRtu","icon":"book","description":"Product guides for Cortex AgentiX.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex AgentiX","icon":"user-robot"}]},{"id":"8Qfs6Q2axibbqB9sbMAq","title":"API Reference Guide","pathname":"/cortex-agentix-docs/api-reference-guide","siteSpaceId":"sitesp_cwRtu","icon":"code","description":"Cortex AgentiX API reference.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex AgentiX","icon":"user-robot"}]},{"id":"QDbkrswLFHJIC2Z3fnrf","title":"Cortex Data Security","pathname":"/cortex-data-security-docs","siteSpaceId":"sitesp_Rtd7e","icon":"books","description":"","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex Data Security","icon":"wave-square"}]},{"id":"JsKd452Nu8XTrHz68zaF","title":"Cortex XSOAR Documentation","pathname":"/cortex-xsoar-docs","siteSpaceId":"sitesp_1VPZs","icon":"books","description":"Explore Cortex XSOAR guides, releases, and product resources.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex XSOAR","icon":"sun"}]},{"id":"JsKd452Nu8XTrHz68zaF","title":"Cortex Xpanse Expander","pathname":"/cortex-xpanse-docs","siteSpaceId":"sitesp_r5mx5","icon":"books","description":"Find Cortex Xpanse Expander guides, APIs, and release information.","breadcrumbs":[{"label":"Products","icon":"square-star"},{"label":"Cortex Xpanse","icon":"manhole"}]},{"id":"QODQbh65sM5UR93gfxSJ","title":"Navigate the Cortex XSIAM docs","pathname":"/cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Start here for a visual overview of the main Cortex XSIAM documentation areas.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"5oyEKp3C1Wr5wpgnWsfi","title":"Get started with Cortex XSIAM","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/get-started-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about Cortex XSIAM and the key integrated capabilities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"f4zRj6jfPg8K59Wl3kis","title":"Cortex XSIAM architecture","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/get-started-cortex-xsiam/cortex-xsiam-architecture","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore the Cortex XSIAM architecture, including SIEM, XDR, SOAR, cloud security, XDL data ingestion, and Broker VM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Get started with Cortex XSIAM"}]},{"id":"L5l2iP8vB531AlFRaYlt","title":"Agentic AI in Cortex XSIAM","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/agentic-ai-in-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex Agentic Assistant in Cortex XSIAM to investigate cases, perform threat hunting, and create scripts. Embed and run LLM prompts in playbooks. View AI case summaries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"IbebY5G49lBv3RWMiC1N","title":"Agentic Assistant use cases","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/agentic-ai-in-cortex-xsiam/agentic-assistant-use-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Recommended prompts to automate your SOC using the Cortex Agentic Assistant in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Agentic AI in Cortex XSIAM"}]},{"id":"ikArSJ2OHL5OCtKVJjd2","title":"Compare Agentic Assistant with Cortex Assistant","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/agentic-ai-in-cortex-xsiam/compare-agentic-assistant-with-cortex-assistant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Feature comparison between Cortex Agentic Assistant and Cortex Assistant in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Agentic AI in Cortex XSIAM"}]},{"id":"CpJRj5OTk2TN8NgG4KQg","title":"Agentic Assistant security","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/agentic-ai-in-cortex-xsiam/agentic-assistant-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about how the Agentic Assistant is built using responsible AI principles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Agentic AI in Cortex XSIAM"}]},{"id":"h3ZaaNTsleCGlry5C8wn","title":"Best practices for using Agentic AI in Cortex XSIAM","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/agentic-ai-in-cortex-xsiam/best-practices-for-using-agentic-ai-in-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Agentic AI in Cortex XSIAM"}]},{"id":"09Lsz9hb2ROrwvU7HEDl","title":"Cortex XSIAM license tiers and product licenses","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/cortex-xsiam-product-licenses","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Compare Cortex XSIAM license tiers and product licenses: NG-SIEM, Enterprise, Premium, included capabilities, and add-ons.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"8D3yydYISZpnQmgXHT0Z","title":"Data retention","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/cortex-xsiam-product-licenses/data-retention","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the default retention periods for all Cortex XSIAM licenses and the available retention add-ons.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Cortex XSIAM license tiers and product licenses"}]},{"id":"LrnrUplgvapSSeAtUDez","title":"Data storage lifecycle","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/cortex-xsiam-product-licenses/data-storage-lifecycle","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand the Cortex XSIAM data storage lifecycle, including hot and cold storage, retention extensions, and Event Forwarding exports.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Cortex XSIAM license tiers and product licenses"}]},{"id":"ThOeQdWmw5iPy6NeLElO","title":"License allocation","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/cortex-xsiam-product-licenses/license-allocation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about how Cortex XSIAM regulates licenses.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Cortex XSIAM license tiers and product licenses"}]},{"id":"pbK2g2XxFmjNBiCt8nDa","title":"License expiration","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/cortex-xsiam-product-licenses/license-expiration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the Cortex XSIAM license expiration and validation period.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Cortex XSIAM license tiers and product licenses"}]},{"id":"EeFp8fdPluQJeK1rvlXB","title":"Upgrade your tenant","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/cortex-xsiam-product-licenses/upgrade-your-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"If you have purchased new entitlements, Cortex XSIAM automatically upgrades your tenant to provide product upgrades and new license entitlements.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"},{"label":"Cortex XSIAM license tiers and product licenses"}]},{"id":"mu1nWuJJXUxYutHIszqA","title":"In-product support ticket creation","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/in-product-support-case-creation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Open a support ticket directly in Cortex XSIAM and record your console to capture your issues and have the ticket handled efficiently.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"q3rbeV8UO65X8vMk1Ntr","title":"Supported web browsers","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/supported-web-browsers","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View the web browsers and minimum browser versions supported for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"bn6Hqxwt1IX6RkKDP6BB","title":"Use the Cortex XSIAM interface","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/use-the-interface","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn Cortex XSIAM interface navigation, filtering, saved views, result exports, system tools, and product areas.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"paEXvbXD7zkFwTSb8pEA","title":"Manage API keys","pathname":"/cortex-xsiam/learn-about-cortex-xsiam/manage-api-keys","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn to create and manage Cortex XSIAM API keys, roles, expiration, scopes, and credential permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Learn about Cortex XSIAM","icon":"book"}]},{"id":"WJ3ScJ5h1SvcTVY3l1QH","title":"How to onboard Cortex XSIAM","pathname":"/cortex-xsiam/onboard-cortex-xsiam/onboard-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about the deployment preparation and procedures for onboarding and configuring Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"}]},{"id":"7EYRv7CkoY58Vkrrcl1N","title":"Plan and prepare","pathname":"/cortex-xsiam/onboard-cortex-xsiam/plan-and-prepare","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan your Cortex XSIAM deployment, including storage, region, licensing, XDR agents, data sources, and user roles.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"}]},{"id":"SERLueDhYHc3QgFy7XIE","title":"Plan your agent deployment","pathname":"/cortex-xsiam/onboard-cortex-xsiam/plan-and-prepare/plan-your-agent-deployment","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan phased Cortex XDR agent deployment, from pilot testing to organization-wide Cortex XSIAM rollout.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Plan and prepare"}]},{"id":"oWaVrR20WgqCo0PIhShc","title":"Deployment steps","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review the plan and prepare considerations, and then follow the steps in the onboarding checklist to successfully deploy and onboard Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"}]},{"id":"8eLOP7TAv55CTrnyMA4j","title":"Cortex XSIAM onboarding checklist","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/cortex-xsiam-onboarding-checklist","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM onboarding checklist for activation, data source configuration, XDR agent deployment, and analytics setup.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"3glP3BWsMMQUXeWWPuqt","title":"Activate Cortex XSIAM","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Activate Cortex XSIAM tenants in Cortex Gateway, including prerequisites, encryption, and access configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"8Hx4oTHcUsz8OkG60Ohf","title":"Bring your own keys","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam/bring-your-own-keys","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up, import, rotate, and disable Cortex BYOK encryption keys for Cortex XSIAM tenant data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XSIAM"}]},{"id":"ekC04txqcT1blmU7ltvf","title":"Cortex XSIAM supported regions and data residency","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam/cortex-xsiam-supported-regions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View Cortex XSIAM supported hosting regions and data residency locations in Americas, EMEA, and JPAC.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XSIAM"}]},{"id":"IWVdemmwfxhhDy9hY7cd","title":"Enable access to required PANW resources","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam/enable-access-to-required-panw-resources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure firewall access to Cortex XSIAM resources using required FQDNs, IP addresses, ports, and App-IDs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XSIAM"}]},{"id":"Cgo2V5EhSrChBMXvHwkD","title":"Cortex XSIAM regional egress resources","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam/enable-access-to-required-panw-resources/regional-egress-resources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM firewall egress access with regional FQDNs, IP addresses, ports, and App-IDs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XSIAM"},{"label":"Enable access to required PANW resources"}]},{"id":"aP0MN0YGD0sFOpgdz6yZ","title":"Cortex XSIAM engine outbound IP addresses","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam/enable-access-to-required-panw-resources/engine-ip-addresses-outbound","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure firewall allowlists for Cortex XSIAM engine outbound IP addresses by deployment region.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XSIAM"},{"label":"Enable access to required PANW resources"}]},{"id":"ebXPsHllXiCYtTqirGyl","title":"Cortex XSIAM inbound source IP addresses","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam/enable-access-to-required-panw-resources/inbound-source-resources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure firewall allowlists for Cortex XSIAM inbound source IP addresses by deployment region.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XSIAM"},{"label":"Enable access to required PANW resources"}]},{"id":"cuuMJkIwLHoA7e4gy3H1","title":"FedRAMP and US federal Cortex XSIAM required resources","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/activate-cortex-xsiam/enable-access-to-required-panw-resources/fedramp-and-the-us-federal-government-required-resources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure required Cortex XSIAM network resources for FedRAMP and US federal government deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XSIAM"},{"label":"Enable access to required PANW resources"}]},{"id":"zs5ATGWKEcNy0QQ1vh8I","title":"Set up users, groups, and roles","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-users-and-roles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to set up users and roles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"V4sRRLTpIgvNG4W1mojd","title":"Manage Cortex XSIAM user groups","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-users-and-roles/user-group-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM user groups for RBAC, SBAC scoping, SAML mapping, and Active Directory synchronization.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up users, groups, and roles"}]},{"id":"VGvw0l8D94n7s0Is9NE0","title":"Assign user roles and groups","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-users-and-roles/assign-user-roles-and-groups","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Assign Cortex XSIAM roles and groups, configure RBAC permissions, and apply SBAC granular access.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up users, groups, and roles"}]},{"id":"4JSvzCJgecoQO0S422H6","title":"Set up authentication","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-authentication","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Authenticate Cortex XSIAM users using SAML 2.0 or Customer Support Portal (CSP).","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"Il1DwKOlIVHLSMpHU5Jq","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Authenticate Cortex XSIAM users through Customer Support Portal and assign Gateway or tenant access roles.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"ha0TQsTKv8o2PMrnIQZe","title":"Authenticate users using SSO","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM SAML 2.0 single sign-on with identity providers, group mapping, and user provisioning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"cJYMv8y3YHvtn947bBQr","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Okta SAML 2.0 single sign-on and group mapping for Cortex XSIAM users.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"RypatOxAVrKKE7fWKazV","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Microsoft Entra ID SAML 2.0 single sign-on, security group claims, and user group mapping for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"umEEDBnb4wf0O4BXVnBT","title":"Configure content","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/configure-content","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM data sources with standard collectors, Broker VM applets, XDR Collectors, CSP onboarding, and content packs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"LVmFk0hZ8cBrM2hXpOO5","title":"Set up Cloud Identity Engine","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/set-up-cloud-identity-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to set up Cloud Identity Engine to use with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"GtZ4GIHXvEl7E1KRtdqD","title":"Install Cortex XDR agents","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install Cortex XDR agents with agent installation packages to monitor endpoints and collect Cortex XSIAM endpoint data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"xTS384SLrHGb1Jfrj9Sg","title":"Create an agent installation package","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents/create-an-agent-installation-package","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XDR agent installation packages for endpoints, Kubernetes, container, and serverless workloads in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"aQv4PzYbeityFAmGb2wG","title":"Deploy installation packages","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents/deploy-installation-packages","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy Cortex XDR agent installation packages to Windows, macOS, Linux, Kubernetes, and Android endpoints using manual or software distribution methods in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"NgJhvMwLRysZf5cJV1iI","title":"Endpoint data collection","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents/endpoint-data-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review endpoint metadata, EDR events, Windows event logs, and performance metrics collected by Cortex XDR agents for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"AqiAOI5iTS4EotIXI0uG","title":"Configure global agent settings","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents/configure-global-agent-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure global Cortex XDR agent settings for uninstall passwords, content bandwidth, upgrades, advanced analysis, and endpoint cleanup for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"c5N1cL9De77QTkChbcK9","title":"Define endpoint groups","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents/define-endpoint-groups","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage static or dynamic Cortex XDR Agent endpoint groups to target security policies and actions by endpoint attributes for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"ZxOHDVrqfiw04AlkzNzX","title":"Manage endpoint profiles","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents/manage-endpoint-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM endpoint security profiles and policy mappings to apply reusable threat protection settings across endpoint groups.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"Y39ODfFzbDQCInYwdOL9","title":"Guidelines for keeping Cortex XDR agents and content updated","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/install-cortex-xdr-agents/guidelines-for-keeping-cortex-xdr-agents-and-content-updated","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan phased Cortex XDR agent upgrades and content updates with rollout schedules, staging content, and bandwidth controls in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"044wyCCrq3lucbSeqzv0","title":"Cortex XSIAM - Analytics","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/cortex-xsiam-analytics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to enable Cortex XSIAM - Analytics, which allows Cortex XSIAM to analyze data from a variety of sensors and develop a baseline to raise analytics alerts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"2bN94RHS0ct22KEghiuR","title":"Configure Cortex XSIAM network parameters","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/cortex-xsiam-analytics/configure-cortex-xsiam-network-parameters","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM internal IP address ranges and domain suffixes for network asset identification, tracking, and analysis.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Cortex XSIAM - Analytics"}]},{"id":"ZfPu4iFKy1rZPOWW5Nuf","title":"Enable the Analytics Engine and Identity Analytics","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/cortex-xsiam-analytics/enable-the-analytics-engine-and-identity-analytics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable Cortex XSIAM Analytics Engine and Identity Analytics to baseline activity and detect anomalous endpoint and user behavior.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"Cortex XSIAM - Analytics"}]},{"id":"A2Xw4TIjGathFMEcJDQm","title":"FedRAMP overview","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/fedramp-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how FedRAMP standardizes cloud security assessment, authorization, and continuous monitoring for U.S. government agencies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"yFms18ypGozD8FzsmWMI","title":"Cortex XSIAM FedRAMP compliance for federal agencies","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/fedramp-overview/cortex-xsiam-federal-compliance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how FedRAMP-authorized Cortex XSIAM supports U.S. federal agencies with isolated tenants, U.S. data residency, and government cloud infrastructure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"FedRAMP overview"}]},{"id":"CoLPm6l5AY30G86rpdu3","title":"Onboard and configure government cloud environments","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/fedramp-overview/onboarding-and-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard government cloud environments to Cortex XSIAM with the CSP wizard, Government tenant settings, and compliant scan modes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"FedRAMP overview"}]},{"id":"hg1l4y4602eGvH5k0RbH","title":"FedRAMP limitations and supported government cloud regions","pathname":"/cortex-xsiam/onboard-cortex-xsiam/deployment-steps/fedramp-overview/limitations-and-supported-regions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM FedRAMP feature limitations and supported AWS GovCloud and Azure Government regions for federal deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Deployment steps"},{"label":"FedRAMP overview"}]},{"id":"CBf0MtGNdI7qEo2cMRnG","title":"Post-deployment","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Complete Cortex XSIAM post-deployment tasks, including health checks, automations, and reviews of security cases and issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"}]},{"id":"c9ii5tzf2J7AxEkGWNOm","title":"Cortex XSIAM post-deployment checklist","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/post-deployment-checklist","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use this Cortex XSIAM post-deployment checklist for health checks, automations, case triage, XDR agent rollout, and integrations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"VGoBkUtE1ysEaWvNV5R4","title":"Perform health checks","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/perform-health-checks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Perform Cortex XSIAM health checks for prevention policies, Cortex XDR agents, WildFire testing, alerts, cases, and log ingestion.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"UqIZBaGqNrYUJnjEEJ1W","title":"Monitor agent operational status in Cortex XSIAM","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/perform-health-checks/monitor-agent-operational-status-in-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XDR agent operational status in Cortex XSIAM, including protected, partially protected, unprotected, and resource-impact states.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Perform health checks"}]},{"id":"CVJB2IALKpZR3KK5Iepa","title":"Cortex Marketplace","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/cortex-marketplace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Discover Cortex Marketplace content packs for integrations, playbooks, automations, correlation rules, dashboards, and security use cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"qokcihoGm6FpEBE5E4ir","title":"Content packs","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/cortex-marketplace/content-packs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore pre-installed and recommended Cortex Marketplace content packs for integrations, playbooks, scripts, widgets, and security workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Cortex Marketplace"}]},{"id":"xwzr8qE2d6u7ge4cKSWE","title":"Install content packs","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/cortex-marketplace/install-content-packs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install Cortex Marketplace content packs, review dependencies, and configure integrations and data sources in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Cortex Marketplace"}]},{"id":"wnVKplCzZ4bBbl0hYUGo","title":"Manage user roles and access management","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to manage access for users, user roles, user groups, and Single Sign-On (SSO) for users on a specific Cortex XSIAM tenant.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"Ge14B4XKCfORzYmyEdGi","title":"Manage user roles","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-user-roles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage Cortex XSIAM user roles with RBAC permissions, XQL dataset access controls, and scoped access settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"}]},{"id":"EwQmt3SSxMoifl951PRe","title":"Manage user access","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-user-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM user access with roles, user groups, RBAC permissions, SBAC scopes, and XQL dataset row controls.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"}]},{"id":"nWIhQaLrDZLNI2P84GLF","title":"User access reference information","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-user-access/user-access-reference-information","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM Users page fields for user types, direct roles, groups, group roles, and granular access scopes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"},{"label":"Manage user access"}]},{"id":"9AFGTx70crw2n7sT6yFu","title":"Manage user scope","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-user-scope","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM Scope-Based Access Control (SBAC) for users, groups, and API keys across assets, cases, endpoints, and dataset rows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"}]},{"id":"qzjdFkwdNwfdbzVPVeeO","title":"Manage access to objects","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-access-to-objects","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM per-object access for dashboards, reports, playbooks, scripts, and saved XQL queries using owner, editor, and viewer roles.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"}]},{"id":"PaQVsUdtjbfYBfLeYGgl","title":"Manage access to custom dashboards","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-custom-dashboards","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM custom dashboard access with role permissions, object sharing, owners, editors, viewers, and SBAC data scopes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"BailnEY6IvOmAafoMoo4","title":"Manage access to report templates","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-report-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM report template access with role permissions, ownership, sharing, public visibility, and SBAC data scopes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"E5zKtmKmh8JIhg73RtIa","title":"Manage access to playbooks and scripts","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-playbooks-and-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM playbook and script access with role permissions, ownership, sharing, public visibility, and automation controls.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"vGBeAwo4tuavNJrbKhwm","title":"Manage access to saved queries","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-saved-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM saved XQL query access with role permissions, ownership, sharing, public visibility, and Query Library controls.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"iHoGCrT7ddP6tSb1mHAB","title":"Dashboards and reports","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/dashboards-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM dashboards, widgets, reports, and report templates to visualize security data and monitor system activity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"2fXxLWnhu4wYqpgdyScT","title":"Configure server settings","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/configure-server-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM server settings for localization, branding, AI, access control, data ingestion, security, and support access.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"ROuvQdqCtXpoZb1SiHDY","title":"Configure security settings","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/configure-security-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM security settings for session expiration, login domains, approved IP ranges, inactive users, cookies, and report emails.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"HE9zNQFoctg2hCabM51a","title":"Data and log forwarding","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM notifications and forward logs, alerts, cases, and issues to email, Slack, syslog, and third-party services.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"}]},{"id":"tTzrogayLLrnRudOrYjP","title":"Forward logs and data from Cortex XSIAM to external services","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Forward Cortex XSIAM logs, cases, and issues to email, Slack, syslog, Splunk, Amazon SQS, Amazon S3, or webhooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"}]},{"id":"GUEbWucmggei9Fz81CqH","title":"Configure external applications for forwarding","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-external-applications-for-forwarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure external applications in Cortex XSIAM to forward cases, issues, and logs to email, Slack, syslog, Amazon S3, Amazon SQS, Splunk, and webhooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"}]},{"id":"VEpoTs5tBHpAPy7rL0AQ","title":"Forward notifications to Amazon SQS","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-sqs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM notification forwarding to Amazon SQS with Cortex Gateway egress, an AWS SQS queue, IAM role or access keys, and queue permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"aHP0dlX8cRB8OQVRiMpc","title":"Forward notifications to Amazon S3","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-s3","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM notification forwarding to Amazon S3 with Cortex Gateway egress, AWS IAM roles, bucket permissions, and file rollup.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"xFdU9eUJcvKNugpIn1yx","title":"Forward notifications to Splunk","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-splunk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM notification forwarding to Splunk with firewall access, Cortex Gateway egress, HTTPS Event Collector, and authentication tokens.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"FqVbshDzD6ldbHWWUHmf","title":"Forward notifications to webhook","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-webhook","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM case and issue notifications to HTTPS webhooks with firewall access, Gateway egress, authentication, and JSON payload support.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"mFzQ4hvWDWyjhZRhI0R3","title":"Integrate a syslog receiver","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-external-applications-for-forwarding/integrate-a-syslog-receiver","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Integrate a syslog receiver for Cortex XSIAM notifications with regional firewall access, TCP or UDP transport, TLS certificates, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"4hpcpbZWXFZ0uAYdh7t6","title":"Integrate Slack for outbound notifications","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-external-applications-for-forwarding/integrate-slack-for-outbound-notifications","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Integrate Cortex XSIAM with Slack to forward issue and report notifications to dedicated workspace channels.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"xa7RRAGHuLNUxcWov0NS","title":"Configure notification forwarding","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/configure-notification-forwarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM forwarding notifications for issues, cases, and audit logs with scoped filters, formats, grouping, and external destinations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"}]},{"id":"kXwKZH0SvTuBdSmZUaYn","title":"Set up email notifications for tenant updates","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/set-up-email-notifications-for-tenant-updates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up Cortex XSIAM email notifications for tenant upgrades, hotfixes, downtime warnings, and Management Audit Log events.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"}]},{"id":"5mR2hSyFk5HdS7FffB0U","title":"Monitor administrative activity","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xsiam-to-external-services/monitor-administrative-activity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XSIAM administrative and investigative activity with Management Audit Logs, filters, 365-day retention, and notification forwarding.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XSIAM to external services"}]},{"id":"JX8BRY53wWJtrd411Kxe","title":"Data and log notification formats","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/data-and-log-notification-formats","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM notification formats for forwarded cases, issues, and logs, including optional alert formatting for email, syslog, and Slack.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"}]},{"id":"EqLB8FArmNexbtXkIctQ","title":"Management audit log messages","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-messages","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM Management Audit Log message types for administrative, authentication, automation, endpoint, policy, and integration activity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"BzUDG3d8okw5O0LiCaLk","title":"Cortex XSIAM issue notification format","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/data-and-log-notification-formats/issue-notification-format","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM issue notification formats and payloads for email, Slack, syslog, Splunk, Amazon S3, Amazon SQS, and webhooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"HKBkMLM0Kgdz9HR1HrAJ","title":"Agent Audit log notification format","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/data-and-log-notification-formats/agent-audit-log-notification-format","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XDR Agent Audit Log notification formats for email and syslog, including CEF field mappings and payload examples.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"JBQS9zbeOm6ddJUjUS2V","title":"Management Audit log notification format","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-notification-format","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM Management Audit Log notification formats for email and syslog, including CEF field mappings and payload examples.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"3WdoiDSRqhSSeNRRf9lc","title":"Log format for IOC and BIOC issues","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/data-and-log-notification-formats/log-format-for-ioc-and-bioc-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference legacy Cortex XSIAM IOC and BIOC issue log formats for email and syslog, including fields, prefixes, and categories.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"bqyAA9oXOLrxS4NuvR7Y","title":"Analytics log format","pathname":"/cortex-xsiam/onboard-cortex-xsiam/post-deployment/data-and-log-forwarding/data-and-log-notification-formats/analytics-log-format","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference legacy Cortex XSIAM Analytics issue log formats for email and syslog, including detection, network activity, user, device, and file fields.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Onboard Cortex XSIAM","icon":"rocket"},{"label":"Post-deployment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"o9vP4d93DeYTcEUBEph7","title":"Configure Cortex XSIAM","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan Cortex XSIAM configuration for data, integrations, AI, automation, and operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"iaBwpJApcWEO67dPHvw0","title":"Data management","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM data with Analytics and Data Lake tiers, Federated Search, retention settings, datasets, and data lifecycle controls.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"uK9QdWgTpWjUPGbOGfyh","title":"Optimize data management in Cortex XSIAM","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/optimize-data-management-in-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the differences between the Cortex XSIAM data management solutions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"lFvvv9MaqZV5o1bcojsK","title":"Configure Cortex Data Lake tier","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/configure-cortex-data-lake-tier","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cortex Data Lake tier in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"ScafZUbaiA8NR2i1pwPJ","title":"Broker VM","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Broker VMs that collect and forward data to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"KcXWd010xFIv27OX2I67","title":"What is the Broker VM?","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/what-is-the-broker-vm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Broker VM securely connects data sources to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"hqzbh7g8cMJT5RT9jDgk","title":"Set up and configure Broker VM","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install and configure a Broker VM to collect data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"GpSOjGn6osNd7Zx9zXwf","title":"Broker VM image installations","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install a Cortex XSIAM Broker VM image on supported cloud and virtual platforms.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"QyI4fYa1Y7R9OhfGHJbP","title":"Set up Broker VM on Alibaba Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-alibaba-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on Alibaba Cloud.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"9fbD5qa5yxkpQ8tkBgNy","title":"Set up Broker VM on Amazon Web Services","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-amazon-web-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on Amazon Web Services.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"Uzfogjg9XgiUP8vcQ2YO","title":"Set up Broker VM on Google Cloud Platform (GCP)","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-google-cloud-platform-gcp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on Google Cloud Platform.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"jzW5UoVkQiwKylUXZN7w","title":"Set up Broker VM on KVM using Ubuntu","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-kvm-using-ubuntu","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on Ubuntu with KVM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"3R00Eum2aEN1zrLVYn5r","title":"Set up Broker VM on Microsoft Azure","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-azure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on Microsoft Azure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"UDIPDz6RdgQE59sfuEOO","title":"Set up Broker VM on Microsoft Hyper-V","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-hyper-v","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on Microsoft Hyper-V.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"UaajCxj0i33UBcAwLfP1","title":"Set up Broker VM on Nutanix Hypervisor","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-nutanix-hypervisor","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on Nutanix Hypervisor.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"7VwXlgANfuYkOH0aS8bJ","title":"Set up Broker VM on VMware ESXi using vSphere Client","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-vmware-esxi-using-vsphere-client","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy a Cortex XSIAM Broker VM on VMware ESXi.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"pXuNUdEhVPgIeUZQRwKb","title":"Broker VM data collector applets","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Broker VM data collector applets for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"Te8Vkxx28OBFkGi7RqWg","title":"Manage Broker VM","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Broker VM configuration, capacity, updates, and clusters in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"UB507VDt14Wb91kl2cLH","title":"Edit Broker VM Configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/edit-broker-vm-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Update Broker VM settings for Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"pAG3ln41zQ8r3DXsSSEM","title":"Increase Broker VM storage allocated for data caching","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-caching","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Increase Broker VM cache storage for Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"nYli5OUdrkFvH9U0hKwj","title":"Monitor Broker VM using Prometheus","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/monitor-broker-vm-using-prometheus","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XSIAM Broker VM metrics with Prometheus.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"GDoDtiubkuC0FRV7V5fv","title":"Collect Broker VM Logs","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/collect-broker-vm-logs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Broker VM logs for Cortex XSIAM troubleshooting.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"Pc91dJ1VW9kHMAC8Pwsq","title":"Upgrade Broker VM","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/upgrade-broker-vm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Upgrade a Broker VM that supports Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"3QiKURy0J6X9lNRdatdE","title":"Update Broker VM applets independently","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/update-broker-vm-applets-independently","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Update Cortex XSIAM Broker VM applets independently.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"b8BnzTAP8IkI7whOfUTO","title":"Import Broker VM Configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/import-broker-vm-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Import Broker VM configuration for Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"EQojIptHvnXt0x4g4W5F","title":"Open Live Terminal","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/open-live-terminal","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Access a live terminal for a Cortex XSIAM Broker VM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"vxi0CS8E0vZy0sf58ayI","title":"Add Broker VM to cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/add-broker-vm-to-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add a Cortex XSIAM Broker VM to a cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"ahPMjtDNDPfRy3nmNzNP","title":"Switchover Primary Node in Cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/switchover-primary-node-in-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Switch the primary node in a Cortex XSIAM Broker VM cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"nPqKaqNdc49PsXGmaftY","title":"Remove from Cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/remove-from-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Remove a Broker VM from a Cortex XSIAM cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"xmh60WJvHJt8OAlRIPWz","title":"Manage Broker VM data collector applets","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm-data-collector-applets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage data collector applets on Cortex XSIAM Broker VMs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"J9WK4T9LGjVX1uRXA2OV","title":"Broker VM High Availability Cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure highly available Broker VM clusters for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"VRxjHmza4qpqT9Fb3zUo","title":"Configure High Availability Cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/configure-high-availability-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure a high availability Broker VM cluster for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"x5H2oIFz0A4r08BJ2hmr","title":"Manage Broker VM clusters","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage high availability Broker VM clusters in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"blO017WRMySHUERkwUAm","title":"View cluster details","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/view-cluster-details","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View details for a Cortex XSIAM Broker VM cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"darQCDpkhpPPlSKTdFHt","title":"Edit cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/edit-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit configuration for a Cortex XSIAM Broker VM cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"0veh5AQn46H74b79REPh","title":"Add applet to cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-applet-to-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add a data collector applet to a Cortex XSIAM Broker VM cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"cTcC5LpT1vGWV4kyVm2c","title":"Add Broker VM to cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-broker-vm-to-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add a Broker VM to a Cortex XSIAM high availability cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"GBn2PIpX8ARGaZPCuDOJ","title":"Remove cluster","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/remove-cluster","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Remove a Cortex XSIAM Broker VM cluster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"TmQ17HYlDLa4fXbevsmM","title":"Broker VM notifications","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-notifications","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure notifications for Cortex XSIAM Broker VM events.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"A0EbpjTAUeWckGVmT6vp","title":"Monitor Broker VM activity","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/monitor-broker-vm-activity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Broker VM activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"Zc7smT13JHr9WrRNVHZP","title":"Troubleshoot Broker VM applet errors","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/broker-vm/troubleshoot-broker-vm-applet-errors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot data collector applet errors on Cortex XSIAM Broker VMs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"CKY21zQ0h8QyYroptWuS","title":"Dataset management","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/dataset-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM datasets, storage, and period-based retention.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"uACzNbDVkJkxjiIW28Bd","title":"What are datasets?","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/dataset-management/what-are-datasets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM datasets store and organize your data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"Oqb6zaaAlrpD5qXiQ3uv","title":"Lookup datasets","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/dataset-management/lookup-datasets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage lookup datasets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"0aaItzfJyrjXUw4a2PVe","title":"Import a lookup dataset","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/dataset-management/lookup-datasets/import-a-lookup-dataset","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Import a lookup dataset into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"untPSZL5EEgFJnef48HF","title":"Download JSON file of lookup dataset","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/dataset-management/lookup-datasets/download-json-file-of-lookup-dataset","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Download a lookup dataset as JSON from Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"ABsB5h5eCgvB8kwvb7Uy","title":"Set time to live for lookup datasets","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/dataset-management/lookup-datasets/set-time-to-live-for-lookup-datasets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set retention periods for Cortex XSIAM lookup datasets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"pQnHseD6xWJGxtjlzBC4","title":"Monitor datasets and dataset views activity","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/dataset-management/monitor-datasets-and-dataset-views-activity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor dataset and dataset view activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"XAoL4u1QHfRokSQ4VK1w","title":"Archived data","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/archived-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about archived data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"K6luVKzRRYs4uHrotOGL","title":"Import historical data into cold storage","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/archived-data/import-historical-data-into-cold-storage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Import historical data into Cortex XSIAM cold storage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Archived data"}]},{"id":"ATUEAdDC0gQ91SlQoB5y","title":"Building XQL archived data queries","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/archived-data/building-xql-archived-data-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build XQL queries for archived data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Archived data"}]},{"id":"hUe52ghPoc8TXapuhlRm","title":"Success and failure code responses to your HTTP POST requests","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/archived-data/success-and-failure-code-responses-to-your-http-post-requests","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Interpret HTTP POST responses when importing Cortex XSIAM archived data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Archived data"}]},{"id":"TYouzbVjijj2rr7IQIpf","title":"Parsing Rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"pohCb7zpmmgyjJ6JCkxE","title":"Parsing Rules editor views","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-editor-views","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Navigate the Cortex XSIAM Parsing Rules editor.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"wtCEp0Voq4jtTM1GVieC","title":"Parsing Rules file structure and syntax","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn Cortex XSIAM Parsing Rules file structure and XQLp syntax.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"pdpUoXLZCy9zV3ski6K3","title":"INGEST","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define INGEST sections in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"nR1qm8k3eDmdVx7IIcWV","title":"fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use 'fields' in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"JJA8IsWvFBxXvBRma8jm","title":"parse_cef","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_cef","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use `parse_cef` in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"5E4AwkPDG5NwCvZ5Q67f","title":"parse_cisco","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_cisco","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use `parse_cisco` in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"8Bhzlqy5QXmYuHKlmqHC","title":"parse_json","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_json","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use `parse_json` in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"ziFScPlUjcGtjSl3jBaE","title":"COLLECT","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/collect","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define COLLECT sections in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"6gFnfL3Tl1IIDUPhT8lf","title":"CONST","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/const","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define reusable constants in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"70ZaGrFmSKo0FVqghtR1","title":"RULE","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define reusable rules in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"A0TfZafu9cdFBjp77c67","title":"EXTEND","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/extend","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Extend default rule logic in Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"HtE3vjC2Xfm6LHdhEyYw","title":"Create Parsing Rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/create-parsing-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Parsing Rules for Cortex XSIAM data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"vDOmWtLpprBujYluy8ry","title":"Troubleshooting Parsing rules errors","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/troubleshooting-parsing-rules-errors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot parsing rule errors in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"td21h0iDi6M4HySbV5xK","title":"Parsing Rules Raw Dataset","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-raw-dataset","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Work with the raw dataset used by Cortex XSIAM Parsing Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"oGZviL7Cxp8jAweD6GV7","title":"Data Model Rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map source data to the Cortex XSIAM data model using default or custom rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"WEvNyQqrYcW9hc3lDhnG","title":"Data Model Rules editor views","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-editor-views","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Navigate the Cortex XSIAM Data Model Rules editor.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"hLpG0OQCItxSJfNVunC6","title":"Data Model Rules file structure and syntax","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntax","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn Cortex XSIAM Data Model Rules file structure and syntax.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"tRZO9q5A5ETXaZYf4fCf","title":"MODEL","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntax/model","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define models in Cortex XSIAM Data Model Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"},{"label":"Data Model Rules file structure and syntax"}]},{"id":"iOAR6vWAkDgPcN67BMPl","title":"RULE","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntax/rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define rules in Cortex XSIAM Data Model Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"},{"label":"Data Model Rules file structure and syntax"}]},{"id":"bVoLUspHMR7PndBXXHyE","title":"Field structure","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntax/field-structure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define field structures in Cortex XSIAM Data Model Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"},{"label":"Data Model Rules file structure and syntax"}]},{"id":"8QgP81HagqTvXWZGyVYp","title":"How to map authentication events for analytics","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/how-to-map-authentication-story-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map authentication events for Cortex XSIAM analytics.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"1X3GodjYIy4rX0KHcNNn","title":"How to map network events for analytics","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/how-to-map-network-events-for-analytics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map network events for Cortex XSIAM analytics.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"zxXZjpx696bnJFjsAmLg","title":"Generate data model rules with AI (preview)","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/generate-data-model-rules-with-ai-preview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Generate Cortex XSIAM Data Model Rules with AI.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"l0mLtS49abamRkcrDOpV","title":"Create Data Model Rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/create-data-model-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Data Model Rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"BjepMFGq23BqCwRlWp2X","title":"Troubleshooting Data Model Rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/troubleshooting-data-model-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot Data Model Rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"kAcc0DMBbOgW20hOqlC2","title":"Using data enrichment","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/using-data-enrichment","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use data enrichment with Cortex XSIAM Data Model Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"PlYznj2N5UPY0gRv6D9v","title":"Data Model Rules notifications","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-notifications","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure notifications for Cortex XSIAM Data Model Rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"pOwSmuMpWp3yODnlMJnw","title":"Monitor Data Model Rules activity","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/data-model-rules/monitor-data-model-rules-activity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Data Model Rules activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Data Model Rules"}]},{"id":"DXyM3HTXlYOEDMbXhwUO","title":"Manage Event Forwarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/manage-event-forwarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Export Cortex XSIAM event logs to a temporary GCP storage bucket.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"Eh9OFA3icLlpNebUSTZI","title":"Endpoints Event Forwarding - included/excluded fields by event type","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/manage-event-forwarding/endpoints-event-forwarding-included-excluded-fields-by-event-type","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review event forwarding fields by Cortex XSIAM event type.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Manage Event Forwarding"}]},{"id":"gROky4qQHN5Bc0BJkwJ4","title":"Manage compute units","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/manage-compute-units","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM compute units for API, Apps, and Cold Storage XQL queries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"}]},{"id":"dB92TQGQmyXiS83GHqlw","title":"Manage compute unit usage","pathname":"/cortex-xsiam/configure-cortex-xsiam/data-management/manage-compute-units/compute-units-usage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View compute unit consumption, set daily limits, and investigate XQL API query usage in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Data management"},{"label":"Manage compute units"}]},{"id":"NBMrv1PDvEdAgMKJCHjn","title":"Cortex XSIAM Data Sources and Connectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"wKxvjGTqgug2RnTinmhs","title":"What are Cortex XSIAM data sources and connectors?","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/what-are-cortex-xsiam-data-sources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about Cortex XSIAM Data Sources and connectors with a unified approach to integrations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"czpNKd2vUkg25qFZCD5c","title":"What is the data source and connector catalog?","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/complete-data-source-catalog","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the complete data source and connector catalog available in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"dBli0UWKP94xJ6gEvhJC","title":"Vendor-specific data sources and connectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Browse vendor-specific data sources and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"aGMu1B4LQKBeYjcpR7py","title":"1Password","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/1password","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the 1Password connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"q3wAGd16WP7pJKvSqQe4","title":"1Password","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/1password/1password","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use 1Password data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"1Password"}]},{"id":"J8z0kvPfTee280rcoHyY","title":"Abnormal Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/abnormal-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Abnormal Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lMd4mASyYLkqbgONCchc","title":"Abnormal Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/abnormal-security/abnormal-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Abnormal Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Abnormal Security"}]},{"id":"pT0RVN7u6VpTHBa8CZ08","title":"Absolute","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/absolute","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Absolute connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wy5MB7fX30iMvW0LR7bc","title":"Absolute","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/absolute/absolute","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Absolute data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Absolute"}]},{"id":"udC1RsZSdI2KPlTJPac9","title":"abuse.ch","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/abuse.ch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the abuse.ch connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fWbiJOKUd845VKDYaphO","title":"abuse.ch","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/abuse.ch/abuse.ch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use abuse.ch threat intelligence with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"abuse.ch"}]},{"id":"107MlKJIT7TpDDMMU0Ov","title":"AbuseIPDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/abuseipdb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the AbuseIPDB connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"QESq6RVZ76lnFo8F5qcn","title":"AbuseIPDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/abuseipdb/abuseipdb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AbuseIPDB data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AbuseIPDB"}]},{"id":"OZXDRGGHmEaOize5ocVE","title":"Accenture","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/accenture","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Accenture connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"5hBUwvuBa9Hs0N9WmMay","title":"Accenture","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/accenture/accenture","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Accenture data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Accenture"}]},{"id":"rzpsSnNW34qYar5NHOdN","title":"AdminByRequest","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/adminbyrequest","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the AdminByRequest connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dKKqKOkvoccjyAlzDxsn","title":"AdminByRequest","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/adminbyrequest/adminbyrequest","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AdminByRequest data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AdminByRequest"}]},{"id":"qtF2BFA44rc7zcbbLI2V","title":"Aha","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/aha","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Aha connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"CnrcCr5FoH9brq6IfqyT","title":"Aha!","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/aha/aha","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Aha! data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Aha"}]},{"id":"SE5YBIxQwRsBBnC8Bzk5","title":"Aha","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/aha/aha-1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Aha data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Aha"}]},{"id":"HDclX7uQ1KQx3z1X6xHX","title":"AIOps","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/aiops","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the AIOps connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"O8bvb6FgVsx6HfwSt6GB","title":"AIOps","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/aiops/aiops","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AIOps data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AIOps"}]},{"id":"dBz5FQrZZNeZgecdgrgx","title":"Akamai","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/akamai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Akamai connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jmJ4FMz8dmbQB0Q0CKYS","title":"Akamai","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/akamai/akamai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Akamai data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Akamai"}]},{"id":"CICycfvUUhkJottDT2TJ","title":"AlgoSec","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/algosec","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the AlgoSec connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"okyiomgpGMqtOc3sgipV","title":"AlgoSec","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/algosec/algosec","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AlgoSec data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AlgoSec"}]},{"id":"t0uNiIslt0qFKIwzsiSK","title":"Alibaba Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/alibaba-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Alibaba Cloud connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XLieWev9XiIRRVFh68dI","title":"Alibaba Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/alibaba-cloud/alibaba-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Alibaba Cloud data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Alibaba Cloud"}]},{"id":"JluDdX1vhVeIMOdHvY7y","title":"AlienVault","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/alienvault","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the AlienVault connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"S4x7MlLVGw03WHws3sSA","title":"AlienVault","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/alienvault/alienvault","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AlienVault data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AlienVault"}]},{"id":"BMBiFczs4YNN6HWKzyEo","title":"Amazon","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Amazon data sources and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"X9J8FQ2gV6l0XBbJfHfb","title":"Amazon Cloud Watch","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-cloud-watch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Amazon Cloud Watch data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"gViOj2iah0NPJQcceIzM","title":"Ingest logs from Amazon CloudWatch","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-cloud-watch/ingest-logs-from-amazon-cloudwatch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest logs from Amazon CloudWatch in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon Cloud Watch"}]},{"id":"kfXW1vGVGumqCH3TJDtG","title":"Amazon S3","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Amazon S3 data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"Ob1lurOedsTEy7j8Azqt","title":"Ingest audit logs from AWS CloudTrail","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3/ingest-audit-logs-from-aws-cloudtrail","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect audit logs from AWS CloudTrail in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"T6Q5so4g2KKC8MX2z3In","title":"Ingest network flow logs from Amazon S3","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3/ingest-network-flow-logs-from-amazon-s3","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect network flow logs from Amazon S3 in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"sDHRsztEN9kPYRr32vll","title":"Ingest generic logs from Amazon S3","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3/ingest-generic-logs-from-amazon-s3","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect generic logs from Amazon S3 in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"lWkGkXN4TYjHwHEmPIfV","title":"Ingest network Route 53 logs from Amazon S3","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3/ingest-network-route-53-logs-from-amazon-s3","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect network Route 53 logs from Amazon S3 in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"BO3OvWTfygzb9pClyyB6","title":"Create an assumed role","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3/create-an-assumed-role","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about creating an assumed role in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"HbgS6Y1XpKP8qyvqUHWp","title":"Create a Workload Federated Identity role","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3/create-a-workload-federated-identity-role","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about creating a Workload Federated Identity role in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"a6kkF1wysK5F5VogNOvx","title":"Configure data collection from Amazon S3 manually","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-s3/configure-data-collection-from-amazon-s3-manually","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect data from Amazon S3 manually in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"bmmRS1msP4S4Lhllm3CW","title":"Amazon Web Services","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/amazon-web-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Amazon Web Services in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"iFAUVLEO7nZlDnmcNZ7O","title":"AWS Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/amazon/aws-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AWS Automation and Collection in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"JWtIxak0GHx6zvgl1WKs","title":"Anomali","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/anomali","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Anomali connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Dam8jw8U6B70vmNwLbBO","title":"Anomali","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/anomali/anomali","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Anomali data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anomali"}]},{"id":"6LieEgJ6ZHwsoezeYLOP","title":"Anthropic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/anthropic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Anthropic connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gaHR9ZTrbTA91xt2utOT","title":"Claude Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/anthropic/claude-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Claude automation and collection with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anthropic"}]},{"id":"J4rFh9I6vpuBxnWxjwW0","title":"Claude","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/anthropic/claude","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Claude with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anthropic"}]},{"id":"4dSl3rAokZoBsX7ur7Ff","title":"Apache","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/apache","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Apache connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"unjFUjQJopotF28BxHlF","title":"Apache","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/apache/apache","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Apache data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Apache"}]},{"id":"2OzfibSg742qhk18PHon","title":"API Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/api-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use API data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dmsjEqlUxLpyPzBSgROD","title":"Ingest data for API security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/api-security/ingest-data-for-api-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect API Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"}]},{"id":"XZecbVUPY2c8uFjV8yjI","title":"Ingest AWS API Gateway","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/api-security/ingest-data-for-api-security/ingest-aws-api-gateway","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect AWS API Gateway data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"GM4WjbsFnqcnurFwo12M","title":"Ingest Azure APIM","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/api-security/ingest-data-for-api-security/ingest-azure-apim","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Azure APIM data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"2255DnJEZsVZRgALHBJo","title":"Ingest Apigee Proxy","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/api-security/ingest-data-for-api-security/ingest-apigee-proxy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Apigee Proxy data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"ffP38QHYDmnH0ot8bPXc","title":"Ingest Kong","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/api-security/ingest-data-for-api-security/ingest-kong","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Kong data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"I8LyeRgm6w7hbjP9td18","title":"Ingest F5","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/api-security/ingest-data-for-api-security/ingest-f5","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect F5 data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"jk7ztDxBO5g7bb9fI2gq","title":"APIVoid","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/apivoid","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the APIVoid connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IoC9Nl0xaAmI58ynnFip","title":"APIVoid","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/apivoid/apivoid","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use APIVoid data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"APIVoid"}]},{"id":"kN5p7z9hnzpPCLG65o08","title":"Apollo.io","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/apollo.io","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Apollo.io connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6V2bQf5kE63eTvDsQBeg","title":"Apollo.io","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/apollo.io/apollo.io","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Apollo.io data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Apollo.io"}]},{"id":"G5hFR3jhYDHfleaDQnya","title":"AppSentinels","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/appsentinels","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the AppSentinels connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"PGNqwb3wTEc6gIMGrB8i","title":"AppSentinels","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/appsentinels/appsentinels","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AppSentinels data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AppSentinels"}]},{"id":"op8oKflFc9AOgNw0YrhR","title":"ArcSight","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/arcsight","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ArcSight connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"t5mxo9l4vcCFhM6vqw1t","title":"ArcSight","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/arcsight/arcsight","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ArcSight data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ArcSight"}]},{"id":"6oLVes2RU4wtyo4d61Us","title":"Arista Networks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/arista-networks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Arista Networks connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3wYzzhd6isUgT3Td1kyw","title":"Arista Networks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/arista-networks/arista-networks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Arista Networks data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Arista Networks"}]},{"id":"MUOxrDLYVOPFapsEErvv","title":"Arkime","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/arkime","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Arkime connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9FCku2fUp0E2Lc4BPWSH","title":"Arkime","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/arkime/arkime","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Arkime data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Arkime"}]},{"id":"iOy4kF583FWPABqsbBrx","title":"Armis","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/armis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Armis connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wTXhDgPmFI2SvSMXndI4","title":"Armis","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/armis/armis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Armis data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Armis"}]},{"id":"EK8OgwnQ7tyxiMHDq2ep","title":"Articulate Global","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/articulate-global","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Articulate Global connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dYsgbRQUvlU2cqRca566","title":"Articulate Global","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/articulate-global/articulate-global","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Articulate Global data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Articulate Global"}]},{"id":"sRAZJEDOzQrGY8lu4q9c","title":"Asana","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/asana","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Asana connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cIBGTfaZrAXsdAUqMosP","title":"Asana","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/asana/asana","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Asana data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Asana"}]},{"id":"qspKKRtdWGdo1bCUvIoX","title":"Atlassian","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/atlassian","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Atlassian connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"u8Ytd60OYVoJtRnsG0VV","title":"Atlassian","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/atlassian/atlassian","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Atlassian data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"mKeOsnDwveWYpvVjs4Wd","title":"Atlassian Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/atlassian/atlassian-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Atlassian Automation and Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"XJnYkfW5rHjLRY603YDm","title":"AttackIQ","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/attackiq","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the AttackIQ connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"TJO1eHHzHJRBjfbPOTNS","title":"AttackIQ","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/attackiq/attackiq","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AttackIQ data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AttackIQ"}]},{"id":"km1ijBNC3fWHltfED5Y2","title":"Aurora Endpoint Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/aurora-endpoint-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Aurora Endpoint Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8DucGv6X5pMN2mncFgaX","title":"Aurora Endpoint Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/aurora-endpoint-security/aurora-endpoint-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Aurora Endpoint Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Aurora Endpoint Security"}]},{"id":"PgUnVhB2eRpJeyzLlYId","title":"Automox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/automox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Automox connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"f5CTycWQzfZCwFRmGbzv","title":"Automox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/automox/automox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Automox data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Automox"}]},{"id":"fEnBhBa3uC4ROhWkWUfh","title":"BeyondTrust","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/beyondtrust","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the BeyondTrust data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Sjr3ngjnqlRZtqrA6sLl","title":"BeyondTrust Privilege Management Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/beyondtrust/beyondtrust-privilege-management-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BeyondTrust Privilege Management Cloud data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BeyondTrust"}]},{"id":"iO9nQttF4FutAqegelOM","title":"Ingest logs from BeyondTrust Privilege Management Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/beyondtrust/beyondtrust-privilege-management-cloud/ingest-logs-from-beyondtrust-privilege-management-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect BeyondTrust Privilege Management Cloud data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BeyondTrust"},{"label":"BeyondTrust Privilege Management Cloud"}]},{"id":"C9RMXWmlPXR5EQgJzFGV","title":"BeyondTrust","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/beyondtrust/beyondtrust","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BeyondTrust data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BeyondTrust"}]},{"id":"HZmjV4bmbhBPWI6j9H91","title":"BitSight","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bitsight","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the BitSight connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gYDcOdmABxWRMry0O3vd","title":"BitSight","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bitsight/bitsight","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BitSight data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BitSight"}]},{"id":"q3S5K45Tnu9EiRYdFF55","title":"bitwarden","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bitwarden","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the bitwarden connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"uPq0IehRVmtKr6s5Njcp","title":"bitwarden","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bitwarden/bitwarden","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use bitwarden data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"bitwarden"}]},{"id":"xPy1wfMBA3DSwEAfi8L5","title":"Blocklist.de","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/blocklist.de","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Blocklist.de connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HH9cC3dQqu6FPunUdLzb","title":"Blocklist.de","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/blocklist.de/blocklist.de","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Blocklist.de data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Blocklist.de"}]},{"id":"7Bb1tJksT9lRJfaIFWMo","title":"BloodHound Enterprise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bloodhound-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the BloodHound Enterprise connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VCc24yilkqHhQAXK29aK","title":"BloodHound Enterprise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bloodhound-enterprise/bloodhound-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BloodHound Enterprise data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BloodHound Enterprise"}]},{"id":"9BCO59SO3DQyPIn44ozQ","title":"BlueCat Address Manager","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bluecat-address-manager","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the BlueCat Address Manager connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6WfvewHCAoDRTat0IRsK","title":"BlueCat Address Manager","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bluecat-address-manager/bluecat-address-manager","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BlueCat Address Manager data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BlueCat Address Manager"}]},{"id":"C2QlsEE0mN1bRdBYxTdA","title":"BMC","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bmc","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the BMC connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mThwH6R38A8HlDhW4K01","title":"BMC","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bmc/bmc","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BMC data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BMC"}]},{"id":"N4cnUXl9rIZg2PVwPuUO","title":"Box","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/box","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Box data source and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9W4NXadJIgGVPDvt43Kz","title":"Ingest logs and data from Box","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/box/ingest-logs-and-data-from-box","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Box data from Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"T9S87nfsdcS5ubXJVnOj","title":"Box Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/box/box-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BMC Automation and Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"NrNudQhwvZK9CbsTRJHk","title":"Box","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/box/box","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Box data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"tCexslTKpUC7BK0S8gEV","title":"Broadcom","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/broadcom","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Broadcom connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yewqLlXaqZZ6soNSKTnv","title":"Broadcom","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/broadcom/broadcom","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Broadcom data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Broadcom"}]},{"id":"YaBI1P3RF1zkBu2jVNFd","title":"BruteForceBlocker","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bruteforceblocker","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the BruteForceBlocker connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HUyYrnaWii3lhkmYnv8P","title":"BruteForceBlocker","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/bruteforceblocker/bruteforceblocker","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use BruteForceBlocker data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BruteForceBlocker"}]},{"id":"PVilKoEIhHzm0MqhjYan","title":"Businessmap","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/businessmap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Businessmap connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dB98QZqqtTL0Ot1ZZC5r","title":"Businessmap","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/businessmap/businessmap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Businessmap data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Businessmap"}]},{"id":"vPCIrOoaUHhhpwucchur","title":"C2SEC","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/c2sec","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the C2SEC connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9RVxlaFYUOTAM6BsEZ2a","title":"C2SEC","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/c2sec/c2sec","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use C2SEC data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"C2SEC"}]},{"id":"kyZXR9Z8BM6EcayhNhQ9","title":"CAPESandbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/capesandbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CAPESandbox connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"T0fJX6B1AEdQfNtmSiRa","title":"CAPESandbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/capesandbox/capesandbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CAPESandbox data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CAPESandbox"}]},{"id":"Jn8sSLPtwHAh2z9fwlYa","title":"Carbon Black","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/carbon-black","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Carbon Black connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Kv4TcEPfNxAfS5Pn1GhQ","title":"Carbon Black","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/carbon-black/carbon-black","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Carbon Black data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Carbon Black"}]},{"id":"XwLAIiVHVbirsBleJYs9","title":"Celonis","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/celonis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Celonis connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"u9JJyP1ccS6FffgI3le3","title":"Celonis Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/celonis/celonis-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Celonis Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Celonis"}]},{"id":"oFRGLbFFdESScZ3ZY4J3","title":"Celonis","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/celonis/celonis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Celonis data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Celonis"}]},{"id":"dWmGBIRX3inxzNENhP0Y","title":"Centreon","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/centreon","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Centreon connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3BqibgGYEFjD7rSaXioM","title":"Centreon","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/centreon/centreon","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Centreon data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Centreon"}]},{"id":"7xcEmkSudoz4mdzqW5h8","title":"ChatGPT Enterprise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/chatgpt-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ChatGPT Enterprise connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"etxa5t0AZSPrydOA3w31","title":"ChatGPT Enterprise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/chatgpt-enterprise/chatgpt-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ChatGPT Enterprise data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ChatGPT Enterprise"}]},{"id":"s5NHbentDzwzYbQWKLer","title":"Check Point","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/check-point","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Check Point data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"usLwmKtMxAwm5LnwzEJe","title":"Check Point FW1/VPN1","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/check-point/check-point-fw1-vpn1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Check Point FW1/VPN1 data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Check Point"}]},{"id":"uq0HdkJRH8cuVRblOTKq","title":"Checkpoint Firewall","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/check-point/checkpoint-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Checkpoint Firewall data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Check Point"}]},{"id":"Ngy9cX6hxLTkQuWunF8q","title":"CheckPhish","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/checkphish","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CheckPhish connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Ss5SLByWnIGDodj2AY9S","title":"CheckPhish","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/checkphish/checkphish","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CheckPhish data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CheckPhish"}]},{"id":"hoLA1VmlbdIPwLQsexA2","title":"CipherTrust","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ciphertrust","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CipherTrust connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"c3cSD3tJnMkECG8Rdxhe","title":"CipherTrust","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ciphertrust/ciphertrust","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CipherTrust data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CipherTrust"}]},{"id":"ynEe8V8qC7gZtbYMqolt","title":"CIRCL","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/circl","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CIRCL connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hiCeolG1wGiz4kX0MclS","title":"CIRCL","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/circl/circl","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CIRCL data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CIRCL"}]},{"id":"xCISSdv6OZF8PLUlXi2w","title":"CircleCI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/circleci","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CircleCI connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"t8tDPxbexyinPzTI19Fs","title":"CircleCI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/circleci/circleci","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CircleCI data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CircleCI"}]},{"id":"EcWJrajOY74gKI5s24Gn","title":"Cisco","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cisco data sources and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hFjAu9w18tiykYkpRB1o","title":"Cisco ASA firewalls and AnyConnect","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco ASA firewalls and AnyConnect data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"xmAwb5zVMbOKRf78bHo4","title":"Cisco ASA","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-asa","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco ASA data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"iKWkEQntKpXgAOpQN0Ud","title":"Cisco Duo","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-duo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco Duo data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"wohfGz71EN3O34l1nNY4","title":"Cisco DUO Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-duo-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco DUO Automation and Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"ntZmtkIPHAcJg5bAZXKs","title":"Cisco Firepower","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-firepower","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco Firepower data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"JfSYQL9Vfk2rZHgyc5O1","title":"Cisco ISE","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-ise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco ISE data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"RDyp29MDnlX9PgAt9FWs","title":"Cisco Meraki","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-meraki","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco Meraki data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"dYqoTQuSqVl6g409lnwP","title":"Cisco Meraki Automation and Remediation","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-meraki-automation-and-remediation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco Meraki Automation and Remediation data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"vgOSuOoV3RLJzCd07VUj","title":"Cisco Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"zh0re5YOpEVeVqJ7lW6Q","title":"Cisco Umbrella","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cisco/cisco-umbrella","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cisco Umbrella data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"xz8xxxZcrzGtXnk9sdrE","title":"Citrix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/citrix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Citrix connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"TWiSSUbrWtEPSQ0L4U7k","title":"Citrix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/citrix/citrix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Citrix data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Citrix"}]},{"id":"BseI5DpeCPfa4oIV3Ige","title":"ClickUp","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/clickup","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ClickUp connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jsOBCj5ypxp5ghOrgaKC","title":"ClickUp","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/clickup/clickup","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ClickUp data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ClickUp"}]},{"id":"6NfXcFNPw6F3aVhC059v","title":"Cloaken","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cloaken","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cloaken connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"NqeSJKQ1rXYU6GXrtT9l","title":"Cloaken","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cloaken/cloaken","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cloaken data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cloaken"}]},{"id":"0UxXftrfAVV42A6BvH2D","title":"CloudConvert","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cloudconvert","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CloudConvert connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"tffhJe5hhhMTWF4FAOlV","title":"CloudConvert","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cloudconvert/cloudconvert","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CloudConvert data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CloudConvert"}]},{"id":"0Tp5Ppn4lGLwdNK89LRU","title":"Cloudflare","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cloudflare","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cloudflare connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bTzk2w83fFzVfwyY4gBM","title":"Cloudflare","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cloudflare/cloudflare","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cloudflate with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cloudflare"}]},{"id":"G0eXaNzI2k3IdhV9CiOJ","title":"Code42","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/code42","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Code42 connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0o3eGmHUAuAKTOl3u0kY","title":"Code42","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/code42/code42","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Code42 data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Code42"}]},{"id":"kI4FCSYqqzaksC2rUD1b","title":"Cohesity","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cohesity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cohesity connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9rsnucdEyHbDKp3wwqqH","title":"Cohesity","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cohesity/cohesity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cohesity data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cohesity"}]},{"id":"TALkquKgK7kl9C4xb2ji","title":"Contentful","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/contentful","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Contentful connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"PlEKo9qYN3xCyVWDnlh9","title":"Contentful","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/contentful/contentful","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Contentful data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Contentful"}]},{"id":"zmtDVHrFmeNXTsF0HLEg","title":"Corelight","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/corelight","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Corelight data source for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XE6p6jtqDcBjWNzEWGEI","title":"Corelight Zeek","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/corelight/corelight-zeek","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Corelight Zeek data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Corelight"}]},{"id":"UwyQzJYYsIr1DxqMper8","title":"Couchbase","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/couchbase","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Couchbase connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"QposMtv2Q3F1oHMB9nQb","title":"Couchbase","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/couchbase/couchbase","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Couchbase data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Couchbase"}]},{"id":"8aHGUYojRM2sJebGJJA5","title":"CounterTack","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/countertack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CounterTrack connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0bRwW6mbq0lDiKQofwg5","title":"CounterTack","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/countertack/countertack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CounterTrack data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CounterTack"}]},{"id":"4ph5W9nbfNhda3j5Ej9D","title":"Coveo","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/coveo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Coveo connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jhcndI6hOlGWLkeRMty4","title":"Coveo","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/coveo/coveo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Coveo data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Coveo"}]},{"id":"rVShfwgf676uNhfqZvoL","title":"Cribl","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cribl","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cribl data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hSFHGFdzC2oistrw6SQv","title":"Ingest data from Cribl","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cribl/ingest-data-from-cribl","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Cribl data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"}]},{"id":"5Et5bIQSRXS0lL7SZrGl","title":"Disable or delete Cribl integration","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cribl/ingest-data-from-cribl/disable-or-delete-cribl-integration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more on disabling or deleting Cribl integrations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"},{"label":"Ingest data from Cribl"}]},{"id":"Z27bZ4XpnKQ4CvzcZDrj","title":"Data source UUIDs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cribl/ingest-data-from-cribl/data-souce-uuids","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View the Cribl catalog for the supported collectors.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"},{"label":"Ingest data from Cribl"}]},{"id":"Z8qwVPSf8tyXyBkBHK8L","title":"Collect Windows Event Logs for Cortex XSIAM via Cribl","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cribl/ingest-data-from-cribl/collect-windows-event-logs-for-cortex-xsiam-via-cribl","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more on collecting Windows Event Logs for Cortex XSIAM using Cribl.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"},{"label":"Ingest data from Cribl"}]},{"id":"HwMz541AEsPPsV4q7doy","title":"Cribl connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cribl/cribl-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cribl connector data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"}]},{"id":"Y1q4tz0az5c0WAJJbR4i","title":"CrowdStrike","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/crowdstrike","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CrowdStrike data sources and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rAUJuWIQVcZUtySFKcr5","title":"Crowdstrike APIs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/crowdstrike/crowdstrike-apis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Crowdstrike APIs data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CrowdStrike"}]},{"id":"NUvo15w9TyX30ZjJWV1L","title":"Ingest alerts and metadata from Crowdstrike APIs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/crowdstrike/crowdstrike-apis/ingest-alerts-and-metadata-from-crowdstrike-apis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Crowdstrike APIs data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CrowdStrike"},{"label":"Crowdstrike APIs"}]},{"id":"7KiXNCFn4tflP5mq5Fpu","title":"CrowdStrike Falcon Data Replicator","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/crowdstrike/crowdstrike-falcon-data-replicator","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Crowdstrike Falcom Data Replicator data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CrowdStrike"}]},{"id":"bD1Fdx4WGoswOPzgSar2","title":"Ingest raw EDR events from CrowdStrike Falcon Data Replicator","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/crowdstrike/crowdstrike-falcon-data-replicator/ingest-raw-edr-events-from-crowdstrike-falcon-data-replicator","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect CrowdStrike Falcon Data Replicator data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CrowdStrike"},{"label":"CrowdStrike Falcon Data Replicator"}]},{"id":"apjra0XJzA0K056SmstW","title":"CrowdStrike","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/crowdstrike/crowdstrike","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CrowdStrike data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CrowdStrike"}]},{"id":"6RLmGHt2TCCeTiXCtzix","title":"CryptoCurrency","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cryptocurrency","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CryptoCurrency connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WDD8uLVOGED7qJrbzQsu","title":"CryptoCurrency","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cryptocurrency/cryptocurrency","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CryptoCurrency data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CryptoCurrency"}]},{"id":"AHjatmrI0DkUnL2c9WTI","title":"Cuckoo Sandbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cuckoo-sandbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cuckoo Sandbox connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"71rF1nkKYdCrDPlt7pZm","title":"Cuckoo Sandbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cuckoo-sandbox/cuckoo-sandbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cuckoo Sandbox data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cuckoo Sandbox"}]},{"id":"8Eotj593aXiH4giFZJzV","title":"Cursor","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cursor","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cursor connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1xKpfkGjmnCFwkz4oejK","title":"Cursor","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cursor/cursor","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cursor data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cursor"}]},{"id":"PVakekBg7dkrX3k1qpoT","title":"CybelAngel","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cybelangel","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CybelAngel connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"4oqzIVzrnvwMUQMWHT3j","title":"CybelAngel","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cybelangel/cybelangel","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CyberAngel data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CybelAngel"}]},{"id":"d9XEHnRJf8HnC3ZGZvxO","title":"CyberArk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cyberark","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CyberArk connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"zYmchYbFrN9tkoM2LMMe","title":"CyberArk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cyberark/cyberark","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CyberArk data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CyberArk"}]},{"id":"zWC2IYZQ41NpIHs3Q8mg","title":"Cyber Triage","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cyber-triage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cyber Triage connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"w9jlmSEcIhYW9IMJeZkw","title":"Cyber Triage","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cyber-triage/cyber-triage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cyber Triage data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cyber Triage"}]},{"id":"i3YUOQYxNqDXJB5wElYy","title":"CYFIRMA","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cyfirma","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"W5C1Gsve8ylep9zij27r","title":"CYFIRMA","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/cyfirma/cyfirma","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CYFIRMA"}]},{"id":"5KemVuW1sDNQ64akUUj8","title":"Darktrace","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/darktrace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Darktrace connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yIPR23aaQEPyipkJ7ZVb","title":"Darktrace","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/darktrace/darktrace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Darktrace data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Darktrace"}]},{"id":"E8p1BtqykSlsaayVFua1","title":"Databricks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/databricks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Databricks data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3HKbvrE5B0olq3qh417r","title":"How to onboard Databricks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/databricks/how-to-onboard-databricks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Databricks data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"i8tOgbnMBfKEXTDrUOsn","title":"Databricks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/databricks/databricks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Databricks data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"ziCSmZz5ZeBwhNBzboVX","title":"DataDog","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/datadog","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Xs75OeYSeKLpZ2A7Rd2s","title":"DataDog","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/datadog/datadog","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use DataDog data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"DataDog"}]},{"id":"bwq3F11Ltir2VpeuueZ4","title":"DeHashed","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dehashed","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the DeHashed connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"R8pvHMNa8wtOqleTjGIA","title":"DeHashed","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dehashed/dehashed","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use DeHashed data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"DeHashed"}]},{"id":"IaapAKcFB49GFNqP8KMU","title":"DHS","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dhs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the DHS connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"h52kk0OEN60iyGWvrP6V","title":"DHS","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dhs/dhs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use DHS data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"DHS"}]},{"id":"v8NK69QxbzIqRYozIDx4","title":"digicert","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/digicert","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the digicert connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"v7nUUyM9cfRBcwfGAZ9i","title":"digicert","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/digicert/digicert","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use digicert data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"digicert"}]},{"id":"iOsnrDbhFt0cLf3qssdA","title":"dnstwist","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dnstwist","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the dnstwist connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"i6gSYxsLc7uaqKYhgTm9","title":"dnstwist","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dnstwist/dnstwist","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use dnstwist data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"dnstwist"}]},{"id":"yQLCTcMUtef4T33lnXVL","title":"Docker","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/docker","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Docker data sources for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"X8wuaKkij4M1zIE9Uo2x","title":"Connect Docker Hub registry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/docker/connect-docker-hub-registry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Docker Hub registry to Cortex XSIAM for container image scanning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"}]},{"id":"ew1gU0WVc5JDZYVwbN6M","title":"Manage a Docker Hub connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/docker/connect-docker-hub-registry/manage-a-docker-hub-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage the Docker Hub registry connector in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"},{"label":"Connect Docker Hub registry"}]},{"id":"ffShbmScC3WfueB430QB","title":"Connect Docker V2 compliant container registry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/docker/connect-docker-v2-compliant-container-registry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Docker V2-compliant registry to Cortex XSIAM for container image scanning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"}]},{"id":"jW2jfucKs2l4CHPxy60z","title":"Manage a Docker V2 connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/docker/connect-docker-v2-compliant-container-registry/manage-a-docker-v2-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage the Docker V2-compliant registry connector in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"},{"label":"Connect Docker V2 compliant container registry"}]},{"id":"jmE8iK8UXOesszXzLkWj","title":"DocuSign","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/docusign","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the DocuSign connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"pQ427EXhjgKuVTqlIIyX","title":"DocuSign","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/docusign/docusign","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use DocuSign data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"DocuSign"}]},{"id":"nk6EOIcHL9eBohf6piIh","title":"Dropbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dropbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Dropbox data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"CCQhRBosDlCWnXaBZ1Zk","title":"Ingest logs and data from Dropbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dropbox/ingest-logs-and-data-from-dropbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect dropbox data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Dropbox"}]},{"id":"5WwQkohclxf4u62fR8wf","title":"Dropbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/dropbox/dropbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Dropbox data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Dropbox"}]},{"id":"QDlknIR63fCqQLR7bq3c","title":"Druva","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/druva","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Druva connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xMzhok82qUhnJrahVXAh","title":"Druva","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/druva/druva","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Druva data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Druva"}]},{"id":"F3O8H3KFhdtynUXTHPh9","title":"EasyVista","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/easyvista","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the EasyVista connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2ka97kTgLT094mmbqnaP","title":"EasyVista","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/easyvista/easyvista","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use EasyVista data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"EasyVista"}]},{"id":"wXlx0Jdv1VZvO2PBd85a","title":"Email Hippo","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/email-hippo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Email Hippo connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ATQ3fyZEljEapW8eGWCc","title":"Email Hippo","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/email-hippo/email-hippo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Email Hippo data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Email Hippo"}]},{"id":"c3kX66Me8SvJW6901ma2","title":"Elastic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/elastic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Elastic data sources and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0gVJAP3dIJKukExrLzsH","title":"Elasticsearch Filebeat","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/elastic/elasticsearch-filebeat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Elasticsearch Filebeat data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"UPWDK2ZpDgOGRbtg8CWj","title":"Ingest logs from Elasticsearch Filebeat","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/elastic/elasticsearch-filebeat/ingest-logs-from-elasticsearch-filebeat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Elasticsearch Filebeat data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"},{"label":"Elasticsearch Filebeat"}]},{"id":"kIXutAZS5CgUjdyTHpkP","title":"Windows DHCP via Elasticsearch Filebeat","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/elastic/windows-dhcp-via-elasticsearch-filebeat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Windows DHCP data using Elasticsearch Filebeat with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"tr1F2J42PtgiO2WrMQrQ","title":"Ingest logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/elastic/windows-dhcp-via-elasticsearch-filebeat/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Windows DHCP data using Elasticsearch Filebeat with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"},{"label":"Windows DHCP via Elasticsearch Filebeat"}]},{"id":"z2X5Pu0r0tGt0F6T02gd","title":"ElasticSearch","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/elastic/elasticsearch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ElasticSearch data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"Jn5xxgH9ZFha7A0gLNFz","title":"Endgame","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/endgame","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Endgame connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"81CMCOqY0EkIdXN4rI8K","title":"Endgame","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/endgame/endgame","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Endgame data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Endgame"}]},{"id":"iKXNvZuVk2K9Rabdm1Im","title":"Envoy","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/envoy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Envoy connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"96UhoP6iFbJNJuLlIxHw","title":"Envoy","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/envoy/envoy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Envoy data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Envoy"}]},{"id":"2MKYyRvCJ4EBzXBuDOBc","title":"Exabeam","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/exabeam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Exabeam connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OejOV9S6W8JboRfzk8TJ","title":"Exabeam","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/exabeam/exabeam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Exabeam data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Exabeam"}]},{"id":"J6SQB5kEUjJKyVJkBOiS","title":"ExtraHop","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/extrahop","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ExtraHop connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Svwk264ZmYqOgwXUY4h1","title":"ExtraHop","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/extrahop/extrahop","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ExtraHop data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ExtraHop"}]},{"id":"GhndvFTYLez9PD5N8dLY","title":"F5","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/f5","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the F5 connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8lNy4MPe1aB9UTFyojHq","title":"F5 Automation and Remediation","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/f5/f5-automation-and-remediation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use F5 Automation and Remediation data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"F5"}]},{"id":"6S3YjjFOVzKrZQZpkfZP","title":"Fastly","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fastly","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Fastly connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"p4ydu46MH0VjZSjYm8wb","title":"Fastly","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fastly/fastly","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Fastly data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fastly"}]},{"id":"rWKcK4q0aOZlO9LzYyXF","title":"Fidelis","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fidelis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Fidelis connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aSEFdK6buRGb6dzDPmqG","title":"Fidelis","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fidelis/fidelis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Fidelis data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fidelis"}]},{"id":"Ef4wMqMMirmW5H9PvLCk","title":"Filigran","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/filigran","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Filigran connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ziHWIT0EWcowsuUBxW2o","title":"Filigran OpenCTI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/filigran/filigran-opencti","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Filigran OpenCTI data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Filigran"}]},{"id":"HoHdo5L3VcZKl4acQOSU","title":"Forcepoint","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/forcepoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Forcepoint data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"s8wxJndbSvzOkujzR3rK","title":"Forcepoint DLP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/forcepoint/forcepoint-dlp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Forcepoint DLP data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Forcepoint"}]},{"id":"XMIwI2iUn6WwKBt9cJIT","title":"Forcepoint","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/forcepoint/forcepoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Forcepoint data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Forcepoint"}]},{"id":"LnV1GXThEQ5s0VyPkQgL","title":"ForeScout","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/forescout","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ForeScout connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8wyNWW4eYF8clwC3bIBM","title":"ForeScout","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/forescout/forescout","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ForeScout data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ForeScout"}]},{"id":"mbuhW7AdoQepMHvCCpxO","title":"Fortinet","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fortinet","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Fortinet data source and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AdFy3ScArktYe1PObtFU","title":"Fortinet Fortigate","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fortinet/fortinet-fortigate","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Fortinet Fortigate data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"t3K2WDFMSfyP8FCufYq8","title":"Fortinet FortiGate connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fortinet/fortinet-fortigate/fortinet-fortigate-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Fortinet FortiGate data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"},{"label":"Fortinet Fortigate"}]},{"id":"gfk8wlbArsRs87U6Nh9j","title":"Fortinet","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fortinet/fortinet","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Fortinet data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"0flxKtsxByiRLjzIzae0","title":"Fortinet FortiWeb VM","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fortinet/fortinet-fortiweb-vm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Fortinet FortiWeb VM data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"gJGpPDWFAArCRNFaP0Tn","title":"Fortra","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fortra","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Fortra connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Rb7DkRtBEp3pW09cuskl","title":"Fortra","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fortra/fortra","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Fortra data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortra"}]},{"id":"6vkYW4ZNZrA0s1QCsA2d","title":"FraudWatch","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fraudwatch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the FraudWatch connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BMZbDIrmlC6MAyjOy2o5","title":"FraudWatch","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/fraudwatch/fraudwatch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use FraudWatch data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"FraudWatch"}]},{"id":"3NDuEBzMaDxS8GnwY4mv","title":"Freshworks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/freshworks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Freshworks connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HOHwBOI5Mbu1iBZb0jEq","title":"Freshworks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/freshworks/freshworks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Freshworks data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Freshworks"}]},{"id":"hq1Ngz565a7halfUEudu","title":"Gainsight","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gainsight","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Gainsight connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"LW9uv29oqS2a6IGx3hUf","title":"Gainsight","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gainsight/gainsight","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Gainsight data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gainsight"}]},{"id":"yB2bsuDIMDDVi8wzOmWK","title":"Gamma.AI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gamma.ai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Gamma.AI connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"kaFiC1JuVnGZhPcj8AI3","title":"Gamma.AI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gamma.ai/gamma.ai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Gamma.AI data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gamma.AI"}]},{"id":"FVmgQUWAANL7rzugeFD7","title":"Gemini Enterprise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gemini-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Gemini Enterprise connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xVaVYVkb0kRcpH4OhHwB","title":"Gemini Enterprise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gemini-enterprise/gemini-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Gemini Enterprise data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gemini Enterprise"}]},{"id":"vgJz9yCKwpgolbECk8Vb","title":"Genetec","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/genetec","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Genetec connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"nKuorMIuz6Ip3fAzxsqU","title":"Genetec Security Center","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/genetec/genetec-security-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Genetec Security Center data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Genetec"}]},{"id":"3sw74HrJuzUSCPdDyOs0","title":"Generic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/generic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Generic connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"giKhbgwAxxL1m5zAzzEw","title":"Generic Intel Feed","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/generic/generic-intel-feed","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Generic Intel Feed data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"H3ADsAnH9zH6EOCf2WCw","title":"Generic API Event Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/generic/generic-api-event-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Generic API Event Collector data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"gbXnNivYzqobBfi6pVOz","title":"Generic MCP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/generic/generic-mcp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Generic MCP data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"o2a0XWIUUyXZUKPojkbJ","title":"Generic SQL","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/generic/generic-sql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Generic SQL data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"ahUqM8vtC9RUbl4s8lrf","title":"Genesys","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/genesys","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Genesys connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xm1wIhV1hBiKw6wxq379","title":"Genesys","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/genesys/genesys","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Genesys data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Genesys"}]},{"id":"z1U8rkG9wd5p43gztEi4","title":"Gigamon","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gigamon","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Gigamon connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lR3JXdN80XLa5acrtd7X","title":"Gigamon","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gigamon/gigamon","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Gigamon data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gigamon"}]},{"id":"Z5waBcPzbOmfgiS7LL91","title":"GitGuardian","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gitguardian","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the GitGuardian connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0DxLbOTVIWVqBEwSzlqr","title":"GitGuardian","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gitguardian/gitguardian","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use GitGuardian data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitGuardian"}]},{"id":"9TdqTSEaJhqb4n0wzTR5","title":"GitHub","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/github","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the GitHub connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"z0yMaWytg8WVeD2LZ6jY","title":"GitHub","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/github/github","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use GitHub data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitHub"}]},{"id":"jVHQaGoFR6Hqj0YfRe1n","title":"GitLab","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gitlab","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the GitLab data source and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Q3Cl1C6bBqIHAQYCNoQ9","title":"Connect GitLab container registry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gitlab/connect-gitlab-container-registry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a GitLab container registry to Cortex XSIAM for image scanning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"}]},{"id":"zxdb7jLvBRdfRxslPhE5","title":"Manage a GitLab Container Registry connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gitlab/connect-gitlab-container-registry/manage-a-gitlab-container-registry-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage the GitLab Container Registry connector in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"},{"label":"Connect GitLab container registry"}]},{"id":"YBvSpAm5sigDdX6iASDH","title":"GitLab Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gitlab/gitlab-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use GitLab Automation and Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"}]},{"id":"mNKjYmmPFXmD27aC96Pk","title":"GitLab","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/gitlab/gitlab","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use GitLab data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"}]},{"id":"rzPGcxLZouIakWKY21u7","title":"Giphy","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/giphy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Giphy connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UXV6o5bCfpDWj98RIzBl","title":"Giphy","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/giphy/giphy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Giphy data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Giphy"}]},{"id":"NywDf4Ngw9fh1A0XY76J","title":"Google","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Google data sources and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WUeY2tC0rrce2qXUtxvr","title":"Google AI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-ai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google AI data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"LIY9UuRhTqjPZ9VKbRXS","title":"Google Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google Cloud data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"25i2NAXTfoJBoInl5Doa","title":"Google Cloud Platform","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-cloud-platform","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google Cloud Platform data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"9BdvPW6yZwSksJd0bh70","title":"Ingest logs and data from a GCP Pub/Sub","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-cloud-platform/ingest-logs-and-data-from-a-gcp-pub-sub","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect GCP Pub/Sub data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Cloud Platform"}]},{"id":"WsADQzREtcfhXwnIRQDq","title":"Google Kubernetes Engine","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-kubernetes-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google Kubernetes Engine data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"EBuV82zHA67Mv2YzisgT","title":"Ingest logs from Google Kubernetes Engine","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-kubernetes-engine/ingest-logs-from-google-kubernetes-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Google Kubernetes Engine data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Kubernetes Engine"}]},{"id":"Kyq2nCnd4l6G67qnGPgs","title":"Google SecOps","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-secops","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google SecOps data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"iDUuN3CxII8v0ScVFlcb","title":"Google Services","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google Services data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"GwPI1ciBaozP6CEYiA0O","title":"Google Workspace","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-workspace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google Workspace data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"k42XTN7awfOTeP6iYlsB","title":"Ingest logs and data from Google Workspace","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-workspace/ingest-logs-and-data-from-google-workspace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Google Workspace data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"s2xFtTWxEYuy72Cj1eSE","title":"Google Workspace connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-workspace/google-workspace-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google Workspace with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"jA3YNwdbfvF0hLNxnzmz","title":"Google Workspace Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/google/google-workspace/google-workspace-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Google Workspace Automation and Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"sBFlUq0TTJyxMe1mzd9M","title":"GraphQL","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/graphql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the GraphQL connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IthQiLOeOmgcOtECwCIL","title":"GraphQL","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/graphql/graphql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use GraphQL data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GraphQL"}]},{"id":"y3z8nzT5tPmTPAgmeiiR","title":"Grouped Example Connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/grouped-example-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Grouped Example Connector connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xYhylrVac6jJCWPI1eCC","title":"Grouped Example Connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/grouped-example-connector/grouped-example-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Grouped Example Connector data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Grouped Example Connector"}]},{"id":"AabpPIiXSs9XdlGds1kW","title":"GRR","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/grr","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the GRR connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JSyP5AdgrFUGQ8hLLHTh","title":"GRR","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/grr/grr","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use GRR data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GRR"}]},{"id":"7yHIMbgCf9WUliBSmn02","title":"Grafana","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/grafana","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Grafana connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"E7vOGxoSDpA7YLySuPWI","title":"Grafana","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/grafana/grafana","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Grafana data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Grafana"}]},{"id":"AuIJNNrl0lZn8EnbubEt","title":"Halcyon","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/halcyon","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Halcyon connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"a1ZGD4B1EsiTGyIR3Ssr","title":"Halcyon","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/halcyon/halcyon","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Halcyon data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Halcyon"}]},{"id":"JyOIbIQHtqRUdzCvNgSq","title":"Harbor","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/harbor","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Harbor data source for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FIgFA6agtbs7LkldRaSK","title":"Connect Harbor registry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/harbor/connect-harbor-registry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Harbor registry to Cortex XSIAM for container image scanning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harbor"}]},{"id":"WF0Lb8RMTh0frZUbjk3P","title":"Manage a Harbor connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/harbor/connect-harbor-registry/manage-a-harbor-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage the Harbor registry connector in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harbor"},{"label":"Connect Harbor registry"}]},{"id":"RgM3NT7aRA1Bvnro0rzs","title":"Harness","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/harness","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Harness connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"y0j8PmY0AxHmh7LBRXJx","title":"Harness","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/harness/harness","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Harness data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harness"}]},{"id":"XuZynVcaeBjautgFHWzb","title":"HashiCorp","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hashicorp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the HashiCorp connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bRPevToJIHMNggaZMjkw","title":"HashiCorp","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hashicorp/hashicorp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use HashiCorp data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HashiCorp"}]},{"id":"OJpw2GKyxygwvtkEVHA3","title":"Have I Been Pwnd","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/have-i-been-pwnd","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Have I Been Pwnd connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"QmK22n1KxXmyx1nIyEER","title":"Have I Been Pwnd","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/have-i-been-pwnd/have-i-been-pwnd","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Have I Been Pwnd data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Have I Been Pwnd"}]},{"id":"DTtcvNZXebMPI5ROJK08","title":"HCL BigFix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hcl-bigfix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the HCL BigFix connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IMW1Ehtg8ifQ57LW4ywk","title":"HCL BigFix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hcl-bigfix/hcl-bigfix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use HCL BigFix data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HCL BigFix"}]},{"id":"mjZBKv1SLDvUT8NePGON","title":"HPE Aruba","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hpe-aruba","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the HPE Aruba connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0o2mz7WFFKwrMklycgWv","title":"HPE Aruba","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hpe-aruba/hpe-aruba","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use HPE Aruba data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HPE Aruba"}]},{"id":"yEKY9LUXwz1NP3RY1PnO","title":"Hostio Solutions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hostio-solutions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Hostio Solutions connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OlN2dqfGrQDkg0nMVANE","title":"Hostio Solutions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/hostio-solutions/hostio-solutions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Hostio Solutions data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Hostio Solutions"}]},{"id":"siGBKEVoLgEpcseRf9xW","title":"HTTP log collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/http-log-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the HTTP log collector data source for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fhZf9O3fad9nc8V7Uqie","title":"Set up an HTTP log collector to receive logs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/http-log-collector/set-up-an-http-log-collector-to-receive-logs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect HTTP log data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HTTP log collector"}]},{"id":"oWFTswU8PPt4jAqOR5c5","title":"IBM","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ibm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the IBM connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yArkzwKk2hcidh3FqGVz","title":"IBM Storage Scale","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ibm/ibm-storage-scale","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use IBM Storage Scale data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"k72rO9B9LuKnnjaSLZkK","title":"IBM QRadar","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ibm/ibm-qradar","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use IBM QRadar data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"xKte1vmG26MOLA5KfTs5","title":"IBM Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ibm/ibm-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use IBM Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"pVCoXNPZ3VQWUDPnC9sH","title":"iManage","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/imanage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the iManage connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mLMdY7pGB9qXCkm9mygu","title":"iManage","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/imanage/imanage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use iManage data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"iManage"}]},{"id":"LNj2VO2zUFYqRrtzJ1TQ","title":"Imperva","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/imperva","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Imperva connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AzbBjR0gfIrRvJw3yRJh","title":"Imperva","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/imperva/imperva","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Imperva data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Imperva"}]},{"id":"oJY1sbsj13BA6ceVBgpJ","title":"InfoArmor","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/infoarmor","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the InfoArmor connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"I2wf2vLBRcZeffsmiVSI","title":"InfoArmor","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/infoarmor/infoarmor","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use InfoArmor data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"InfoArmor"}]},{"id":"wgvhhwh2zt5l20ipYTzN","title":"Infoblox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/infoblox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Infoblox connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IYINhXeNhDbhNdERGabu","title":"Infoblox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/infoblox/infoblox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Infoblox data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Infoblox"}]},{"id":"UuQyd5ZS9vveAavahtVX","title":"Intellum","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/intellum","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Intellum connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"V0jBX1oKGKv9GFGGCnPM","title":"Intellum","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/intellum/intellum","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Intellum data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Intellum"}]},{"id":"JJqZkCxlTbSOq6Vv64zm","title":"Intercom","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/intercom","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Intercom connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8q9VqqTO7LDcM31Dgjip","title":"Intercom","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/intercom/intercom","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Intercom data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Intercom"}]},{"id":"MoKV1acQImqzTBYy28Ai","title":"IPInfo.io","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ipinfo.io","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the IPInfo.io connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"TAMY2X64g4apKWLNDYWS","title":"IPInfo.io","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ipinfo.io/ipinfo.io","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use IPInfo.io data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IPInfo.io"}]},{"id":"gQ8qSC9hkyg0TNW1ExuF","title":"IPstack","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ipstack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the IPstack connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ksuJI56d0nZviPHoLecR","title":"IPstack","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ipstack/ipstack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use IPstack data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IPstack"}]},{"id":"5bvnZUVhE2kRYrofahqv","title":"Ironscales","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ironscales","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Ironscales connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0TpfuqOaxvPOHmrIShix","title":"Ironscales","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ironscales/ironscales","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Ironscales data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ironscales"}]},{"id":"K75GXpCv7RVqGGl1sgn8","title":"Ivanti","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ivanti","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Ivanti connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VSDQrIYFkWEbnKWCIAf2","title":"Ivanti","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ivanti/ivanti","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Ivanti data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ivanti"}]},{"id":"W0mJUKWPhYkV8BeHz1qX","title":"iZOOlogic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/izoologic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the iZOOlogic connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IQZkMPxLMwoBoXYZHuun","title":"iZOOlogic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/izoologic/izoologic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use iZOOlogic data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"iZOOlogic"}]},{"id":"b1Hs2Xd186v7xSJekE6T","title":"Jamf","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jamf","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Jamf connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YFhbHWuc1VqvUtCwLZmX","title":"Jamf","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jamf/jamf","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Jamf data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Jamf"}]},{"id":"pTMr5fl29Zj0Mph5VNsT","title":"Jamf Pro","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jamf/jamf-pro","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Jamf Pro data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Jamf"}]},{"id":"g3vMg9lBksG9HOASLOBS","title":"JFrog","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jfrog","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the JFrog data source for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BT65fwPVB2hgWfCHaCN1","title":"Connect JFrog container registry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jfrog/connect-jfrog-container-registry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a JFrog container registry to Cortex XSIAM for image scanning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JFrog"}]},{"id":"6o9o0aVtLccvRYjE5UBJ","title":"Manage a JFrog connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jfrog/connect-jfrog-container-registry/manage-a-jfrog-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage the JFrog container registry connector in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JFrog"},{"label":"Connect JFrog container registry"}]},{"id":"pnMQ0XMDNbC98t9ScgPB","title":"Joe Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/joe-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Joe Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IBa4upjTyb24368kJYl7","title":"Joe Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/joe-security/joe-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Joe Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Joe Security"}]},{"id":"jpXM5nmAwPzQKOXUocv5","title":"JumpCloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jumpcloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the JumpCloud connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"5mnLjmcyPaJ2mKsrnXBz","title":"JumpCloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jumpcloud/jumpcloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use JumpCloud data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JumpCloud"}]},{"id":"zeWHMz4H4wwdQQ7zQEKW","title":"JSONWhoIs.com","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jsonwhois.com","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the JSONWhoIs.com connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bvhnpSroH4cEpFXeT5Fc","title":"JSONWhoIs.com","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/jsonwhois.com/jsonwhois.com","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use JSONWhoIs.com data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JSONWhoIs.com"}]},{"id":"4t6Sh7nvkq2uvDL6lqE3","title":"Kafka","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kafka","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Kafka data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1Pl0UTTcqJyaDZNAeOYy","title":"Kafka","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kafka/kafka","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Kafka data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kafka"}]},{"id":"6bYRVB8B2zZDeNzImG9G","title":"Kaspersky","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kaspersky","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Kaspersky connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"v1LXwvLrnxo0RfsAXE7C","title":"Kaspersky","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kaspersky/kaspersky","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Kaspersky data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kaspersky"}]},{"id":"GbKa1SaVLhmkc0BnirrT","title":"Keeper Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/keeper-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Keeper Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3O1wdqzijkp8RG1XQGAT","title":"Keeper Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/keeper-security/keeper-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Keeper Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Keeper Security"}]},{"id":"viLGd2KlHP6sZj9N1Ck4","title":"KnowBe4","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/knowbe4","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the KnowBe4 connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ac1ns5kfVM3qR9HJWmA7","title":"KnowB4","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/knowbe4/knowb4","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use KnowB4 data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"KnowBe4"}]},{"id":"DIRULVGnyFyjiPuG9Klm","title":"Koi","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/koi","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Koi connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JvdHqEakr0wbyi0beFF9","title":"Koi","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/koi/koi","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Koi data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Koi"}]},{"id":"nnDrAndYrOcZ2pAuK2ka","title":"Koodous","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/koodous","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Koodous connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"SuUg29AhGxwzSJH0aNo1","title":"Koodous","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/koodous/koodous","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Koodous data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Koodous"}]},{"id":"eWsCd7S9CcLOqEEGFtgV","title":"Kubernetes","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kubernetes","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Kubernetes data source for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"m85ZJbCDYA3pgEaSotok","title":"Onboard the Kubernetes connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kubernetes/onboard-the-kubernetes-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Kubernetes data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"u6KBq59qMNmAImis9CSp","title":"What's new in Kubernetes connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kubernetes/whats-new-in-kubernetes-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the changes, additions, known issues, and fixes for each version of the Kubernetes connector.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"esflblancl0AqqhF0O6a","title":"Supported Kubernetes distributions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kubernetes/supported-kubernetes-distributions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the supported Kubernetes platform versions for the Kubernetes connector.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"AIPvUQoC0kriALR9SjuF","title":"Kustomer","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kustomer","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Kustomer connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"a9sDW1UfqJ9ROPrsTNwk","title":"Kustomer","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/kustomer/kustomer","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Kustomer data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kustomer"}]},{"id":"q8DS5Hueb56Z7qDNWXqO","title":"LastPass","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lastpass","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the LastPass connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BiQYLprDtteTrmqfkQcz","title":"LastPass","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lastpass/lastpass","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use LastPass data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LastPass"}]},{"id":"raUc9cpbtQBB08BFU1yR","title":"Lastline","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lastline","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Lastline connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Cjq2TXgjppsAsU2xG8Xf","title":"Lastline","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lastline/lastline","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Lastline data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Lastline"}]},{"id":"iwIBeZFneft0WGkGIO3H","title":"LevelBlue","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/levelblue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the LevelBlue connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rMZ3dGiZzYJ09iHySaHM","title":"LevelBlue","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/levelblue/levelblue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use LevelBlue data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LevelBlue"}]},{"id":"A9h1CuGUam9f1hfijJBA","title":"LogRhythm","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/logrhythm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the LogRhythm connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OwyhVjdts0y7bdPEmMlT","title":"LogRhythm","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/logrhythm/logrhythm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use LogRhythm data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LogRhythm"}]},{"id":"fDzvVgf34FyuZRb819b9","title":"LOLBAS","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lolbas","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the LOLBAS connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AOcub6ax8EAimeepGwSz","title":"LOLBAS","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lolbas/lolbas","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use LOLBAS data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LOLBAS"}]},{"id":"TOLwouejSXYEQjnhhhL0","title":"Lookout","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lookout","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Lookout connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"a83MxemtMmXnRxbIbaJ5","title":"Lookout","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lookout/lookout","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Lookout data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Lookout"}]},{"id":"DLH0awvUcj7BwP8169ox","title":"Lumu","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lumu","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Lumu connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ER4bee77pOR0ryy6pNot","title":"Lumu","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/lumu/lumu","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Lumu data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Lumu"}]},{"id":"MujEwVjlv70t5ogGJxFG","title":"Mail Utilities","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mail-utilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Mail Utilities connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YFg98Z3wAWqGDSwaNWi6","title":"Mail Utilities","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mail-utilities/mail-utilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Mail Utilities data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mail Utilities"}]},{"id":"JwtWb2UE5Js8DzqjIXmp","title":"Majestic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/majestic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Majestic connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"RzhYb6bn1Y6v8tZpjWsW","title":"Majestic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/majestic/majestic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Majestic data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Majestic"}]},{"id":"ljym1CsdDNfY2XQB4gEq","title":"ManageEngine","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/manageengine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ManageEngine connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sVkHe9RdfVcu7dsGdzGF","title":"ManageEngine","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/manageengine/manageengine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ManageEngine data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ManageEngine"}]},{"id":"f1b8Tp5W8kREw1TAORbN","title":"Mattermost","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mattermost","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Mattermost connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"a15jsLHwzm0dr8UPF5Jy","title":"Mattermost","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mattermost/mattermost","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Mattermost data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mattermost"}]},{"id":"ShYLkNUV24arF5KSpTeK","title":"MaxMind","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/maxmind","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Mattermost connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jr8mDCwyqlNdR8823bQf","title":"MaxMind","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/maxmind/maxmind","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MaxMind data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MaxMind"}]},{"id":"eKNM8i4m0V2GkqcsT31y","title":"Menlo Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/menlo-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Menlo Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"SplUg1GMTimzaJHimtAy","title":"Menlo Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/menlo-security/menlo-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Menlo Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Menlo Security"}]},{"id":"rBU5b8j9GgDe54cbN2B9","title":"Meta","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/meta","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Meta connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Baru6KY0iqm3PuU6KtZ5","title":"Meta","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/meta/meta","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Meta data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Meta"}]},{"id":"PKq6NetI4CdQiUpNzWUw","title":"Mimecast","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mimecast","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Mimecast connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Mypil1yDrrIcbmE6Zpd8","title":"Mimecast","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mimecast/mimecast","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Mimecast data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mimecast"}]},{"id":"z5p4HCtTqh864Fab2AH4","title":"Microsoft","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Microsoft data sources and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8dwX3P8f17JB0bRnRUyH","title":"Azure DevOps","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-devops","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Azure DevOps data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"MB441RuwH74Nt3gTdwVB","title":"Azure Event Hub","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-event-hub","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Azure Event Hub data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"fKlPjaQRbuU2yFjLijnX","title":"Ingest logs from Microsoft Azure Event Hub","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-event-hub/ingest-logs-from-microsoft-azure-event-hub","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Microsoft Azure Event Hub data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Azure Event Hub"}]},{"id":"DZu8rzNpngmInvK91brO","title":"Azure Firewall","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Azure Firewall data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"fXXlqSuL0QZfBCFn8xBg","title":"Azure Network Watcher","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-network-watcher","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Azure Network Watcher data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"qE6MlOWBpvovbN3VrKNo","title":"Ingest network flow logs from Microsoft Azure Network Watcher","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-network-watcher/ingest-network-flow-logs-from-microsoft-azure-network-watcher","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Microsoft Azure Network Watcher data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Azure Network Watcher"}]},{"id":"8V1uvDmZY9zdxDkoDMhO","title":"Microsoft Azure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-azure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Azure data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"P6fZrFWDpUyWsDObpYeX","title":"Microsoft Copilot Studio","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-copilot-studio","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Copilot Studio data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"btrAYZQiwXotooaCXlDR","title":"Microsoft Defender for Endpoint Events","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-defender-for-endpoint-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Defender for Endpoint Events data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"x9mEFw2SlO5111d9WdUM","title":"Ingest raw EDR events from Microsoft Defender for Endpoint","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-defender-for-endpoint-events/ingest-raw-edr-events-from-microsoft-defender-for-endpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect EDR events from Microsoft Defender for Endpoint data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Defender for Endpoint Events"}]},{"id":"owxQCYjPmhVQgnIc54At","title":"Microsoft Entra ID","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-entra-id","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Entra ID data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"notyL4NmMZkZoeZtwrcb","title":"Microsoft Office 365","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Office 365 data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"QOGdoAK0N5DbsEAotzRY","title":"Ingest logs from Microsoft Office 365","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/ingest-logs-from-microsoft-office-365","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Microsoft Office 365 data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"EaAeLLGhDLsSPw50WOkW","title":"Microsoft 365 (new)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft-365","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft 365 (new) data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"pfcpKrPLn8PW8OsNBgJk","title":"Create a Microsoft Entra ID","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft-365/create-a-microsoft-entra-id","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about creating a Microsoft Entra ID.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"},{"label":"Microsoft 365 (new)"}]},{"id":"ucyLE9EUCzlukMYnGrM7","title":"Microsoft365 (legacy)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft365","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft365 (legacy) data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"xAQo5RnchnkQXjcUoRaR","title":"Migrate to new Microsoft 365 connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft365/migrate-to-new-microsoft-365-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about migrating to a new Microsoft 365 connector.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"},{"label":"Microsoft365 (legacy)"}]},{"id":"IL5SFIt0WYa5XfTmukMS","title":"Microsoft 365 Copilot","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft-365-copilot","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft 365 Copilot data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"Bg3Abu5tXK7XYgkYwuZF","title":"Microsoft Graph","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft-graph","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Graph data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"9neKVXjqdsRBMgt8Rcg2","title":"Microsoft Office 365 (email)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365-email","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Office 365 (email) data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"5HiEaajpzHTtlIbjgaET","title":"Ingest logs and data from Microsoft 365","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365-email/ingest-logs-and-data-from-microsoft-365","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Microsoft 365 data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365 (email)"}]},{"id":"MuOohn0m61hjwbh1fX7J","title":"Microsoft 365 (Posture)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-365-posture","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft 365 (Posture) data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"pIa6HiHOvs616bJU4IBU","title":"How to onboard Microsoft 365","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-365-posture/how-to-onboard-microsoft-365","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about adding Microsoft 365 as a third-party data source in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft 365 (Posture)"}]},{"id":"ZG4TvRX6heEZL7gXxS0m","title":"Microsoft Teams","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-teams","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Teams data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"P6fL3IE6XkjuumngcQvu","title":"Azure Log Analytics","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-log-analytics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Azure Log Analytics data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"xTgMIw74OqkCV5ItowvF","title":"Azure Services","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Azure Services data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"otnPbiAyfHyrXKTtlZn6","title":"Azure WAF","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/azure-waf","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Azure WAF data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"Fi5UmYJIXTkt5a8lwoxD","title":"Microsoft Active Directory","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-active-directory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Active Directory data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"w5pu4TgV3R3YJFZoffgD","title":"Microsoft Identity","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-identity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Identity data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"BrxCaSwv63AuA8MCbPB5","title":"Microsoft Intune","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-intune","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Intune data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"WnX3UH8EDOnMC4H0GGrZ","title":"Microsoft Security Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-security-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Security Automation and Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"3hW5gzCw6KVrTDBXOzjG","title":"Microsoft Windows Tools","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/microsoft-windows-tools","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Microsoft Windows Tools data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"pINoTikplzjjWmd9dJy3","title":"M365 Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/microsoft/m365-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use M365 Automation and Collection data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"9dMPMaofunupcMGu6cKP","title":"MISP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/misp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the MISP connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"RVOihDRgykYecvbmGNOx","title":"MISP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/misp/misp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MISP data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MISP"}]},{"id":"C7DRufLSUzTl49GepbcW","title":"MITRE","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mitre","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the MITRE connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VvKVGW682zuJ97H2HUoH","title":"MITRE","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mitre/mitre","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MITRE data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MITRE"}]},{"id":"38JZdKadYAxzjnUGxTt8","title":"Monday","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/monday","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Monday connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hZyz32FcfZFJstDtq1hG","title":"Monday","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/monday/monday","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Monday data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Monday"}]},{"id":"IAW1k9nZQqDDvCiVsZxX","title":"Monday.com","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/monday/monday.com","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Monday.com data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Monday"}]},{"id":"tgfH5M4KiMuu2mp0UPaS","title":"MongoDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mongodb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the MongoDB data source and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aFXT114Ny0kshTjt03Jo","title":"How to onboard MongoDB Atlas (Posture)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mongodb/how-to-onboard-mongodb-atlas","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MongoDB Atlas (Posture) data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"0OUEmuiE10rwWOY2U0SZ","title":"MongoDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mongodb/mongodb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MongoDB data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"njUEfCRIjmFwbTIQtAPD","title":"MongoDB Atlas","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mongodb/mongodb-atlas","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MongoDB Atlas data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"LaCJvPPlvLIxitzvKvaS","title":"MuleSoft","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mulesoft","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the MuleSoft connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ochiBDQLQIxozh33brz2","title":"MuleSoft","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mulesoft/mulesoft","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MuleSoft data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MuleSoft"}]},{"id":"8x0u6nL4bPaCLRdEmahZ","title":"Mural","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mural","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Mural connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ZqRARKeVxe058Obodqzj","title":"Mural","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mural/mural","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Mural data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mural"}]},{"id":"2qmOwVs5wGc4PKLg9BXk","title":"MxToolBox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mxtoolbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the MxToolBox connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ZPba7tpWDTYjKMFnxu8I","title":"MxToolBox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/mxtoolbox/mxtoolbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use MxToolBox data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MxToolBox"}]},{"id":"6gGxzLyfYel6M3PtZ989","title":"NetBox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the NetBox connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VvgtqlxE53ZzlrrHTcF9","title":"NetBox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netbox/netbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use NetBox data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"NetBox"}]},{"id":"PaWbM5DBfnud80B6xzmR","title":"Netcraft","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netcraft","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Netcraft connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"w7Mg2a3mQ075trY1YRQy","title":"Netcraft","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netcraft/netcraft","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Netcraft data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Netcraft"}]},{"id":"FcEG1cpXuUg2aG290qBp","title":"Netmiko","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netmiko","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Netmiko connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2SuDJyfZFaXjJflqxnCM","title":"Netmiko","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netmiko/netmiko","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Netmiko data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Netmiko"}]},{"id":"Va9l2iZp92uyQmXKxAvX","title":"NetQuest","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netquest","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the NetQuest connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"15cC0FNQir2MZv53eLJq","title":"NetQuest","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netquest/netquest","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use NetQuest data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"NetQuest"}]},{"id":"XkusgKfTAkOw1fgRwcH4","title":"Netskope","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netskope","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Netskope connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"iLx57jSivxTr0IWvl0hu","title":"Netskope","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/netskope/netskope","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Netskope data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Netskope"}]},{"id":"y6uIIQlJVs6zCSDMcoGd","title":"Nintex Workflow Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nintex-workflow-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Nintex Workflow Cloud connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dZhSuYXeHKJuQ8bgFsew","title":"Nintex Workflow Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nintex-workflow-cloud/nintex-workflow-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Nintex Workflow Cloud data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Nintex Workflow Cloud"}]},{"id":"fn3hKNIms1lW4Ffto6yZ","title":"NIST","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nist","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the NIST connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8lLFnTFoYjXtjA5r6WtI","title":"NIST","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nist/nist","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use NIST data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"NIST"}]},{"id":"mmKpaaEKlqhgroSvoXRE","title":"nmap","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nmap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the nmap connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yRhXcv0BFSahx3VEHntg","title":"nmap","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nmap/nmap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use nmap data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"nmap"}]},{"id":"gz7MoyF4x8d6yOacuHw0","title":"NAVEX","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/navex","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the NAVEX connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rIFYopsRiacV0ieZtJAW","title":"NAVEX","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/navex/navex","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use NAVEX data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"NAVEX"}]},{"id":"a2gbS43m3juPpXqmVgab","title":"Nutanix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nutanix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Nutanix connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2RDUap98lS2NZ20Q674Q","title":"Nutanix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/nutanix/nutanix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Nutanix data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Nutanix"}]},{"id":"w2ko9TEf46VOwD4nJYzZ","title":"Okta","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/okta","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Okta data source and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YrAuueNjX5qcysm90YVL","title":"Ingest logs and data from Okta","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/okta/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Okta log and data collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"zbgW6MnB2N1yFxOGMR2c","title":"Okta Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/okta/okta-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Okta automation and collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"rdjH6kW6oE7aGQlz2pct","title":"Okta connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/okta/okta-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Okta data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"uDJPs4FFpZiTtVLfl8sq","title":"OneLogin","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/onelogin","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the OneLogin data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OrztTF17lXjdJYk2IX6W","title":"Ingest logs and data from OneLogin","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/onelogin/ingest-logs-and-data-from-onelogin","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure OneLogin log and directory data collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OneLogin"}]},{"id":"FwDgzIYD8yvyOcHK5MaV","title":"OneLogin","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/onelogin/onelogin","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OneLogin data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OneLogin"}]},{"id":"aTCoOBuSimSnYQfUhoLr","title":"OpenAI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/openai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the OpenAI connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ndIGmk4jVKVr2uziXzyt","title":"OpenAI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/openai/openai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OpenAI data and capabilities in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenAI"}]},{"id":"cFDduKzU25RUmXIETwah","title":"OpenCVE","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opencve","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the OpenCVE connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"K8vHKwQMiwnRfksUUAdp","title":"OpenCVE","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opencve/opencve","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OpenCVE vulnerability intelligence data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenCVE"}]},{"id":"RVqlDPjLzv3ueRf6VRtK","title":"OpenLDAP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/openldap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the OpenLDAP connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Mayx2LlYqz2sBPzPgjGP","title":"OpenLDAP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/openldap/openldap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OpenLDAP authentication for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenLDAP"}]},{"id":"KujzLDHEJdJlcFLHg3tS","title":"OpenPhish","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/openphish","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the OpenPhish connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"srkYCHYTC9E4vsAmiOVC","title":"OpenPhish","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/openphish/openphish","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OpenPhish threat intelligence data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenPhish"}]},{"id":"e9l8ndEcnykpzqoVIkYe","title":"OpenText","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opentext","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the OpenText connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6UZtfx9kG3QTjd3GcqKd","title":"OpenText EnCase Endpoint Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opentext/opentext-encase-endpoint-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OpenText EnCase Endpoint Security data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenText"}]},{"id":"0in0uNFefGNmCJ62aRzz","title":"OpenText Service Manager","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opentext/opentext-service-manager","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OpenText Service Manager data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenText"}]},{"id":"AiYVOVEzJPLwTyuYuQiq","title":"OpenText Vertica","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opentext/opentext-vertica","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OpenText Vertica data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenText"}]},{"id":"Sq16y51Sn3wD3CVfZzU8","title":"OPSWAT","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opswat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the OPSWAT connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"t71XdwPNsE4gw8NvEqPv","title":"OPSWAT MetaDefender","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/opswat/opswat-metadefender","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use OPSWAT MetaDefender data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OPSWAT"}]},{"id":"wh4ccz2tbxsYj4Vgr9pz","title":"Oracle","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/oracle","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Oracle data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"LCF8tPABDRtpUe6JWT70","title":"Oracle Cloud Infrastructure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/oracle/oracle-cloud-infrastructure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Oracle Cloud Infrastructure data source for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"qkBkCMeqEPHMpiJvoUUi","title":"Oracle","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/oracle/oracle","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Oracle data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"OdpZo2skxgjsOUkfNMvd","title":"Orca Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/orca-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Orca Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Av20Xp1GPOMEFG8Y4Q1k","title":"Orca Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/orca-security/orca-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Orca Security to import cloud security alerts into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Orca Security"}]},{"id":"yAaOxn0FC8Sj9dfOwUwJ","title":"PacketMail.net","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/packetmail.net","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the PacketMail.net connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"DudVdvzfsgTeyNI4KS6z","title":"PacketMail.net","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/packetmail.net/packetmail.net","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use PacketMail.net data for IPS intelligence lookups in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PacketMail.net"}]},{"id":"8eAXKVq5jrrvIHZXWv2A","title":"PacketSled","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/packetsled","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the PacketSled connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"EYkwiZyG4pUCL1D3U0LL","title":"PacketSled","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/packetsled/packetsled","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use PacketSled data to investigate network data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PacketSled"}]},{"id":"Cvoo7mj4Zp9ESeOoB4V3","title":"PagerDuty","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pagerduty","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the PagerDuty connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3nR3IqlYJ1fn6LwC45ht","title":"PagerDuty Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pagerduty/pagerduty-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure PagerDuty automation and collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PagerDuty"}]},{"id":"lxT6r7R5koQGw2Z7LSFT","title":"PagerDuty","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pagerduty/pagerduty","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use PagerDuty data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PagerDuty"}]},{"id":"qj67OZY9hS2JDbY1LpCM","title":"PAT Helpdesk Advanced","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pat-helpdesk-advanced","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the PAT Helpdesk Advanced connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ptfOH0ZG5O1xB1dBr0H2","title":"PAT Helpdesk Advanced","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pat-helpdesk-advanced/pat-helpdesk-advanced","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use PAT Helpdesk Advanced data in Cortex XSIAM service management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PAT Helpdesk Advanced"}]},{"id":"yeicODcXZJqAWUswprrL","title":"PhishLabs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/phishlabs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the PhishLabs connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JcKO4nc6LYlKhKJZZKF1","title":"PhishLabs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/phishlabs/phishlabs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use PhishLabs IOC, DRP, and EIR data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PhishLabs"}]},{"id":"FlJ70G9n7gdtiBvvthPS","title":"Ping Identity","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ping-identity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Ping Identity data sources and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0GJRbLeKIKhskBis5XA3","title":"PingFederate","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ping-identity/pingfederate","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure PingFederate authentication log collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"HoKCHF9gOEPFoUIw94SY","title":"PingOne","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ping-identity/pingone","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure PingOne data sources for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"NHtfTkMzqmoZviaq8RkV","title":"Ingest authentication logs and data from PingOne","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ping-identity/pingone/ingest-authentication-logs-and-data-from-pingone","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest PingOne authentication logs and data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"},{"label":"PingOne"}]},{"id":"Zw6x9Ygiq7X0rBJDvFc3","title":"Ping Identity","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/ping-identity/pingone/ping-identity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Ping Identity data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"},{"label":"PingOne"}]},{"id":"AIHnPj7rhryZMgOtH8zP","title":"Pipedrive","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pipedrive","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Pipedrive connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YIhEcSEUi68KukxhHhOW","title":"Pipedrive","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pipedrive/pipedrive","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Pipedrive security posture monitoring in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Pipedrive"}]},{"id":"UeSY1oAdSWpeXQOFghTp","title":"Pipl","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pipl","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Pipl connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WxGXHmpqGqHXuh4HXiAc","title":"Pipl","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/pipl/pipl","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Pipl identity intelligence data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Pipl"}]},{"id":"o17Orslbtvw2RVUgALdE","title":"Plainview","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/plainview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Plainview connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"uKFQ140Pwt0Taf3CQi8s","title":"Plainview","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/plainview/plainview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Plainview identity lifecycle management data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Plainview"}]},{"id":"nTEK90i8egJphzaNEDn3","title":"Proofpoint","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/proofpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Proofpoint data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0n7iQ9qFYwmUUD5ly48l","title":"Proofpoint Targeted Attack Protection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/proofpoint/proofpoint-targeted-attack-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Proofpoint Targeted Attack Protection connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Proofpoint"}]},{"id":"ZWbhV9C9AIpgscId2fJa","title":"Ingest logs from Proofpoint Targeted Attack Protection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/proofpoint/proofpoint-targeted-attack-protection/ingest-logs-from-proofpoint-targeted-attack-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest logs from Proofpoint Targeted Attack Protection in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Proofpoint"},{"label":"Proofpoint Targeted Attack Protection"}]},{"id":"wzUuyXnzcmzAGkSH1AJ4","title":"Proofpoint","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/proofpoint/proofpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Proofpoint data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Proofpoint"}]},{"id":"jjjGFheeNSheERMnQ0XK","title":"ProtectWise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/protectwise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ProtectWise connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"qdyDDyQcp6fcTMWteiB4","title":"ProtectWise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/protectwise/protectwise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ProtectWise event streaming in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ProtectWise"}]},{"id":"cpIGbk82NgPQ0TjVlGx6","title":"Qualtrics","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/qualtrics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Qualtrics connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"7bj5IshmUHR0WHW36XNt","title":"Qualtrics","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/qualtrics/qualtrics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Qualtrics SaaS security posture monitoring for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Qualtrics"}]},{"id":"ZPm2yFML224IlRLVfAEo","title":"Qualys","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/qualys","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Qualys connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XlrNKsDQJeAzELHCXHe7","title":"Qualys","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/qualys/qualys","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Qualys vulnerability, compliance, and file integrity monitoring data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Qualys"}]},{"id":"FDbJ7lMzjZMDopwO5kbc","title":"Quest KACE","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/quest-kace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Quest KACE connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"j0AK7d4OS9B3vBFfKeZm","title":"Quest KACE","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/quest-kace/quest-kace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Quest KACE Systems Management Appliance data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Quest KACE"}]},{"id":"zKO9c8zJ3Vv1lQxQAUb6","title":"Radware","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/radware","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Radware connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Yj0adZj3Y6V2zpa7bViW","title":"Radware","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/radware/radware","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Radware Cloud DDoS Protection Service data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Radware"}]},{"id":"10fN3Q7YKmTNcvOHr1Ba","title":"Rapid7","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/rapid7","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Rapid7 connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BVdsdaTDKGhv1nQvoBOR","title":"Rapid7","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/rapid7/rapid7","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Rapid7 InsightIDR, InsightVM, and AppSec data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Rapid7"}]},{"id":"sjN8KxnB8cch9rgOQRb7","title":"Razor Group","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/razor-group","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Razor Group connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1IJyqTqaIrndKu1iJrWH","title":"Razor Group","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/razor-group/razor-group","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Razor Group and Perch threat intelligence data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Razor Group"}]},{"id":"8nJGvTkFqC1YxADSj5Zm","title":"Recorded Future","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/recorded-future","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Recorded Future connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6q4cFv0elY4dUe3dtTz7","title":"Recorded Future","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/recorded-future/recorded-future","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Recorded Future threat intelligence data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Recorded Future"}]},{"id":"pvfPQ1EAxoUyvH9ESLYn","title":"Red Hat","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/red-hat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Red Hat connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"x6jPQRFGSlU7whH1Dax7","title":"Red Hat Ansible","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/red-hat/red-hat-ansible","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Red Hat Ansible automation in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Red Hat"}]},{"id":"DzvUTyLEuZHWFejv6uEN","title":"Redis Labs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/redis-labs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Redis Labs connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"vKJYmSdLeOAJ40vZOBI2","title":"Redis Labs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/redis-labs/redis-labs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Redis Labs data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Redis Labs"}]},{"id":"234Yk2mLytVawyqDyGEy","title":"Redmine","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/redmine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Redmine connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FVx5F7aJBFhQXvr6oeVy","title":"Redmine","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/redmine/redmine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Redmine data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Redmine"}]},{"id":"G4e1Fe9m4RQXCqkje0PC","title":"ReliaQuest","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/reliaquest","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ReliaQuest connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dTFrkNFV5JGTeMUlkLPO","title":"ReliaQuest","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/reliaquest/reliaquest","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ReliaQuest GreyMatter DRP data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ReliaQuest"}]},{"id":"lYjgVLqjNZC60CXaAbfk","title":"RemoteAccess","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/remoteaccess","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the RemoteAccess connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MvK29kGUu5oIq8FvJGg1","title":"RemoteAccess","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/remoteaccess/remoteaccess","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use RemoteAccess commands and file transfers for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"RemoteAccess"}]},{"id":"2vgYCus5xQJM7ta2Yt9t","title":"Retarus","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/retarus","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Retarus connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Z61Gmh5VwwF65uMY3WBH","title":"Retarus","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/retarus/retarus","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Retarus Secure Email Gateway data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Retarus"}]},{"id":"UvNphnmOPi9OgiSzWwRB","title":"RSA","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/rsa","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the RSA connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"noevkUFGItTRyj2dGPtN","title":"RSA","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/rsa/rsa","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use RSA Archer and NetWitness data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"RSA"}]},{"id":"5t6MxVTiaZpvwoGaJQUt","title":"RTIR","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/rtir","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the RTIR connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dXrzpdnGTC5kXkCdWZjT","title":"RTIR","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/rtir/rtir","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage RTIR incident-response tickets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"RTIR"}]},{"id":"GiRJGFKXODyObyeNHtuC","title":"runZero","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/runzero","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the runZero connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"t5WbmKQQ3RHrp1dsKoY8","title":"runZero","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/runzero/runzero","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use runZero data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"runZero"}]},{"id":"yXvXGL1Xqi5q0XsyNOxZ","title":"Salesforce","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/salesforce","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Salesforce data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"GHFgg2AjrdVD6id73OuD","title":"Ingest logs and data from Salesforce","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/salesforce/ingest-logs-and-data-from-salesforce","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Salesforce logs and data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"rv87u4WPLPDnSkN2rPeF","title":"Salesforce connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/salesforce/ingest-and-run-salesforce-automation-and-remediation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Salesforce data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"tBK0ooB4krn35z5euCjD","title":"Automation and remediation commands","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/salesforce/ingest-and-run-salesforce-automation-and-remediation/automation-and-remediation-commands","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Salesforce Automation and Remediation commands for playbooks and the War Room for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"},{"label":"Salesforce connector"}]},{"id":"Xoep669UU8JsVExjkUy1","title":"SailPoint","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sailpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SailPoint connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rGLG28JyS0OuXXaaeKDl","title":"SailPoint","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sailpoint/sailpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SailPoint IdentityNow event collector data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SailPoint"}]},{"id":"kjDbNCg3KjVuQSqbUyxS","title":"Samhaus","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/samhaus","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Samhaus connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"W50bY8UFESavDlizfK7p","title":"Samhaus","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/samhaus/samhaus","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Samhaus data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Samhaus"}]},{"id":"k1CtJ4U7IHYE4F84dynv","title":"SANS DShield","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sans-dshield","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SANS DShield connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WHVyLjRjYYfR0hSu9CVf","title":"SANS DShield","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sans-dshield/sans-dshield","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SANS DShield data in Cortex XSIAM to fetch attack subnet feeds.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SANS DShield"}]},{"id":"UzhHjWND4VmLGVKvxTss","title":"SAP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SAP connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IY7vm6KH6uF0Yh29Z4VP","title":"SAP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sap/sap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SAP data in Cortex XSIAM, including BTP, C4C, and IAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SAP"}]},{"id":"H0MyFxxXnjmpdAC3Uy6G","title":"SAP Ariba","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sap/sap-ariba","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SAP Ariba connector for Cortex XSIAM security posture monitoring and remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SAP"}]},{"id":"LlQHCaBw9nssS1tcY36D","title":"Saviynt","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/saviynt","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Saviynt connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"zn2pJP8Tr5Wh5WA1uyUJ","title":"Saviynt","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/saviynt/saviynt","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Saviynt Enterprise Identity Cloud audit log collector data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Saviynt"}]},{"id":"0hVNJCcvR05A9D5ItNxJ","title":"SecurityScorecard","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/securityscorecard","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SecurityScorecard connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FEtWdWIGW8XkLhdk6naQ","title":"SecurityScorecard","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/securityscorecard/securityscorecard","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SecurityScorecard data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SecurityScorecard"}]},{"id":"MPUM0tr2m7rpQ461xCm4","title":"Securonix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/securonix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Securonix connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YQs4ZsPnZtzlidMMGg1K","title":"Securonix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/securonix/securonix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Securonix data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Securonix"}]},{"id":"td0cLVK5EMKlws4aS2Xe","title":"Sentry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sentry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Sentry connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9korcnKIhx9zvq4C8pKj","title":"Sentry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sentry/sentry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Sentry data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sentry"}]},{"id":"Dbgv2SBn5GuAKTqpfIQC","title":"SentinelOne","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sentinelone","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SentinelOne data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1TqW6hEvTp7NlCEEO3kR","title":"SentinelOne DeepVisibility","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sentinelone/sentinelone-deepvisibility","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure SentinelOne DeepVisibility data ingestion for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SentinelOne"}]},{"id":"EuiG6jdx436G3FIHIB4o","title":"Ingest raw EDR events from SentinelOne DeepVisibility","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sentinelone/sentinelone-deepvisibility/ingest-raw-edr-events-from-sentinelone-deepvisibility","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest SentinelOne DeepVisibility raw EDR events into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SentinelOne"},{"label":"SentinelOne DeepVisibility"}]},{"id":"w1bVXX3NWe6YfbT8SL5X","title":"SentinelOne","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sentinelone/sentinelone","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SentinelOne data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SentinelOne"}]},{"id":"PZbARgEJ4babmXRwFKcH","title":"ServiceNow","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/servicenow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ServiceNow data source and connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cCDqgxIak0IjnMYGBhOj","title":"ServiceNow CMDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/servicenow/servicenow-cdmb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ServiceNow CMDB data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"1Z37kYwbFv08wUdfW0mA","title":"Ingest data from ServiceNow CMDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/servicenow/servicenow-cdmb/ingest-data-from-servicenow-cmdb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest ServiceNow CMDB data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"},{"label":"ServiceNow CMDB"}]},{"id":"1hqEheoPcwsBz21Gropy","title":"ServiceNow Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/servicenow/servicenow-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure ServiceNow automation and collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"UG1FNTcAB0kbWYCWfYQB","title":"ServiceNow","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/servicenow/servicenow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ServiceNow data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"puPWEzvEAdGB8P5NIlfj","title":"Shopify","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/shopify","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Shopify connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"g2bT51kwoIICsugE71h8","title":"Shopify","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/shopify/shopify","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Shopify SaaS posture monitoring data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Shopify"}]},{"id":"cuPRkJfhu275gf7Ty9CW","title":"Shodan","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/shodan","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Shodan connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Kh8vvPUKkgegt4kS5jYT","title":"Shodan","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/shodan/shodan","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Shodan data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Shodan"}]},{"id":"zUrCX1aomZROmIcDt5br","title":"Skyhigh Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/skyhigh-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Skyhigh Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MDNeOIXdTgGIToaTqpZd","title":"Skyhigh Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/skyhigh-security/skyhigh-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Skyhigh Security and Secure Web Gateway data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Skyhigh Security"}]},{"id":"oWcBo2C7azUMqizA01nQ","title":"Slack","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/slack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Slack connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rkqt9HJaHu26HoJnNIJ2","title":"Slack Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/slack/slack-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Slack automation, notifications, and audit log collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"QG7Huhcn7sVP2AkvqA5K","title":"Slack Enterprise","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/slack/slack-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Slack Enterprise identity and SaaS posture monitoring for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"tYysN2NSBYAh3lYiIfAN","title":"SMB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/smb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SMB connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wLEDXHjaaa9UnuKb9EAo","title":"SMB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/smb/smb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SMB data for Cortex XSIAM file and directory management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SMB"}]},{"id":"gu2fJgZIo7e465gTYY1L","title":"SMIME Messaging","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/smime-messaging","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SMIME Messaging connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JkTqqhY8ZVCL1FeVAPDF","title":"SMIME Messaging","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/smime-messaging/smime-messaging","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SMIME Messaging data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SMIME Messaging"}]},{"id":"rgAe1hSPgx6dlY0aVwtq","title":"Snowflake","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/snowflake","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Snowflake data source and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"L0sADvgYJBAMuy6j0xUJ","title":"How to onboard Snowflake","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/snowflake/how-to-onboard-snowflake","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard Snowflake as a data source in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Snowflake"}]},{"id":"3ctlgAaRnkbmpUVGa5pK","title":"Snowflake Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/snowflake/snowflake-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Snowflake automation and collection in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Snowflake"}]},{"id":"SCmOrccX03ApI3QMhfYp","title":"SolarWinds","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/solarwinds","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SolarWinds connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"i6PUCM9hH4vb9nxMevXe","title":"SolarWinds","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/solarwinds/solarwinds","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SolarWinds data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SolarWinds"}]},{"id":"04uT1rLT61sKP42jI5xK","title":"Sonatype Nexus","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sonatype-nexus","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Sonatype Nexus connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"EZJhviG4bFtHXWU6Svug","title":"Connect Sonatype Nexus registry","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sonatype-nexus/connect-sonatype-nexus-registry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Sonatype Nexus registry data in Cortex XSIAM for container image scanning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sonatype Nexus"}]},{"id":"ewplXZOmQ3Ndt5FWrPsU","title":"Manage a Sonatype connector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sonatype-nexus/connect-sonatype-nexus-registry/manage-a-sonatype-connector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage the Sonatype registry connector in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sonatype Nexus"},{"label":"Connect Sonatype Nexus registry"}]},{"id":"mK5WpGGTdQwl9QsXchZS","title":"Sophos","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sophos","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Sophos connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"h6xQK2A1QbZjYJJriUYM","title":"Sophos","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sophos/sophos","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Sophos data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sophos"}]},{"id":"JHK7fTanqSRBpnuY9LpE","title":"Splunk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/splunk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Splunk connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8Mk8ja5P3msgy38L42Hi","title":"Splunk Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/splunk/splunk-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Splunk automation and collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Splunk"}]},{"id":"aVOYNeF9VE6q49zYTZQC","title":"Splunk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/splunk/splunk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Splunk data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Splunk"}]},{"id":"yU27Ok3ONwTqRneHcG03","title":"Sublime Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sublime-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Sublime Security connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"qQwwBnQkCx4qSIrsonoy","title":"Sublime Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sublime-security/sublime-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Sublime Security data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sublime Security"}]},{"id":"l2QEyl6WuwARdkrzdoAS","title":"Sumo Logic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sumo-logic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Sumo Logic data sources for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VUJRJ4n3QjzI0GDewf7C","title":"Sumo Logic Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sumo-logic/sumo-logic-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Sumo Logic automation and collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sumo Logic"}]},{"id":"ApqQDMkvPgTTpkf7rXor","title":"Sumo Logic","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sumo-logic/sumo-logic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Sumo Logic data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sumo Logic"}]},{"id":"EziVZgt4P0AzZSgD3D60","title":"SysAid","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sysaid","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the SysAid connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Ugh2BcIPZp3MN8oikwas","title":"SysAid","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/sysaid/sysaid","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SysAid data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SysAid"}]},{"id":"bIK3iYgRw5BFoX8pbpQB","title":"Syslog Sender","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/syslog-sender","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Syslog Sender connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"doUkbWBP6YhjHHGf8gAr","title":"Syslog Sender","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/syslog-sender/syslog-sender","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Syslog Sender data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Syslog Sender"}]},{"id":"xs2gSBFyLqtL6Q8rl7xe","title":"Tanium","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tanium","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Tanium connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Fxily6GCyNC8NEiZifCN","title":"Tanium","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tanium/tanium","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Tanium data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tanium"}]},{"id":"XjTakwy2pqr6zgaYKzpk","title":"TAXII","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/taxii","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the TAXII connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"4w9qkgeVvMsv9zgv9Y7d","title":"TAXII","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/taxii/taxii","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use TAXII data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TAXII"}]},{"id":"wW5uU26wLNwiRfPm6roU","title":"TeamViewer","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/teamviewer","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the TeamViewer connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MJ8ezJuuzG1xhPvndyjg","title":"TeamViewer","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/teamviewer/teamviewer","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use TeamViewer data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TeamViewer"}]},{"id":"lmdYsDfXCUtgpnvlcXRo","title":"Telegram","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/telegram","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Telegram connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"tjzHPHDVeJfqVQnjjgVZ","title":"Telegram","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/telegram/telegram","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Telegram data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Telegram"}]},{"id":"5MOCLVfG1VaF6UwX838x","title":"Tenable","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tenable","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Tenable connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yVwcGSHsXuDgsC7PsPFZ","title":"Tenable","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tenable/tenable","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Tenable data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tenable"}]},{"id":"arMB1S1C8pZmQXDoWGsI","title":"Terraform","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/terraform","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Terraform connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"kkXOGBPpV8ODgCKmyoYV","title":"Terraform","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/terraform/terraform","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Terraform data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Terraform"}]},{"id":"AoCUaSHao9nso3Ql4w2S","title":"Thales","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/thales","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Thales connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9wcqFY7dEY4Qt4MiPhdi","title":"Thales","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/thales/thales","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Thales data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Thales"}]},{"id":"2p90P3WItkBSRpTyQFmG","title":"TheHive","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/thehive","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the TheHive connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2tuebfLQyg0OuA3LbL3p","title":"TheHive","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/thehive/thehive","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use TheHive data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TheHive"}]},{"id":"6ygnLwWPbPHkB2Na37Qs","title":"Thinkst Canary","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/thinkst-canary","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Thinkst Canary connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"KVvXbWBMcIfVy3zsBeeW","title":"Thinkst Canary","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/thinkst-canary/thinkst-canary","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Thinkst Canary data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Thinkst Canary"}]},{"id":"0IvXbCTygZaCPw6I2812","title":"ThreatConnect","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/threatconnect","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ThreatConnect connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bDtlemN36JkqGzWAoVAN","title":"ThreatConnect","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/threatconnect/threatconnect","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ThreatConnect data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ThreatConnect"}]},{"id":"YvsDvu29cPzSuuj7mRCa","title":"ThreatMiner.org","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/threatminer.org","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ThreatMiner.org connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"DzhgXzB8JskfUf21Bafi","title":"ThreatMiner.org","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/threatminer.org/threatminer.org","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ThreatMiner.org data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ThreatMiner.org"}]},{"id":"fl8TiFk1MsHyS0349GSD","title":"ThreatX","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/threatx","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the ThreatX connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"LYTEsPbmZL0sGzfRYKRF","title":"ThreatX","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/threatx/threatx","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use ThreatX data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ThreatX"}]},{"id":"KjBhK93MtiOYubmK8GxV","title":"Tidy","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tidy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Tidy connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rJt6dDOyZpFcb0TSRvD7","title":"Tidy","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tidy/tidy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Tidy data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tidy"}]},{"id":"ltqd7bLjNHqanFVcbnvl","title":"TOPdesk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/topdesk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the TOPdesk connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3XczK88hnX07slt6OcmT","title":"TOPdesk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/topdesk/topdesk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use TOPdesk data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TOPdesk"}]},{"id":"opklitn9lE1RuXbeiRFC","title":"Tor Exit Adress","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tor-exit-adress","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Tor Exit Adress connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"NnHRZCrnTpqeT6J8I2qD","title":"Tor Exit Adress","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/tor-exit-adress/tor-exit-adress","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Tor Exit Adress data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tor Exit Adress"}]},{"id":"MlbjGKtP5WyrVRct8nun","title":"Trellix","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Trellix connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"qLhsUeZ13D6OEZvRENY4","title":"Trellix Database Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-database-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Trellix Database Security data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"usBEpxANHuG27bKEEKT4","title":"Trellix Email Security (ETP)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-email-security-etp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Trellix Email Security (ETP) data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"hPuGjPOUIXuhLdjXNxSH","title":"Trellix Email Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-email-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"use Trellix Email Security data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"tP0eLhalxfpkPuHqMwxl","title":"Trellix Endpoint (HX)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-endpoint-hx","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Trellix Endpoint (HX) data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"Xg4HYQPUAG2tV49TKtVw","title":"Trellix ePO","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-epo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Trellix ePO data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"lkkRna8nqYPGN23YmKea","title":"Trellix Network","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-network","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Trellix Network data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"VKNUHemarkkPu5fmzWkP","title":"Trellix Sandbox","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-sandbox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Trellix Sandbox data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"55mv9lwMZsrCtJfzzLTE","title":"Trellix SIEM","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-siem","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Trellix SIEM data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"fUspE9XtzD8zb4xrIJH7","title":"Trellix Threat Intel","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trellix/trellix-threat-intel","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Threat Intel data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"rqC0fCe4KHgWzQckAimL","title":"TrendAI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trendai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the TrendAI connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"4dfNioxB0UYIQloU6deo","title":"TrendAI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/trendai/trendai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use TrendAI data in Cortex XSIAM, including Trend Micro endpoint, cloud, email, and XDR integrations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TrendAI"}]},{"id":"fXiDAKQYEAQl8PqIBvTL","title":"Twilio","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/twilio","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Twilio connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"zEb5XTIXgRktSubEj5WK","title":"Twilio","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/twilio/twilio","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Twilio data in Cortex XSIAM to send SMS notifications and collect SendGrid email activity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Twilio"}]},{"id":"CjzzyBXgYVqeOMWtvl2x","title":"Uptycs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/uptycs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Uptycs connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FB76uidDJcS60uaBpy2E","title":"Uptycs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/uptycs/uptycs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Uptycs event and security alert data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Uptycs"}]},{"id":"GAJowPmN78l2S6vct5yU","title":"Vectra","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/vectra","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Vectra connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6qaQ8PxVS9Bt7G9VFvkt","title":"Vectra","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/vectra/vectra","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Vectra data in Cortex XSIAM to collect detections and audits.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Vectra"}]},{"id":"yFuNg3ksibZzBWt0nKbt","title":"Versa Networks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/versa-networks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Versa Networks connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XwGs8NmR1ENB4skUvtfr","title":"Versa Networks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/versa-networks/versa-networks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Versa Networks data in Cortex XSIAM, including Versa Director.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Versa Networks"}]},{"id":"q6WL0XQnDdGkffPPqVkH","title":"VMware","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/vmware","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the VMware connectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"DSmMGAk6SPIA4g5r62xx","title":"VMware Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/vmware/vmware-automation-and-colection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure VMware automation and collection capabilities for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"VMware"}]},{"id":"KL5iZMvSmzJjy73nqECo","title":"VMWare","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/vmware/vmware","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure VMware security posture capabilities for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"VMware"}]},{"id":"O3KfF4UrqKhAPBA9OZif","title":"VulnDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/vulndb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the VulnDB connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"N7rf1T2eC8i71z5coOD6","title":"VulnDB","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/vulndb/vulndb","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use VulnDB vulnerability intelligence data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"VulnDB"}]},{"id":"A0JkP2jq2leIACmGisFp","title":"WhatsMyBrowser.org","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/whatsmybrowser.org","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the WhatsMyBrowser.org connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FqIQQn9AjZJD2zdeTwB5","title":"WhatsMyBrowser.org","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/whatsmybrowser.org/whatsmybrowser.org","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use WhatsMyBrowser.org data in Cortex XSIAM user-agent parsing.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"WhatsMyBrowser.org"}]},{"id":"YgY70ScPztQLF7xbWXGf","title":"Whois","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/whois","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Whois connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"q9ZnWQ8yzMGAdsbdPnP2","title":"Whois","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/whois/whois","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Whois domain enrichment data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Whois"}]},{"id":"I34k52f9zR9UWIHJSRTB","title":"WithSecure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/withsecure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the WithSecure connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BwUON771BB40TEo8bJTA","title":"WithSecure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/withsecure/withsecure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use WithSecure Endpoint Protection data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"WithSecure"}]},{"id":"dpQiWcmqOOuUSJiIZW3Y","title":"Workday","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/workday","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Workday data source and connectors in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rhd37wbp9yzs3DlXO7ct","title":"Ingest report data from Workday","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/workday/ingest-report-data-from-workday","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Workday report data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"ROMxk4HOI8XwobMilphD","title":"Workday Automation and Collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/workday/workday-automation-and-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Workday automation and collection data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"Mi95mR4J6qwji9xhxVBV","title":"Workday","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/workday/workday","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Workday data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"XHcO5C8OzJFoQzMWxQuC","title":"X","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/x","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the X connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"eCdfTIuP7PGbVhGZVvI6","title":"X Automation and Remediation","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/x/x-automation-and-remediation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use X automation and remediation in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"X"}]},{"id":"9ALMBK5yjxPsBvkCD6Rp","title":"YouTrack","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/youtrack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the YouTrack connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mULSylUXMyluq3bLxU4C","title":"YouTrack","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/youtrack/youtrack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use YouTrack data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"YouTrack"}]},{"id":"H72hdMyEavkVFMfj2qWi","title":"Zendesk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zendesk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Zendesk connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"afS2X1zzPaebkaQF9S4e","title":"Zendesk","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zendesk/zendesk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Zendesk data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zendesk"}]},{"id":"z5KoKCQfyGcZaJQGkU0R","title":"Zero Networks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zero-networks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Zero Networks connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"d5GlV3aWPAV79InsbI9U","title":"Zero Networks","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zero-networks/zero-networks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Zero Networks data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zero Networks"}]},{"id":"rpMv6Ay84f3SMMzykeUu","title":"Zimperium","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zimperium","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Zimperium connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XKVGxJIUMqIHjh84bwZR","title":"Zimperium","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zimperium/zimperium","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Zimperium data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zimperium"}]},{"id":"iYV99kRaPCSv8FOtGcKT","title":"Zoom","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zoom","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Zoom connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xChomtJjvRS2ySkHfn0A","title":"Zoom","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zoom/zoom","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Zoom data in Cortex XSIAM, including users, meetings, logs, and feeds.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zoom"}]},{"id":"yjLW4ZYaOJfsAIiFh79O","title":"Zscaler","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zscaler","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Zscaler data sources and connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rSn3wTpDcB8nZvXWbSEj","title":"Zscaler Internet Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zscaler/zscaler-internet-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Zscaler Internet Access (ZIA) log collection in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"GccG4vPuLx1xBNw79j40","title":"Zscaler Private Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zscaler/zscaler-private-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Zscaler Private Access (ZPA) log collection in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"6qeDC2sYdZJpizrR7JjC","title":"Zscaler","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/vendor-specific-data-sources-and-connectors/zscaler/zscaler","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Zscaler data in Cortex XSIAM for ZIA log collection and security management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"aW2tXnNEoIDrOTtnxDbc","title":"Connectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/connectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure connectors that collect and enrich data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"7cmwj34rPmDdG8K7RpHH","title":"Standard data sources","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/standard-data-sources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure standard data sources to ingest telemetry into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"bbGRg3LMaXgcV3Blc2d6","title":"Cloud service provider (CSP) onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about onboarding your cloud service provider to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"1mJRzANOzPWJEGtGhSyi","title":"Understand CSP onboarding tiers and licensing","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/understand-csp-onboarding-tiers-and-licensing","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand the license tiers and capabilities available for CSP onboarding in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"x4ZJArjgCxOk9EzmjpcJ","title":"Amazon Web Services cloud onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the AWS onboarding wizard, and Cortex XSIAM creates a custom authentication template to be deployed in AWS.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"b5DSeDfnFIthA7GdLpb8","title":"AWS security capabilities and deployment planning","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan AWS security capabilities for Cortex XSIAM cloud onboarding.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"kX6atNEhYpcep9hDed72","title":"AWS resource inventory","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-resource-inventory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Inventory AWS resources for Cortex XSIAM cloud onboarding.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"7tpqw1HYXsdXkCGYFg0E","title":"AWS security model and authentication","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-model-and-authentication","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand AWS authentication for Cortex XSIAM cloud onboarding.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"bsJ0Ro4GPqdnXxJVHbkP","title":"Cortex XSIAM and AWS audit log collection architecture","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/cortex-cloud-and-aws-audit-log-collection-architecture","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand AWS audit log collection architecture for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"i48VqoqefzdwGpRCiwia","title":"Onboard Amazon Web Services","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/onboard-amazon-web-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the AWS onboarding wizard, and Cortex XSIAM creates a custom authentication template to be executed in AWS.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"WFOmNCCc259IOtoNBxF8","title":"Prerequisites for onboarding AWS","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/prerequisites-for-onboarding-aws","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Before you begin onboarding AWS, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"5PNOJJBjqmyWebw0HnhU","title":"How to onboard Amazon Web Services","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/how-to-onboard-amazon-web-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the AWS onboarding wizard and Cortex XSIAM creates a custom authentication template to be deployed in AWS CloudFormation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"E8MGJPWk8PyAk6qVPzwT","title":"How to onboard Amazon Web Services with foundational configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/how-to-onboard-amazon-web-services-with-foundational-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"oEM8Vocm2ZWTroI8AVYm","title":"Deploy the authentication template in AWS","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/deploy-the-authentication-template-in-aws","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to deploy the Terraform or CloudFormation authentication template in Amazon Web Services.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"jd0e2JCCDqKtq5UopyoI","title":"Post-deployment: Custom (BYOB) and Control Tower audit log collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/post-deployment-custom-byob-audit-log-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure AWS audit log collection after Cortex XSIAM deployment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"fQDh6fBuNMPZ5J409wNK","title":"Grant cross-account KMS key access for Control Tower BYOB log collection","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/grant-cross-account-kms-key-access-for-control-tower-byob-log-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to configure cross-account AWS KMS key permissions for Cortex Control Tower BYOB log collection. Step-by-step guide to updating KMS key policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"jpdoeVoFyhXxLo6Vq2eA","title":"AWS post-deployment verification","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-post-deployment-verification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"After you have completed the AWS onboarding wizard and you have deployed the authentication template in AWS (using CloudFormation or Terraform), verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"msq1SdyVD6ysnPfrajaN","title":"Amazon Web Services (AWS) provider permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/amazon-web-services-aws-provider-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Amazon Web Services (AWS) permissions for use during Cortex XSIAM onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"sh2DnfXuAZbOykWlhPKR","title":"Microsoft Azure cloud onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard Microsoft Azure cloud resources to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"qWPR7wcYdE4jNTBGIGWq","title":"Onboard Microsoft Azure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/onboard-microsoft-azure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"2dnZMAoBZVHGDjEWENGA","title":"Prerequisites for onboarding Azure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/prerequisites-for-onboarding-azure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Before you begin onboarding Microsoft Azure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"giFMF6a9HEiFC85dzUyf","title":"How to onboard Microsoft Azure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/how-to-onboard-microsoft-azure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"i4toEBQ1JbnVwLATzMjO","title":"How to onboard Microsoft Azure with foundational configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/how-to-onboard-microsoft-azure-with-foundational-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"0YNpzll2SH0Gnc6TQa4h","title":"Finalize Microsoft Azure onboarding by executing the authentication template","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/finalize-microsoft-azure-onboarding-by-executing-the-authentication-template","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to execute the authentication template file in Microsoft Azure for subscriptions, tenants, and management groups. We provide instructions both for applying the Terraform template's configura","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"juyITWK8DtDcGQzHQ4UA","title":"Microsoft Azure offboarding overview","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"This section contains the technical procedures required to safely decommission and offboard your Cortex XSIAM resources in Microsoft Azure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"DoviY9EUJbW58Rhw4Ksv","title":"Offboard Terraform-based Azure deployments (all scopes)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-terraform-based-azure-deployments-all-scopes","siteSpaceId":"sitesp_xTOni","lang":"en","description":"How to offboard all Terraform-based Microsoft Azure scopes from Cortex XSIAM: A step-by-step technical guide to safely running Terraform destroy and cleaning up policy-deployed resources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"KxEDNmrF0P9YehMI6qbw","title":"Offboard Azure subscription (ARM)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-subscription-arm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"How to offboard a Microsoft Azure subscription scope that was onboarded using ARM: A step-by-step technical guide to safely running the interactive offboarding script and cleaning up all resources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"NRmL0fYjJhvvobC6NkPV","title":"Offboard Azure management group or tenant scope (ARM)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-management-group-or-tenant-scope-arm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"How to offboard Microsoft Azure management group or tenant scopes from Cortex XSIAM: A step-by-step technical guide to safely removing all Azure resources deployed by Cortex onboarding templates.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"kf9zXEPJRYb0eKdI1Uzb","title":"Offboard Azure tenant with Entra ID only","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-tenant-with-entra-id-only","siteSpaceId":"sitesp_xTOni","lang":"en","description":"How to offboard a Microsoft Azure tenant onboarded with the Entra ID only option from Cortex XSIAM: A step-by-step technical guide to safely removing deployed resources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"FsqJxK78MgAPEu3fFVZB","title":"Microsoft Azure provider permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-provider-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Microsoft Azure provider permissions for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"lYLomyj38KiLeqeNirNQ","title":"Google Cloud Platform onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard Google Cloud Platform resources to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"btxsntmwBVlizArTK5TV","title":"Onboard Google Cloud Platform","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/onboard-google-cloud-platform","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the GCP onboarding wizard, and Cortex creates a custom authentication template to be executed in GCP.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"UgWR0zT6vzvG3Esa9TlC","title":"Prerequisites for onboarding GCP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Before you begin onboarding GCP, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"fd3q2VXVuGcFSf6AGRRk","title":"Required APIs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp/required-apis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"},{"label":"Prerequisites for onboarding GCP"}]},{"id":"3DrfBUrK2gkCV3TpfoxM","title":"How to onboard Google Cloud Platform","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/how-to-onboard-google-cloud-platform","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the GCP onboarding wizard, and Cortex XSIAM creates a custom authentication template to be applied in GCP.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"xoChFjN04AqSDo5vwXji","title":"How to onboard GCP with foundational configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/how-to-onboard-microsoft-azure-with-foundational-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard GCP with foundational configuration for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"FXNkehYeXU1FPYFBq05B","title":"Deploy the Terraform authentication template in GCP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/deploy-the-terraform-authentication-template-in-gcp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to deploy the Terraform authentication template in Google Cloud Console.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"uYlcNEhio2hfQiVXlFYe","title":"Connect Google Workspace with your GCP cloud instance","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/connect-google-workspace-with-your-gcp-cloud-instance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Google Workspace to Cortex XSIAM through your GCP instance.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"UW6gg72nDPCrBplHyqw0","title":"Monitor GCP resources inside service perimeters","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/monitor-gcp-resources-inside-service-perimeters","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to grant authorization to Cortex XSIAM to scan within your GCP service perimeter.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"GtJzJwiBXYvJdfpxHRwd","title":"Google Cloud Platform (GCP) provider permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/google-cloud-platform-gcp-provider-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex XSIAM onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform onboarding"}]},{"id":"fu9nzaDcsVEChx2FWZGn","title":"Oracle Cloud Infrastructure cloud onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the Oracle Cloud Infrastructure onboarding wizard and Cortex XSIAM creates a custom Terraform authentication template to be deployed in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"mAL4hl8yQ9OuWmTOw6Cp","title":"Onboard Oracle Cloud Infrastructure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the OCI onboarding wizard, and Cortex creates a custom authentication template to be executed in OCI.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"ZM7LOWo57PWBq9nrBsQ5","title":"Prerequisites for onboarding OCI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/prerequisites-for-onboarding-oci","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Before you begin onboarding Oracle Cloud Infrastructure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"FEvM364UXEQJWNGDuRs7","title":"How to onboard Oracle Cloud Infrastructure","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/how-to-onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the OCI onboarding wizard and Cortex XSIAM creates a custom authentication template to be applied in OCI.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"b7SN9dVupaVzKxW3qswX","title":"How to onboard Oracle Cloud Infrastructure with foundational configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/how-to-onboard-oracle-cloud-infrastructure-with-foundational-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard Oracle Cloud Infrastructure to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"ZXBaK3Dce6ZNGHahI9us","title":"Deploy the Terraform authentication template in OCI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/deploy-the-terraform-authentication-template-in-oci","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to deploy the Terraform authentication template in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"A3MTIgE6lgEQQGm5z9pJ","title":"Oracle Cloud Infrastructure (OCI) provider permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/oracle-cloud-infrastructure-oci-provider-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Oracle Cloud Infrastructure provider permissions for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"iy6aSVbnTWeLYAIh8QQh","title":"Alibaba Cloud cloud onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the Alibaba Cloud onboarding wizard and Cortex XSIAM creates a custom Terraform authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"PKoXlgzEiESo2Bc7yJeD","title":"Alibaba security capabilities and deployment planning","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan Alibaba Cloud security capabilities for Cortex XSIAM onboarding.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"f1wXb0EDW4PdPrNwxjIR","title":"Alibaba Cloud resource inventory","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-resource-inventory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Inventory Alibaba Cloud resources for Cortex XSIAM onboarding.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"ih5c6JTJ9L2ougm1Bt8l","title":"Alibaba Cloud security model and authentication","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-security-model-and-authentication","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Alibaba Cloud authentication for Cortex XSIAM onboarding.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"BujWUOqhoVi3d2CTU8rr","title":"Onboard Alibaba Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/onboard-alibaba-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow the Alibaba Cloud onboarding wizard and Cortex XSIAM creates a custom CloudFormation authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"xNHkayx6WsQFW6SYvi9j","title":"Prerequisites for onboarding Alibaba Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/prerequisites-for-onboarding-alibaba-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Before you begin onboarding Alibaba Cloud, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"FfRYdHnlUU8A4Ii2HC7o","title":"How to onboard Alibaba Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/how-to-onboard-alibaba-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard Alibaba Cloud resources to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"KT4WRrDsCJDdNkqM5FDw","title":"Alibaba Cloud post-deployment verification","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-post-deployment-verification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"After you have completed the Alibaba Cloud onboarding wizard and you have deployed the authentication template in Alibaba Cloud, verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"gXmgjsUf3utJWsR2yNC0","title":"Alibaba Cloud provider permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-provider-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Alibaba Cloud permissions for use during Cortex XSIAM onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"PaGb7CerEnDBD4zjVrNo","title":"Outpost onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about outposts, which are a dedicated set of infrastructure resources that extends the reach of Cortex XSIAM into your environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"9XeNzjm0teGhx0urQPni","title":"Outpost fundamentals and planning","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-fundamentals-and-planning","siteSpaceId":"sitesp_xTOni","lang":"en","description":"An outpost enables you to have security scans performed on infrastructure in a cloud account owned by you. Learn about outpost fundamentals and what to consider when planning your outpost.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"MyJCOeDHdG5pHUsZ5DDP","title":"Outpost creation workflow","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-creation-workflow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about the creation process for an outposts, which facilitate security scanning performed on infrastructure in a cloud account owned by you.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"qVFVFyIeE3ivWHNocABN","title":"Working with standard outposts","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Standard outposts are the recommended way to create dedicated set of infrastructure resources that extends the reach of Cortex XSIAM into your environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"IPUCsxjlFu2ajML8Xskf","title":"Create a standard outpost","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts/create-a-standard-outpost","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Instructions for creating a standard outpost while onboarding your CSP.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with standard outposts"}]},{"id":"8HiHYJ9uVjSpSJwbWxzW","title":"Working with Bringing your own Azure app (BYOA) outposts","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Using advanced settings while creating your outpost, you can deploy a Cortex Cloud Azure outpost using your own pre-created Entra ID app registration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"uqPHZfCXzLTE1c3rgL6V","title":"Task 1: Meet the prerequisites for Azure BYOA outposts","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-1-meet-the-prerequisites-for-azure-byoa-outposts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page lists the prerequisites that must be met before customizing your outpost in this way.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"2KBoccCwuOOT1QHR9oeT","title":"Task 2: Create the app registration for the Azure BYOA outpost","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-2-create-the-app-registration-for-the-azure-byoa-outpost","siteSpaceId":"sitesp_xTOni","lang":"en","description":"You can customize your own outpost for Azure by bringing your own app (BYOA). This page describes the steps for creating the app registration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"0AahCfgl7zi46Hbgi9Me","title":"Task 3: Deploy the Azure BYOA outpost","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-3-deploy-the-azure-byoa-outpost","siteSpaceId":"sitesp_xTOni","lang":"en","description":"You can customize your own outpost by bringing your own app (BYOA). This page describes the steps for deploying the Azure BYOA outpost.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"ti7IFcudS1BleslDbfKv","title":"Task 4: Verify the BYOA outpost deployment","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-4-verify-the-byoa-outpost-deployment","siteSpaceId":"sitesp_xTOni","lang":"en","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page describes the steps for verifying your BYOA outpost deployment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"ajr6LRGN9SBkJdfq6z00","title":"The shell script for Azure app registration","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/the-shell-script-for-azure-app-registration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"You can run this helper shell script to set up your resources and retrieve their IDs for use while creating your Azure BYOA outpost. This page provides technical, \"read-me style\" details about the scr","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"uY3wNnX0rrBON3iX6TzB","title":"Outpost troubleshooting","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-troubleshooting","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Check here for solutions to issues that might occur while configuring, deploying, and operating outposts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"jy1SR0qAUJP00bLAoKj1","title":"Outpost Cloud Service Provider (CSP) permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"This page lists and explains the various roles and permissions needed for working with resources for outposts by CSP.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"N2AEN1Kh2eq8bgGEqhnp","title":"Amazon Web Services (AWS) outpost permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/amazon-web-services-aws-outpost-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Amazon Web Services (AWS) permissions for use during Cortex XSIAM outpost onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"QFFA3dvyFXQyZ72SSU61","title":"Microsoft Azure outpost permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/microsoft-azure-outpost-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Microsoft Azure provider outpost permissions for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"tXZSgt45Cj8jpxS4CrMX","title":"Google Cloud Platform (GCP) outpost permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/google-cloud-platform-gcp-outpost-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex XSIAM onboarding outposts to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"N6AaFel3Uqk43bpSb6wQ","title":"Introduction to Terraform for Cloud service provider (CSP) onboarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/introduction-to-terraform-for-cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to onboard Cloud Service Providers (CSPs) using Terraform. Discover step-by-step workflows for initial provisioning, updates, and Cloud Shell deployment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"c58ajDzppAsPkBGhjyva","title":"Manually connect a cloud instance","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/manually-connect-a-cloud-instance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manually connect a cloud instance to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"jjspTTLnV8bdFBSkGRxe","title":"Manage cloud instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/manage-cloud-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage cloud instances connected to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"gKrxygs6V2vW4rshArkg","title":"Pending cloud instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/pending-cloud-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review pending cloud instances in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"KWWtBDTFg85kXVyorGNC","title":"Edit your onboarded CSP configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/edit-your-onboarded-csp-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Update onboarded cloud configurations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"hRQfF0FoAZNKyoKgjmnj","title":"Update cloud permissions after Cortex XSIAM release updates","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage permission updates for your cloud instances following new feature releases or bug fixes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"WDdZSo2xiehsxtMzfabu","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"You can troubleshoot errors on cloud instances by drilling down on an instance from the Data Sources & Integrations page in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"r8YQpG2RB2M011ixxGi0","title":"Cloud service provider permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/cloud-service-provider-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Grant the correct cloud service provider permissions for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"lFPcUh1d5Mxz66enTqdO","title":"Generic on-premise data collectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure generic on-premise data collectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"HF2SoopU5QJjiuev28De","title":"Broker VM data collector applets","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Broker VM data collector applets for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"7xsxdm2BoPtV7J8TSy3I","title":"Activate Apache Kafka Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-apache-kafka-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Apache Kafka Collector applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"oH5REiUDGon1AE9yh4uJ","title":"Activate Cortex Network Scanner","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-cortex-network-scanner","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cortex Network Scanner applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"YZB9xZhZpdXpN8azYIlO","title":"Activate CSV Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-csv-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the CSV Collector applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"YfG3MrfXYzTcoz12XUHM","title":"Activate Database Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-database-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Database Collector applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"OnHtEyBL65ng8Aq3jIM7","title":"Activate DSPM Database","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-database","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the DSPM Database applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"ISVGTXZYL6h5Bjogvwdr","title":"Activate DSPM Fileshare","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-fileshare","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the DSPM Fileshare applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"LGFcdL67Bq1ioJj6v5CI","title":"Activate Files and Folders Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-files-and-folders-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Files and Folders Collector applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"wRrouJhNKPrtwnkdKVGK","title":"Activate FTP Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-ftp-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the FTP Collector applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"0R8H3YuPJHOtDzH9WFsY","title":"Activate Local Agent Settings","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-local-agent-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Local Agent Settings applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"QjP8Z7MJyOhPsSetXG63","title":"Activate NetFlow Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-netflow-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the NetFlow Collector applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"v9lAs4jxZEP1VKUpPneR","title":"Activate Network Mapper","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-network-mapper","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Network Mapper applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"8IU6Maa3ldlyEn7Fdv77","title":"Activate Registry Scanner","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-registry-scanner","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Registry Scanner applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"NxQWkz2S0tEwqbbO8Wq5","title":"Syslog Collector applet","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Syslog Collector applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"bCiS6sv91dfmH24VFvtj","title":"Activate Syslog Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/activate-syslog-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Syslog Collector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"jMEt9SmgAdPXtkW2Zqpr","title":"Ingest logs from a Syslog receiver","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/ingest-logs-from-a-syslog-receiver","siteSpaceId":"sitesp_xTOni","lang":"en","description":"To extend visibility, Cortex XSIAM can receive Syslog from additional vendors that use CEF or LEEF formatted over Syslog (TLS not supported).","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"wUrJds7Z2TKMK6S21Spi","title":"Check Point FW1 VPN1","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/check-point-fw1-vpn1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Check Point firewall data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"9rBsXbNVoQa9Lwi49Lqx","title":"Ingest logs from Check Point firewalls","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/check-point-fw1-vpn1/ingest-logs-from-check-point-firewalls","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Check Point firewall logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Check Point FW1 VPN1"}]},{"id":"Vo26uTEamtlUKxXoUHcC","title":"Cisco ASA firewalls and AnyConnect","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Cisco ASA and AnyConnect data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"K1CvI1lqqkOvAPe7Pn2n","title":"Ingest logs from Cisco ASA firewalls and AnyConnect","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/cisco-asa-firewalls-and-anyconnect/ingest-logs-from-cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Cisco ASA and AnyConnect logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Cisco ASA firewalls and AnyConnect"}]},{"id":"BiRbHWHnAzeGKHWwryd4","title":"Corelight Zeek","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/corelight-zeek","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Corelight Zeek data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"h8MzzIasQ6nAoDztumbc","title":"Ingest logs from Corelight Zeek","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/corelight-zeek/ingest-logs-from-corelight-zeek","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Corelight Zeek logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Corelight Zeek"}]},{"id":"TZRV8SFTPSfSvgnkbV9o","title":"Forcepoint DLP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/forcepoint-dlp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Forcepoint DLP data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"kGzv7db7AEIy7HxZ1uH1","title":"Ingest logs from Forcepoint DLP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/forcepoint-dlp/ingest-logs-from-forcepoint-dlp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Forcepoint DLP logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Forcepoint DLP"}]},{"id":"xEMalAHHfP0aVI8cOm3E","title":"Fortinet Fortigate","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/fortinet-fortigate","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Fortinet FortiGate data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"a8Ngf6lOwm0vXwR5SnQb","title":"Ingest logs from Fortinet Fortigate firewalls","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/fortinet-fortigate/ingest-logs-from-fortinet-fortigate-firewalls","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Fortinet FortiGate logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Fortinet Fortigate"}]},{"id":"dIiFeqkccZZPcy5FoOzP","title":"Next Generation Firewall","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/next-generation-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest next-generation firewall data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"0DztJ2sCdXJ5ejFURbKk","title":"Ingest Next-Generation Firewall logs using the Syslog Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest firewall logs through Syslog Collector into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Next Generation Firewall"}]},{"id":"zBITVINT4FvcNlPHcLEa","title":"PingFederate","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/pingfederate","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest PingFederate data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"0yPP78nrWu43lCDQpLLb","title":"Ingest authentication logs from PingFederate","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/pingfederate/ingest-authentication-logs-from-pingfederate","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest PingFederate authentication logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"PingFederate"}]},{"id":"MSy6dS2KYHHeV75bsvii","title":"Zscaler Internet Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-internet-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Zscaler Internet Access data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"mccSSyIvxkHlOYLEuh4t","title":"Ingest logs from Zscaler Internet Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-internet-access/ingest-logs-from-zscaler-internet-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Zscaler Internet Access logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Zscaler Internet Access"}]},{"id":"oIOwQt6tfe8mjR5hqi4U","title":"Zscaler Private Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-private-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Zscaler Private Access data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"Y5HqHbgWaY6nrzYfZsGK","title":"Ingest logs from Zscaler Private Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-private-access/ingest-logs-from-zscaler-private-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Zscaler Private Access logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Zscaler Private Access"}]},{"id":"yatJZgG3lD1lt8GlRZvU","title":"Activate Transporter","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-transporter","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Transporter applet for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"g7vOR2GO6NPsJYYQOrLz","title":"Activate Windows Event Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Windows Event Collector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"lLV4sqaGVknZfjzFokwc","title":"Activate Windows Event Collector on Windows Core","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector/activate-windows-event-collector-on-windows-core","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Windows Core event collection for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"2hrJV1wXFTZs5NvY5W7P","title":"Renew WEC certificates","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector/renew-wec-certificates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Renew Windows Event Collector certificates for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"iCcmUw7bTdGQMBJNQhJs","title":"XDR Collectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use XDR Collectors to collect data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"dbni9ASVQ8FjwAdZH5P9","title":"XDR Collector audit logs","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-audit-logs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review XDR Collector audit logs in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"HmIBzIoNVajPN5gYGQUi","title":"XDR Collector machine requirements and supported operating systems","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-machine-requirements-and-supported-operating-systems","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review XDR Collector requirements for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"mCgJhFl58HxzEChVaToR","title":"Resources required to enable access to XDR collectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/resources-required-to-enable-access-to-xdr-collectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review required collector access resources for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"qEXLLUZZEvT2s3OQ2uQR","title":"Manage XDR Collectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage XDR Collectors in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"6mjjP8f82lpwc5tSqA1L","title":"XDR Collectors installation resource for Windows and Linux","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/xdr-collectors-installation-resource-for-windows-and-linux","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install XDR Collectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"D8BUqZL7IzYCBAx9orq0","title":"Create an XDR Collector installation package","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/create-an-xdr-collector-installation-package","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create an XDR Collector package for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"8paUgoWz88lg7Gz5MhfJ","title":"Install the XDR Collector installation package for Windows","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install an XDR Collector on Windows for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"BfNRILUi0mwEoacIq9wq","title":"Install the XDR collector on Windows using the MSI","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-the-msi","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install an XDR Collector MSI for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"PRzOnOEFCDCwCeTSYRAm","title":"Install the XDR Collector on Windows using Msiexec","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-msiexec","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install an XDR Collector with Msiexec for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"RH92gZb2M71PWeJqoAP3","title":"Install the XDR Collector installation package for Linux","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-linux","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install an XDR Collector on Linux for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"1CJi2LayiAJ5EfpYBcLt","title":"Configure XDR Collector upgrade scheduler","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/configure-xdr-collector-upgrade-scheduler","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Schedule XDR Collector upgrades for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"tQEQYEPbP9GbdYtB7BEs","title":"Set an application proxy for XDR Collectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/set-an-application-proxy-for-xdr-collectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure an XDR Collector proxy for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"AIGke1AcHK8WOJuczZqc","title":"Set an alias for an XDR Collector machine","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/set-an-alias-for-an-xdr-collector-machine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set an XDR Collector machine alias in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"7B09E5VgCrcUsH0YXVsQ","title":"Upgrade XDR Collectors","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/upgrade-xdr-collectors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Upgrade XDR Collectors for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"szQJ1czXDoKQOxsGDRUQ","title":"Uninstall the XDR Collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/uninstall-the-xdr-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Uninstall an XDR Collector from Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"gxLlyOXzbnKzw2CJt6i2","title":"Define XDR Collector machine groups","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/define-xdr-collector-machine-groups","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define XDR Collector machine groups in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"qJb4GmyNJ9hZ15NU0rjS","title":"About Cortex XDR Collector content updates","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/about-cortex-xdr-collector-content-updates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand XDR Collector content updates for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"EYSfqPIFXM32rOPqvchT","title":"XDR Collector profiles","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure XDR Collector profiles for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"zvJcDYc2iyiR4Lsu31VR","title":"Add an XDR Collector profile for Windows","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add a Windows XDR Collector profile for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"FfqDOULGu5YILsals7CB","title":"How to configure XDR Collector profiles","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/how-to-configure-xdr-collector-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure XDR Collector profiles for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"cPH4RnYcPi2ErhL8EZuX","title":"Additional XDR Collector profile management options","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/additional-xdr-collector-profile-management-options","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage XDR Collector profiles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"zqXiRnb240AzMKVYlhE0","title":"Query Windows Event Log records","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/query-windows-event-log-records","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Query Windows Event Log records for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"svdBk6jlH6bx3M92VT6D","title":"Ingest logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Windows DHCP logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"J7e7DiUpKYeeFQ8xv3tB","title":"Ingest Windows DNS debug logs using Elasticsearch Filebeat","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/ingest-windows-dns-debug-logs-using-elasticsearch-filebeat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Windows DNS logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"adqSiu1IBftm3TNlgICK","title":"Add an XDR Collector profile for Linux","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-linux","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add a Linux XDR Collector profile for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"QSR8lPTN42ZwoGdEj5eG","title":"Apply profiles to collection machine policies","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/apply-profiles-to-collection-machine-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Apply collection profiles to Cortex XSIAM policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"gOxm9N5kRQEmkvdArhZL","title":"XDR Collector datasets","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-datasets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review XDR Collector datasets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"MQ98Tj0tw7MUCMwWyJ1g","title":"Palo Alto Networks integrations","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Palo Alto Networks integrations for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"Xv2N1D8EGRpT3osonnGa","title":"Cloud Next-Generation Firewall","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/cloud-next-generation-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cloud NGFW data ingestion for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"mRJbk9vcFNBEb279g7Qe","title":"Ingest data from Cloud Next-Generation Firewall","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/cloud-next-generation-firewall/ingest-data-from-cloud-next-generation-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Cloud Next-Generation Firewall"}]},{"id":"yy9ouGzW2q7cgCYjWIq8","title":"Next-Generation Firewall","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/next-generation-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Next-Generation Firewall ingestion for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"j4x1uFBS8L3aWXWIyKIU","title":"Ingest data from Next-Generation Firewall","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/next-generation-firewall/ingest-data-from-next-generation-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"holvNhtfuzW0aX2Z3Z1y","title":"Ingest Next-Generation Firewall logs using the Syslog collector","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest firewall Syslog data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"glWexspWQ90GEH7RscMX","title":"Panorama","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/next-generation-firewall/panorama","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Panorama data ingestion for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"2IDVQaY6R3EQPUHok8EX","title":"Prisma Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/prisma-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Prisma Access data ingestion for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"8rSVKuBSbV6USxITQzUz","title":"Ingest data from Prisma Access","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/prisma-access/ingest-data-from-prisma-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Prisma Access data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"n9yxrvONdNIGnbCeHj22","title":"Palo Alto Networks Prisma","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/prisma-access/palo-alto-networks-prisma","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Palo Alto Networks Prisma for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"RuOLIihNhKvVX8tk8t9e","title":"Prisma Access Browser","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/prisma-access-browser","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Prisma Access Browser for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"7Fq0RFzROoSxUO3Qt8ZO","title":"Ingest logs from Prisma Access Browser","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/prisma-access-browser/ingest-logs-from-prisma-access-browser","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Prisma Access Browser logs into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access Browser"}]},{"id":"OluvcYdqb2MfIZdWJfpl","title":"Ingest detection data from Strata Logging Service","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/ingest-detection-data-from-strata-logging-service","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Palo Alto Networks detection data from Strata Logging Service into Cortex XSIAM, migrate legacy collectors to Cortex Native Data Lake, and query logs with XQL.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"L6Yc30zKoK5gaOE0BzS3","title":"IoT Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/iot-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure IoT Security data ingestion for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"PZ7cTsITxmbbkCwKEw2V","title":"Ingest alerts and assets from IoT Security (Deprecated)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/iot-security/ingest-alerts-and-assets-from-iot-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest legacy IoT Security data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"4HbRUY2msqlAdgojUwvE","title":"Ingest alerts and assets from Device Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/iot-security/ingest-alerts-and-assets-from-device-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Device Security alerts and assets into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"QC8cJBszoK8tAdbIpYSL","title":"IoT Security","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/iot-security/iot-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use IoT Security data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"RDa2F6r1JKEP9kEsgqOD","title":"Cortex Attack Surface Management","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/cortex-attack-surface-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Attack Surface Management data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"5SaKPDm9KIyz0ESO1efx","title":"Cortex Automation Developer Tools","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/cortex-automation-developer-tools","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex Automation Developer Tools with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"5J3Pxm0sjK8mIgVJ2LnN","title":"Cortex Data Lake","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/cortex-data-lake","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex Data Lake data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"FABTa7NDrCtMhpowZeg8","title":"Cortex Internals","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/cortex-internals","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex Internals data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"haikt9JFhLLjPMTB3h79","title":"Cortex XDR","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/cortex-xdr","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XDR data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"izaVITjHrdqB3ddjyH3U","title":"Enterprise DLP","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/enterprise-dlp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Enterprise DLP data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"yaGSwvcZvWW11Coj9CuZ","title":"Palo Alto Networks Cortex","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/palo-alto-networks-cortex","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Palo Alto Networks Cortex data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"m8bL49zHgsMAIf0BL2En","title":"PAN PSIRT Advisories","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/pan-psirt-advisories","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest PAN PSIRT advisories into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"WUrRpXvhkbvKrNeNvvvx","title":"Prisma Cloud Compute","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/prisma-cloud-compute","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Prisma Cloud Compute data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"Fke7MotMEdrVybeQl42D","title":"Prisma Cloud CSPM","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/prisma-cloud-cspm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Prisma Cloud CSPM data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"r20gyHojd60JSEHhLphe","title":"SaaS Security (Aperture)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/saas-security-aperture","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure SaaS Security data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"1ayZB7pMDiZK1GzcOME2","title":"Threat Vault","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/threat-vault","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Threat Vault data with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"HAeJidql37i5xNueQlc7","title":"WildFire Cloud","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/wildfire-cloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure WildFire Cloud data for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"VzeGRzsf9SaHrtaR1BJM","title":"Log type filtering","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/log-type-filtering","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"rQS5fYcxpVtIjaZUg29g","title":"Collecting URL and File log types","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/collecting-url-and-file-log-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure URL and File log collection for Palo Alto Networks integrations in pre-3.x Cortex XSIAM to balance analytics visibility, correlation rules, and ingestion costs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"bdG8dZ3vOsIv2ajoFIjU","title":"Detectors connected to URL and File log types","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/collecting-url-and-file-log-types/detectors-connected-to-url-and-file-log-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM detectors affected when URL or File log collection is disabled, including impacts on cyberattack detection, investigation context, and correlation rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Collecting URL and File log types"}]},{"id":"mBnNbHPyVmont4Kkbv2J","title":"Cloud Posture and Runtime Security data sources","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-posture-and-runtime-security-data-sources","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the Cloud Posture and Runtime Security data sources in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"BND1MEqJrZliKTjm9bzE","title":"External alerts using External Issue Mapping","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/external-alerts-using-external-issue-mapping","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about collecting alerts from any external source using External Issue Mapping in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"IeamtPaqT9Quatw9Ijhr","title":"Ingest external alerts","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/external-alerts-using-external-issue-mapping/ingest-external-alerts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Send external alerts to Cortex XSIAM and map source fields using External Issue Mapping.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"External alerts using External Issue Mapping"}]},{"id":"w6C94KBAOd1b9P8JhoVV","title":"Administration and troubleshooting","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about the administration and troubleshooting of the different data collector integrations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"}]},{"id":"6IKuJehrUIOHq5irOFIw","title":"Manage instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage data source and connector instances in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"LxGCnKscAtcLqaFO8yxp","title":"Add a new data source or instance","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances/add-a-new-data-source-or-instance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add a data source or connector instance in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"HDr1P9xEVssCvMwQfrvN","title":"How to configure the scanning settings for supported services","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances/how-to-configure-the-scanning-settings-for-supported-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure scanning settings for supported services in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"1G78GhJHjJHF7SbDxbjw","title":"Manage cloud instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances/manage-cloud-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage cloud instances connected to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"Afd2G0DZPnVK5ovblUtt","title":"Update cloud permissions after Cortex release updates","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Update cloud permissions after Cortex XSIAM releases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"VNZPjWNbylJlrc9t3N9O","title":"Pending cloud instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances/pending-cloud-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review pending cloud instances in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"InSCrVcXDMKSCpIPYQAV","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot errors on cloud instances in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"UbYmQN8dLazd5Df0VuYX","title":"Manage Kubernetes Connector instances","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/manage-instances/manage-kubernetes-connector-instances","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Kubernetes Connector instances in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"Tk0WWIXR82NEXzphaScb","title":"Integrations","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage and configure integrations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"HHgAzrwNCFJg7cDTtAoK","title":"Integration use cases","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/integration-use-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore common integration use cases in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"BnPFCXSQ8GPOm5jMDfIk","title":"Add an integration instance","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/add-an-integration-instance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add and configure an integration instance in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"7Zi7bMjTtVPtjkZ85GJ0","title":"Configure integration permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/configure-integration-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure permissions for integrations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"sZi2LeIVOidNs1Co8Xh3","title":"Fetch issues from an integration instance","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/fetch-issues-from-an-integration-instance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Fetch issues from an integration instance in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"DDk9HGdrOkXstwMzl5Mb","title":"Map fields to issue types","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/fetch-issues-from-an-integration-instance/map-fields-to-issue-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map integration fields to issue types in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"},{"label":"Fetch issues from an integration instance"}]},{"id":"yafQXsKDgbSnPsCXrqRh","title":"Classify events using a classifier for issue types","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/fetch-issues-from-an-integration-instance/classify-events-using-a-classifier-for-issue-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Classify integration events for issue types in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"},{"label":"Fetch issues from an integration instance"}]},{"id":"TMdwExVXQG0q8fSULBee","title":"Manage credentials","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/manage-credentials","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage integration credentials securely in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"R5tSWtunUMnH7b4zGzAj","title":"Troubleshoot Integrations","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/troubleshoot-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot integration issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"ztzkPosXMecZA2UPaciy","title":"Forward Requests to Long-Running Integrations","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Forward requests to long-running integrations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"rIa3CZlQK0yDD5ePt7VT","title":"Verify collector connectivity","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/verify-collector-connectivity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Check collector connection status, investigate errors, and track connectivity changes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"PSslnZ5WBjBb2Sz27RdA","title":"Overview of data ingestion metrics","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/overview-of-data-ingestion-metrics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM calculates and uses metrics to monitor data ingestion health.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"dDSfEeOIETIVQMm4MEkr","title":"Creating correlation rules to monitor data ingestion health","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/overview-of-data-ingestion-metrics/creating-correlation-rules-to-monitor-data-ingestion-health","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create correlation rules in Cortex XSIAM that detect data ingestion disruptions and trigger health issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Overview of data ingestion metrics"}]},{"id":"q5L1wMgOB301bGzEunU2","title":"Measuring data freshness","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/overview-of-data-ingestion-metrics/measuring-data-freshness","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand how Cortex XSIAM measures and reports delays between log creation and ingestion.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Overview of data ingestion metrics"}]},{"id":"AdfwdpyhKI3Q0pZM4yOT","title":"Health issues in Cortex XSIAM","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/about-health-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM health issues, their types, and how to view and investigate them.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"CS8xU6I3DtFqIBbT2OXv","title":"Investigate and resolve health issues","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/about-health-issues/investigate-and-resolve-health-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate and resolve ingestion, collection, correlation, and automation health issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Health issues in Cortex XSIAM"}]},{"id":"ObBWc6JzSNwNtxAg4crO","title":"Monitor data ingestion health (BETA)","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/about-health-issues/monitor-data-ingestion-health","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor data ingestion health using metrics, custom rules, and built-in issue detection in Cortex XSIAM","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Health issues in Cortex XSIAM"}]},{"id":"TRLH6iFVz4r0dSzMSUEz","title":"Monitor Correlation rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/administration-and-troubleshooting/about-health-issues/monitor-correlation-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor correlation rule executions, audit status, errors, and related health issues in Cortex XSIAM","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex XSIAM Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Health issues in Cortex XSIAM"}]},{"id":"PS0PuF9DgWOMselvkksm","title":"Marketplace","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM Marketplace to discover, install, and manage content packs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"dAHRsgjzlj1BMJBRnqp3","title":"Cortex Marketplace","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace/cortex-marketplace","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Search Cortex XSIAM Marketplace content by use case, integration, and category.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Marketplace"}]},{"id":"ArXUHowKEWne8E8GnyA4","title":"Content packs","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace/content-packs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Discover Cortex XSIAM Marketplace content packs for your security workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Marketplace"}]},{"id":"eTMQb4Zl6dQn8B9hFwyN","title":"Content Pack Support Types","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace/content-pack-support-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM Marketplace content pack support types and ownership.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Marketplace"}]},{"id":"nESY2TeAmpSSurIvE9BQ","title":"Manage content packs","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace/manage-content-packs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install, update, revert, and delete Cortex XSIAM Marketplace content packs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Marketplace"}]},{"id":"7ONIR5fRK0JVLSO8cQLo","title":"Marketplace FAQs","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace/marketplace-faqs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Find answers to common Cortex XSIAM Marketplace questions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Marketplace"}]},{"id":"92JUQ2w8mg9iBT1yTuHa","title":"Content changes when upgrading Cortex XSIAM versions","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace/content-changes-when-upgrading-cortex-xsiam-versions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM Marketplace content changes during Cortex XSIAM upgrades.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Marketplace"}]},{"id":"UbFOObhvWX8Z3gLJ70bS","title":"Content pack contributions","pathname":"/cortex-xsiam/configure-cortex-xsiam/marketplace/content-pack-contributions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and submit content packs for Cortex XSIAM Marketplace.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Marketplace"}]},{"id":"Tb73Nh9wtxjkxcL6ckTL","title":"Configure the Cortex Agentic Assistant","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cortex XSIAM Agentic Assistant for AI-powered SOC investigations, response, agents, actions, knowledge sources, and access.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"0GwpDRJyjLIcW1wHGt9E","title":"Agentic Assistant components and concepts","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agentic-assistant-components-and-concepts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM Agentic Assistant components, including agents, actions, and their relationships.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"TQYMwLDZti1lTq882k70","title":"Agentic Assistant Hub","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agents-hub","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage personal and system agents in the Cortex XSIAM Agentic Assistant Hub.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"nLrRqbyCsNx6NBsXMMFi","title":"Manage actions","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agents-hub/manage-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage actions that extend Cortex XSIAM Agentic Assistant capabilities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"YK5VMy1NrfdIsLZjuie9","title":"Register actions","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agents-hub/register-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Register actions for use with Cortex XSIAM Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"dsgT308GE9Ng2Z27sLzR","title":"Manage agents","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agents-hub/manage-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage personal and system agents in Cortex XSIAM Agentic Assistant.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"rGJhaghVXaOzCRf8vNFT","title":"Build agents","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agents-hub/build-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build agents that automate tasks in Cortex XSIAM Agentic Assistant.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"Lvr0rD0b4VwhIQy8qd7W","title":"Manage knowledge sources (preview)","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agents-hub/manage-knowledge-sources-preview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use knowledge sources to give Cortex XSIAM Agentic Assistant agents trusted business context.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"u25exbyBIrN2VBbGRdwv","title":"Expand agent capabilities with MCP integrations","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agents-hub/expand-agent-capabilities-with-mcp-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect MCP integrations to extend Cortex XSIAM Agentic Assistant agent capabilities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"2OtIgAqTyZdapM4BdFpC","title":"Agentic Assistant role-based access control","pathname":"/cortex-xsiam/configure-cortex-xsiam/configure-the-cortex-agentic-assistant-1/agentic-assistant-role-based-access-control","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM role-based access for Agentic Assistant features.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"DBtz1UNVuXnjkz9GmJ5L","title":"Cortex MCP server","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-mcp-server","siteSpaceId":"sitesp_xTOni","lang":"en","description":"The Cortex MCP server enables you to leverage Cortex XSIAM's powerful capabilities directly through natural language.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"jsQgwBMP4lScUXiEacsq","title":"Install the Cortex MCP server","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-mcp-server/install-the-cortex-mcp-server","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install and configure the Cortex MCP Server with Docker or Poetry to investigate and manage Cortex XSIAM cases from an MCP client.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"LavxGDzWpMOUmEw8eODV","title":"Configure the MCP client","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-mcp-server/configure-the-mcp-client","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure a local MCP client to connect to the Cortex XSIAM MCP Server using Docker or a Poetry virtual environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"z5oHtozC3CdwrUXCJKTP","title":"Use the Cortex MCP server","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-mcp-server/use-the-cortex-mcp-server","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM MCP Server tools to investigate assets, cases, issues, and endpoints, and create custom tools for security workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"KlqEQbUzJ29ipU8TiVAa","title":"Create custom Cortex MCP server tools","pathname":"/cortex-xsiam/configure-cortex-xsiam/cortex-mcp-server/create-custom-cortex-mcp-server-tools","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex MCP Server tools with OpenAPI or Python to extend Cortex XSIAM investigations, case management, and issue workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"46rSJqw1xLlMwd6f1qrY","title":"Automations","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Automate Cortex XSIAM investigation, response, and operational workflows with rules, playbooks, scripts, and jobs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"JJzpfkGfyNVb1cKvUIjn","title":"Automation in Cortex XSIAM","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/automation-in-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Automate Cortex XSIAM issue response with playbooks and Quick Actions, triggered by rules or manually.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"vihfScUKajOsFMuW1gf2","title":"Quick Actions","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/quick-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run Cortex XSIAM response actions quickly from issues, cases, and investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"nrxoXs9ky8R5EWCKdkuX","title":"Automation Exclusion Center","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/automation-exclusion-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Protect critical Cortex XSIAM assets from automated remediation using exclusion policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"paWuJefUfKs96TmEPiuk","title":"Manage automation exclusion policies","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/automation-exclusion-center/manage-automation-exclusion-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage Cortex XSIAM policies that exclude critical assets from automated remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Automation Exclusion Center"}]},{"id":"spwcEAofT04NnlOYbonC","title":"Playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build and manage Cortex XSIAM playbooks for automated investigation and response workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"GVhlXHsbLe4XptwZK3Oi","title":"Playbooks overview","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/playbooks-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM playbooks automate investigation, response, and operational workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"Op8evxkRWdM4gez1fktV","title":"Access to playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/access-to-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to Cortex XSIAM playbooks using roles and permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"pMYy141Dw7jTwV7NWgTo","title":"Playbook development checklist","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use this checklist to plan, build, test, and deploy Cortex XSIAM playbooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"O719rUzTkttYRX9oXjRL","title":"Plan your playbook","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/plan-your-playbook","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan Cortex XSIAM playbooks that automate your investigation and response workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"nnyBpKhNbJKhhA2cKHgi","title":"Manage playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/manage-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create, organize, enable, and maintain Cortex XSIAM playbooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"DPfihdv6IFlh8Rnd8FEi","title":"Build your playbook","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build Cortex XSIAM playbooks by configuring tasks, logic, and automation settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"OGJtRazGCYO4MQTMXpB8","title":"Choose from existing playbooks or create your own","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reuse existing Cortex XSIAM playbooks or create playbooks for new workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"jMIsz539t9tPnDuKht24","title":"Configure playbook settings","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/configure-playbook-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM playbook names, permissions, inputs, and output settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"HXvt6inBu3skjebDUvhs","title":"Add objects from the Task Library","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add tasks and automation objects from the playbook Task Library in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"bHe9S5A1a3Kzjt1pe4LQ","title":"Add commands and scripts","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-commands-and-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add commands and scripts as playbooks tasks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"rBm9ypNYtfxrbKmD0sGB","title":"Add sub-playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-sub-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add sub-playbooks to reuse workflow logic and tasks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"N6bwPb6LCxY3gM1UUt65","title":"Add AI Prompt tasks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-ai-prompt-tasks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add AI Prompt tasks to Cortex XSIAM playbooks for AI-assisted automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"pVMxTIkspafbszkM0N5o","title":"Add manual tasks and blank tasks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add manual and blank tasks to Cortex XSIAM playbooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"1UOMCQoeGYyh8RM1BhX4","title":"Create a standard task","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-standard-task","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create standard tasks in Cortex XSIAM playbooks to run automation steps.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"aUPdMuCrpWhzSwamjdCE","title":"Create a conditional task","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-conditional-task","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create conditional tasks in Cortex XSIAM playbooks to branch workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"C5Nxov8jIBYEhB9agzaV","title":"Create a communication task","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-communication-task","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create communication tasks in Cortex XSIAM playbooks for notifications and collaboration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"E39HSVprVdEaQUOO09m9","title":"Create a section header","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/create-a-section-header","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add section headers to organize tasks in Cortex XSIAM playbooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"J8UxYaAbsBBWLgKSyu1t","title":"Configure script error handling in a playbook","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure script error handling in Cortex XSIAM playbooks to manage task failures.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"fqQkJrzuep8mVvSbZUqh","title":"Customize your playbook","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Customize Cortex XSIAM playbooks with data handling, loops, filters, and transformers.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"xXwDh8B43jmqJsGrvtBt","title":"Configure a sub-playbook loop","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM sub-playbook loops to repeat workflow tasks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"2iQ94IXpB5EVPuz9BSQw","title":"Filter and transform Cortex XSIAM playbook data","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Filter and transform Cortex XSIAM playbook data, JSON context, and task mappings for downstream automation tasks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"ZSQviHGiFAghPoGkENiR","title":"Create custom filters and transformers","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/create-custom-filter-and-transformers","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM filters and transformers for playbook data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"hhNWnVZ2zA6cvRXqOYr1","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM playbook filter options, categories, and built-in filters.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"MFuaYU0WdmxVXZ4bzYAw","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM playbook transformer options, categories, and built-in transformers.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"NB013u9IMPWKTEeHQj4F","title":"Extend context in playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/extend-context","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Extend Cortex XSIAM playbook context with integration command responses, task data, and custom context keys.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"N0RpWaM1iXOuU2GpSSFi","title":"Extract indicators in playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Extract and enrich threat indicators from Cortex XSIAM issue fields and playbook task outputs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"eN1lAlsMfy61yfI0F40Y","title":"Update issue fields with playbook tasks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/customize-your-playbook/update-issue-fields-with-playbook-tasks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Update Cortex XSIAM issue fields with playbook task results.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"Rhkbh8lTiIvnQBXL0Spq","title":"Test your playbook","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/test-your-playbook","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Test Cortex XSIAM playbooks using breakpoints, skips, and input or output overrides.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"rAdM5xnudlpx9cVWhpsp","title":"Troubleshoot playbook performance","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/test-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot Cortex XSIAM playbook performance, identify slow workflow tasks, and analyze execution data with XQL.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Test your playbook"}]},{"id":"Y6fUxoGqb4ygkd7KHKmw","title":"Manage playbook content","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/build-your-playbook/manage-playbook-content","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM playbook content, including versions, tasks, and dependencies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"bBuaWxS5d5Qa5EEhKGyH","title":"Best practices for playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/playbooks/best-practices-for-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow Cortex XSIAM playbook best practices for reliable, maintainable automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"icS6UGSmOVCunMEm3Kjb","title":"Autonomous playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/autonomous-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM autonomous playbooks for managed security automation and response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"CeOQUg2XOnansUpXEVmE","title":"Enable autonomous playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/autonomous-playbooks/enable-autonomous-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable Cortex XSIAM autonomous playbooks to automate supported response workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Autonomous playbooks"}]},{"id":"UWf997gnTybXyDtbqHzV","title":"Manage autonomous playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/autonomous-playbooks/manage-autonomous-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM autonomous playbooks and their automation settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Autonomous playbooks"}]},{"id":"fSe41V4CG6I7mThYCovp","title":"Manage autonomous automation rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/autonomous-playbooks/manage-autonomous-automation-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM automation rules that trigger autonomous playbooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Autonomous playbooks"}]},{"id":"b75CIbxDKxDwrNuplTAM","title":"Work Plan for autonomous playbooks","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/autonomous-playbooks/work-plan-for-autonomous-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM Work Plans for autonomous playbook execution and progress.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Autonomous playbooks"}]},{"id":"s0yiqSzR97EwpZuclNwL","title":"AI Prompts","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/ai-prompts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage Cortex XSIAM AI prompts for agents and playbook tasks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"Qb54kY8oOnNZlyY8jd40","title":"AI prompts role-based access control","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/ai-prompts/ai-prompts-role-based-access-control","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM AI prompt permissions using role-based access control.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"QJCUHoGYEYjIEczEd4if","title":"Use existing prompts","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/ai-prompts/use-existing-prompts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Find, duplicate, and edit existing Cortex XSIAM AI prompts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"EPJkDXvw3jq7ylfWW2fp","title":"Create a prompt","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/ai-prompts/create-a-prompt","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create AI prompts for agents, playbooks, and automation workflows in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"a3VdhlRUO9i9f6mvrmk7","title":"Write effective prompts","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/ai-prompts/write-effective-prompts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to write effective AI prompts for reliable Cortex XSIAM playbook automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"ObuEXOUNpM20dpCRpOyD","title":"Agentic Response (Preview)","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/agentic-response-preview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Agentic Response in Cortex XSIAM to trigger AI agents from automation rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"rsvaAdmRSWIYD3oY3cKh","title":"Create an automation rule","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/create-an-automation-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create automation rules in Cortex XSIAM that trigger actions when issue conditions are met.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"JWPQ6JsxkibnMmmyd5Bl","title":"Scripts","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage Cortex XSIAM scripts for automation and response workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"Z0x3Ie2gn5LYz3MOujao","title":"Access to scripts","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/scripts/access-to-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to Cortex XSIAM scripts using roles and permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"DHQSicKqVacC6s9r0zS3","title":"Use existing scripts","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/scripts/use-existing-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Find, review, and reuse existing Cortex XSIAM automation scripts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"QtwVxaZZ4w8MH1Y3lyaG","title":"Create a script","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/scripts/create-a-script","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM scripts for custom automation and response tasks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"pXP1KxIFbQYt5VmqZxSy","title":"Accelerate script development using the Automation Engineer agent","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/scripts/accelerate-script-development-using-the-automation-engineer-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Automation Engineer agent to accelerate script development.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"fdIqzAYZSNZwU2sUjYIS","title":"Change the Docker image in an integration or script","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/scripts/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Change Docker images used by Cortex XSIAM integrations and scripts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"YDIOyztW2yOuUDDEVpbO","title":"Context data","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM context data to support investigation and remediation workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"Babvw5tkpouI6A4FtQMF","title":"Issue context data","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data/issue-context-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and use Cortex XSIAM context data stored for an issue.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"kUfBr116bYid9MfWuWXU","title":"Case context data","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data/case-context-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and use Cortex XSIAM context data stored for a case.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"eE7fkxZl8gLNqDsbcCrY","title":"Search context data","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data/search-context-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Search Cortex XSIAM context data and expand stored values.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"UR79hLgAmQk7slGVefQ4","title":"Add context data to an issue","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data/add-context-data-to-an-issue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add keys and values to Cortex XSIAM issue context data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"vLwrbpHAHlsgtMScsSnS","title":"Add context data to a case","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data/add-context-data-to-a-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add keys and values to Cortex XSIAM case context data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"SxuEuf2JnWCpjXDQqD2S","title":"Delete context data from a case","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data/delete-context-data-from-a-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Delete all or selected Cortex XSIAM context data from a case.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"eTRCWzwmVDzHkhf0Fsmb","title":"Use context data in a playbook","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/context-data/use-context-data-in-a-playbook","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM context data in playbooks for dynamic workflow execution.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"FdeU5p6QlRiPz3WcV4tG","title":"Lists","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM lists to store data for playbooks and scripts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"Teej0j57XwZNr4BXcCUh","title":"Create a list","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists/create-a-list","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM lists to store reusable automation data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"jWx0f9SD84dEmXE9aAN5","title":"List commands","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists/list-commands","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM list commands in playbooks and scripts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"YSSJ3pYZTmsAeIOVpuV9","title":"Use cases: JSON lists","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists/use-cases-json-lists","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM JSON lists to extract, filter, and transform data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"iuQ9JJXvFqC4kVjewYJ4","title":"Extract data from a JSON object","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists/use-cases-json-lists/extract-data-from-a-json-object","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Extract data from a JSON object stored in a Cortex XSIAM list.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Lists"},{"label":"Use cases: JSON lists"}]},{"id":"y5eW2VlCePnd45QJyH5A","title":"Extract a subset of the data","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists/use-cases-json-lists/extract-a-subset-of-the-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Extract a subset of data from a Cortex XSIAM JSON list.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Lists"},{"label":"Use cases: JSON lists"}]},{"id":"fgZaR4Y7XD4jDXaOHtJW","title":"Filter extracted data","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists/use-cases-json-lists/filter-extracted-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Filter data extracted from a Cortex XSIAM JSON list.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Lists"},{"label":"Use cases: JSON lists"}]},{"id":"S3ATITwj8Y7IHWPVEIV5","title":"Transform a list into an array","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/lists/transform-a-list-into-an-array-1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Transform a Cortex XSIAM list into an array for automation workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"S4QI1mdV6dGJ3y4oH241","title":"Jobs","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/jobs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM jobs to run playbooks on schedules or events.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"}]},{"id":"zMdLOG7cfN1gewYS464a","title":"Access to Jobs","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/jobs/access-to-jobs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to Cortex XSIAM jobs using roles and permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"iMIQyHE8GKUV3MJ8SRvc","title":"Manage jobs","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/jobs/manage-jobs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create, manage, and schedule Cortex XSIAM playbook jobs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"yPdLkbDqVkQdU4SIWpDv","title":"Create a time-triggered job","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Schedule a Cortex XSIAM playbook job to run at a specific time.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"pInWSePloDzQybyDjEEA","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-xsiam/configure-cortex-xsiam/automations/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Trigger a playbook job when a feed changes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"wDuZkQVZvS1wd8oWFdvw","title":"Engines","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install, configure, manage, and troubleshoot Cortex XSIAM engines for secure integration and automation workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"YWltxM7fIDpUgenDUZ97","title":"What is an engine?","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/what-is-an-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn what a Cortex XSIAM engine is and how it securely runs integrations and automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"o9G2oAm7r7SJ6vqXZ43A","title":"Engine requirements","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/engine-requirements","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM engine hardware, operating system, network, and required URLs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"qtiyoEViaJjIbVdxKySe","title":"Install an engine","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install and configure a Cortex XSIAM engine for integration and automation workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"cVqH880VGd3Au55OC7FR","title":"Docker","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install, configure, secure, and troubleshoot Docker for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"5EpbvFEK5N5hXIbmd45v","title":"Install Docker","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install Docker and verify required user permissions for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"9zqy3x7IqZ0vCOzwWQhm","title":"Install Docker distribution for Red Hat","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/install-docker-distribution-for-red-hat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install Docker and configure SELinux on Red Hat servers for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"34JcsqSk4q4051vX3IxS","title":"Docker image security","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Secure and harden Docker images and containers used by Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"j2pLuMIMMgremLmynXfa","title":"Docker FAQs","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Find answers to common Docker installation, configuration, and operation questions for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"85nPS4l6yQYYl2zxecCz","title":"Troubleshoot Docker Issues","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot Docker installation, container, and runtime issues on Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"vHLwTompPt04KexaOIui","title":"Configure Docker pull rate limit","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Docker image pull rate limits for reliable Cortex XSIAM engine deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"ohAJF96DPaHOxpeczOBo","title":"Change the Docker Installation folder","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Change the Docker installation folder on hosts running Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"BEgzRtriPepA7KcyuPiS","title":"Docker hardening guide","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Harden Docker hosts and containers to secure Cortex XSIAM engine deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"LNy40Af3t8WLzDXEVCVZ","title":"Docker network hardening","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Docker network hardening for secure Cortex XSIAM engine communication.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"qqnWz0jdOG8kBLHQJ5fD","title":"Configure Docker images","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-docker-images","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Docker images securely for Cortex XSIAM engine deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"fZ1gog2TO1EtEuVwx63s","title":"Run Docker with non-root internal users","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run Docker with non-root internal users to strengthen Cortex XSIAM engine security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"Q0EoJKcRvXab4KVYsFcU","title":"Configure the memory limit support without swap capabilities","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limit-support-without-swap-capabilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Docker memory limits without swap support for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"O0Zd6Zl8hFEAsBAllNs6","title":"Configure the memory limitation","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Docker memory limits to manage resources for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"P6XGLmhdkXmL1VqhbmK9","title":"Configure the CPU, PIDs, and open the file descriptors limit","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-the-cpu-pids-and-open-the-file-descriptors-limit","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Docker CPU, PID, and file descriptor limits for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"L2pWibtqnXGT7hn2zILn","title":"Check Docker hardening configurations","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/check-docker-hardening-configurations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Verify Docker hardening settings for secure Cortex XSIAM engine deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"QpEuc4WQGjmiSFSv048v","title":"Podman","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/podman","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install, configure, and troubleshoot Podman for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"5goOQTYZMaCrzuNaHBzk","title":"Change the Container storage","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/podman/change-the-container-storage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Podman container storage for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"AO4ZfktYb1FiCs1IoGyR","title":"Install Podman","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install and configure Podman for Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"gRWa4FLFmPMKFRO3aPJv","title":"Migrate from Docker to Podman","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Migrate a Cortex XSIAM engine from Docker to Podman.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"1l5X8ULwFAed72m9HUjn","title":"Troubleshoot Podman","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot common Podman installation and runtime issues on Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"WN4Ysj5knhByPyM3pARE","title":"Manage engines","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/manage-engines","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM engines and load-balancing groups for integrations and automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"JMdvH3TKxnuZ8R6WZCzT","title":"Upgrade an engine","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/upgrade-an-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Upgrade a Cortex XSIAM engine from the console or its remote host.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"5ZzRIfDq0W8PBeqbCl4G","title":"Remove an engine","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/remove-an-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Remove a Cortex XSIAM engine safely from its host and tenant configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"i3pFIAvQh04I73uKZXPp","title":"Configure engines","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/configure-engines","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM engines using the UI or the d1.conf configuration file.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"2p2flH04keeEhdBbbNcY","title":"Configure the engine to use a web proxy","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure a Cortex XSIAM engine to connect through a web proxy.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"hTbSNuRss5YAVs7KT5Pz","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure a Cortex XSIAM engine to connect directly without a proxy.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"OAiuaplrjapkbd6P9Fmr","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/configure-engines/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use NGINX as a reverse proxy for secure Cortex XSIAM engine communication.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"xHxc3OClW6vqIM6NWDXb","title":"Configure an engine to use custom certificates","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure custom certificates for secure Cortex XSIAM engine communication.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"Whp2tEUt4RdcklwD7AQ8","title":"Use an engine in an integration","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM engines and load-balancing groups to run integration commands and fetch issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"Xm9mh3q74f0vXYy6ajkG","title":"Run a script using an engine","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run Cortex XSIAM automation scripts on an engine or load-balancing group.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"DsQjaodRCfAvyHTWl4At","title":"Troubleshoot engines","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/troubleshoot-engines","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot Cortex XSIAM engine issues by reviewing logs, errors, and connectivity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"D9XcdJNauPeueaiPVdX9","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xsiam/configure-cortex-xsiam/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot integrations that run on Cortex XSIAM engines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Engines"}]},{"id":"oy8yyKKzrGyWD41zNnIX","title":"Remote repository management","pathname":"/cortex-xsiam/configure-cortex-xsiam/remote-repository-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"In Cortex XSIAM, develop and test content in a remote repository before publishing it to production.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"p5vUngGcczDwRjzFQ9nS","title":"Cortex XSIAM development tenant","pathname":"/cortex-xsiam/configure-cortex-xsiam/remote-repository-management/cortex-xsiam-development-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to use a Cortex XSIAM development tenant and remote repository to test, manage, and deploy content across environments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"jqlaZiw4i6G0DV88jowl","title":"Set up a remote repository","pathname":"/cortex-xsiam/configure-cortex-xsiam/remote-repository-management/set-up-a-remote-repository","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up a Cortex XSIAM remote repository for Git-based content management, version control, and synchronization across development and production tenants.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"cfdYgedu5hWK7PGz0xir","title":"Set up a built-in remote repository","pathname":"/cortex-xsiam/configure-cortex-xsiam/remote-repository-management/set-up-a-remote-repository/set-up-a-built-in-remote-repository","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up the Cortex XSIAM built-in remote repository to synchronize content between production and development tenants.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Remote repository management"},{"label":"Set up a remote repository"}]},{"id":"9yQNyv1RlxWsHfBgZ043","title":"Set up a Private Remote Repository","pathname":"/cortex-xsiam/configure-cortex-xsiam/remote-repository-management/set-up-a-remote-repository/set-up-a-private-remote-repository","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up a private Git remote repository in Cortex XSIAM to synchronize content between development and production tenants.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Remote repository management"},{"label":"Set up a remote repository"}]},{"id":"4Tsw0kjhnVrEadqkWNPF","title":"Push and pull content","pathname":"/cortex-xsiam/configure-cortex-xsiam/remote-repository-management/push-and-pull-content","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Push and pull Cortex XSIAM content through a remote repository to synchronize playbooks, scripts, and integrations between development and production tenants.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"GRFCQnfm8qDpfYegBgEy","title":"Remote repository troubleshooting","pathname":"/cortex-xsiam/configure-cortex-xsiam/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot Cortex XSIAM remote repository issues, including non-empty branches and switching between built-in and private repositories.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"COoDq1FrqLOlABz0Vjvv","title":"Customize cases and issues","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Customize Cortex XSIAM cases and issues with configuration options for scoring, integrations, layouts, and investigation workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"tR3iHt0L5XEOEPjnRGcY","title":"External integrations","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/external-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Integrate external threat intelligence and case management services with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"bshv1YEY2KRc2xKIUBwx","title":"Set up case scoring","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/set-up-case-scoring","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM case scoring with SmartScore and user-defined scoring rules for cases and issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"Ical5Nzxka6rYIODreyJ","title":"Create a starring configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-a-starring-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM starring rules to automatically prioritize matching issues and their linked cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"k7nduBGAnz8Do0QA6g8Q","title":"Create custom case statuses and resolution reasons","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-custom-case-statuses-and-resolution-reasons","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to create custom case and issue statuses and resolution reasons in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"Z9WMR7lLNnptwOgCJSd1","title":"Create a sync profile","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-a-sync-profile","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM sync profiles to map issue fields and synchronize data with Jira, ServiceNow, and other external applications.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"NpWDcPYVJo6dMDhmfpXz","title":"Create a case domain","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-a-case-domain","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM case domains to organize case workflows, statuses, resolution reasons, and access control.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"SbFSg3XdBKqtjdNVWtxH","title":"Customize case fields and layouts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM case fields and layouts, then use layout rules to apply them to cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"iqI06eYZ62dMoQ32coN8","title":"Case fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage system, content pack, and custom case fields in Cortex XSIAM. View, import, export, and maintain case field configurations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"}]},{"id":"nBrFhguz9iiqGktdYpKH","title":"Case field types","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-fields/case-field-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM case field types and select the right format for case data, investigation workflows, and reporting.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"},{"label":"Case fields"}]},{"id":"1AMqL14FpYjjFzE1sbJM","title":"Create custom case fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-fields/create-custom-case-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom case fields in Cortex XSIAM to capture investigation details, standardize case data, and support SOC workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"},{"label":"Case fields"}]},{"id":"3bhUHXUOtCNll7tjeHkd","title":"Create a grid field for a case","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-fields/create-a-grid-field-for-a-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create a grid case field in Cortex XSIAM to capture and organize structured, tabular investigation data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"},{"label":"Case fields"}]},{"id":"jnU3R3R5PkO4Df2lxHmU","title":"Update case fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-fields/update-case-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Update Cortex XSIAM case fields with CLI commands, scripts, and playbooks to automate case data and investigation workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"},{"label":"Case fields"}]},{"id":"1RLjeeY8yWjw0l9RneMk","title":"Case layouts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM default and custom case layouts control tabs and case information display.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"}]},{"id":"Dfhs0nyl2E4u6VZemLJo","title":"Create custom layouts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-layouts/create-custom-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM case layouts with case fields, tabs, sections, and action buttons for different case types.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"},{"label":"Case layouts"}]},{"id":"jTFPa8fZtzY1x3tSUkQW","title":"Create rules for case layouts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-case-fields-and-layouts/case-layouts/create-rules-for-case-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM case layout rules to apply custom layouts based on case severity, source, and other criteria.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize case fields and layouts"},{"label":"Case layouts"}]},{"id":"gtXwh9B3vNjt9nIdRoZL","title":"Customize issue fields and layouts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM issue fields and layouts, then use layout rules to display them for matching issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"c5z9JNVwXfItfPue6plY","title":"Manage Cortex XSIAM issue fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM system and custom issue fields for mapping, correlation rules, issue layouts, and investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"}]},{"id":"Ddg7YEYoAhqUdhSqfdNr","title":"Issue field types","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/issue-field-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM custom issue field types, including text, selection, date, grid, HTML, Markdown, timer, and URL fields.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"B0p1f8DIw500LRzsh6Hm","title":"Create custom issue fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage custom Cortex XSIAM issue fields for JSON mapping, XQL correlation rules, issue layouts, and automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"Ejf49pFLPE4Kxv3vZRml","title":"Create a grid field for an issue","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/create-a-grid-field-for-an-issue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create interactive Cortex XSIAM grid fields for custom issue layouts with configurable tables, columns, and editable rows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"uEiaSKyUoqEBOk0hpYqu","title":"Configure issue timer fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/issue-timer-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM issue timer fields to track response times, SLAs, risk thresholds, and timeout automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"AWBHGz7VL9kozunam10P","title":"Issue field-triggered scripts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/issue-field-triggered-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM field-change-triggered scripts to automate issue updates, validations, notifications, and workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"vpZfI1UBOi79LcCRWdpN","title":"Configure issue timer fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/configure-issue-timer-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM issue timer fields to track targets, risk thresholds, and timeout actions with scripts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"rcSkLSZUq5Ul9ogjnctk","title":"Configure a playbook to run timers","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/configure-a-playbook-to-run-timers","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM playbooks to start, pause, and stop issue timers for response-time tracking and automated workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"IDEPgWZW2aUpGtS9xRaX","title":"Automate changes to issue fields using timer scripts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/automate-changes-to-issue-fields-using-timer-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM timer scripts with SLA tags to automate issue field updates, notifications, and actions after timer timeouts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"T86NevWbLWaeHDJbXy1M","title":"Use issue timer field commands in the CLI","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-fields/user-issue-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM CLI commands to set, start, pause, stop, and reset issue timer fields and SLA targets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Manage Cortex XSIAM issue fields"}]},{"id":"61PzOJCTPcLPbsVJaIDF","title":"Issue layouts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM system and custom issue layouts to control Investigate panel fields and issue information display.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"}]},{"id":"svnAvv3Tcza0DoIO7LIw","title":"Create custom issue layouts","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-layouts/create-custom-issue-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM issue layouts with fields, tabs, sections, and action buttons to support analyst investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Issue layouts"}]},{"id":"aCATCBmlAuO5QQ34dQvw","title":"Add a custom widget to an issue layout","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-layouts/add-a-custom-widget-to-an-issue-layout","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add custom or system widgets to Cortex XSIAM issue layouts with dynamic-section scripts and layout rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Issue layouts"}]},{"id":"epYcizrs8cDy5ChMZ4qI","title":"Create issue layout rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/customize-issue-fields-and-layouts/issue-layouts/create-rules-for-issue-layouts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM issue layout rules to apply custom layouts based on issue source, correlation rules, and other criteria.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Customize issue fields and layouts"},{"label":"Issue layouts"}]},{"id":"LgPc7jBdTS4KOSso4MbY","title":"Create SLAs for case and issue resolution","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-slas-for-issue-resolution","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM resolution SLA rules to set, track, and report case and issue resolution time goals and timers.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"BfoSN4lVh4tsjXJ8pIby","title":"Create additional case timers and SLAs","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM case timers and custom SLAs to track KPIs, response-time goals, case milestones, and SLA compliance.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"}]},{"id":"0pDJQrJ5KThstCLHmV2D","title":"Update case timer and SLA fields","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas/update-case-timer-and-sla-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Refresh Cortex XSIAM case timer and SLA fields with a War Room CLI command.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"},{"label":"Create additional case timers and SLAs"}]},{"id":"3ba7WhSvJOEzWySOiFyM","title":"Create issue exceptions","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-issue-exceptions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM issue exception rules to defer remediation, pause SLA timers, and manage risk acceptance approvals.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"uMVgtoRaVblGVAMxDSVz","title":"Configure the issue exception approval workflow","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-issue-exceptions/configure-the-issue-exception-approval-workflow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM issue exception approvals by managing approvers and enabling or disabling approval requirements.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"O6QzjlHKvgFuzkCG7Xim","title":"Create issue exception rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-issue-exceptions/create-issue-exception-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM issue exception rules with approvers, expiration dates, SLA timer pauses, and issue filter criteria.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"etKzIoEVQ99VvnZZTRlh","title":"Create an exception rule from an issue","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-issue-exceptions/create-an-exception-rule-from-an-issue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create a Cortex XSIAM issue exception rule from a specific issue to pause its SLA timer and request approver review.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"84aoNOTODqvae2ydgv8P","title":"View issue exception rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-issue-exceptions/view-issue-exception-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View Cortex XSIAM issue exception rules, approval status, affected issues, expiration dates, and workflow details.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"m140wclb5snXyEneDCDy","title":"Disable issue exception rules","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-issue-exceptions/disable-issue-exception-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Disable Cortex XSIAM issue exception rules to stop creating exceptions for matching issues. Disabled rules cannot be re-enabled.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"RKexqpL0YCZmlTEZiXCX","title":"View excepted issues","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/create-issue-exceptions/view-excepted-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View Cortex XSIAM excepted issues by filtering the Issues page and tracking each exception's remaining period.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"f9Oqpusflk1TsOOe0BUx","title":"Optimize case grouping in correlations","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/optimize-case-grouping-in-correlations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map correlation rule fields in Cortex XSIAM to improve case grouping, reduce issue fragmentation, and support investigation prioritization.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"7UG0odRjFYnZNMY5S7Aq","title":"Run indicator extraction in the CLI","pathname":"/cortex-xsiam/configure-cortex-xsiam/customize-cases-and-issues/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM War Room CLI commands to extract, enrich, and run reputation checks on indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"GDPhvBl7CwsW3JmL2632","title":"XQL query management","pathname":"/cortex-xsiam/configure-cortex-xsiam/xql-query-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM XQL query limits, timeouts, and visibility controls to protect tenant performance and query privacy.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"5J5DsTI4Ma9wsBlqrrTo","title":"Multi-Tenant","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM multi-tenant deployments, including child tenants, licensing, data isolation, and centralized security operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"oYhdRfNodGLPjPk8TQ79","title":"What is Cortex XSIAM multi-tenant?","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/what-is-cortex-xsiam-multi-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM multi-tenant deployments isolate child tenant data while centralizing licensing, administration, and alert visibility.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"}]},{"id":"cuStmfXZyZ2o55hlmpvz","title":"MSSP multi-tenant","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/what-is-cortex-xsiam-multi-tenant/mssp-multi-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM MSSP multi-tenant environments with centralized or customer-owned licensing for client security operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"What is Cortex XSIAM multi-tenant?"}]},{"id":"V4pJquTL0Fd0bd2JT38g","title":"Enterprise multi-tenant","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/what-is-cortex-xsiam-multi-tenant/enterprise-multi-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM enterprise multi-tenancy to isolate subdivision data while centralizing threat visibility, licensing, and resource allocation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"What is Cortex XSIAM multi-tenant?"}]},{"id":"36108dbd30bb323dcb7635ae4353fb7296d8a001","title":"Multi-tenant central licensing management","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/multi-tenant-central-licensing-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"}]},{"id":"Cf1wXi43cgaXaDeA2nzS","title":"Onboard Cortex multi-tenant","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Onboard Cortex XSIAM multi-tenant deployments by activating parent and child tenants and managing child tenant access.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"}]},{"id":"z1EBlhNKMIqBYzc95t5m","title":"Onboarding checklist for multi-tenant central licensing deployments","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow this checklist to activate parent tenants, create child tenants, and configure user access for centrally licensed Cortex XSIAM deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex multi-tenant"}]},{"id":"n2aEqBLvU3K00JK9GnVX","title":"Step 1. Activate Cortex XSIAM (main account)","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-1.-activate-cortex-xsiam-main-account","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Activate the Cortex XSIAM main account in Cortex Gateway and configure its tenant name, region, subdomain, and encryption method.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant central licensing deployments"}]},{"id":"j5JLHZxC5IfHFqBg6yG6","title":"Create a child tenant","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-2.-create-a-child-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM child tenants in Cortex Gateway and allocate licensed employee, storage, and add-on resources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant central licensing deployments"}]},{"id":"HuCZtpQCi8pHbc6fv3VU","title":"Onboarding checklist for multi-tenant customer-owned license deployments","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow this checklist to activate, configure access for, and pair Cortex XSIAM tenants using customer-owned licenses.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex multi-tenant"}]},{"id":"CffdDlzUzQxV5KxTaup6","title":"Step 1. Active Cortex XSIAM (parent and child tenants)","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments/step-1.-active-cortex-xsiam-parent-and-child-tenants","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Activate Cortex XSIAM parent and child tenants in Cortex Gateway for multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant customer-owned license deployments"}]},{"id":"vQigX5OQNLCALiVXxSYF","title":"Step 2. Define access configuations and role permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments/step-2.-define-access-configuations-and-role-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Customer Support Portal access and Cortex Gateway roles for manual parent-child tenant pairing in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant customer-owned license deployments"}]},{"id":"u3jd5W3MhqmdgukqKy9s","title":"Step 3. Pair a parent tenant with a child tenant","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments/step-3.-pair-a-parent-tenant-with-a-child-tenant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Pair Cortex XSIAM parent and child tenants in Tenant Management to centrally manage child tenant security configurations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant customer-owned license deployments"}]},{"id":"h6QC0DJYIjfXJAFSg5dt","title":"Dynamic license allocation","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/dynamic-license-allocation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Dynamically allocate Cortex XSIAM licenses, endpoints, employees, and daily data ingestion (GB/day) across child tenants in centrally managed multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"}]},{"id":"4Bt2LVQomx6UM3mxb53R","title":"Child tenant management","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM child tenants from a parent tenant by investigating their data and applying centralized security configurations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"}]},{"id":"GMbyaDQqv5qW6eUDinsi","title":"Track your tenant management","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/child-tenant-management/track-your-tenant-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Track Cortex XSIAM child tenant connection status, pairing, synchronization, and centrally managed security configurations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"S4WnBDLa7AGKRKqWwfoS","title":"Investigate child tenant data","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/child-tenant-management/investigate-child-tenant-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate Cortex XSIAM child tenant data, including cases and issues, from a multi-tenant parent environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"FhC7yL1KJW7EbT8klzMF","title":"Create and allocate configurations","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/child-tenant-management/create-and-allocate-configurations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and assign Cortex XSIAM security action configurations to centrally manage issues, profiles, and allowlists for child tenants.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"jG2XGYDsxafvCzMH16IX","title":"Create a security managed action","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/child-tenant-management/create-a-security-managed-action","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM managed security actions for child tenants, including issues exclusions, starred isses, and endpoint profiles.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"2dYjgUMtVkdqfeLoFObf","title":"About managed threat hunting","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/about-managed-threat-hunting","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about Cortex XSIAM Managed Threat Hunting, a 24/7 security service from Palo Alto Networks threat researchers and Unit 42 experts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"}]},{"id":"DhGTEnlBW5geRiCAFvlz","title":"Set up Managed Threat Hunting","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/about-managed-threat-hunting/set-up-managed-threat-hunting","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up Cortex XSIAM Managed Threat Hunting by approving tenant pairing and configuring notification emails for threat reports and inquiries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"About managed threat hunting"}]},{"id":"RQDvV2bAs61UrFwjMhsT","title":"Investigate Managed Threat Hunting reports","pathname":"/cortex-xsiam/configure-cortex-xsiam/multi-tenant/about-managed-threat-hunting/investigate-managed-threat-hunting-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate Cortex XSIAM Managed Threat Hunting threat and impact reports, then collaborate directly with the hunting team.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Multi-Tenant"},{"label":"About managed threat hunting"}]},{"id":"VhczeZzjRABhXbN9NHr2","title":"Managed Services configuration in Cortex","pathname":"/cortex-xsiam/configure-cortex-xsiam/managed-services-configuration-in-cortex","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM Managed Services settings for Unit 42 threat response, report delivery, action permissions, and escalation contacts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"}]},{"id":"tEExLfr6VMfvnFvjo1xj","title":"Managed Services configuration","pathname":"/cortex-xsiam/configure-cortex-xsiam/managed-services-configuration-in-cortex/managed-services-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure how Unit 42 Managed Services hunts, investigates, and responds to threats in your Cortex XSIAM environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Managed Services configuration in Cortex"}]},{"id":"pYiZyN6Z5N7ld75f1Fhl","title":"Configure report forwarding","pathname":"/cortex-xsiam/configure-cortex-xsiam/managed-services-configuration-in-cortex/configure-report-forwarding","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure an email address or distribution list to receive Cortex XSIAM reports from Unit 42 Managed Services.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Managed Services configuration in Cortex"}]},{"id":"2c25zcFcoJbV1Ko5DXfT","title":"Configure actions permissions","pathname":"/cortex-xsiam/configure-cortex-xsiam/managed-services-configuration-in-cortex/configure-actions-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Unit 42 Managed Services response permissions in Cortex XSIAM for server and workstation endpoint actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Managed Services configuration in Cortex"}]},{"id":"Q2z5TARImLYQ5EeXMkoC","title":"Manage escalation contacts","pathname":"/cortex-xsiam/configure-cortex-xsiam/managed-services-configuration-in-cortex/manage-escalation-contacts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Unit 42 Managed Services escalation contacts for Cortex XSIAM cases and response actions requiring approval.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Configure Cortex XSIAM","icon":"sliders"},{"label":"Managed Services configuration in Cortex"}]},{"id":"znCbuVUjgvwwOcRcMcw3","title":"Endpoint security","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM and the Cortex XDR agent protect your endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"}]},{"id":"mqQv76fUT7sGgZ9T70ms","title":"Endpoint protection","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM endpoint protection uses the Cortex XDR agent to prevent malware, exploits, and zero-day threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"}]},{"id":"PO5kIqzcAw91zNiBNNlg","title":"Malware protection","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/malware-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM prevents known and unknown malware across supported endpoint platforms.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"eYkd0cKAr0MVfLp3zr2x","title":"Exploit protection","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/exploit-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM prevents software exploits across the endpoint attack chain.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"UDZ3upSnpbNtKbMQuUcz","title":"File analysis and protection flow","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/file-analysis-and-protection-flow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM file analysis and the Cortex XDR agent exploit and malware protection flow.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"98d3ODw82e6v0WeV5NSs","title":"Endpoint protection capabilities","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/endpoint-protection-capabilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM endpoint protection capabilities and their supported platforms.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"djqu6ouxuED4Xt0bxZxl","title":"Processes protected by exploit security policy","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/processes-protected-by-exploit-security-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review processes protected by Cortex XSIAM exploit security policies on each operating system.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"q3Tb7FmwTpgCpyXGFC9z","title":"WildFire analysis concepts","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/wildfire-analysis-concepts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM and WildFire analyze unknown files, assign malware verdicts, and protect endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"IVUwDTmymNETuEYW3Dq7","title":"File Integrity Monitoring (FIM)","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/file-integrity-monitoring-fim","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM File Integrity Monitoring to detect changes to endpoint files and folders.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"2oqaJdWDYVzP60Y0Ig3L","title":"CaaS Workloads","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/caas-workloads","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy the Cortex XSIAM container-embedded agent to protect CaaS workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"6y9N70stcataY1BB7EoW","title":"About content updates","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/about-content-updates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how content updates deliver current endpoint protections and detection logic in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"7XYJvU9Tf99vxQN1pmWf","title":"Guidelines for keeping Cortex XDR agents and content updated","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/guidelines-for-keeping-cortex-xdr-agents-and-content-updated","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan phased Cortex XDR agent and content updates to maintain endpoint protection in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"Tjb6hzdZ4i4QsaGTBoDF","title":"Endpoint data collection","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/endpoint-data-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand endpoint data that Cortex XSIAM collects through the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"zhOazLxuYfZPMIqgaCNF","title":"Install and manage endpoints","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM installs, configures, hardens, and manages Cortex XDR agents and endpoint protection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"}]},{"id":"PFKTVw7pwyTdCwapwsIu","title":"Set up endpoint protection","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up Cortex XSIAM endpoint protection with profiles, policies, and exception rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"jUxv47B36iNKzphB5SBc","title":"Set up endpoint profiles and exception rules","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM endpoint profiles and exception rules for consistent protection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"YrYUXDstXaBSu7FnG7xh","title":"Set up malware prevention profiles","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-malware-prevention-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM malware prevention profiles to detect and block malicious files.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"50ToR6H5nY5ykIcBkCni","title":"Set up exploit prevention profiles","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exploit-prevention-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM exploit prevention profiles to protect endpoints from software exploits.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"gOhRupbQvXe7ZkIIzx1g","title":"Set up agent settings profiles","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-agent-settings-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XDR agent settings profiles for endpoint communication, upgrades, and protection behavior in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"4stgQsULeMVkrd1zfSKg","title":"Set up restrictions prevention profiles","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-restrictions-prevention-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure restrictions prevention profiles to control executable activity on endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"DSBkoOpLfJMklJkN1lFS","title":"Set up exception profiles and rules","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure exception profiles and rules for trusted or unsupported activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"s3LS3UgnO02BOj0bYQJt","title":"Exception configuration","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/exception-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure endpoint exception settings and policy behavior in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"DyL0Pz1SvWz8Qrsl1eso","title":"Issue exclusions","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage issue exclusions to suppress selected endpoint security issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"jbRz99SurdaP2sUzL2cT","title":"Add an issue exclusion rule","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions/add-an-issue-exclusion-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create issue exclusion rules for matching endpoint security issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Issue exclusions"}]},{"id":"gSjvEPzl7AoirId4iXjB","title":"Add an IOC or BIOC rule exception","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-an-ioc-or-bioc-rule-exception","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add Cortex XSIAM IOC or BIOC rule exceptions for approved endpoint activity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"UC3wCR62w8E0J3OPuKMA","title":"Add a disable prevention rule for endpoints","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-prevention-rule-for-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add Cortex XSIAM rules that disable prevention on selected endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"tFnL9IwNNuxA7jS56Fvi","title":"Add a disable injection and prevention rule","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-injection-and-prevention-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add Cortex XSIAM rules that disable injection and prevention for selected processes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"Iuayw24CCAxc1qwzbPCk","title":"Add a support exception rule for endpoints","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-support-exception-rule-for-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add Cortex XSIAM support exception rules for endpoint troubleshooting and compatibility.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"oij0yzJB4549Ia5zwWxC","title":"Add a legacy exception rule for endpoints","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add Cortex XSIAM legacy exception rules for endpoint compatibility requirements.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"ptLTD18ZfUJnzHX9ebya","title":"Add a new exceptions security profile","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-new-exceptions-security-profile","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM exceptions security profiles for legacy endpoint policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule for endpoints"}]},{"id":"hND7xLe67Y5Qs5JICUf3","title":"Add a global endpoint policy exception","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-global-endpoint-policy-exception","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add global Cortex XSIAM endpoint policy exceptions for selected endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule for endpoints"}]},{"id":"OPfzT5FQ91PmGB3oPnSO","title":"Set up Identity profiles","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-identity-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure identity profiles for endpoint-related identity protection settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"dGUgsZDQ2WgPWLRgLfjE","title":"Define endpoint groups","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/define-endpoint-groups","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Define endpoint groups to organize endpoints and target policies in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"yaQoztgPmfc62CI2tnuq","title":"Configure global agent settings","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/configure-global-agent-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure global Cortex XDR agent settings for endpoints across your Cortex XSIAM environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"yVsjDKkohdNyKdhTEHNQ","title":"Apply profiles to endpoints","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/apply-profiles-to-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Apply Cortex XSIAM profiles to endpoints using targeted policy rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"HdGuS40BhL9Ec0t5r7A0","title":"Create an agent installation package","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/create-an-agent-installation-package","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XDR agent installation packages for endpoint deployment in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"lM9MsJiA1dIjzWouncBj","title":"Manage an agent installation package","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/create-an-agent-installation-package/manage-an-agent-installation-package","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XDR agent installation packages and their deployment settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Create an agent installation package"}]},{"id":"DRd54ARSwlNjqvWRn0nJ","title":"Harden endpoint security","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Harden endpoint security with Cortex XSIAM controls for devices, firewalls, encryption, and vulnerabilities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"1gjs6b5CeHTeEldysi3y","title":"Device control","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/device-control","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM device control policies for USB, Bluetooth, printers, and peripheral access on endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"DcXJWNdcQNZCHVNAeRKb","title":"Host firewall","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM host firewall policies to control endpoint network traffic.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"HsnLBDz6TsAsimPpRsP5","title":"Host firewall for Windows","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-windows","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM host firewall policies to control inbound and outbound network traffic on Windows endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"Bx23RHzcNxMNxf3TzNtH","title":"Host firewall for macOS","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-macos","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM host firewall policies for macOS endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"ISZnESmHe1RXY3WHQI19","title":"Disk encryption","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/disk-encryption","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM disk encryption settings to protect endpoint data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"dAHff4aqxSPWKuDEhg9m","title":"Host Inventory","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-inventory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Host Inventory to review endpoint hardware, software, services, and security details.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"hmfiouQtMtMarPwzOB7w","title":"Vulnerability Assessment","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/vulnerability-assessment","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Vulnerability Assessment to identify endpoint software vulnerabilities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"U0SEK7Kc2xmRmhWvEya5","title":"Set a Cortex XDR agent Critical Environment version","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/set-a-cortex-xdr-agent-critical-environment-version","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set a Cortex XDR Critical Environment agent version for controlled endpoint upgrades in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"5ba67bIPGKQpr3ov8RIk","title":"Manage endpoint protection","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage endpoint protection, agents, tags, policies, and operational settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"wAWRki5PGjBYmmL3EO4q","title":"Move agents between managing servers","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/move-agents-between-managing-servers","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Move Cortex XDR agents between managing servers without reinstalling endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"7YJm55wIgth9jc81Uzsw","title":"Manage endpoint tags","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage endpoint tags to organize and target endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"wvOt3mx17fVyj8BLBooZ","title":"Create an endpoint tag","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/create-an-endpoint-tag","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create endpoint tags for endpoint organization and policy targeting in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"4cVcQzZVATA63G6eU4WA","title":"Remove an endpoint tag","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/remove-an-endpoint-tag","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Remove endpoint tags that are no longer needed in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"VyvBOR8aq7zfJp7F5I3k","title":"Track your endpoint tags","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/track-your-endpoint-tags","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and filter Cortex XSIAM endpoint tags assigned by the Cortex XDR agent or in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"5sBNYyKWlpmJXtTa6rO6","title":"Permanently remove Endpoint tags from the system","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/permanently-remove-endpoint-tags-from-the-system","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Permanently remove endpoint tags from Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"Uv0yv8oBpVcPjDrSG26E","title":"Set an alias for an endpoint","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/set-an-alias-for-an-endpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set an alias to identify an endpoint more clearly in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"fgGxH1HduO5Knbd83Eq5","title":"Manage endpoint prevention profiles","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-prevention-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM endpoint prevention profiles and their applied protection settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"hZRR4JrKrCKYAw2CZnRA","title":"Create a new prevention policy rule for serverless function","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/create-a-new-prevention-policy-rule-for-serverless-function","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM prevention policy rules for serverless functions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"EQJRY8Hy1KH2u0FyTi5n","title":"View information about your endpoint prevention profiles","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/view-information-about-your-endpoint-prevention-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View Cortex XSIAM endpoint prevention profiles and their configured protection settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"jibyovBKB5gFSpp3YLHd","title":"Upgrade Cortex XDR agents","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/upgrade-cortex-xdr-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Upgrade Cortex XDR agents with Cortex XSIAM to maintain endpoint protection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"ZFPryehuMxFGFcq5x3i4","title":"Restart agent","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/restart-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Restart Cortex XDR agents from Cortex XSIAM for endpoint troubleshooting.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"ZZU61ib9gpX5AiI95kRe","title":"Uninstall the Cortex XDR agent","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/uninstall-the-cortex-xdr-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Uninstall Cortex XDR agents from endpoints through Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"pznH83sTZNEPP2wBw85P","title":"Clear agent database","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/clear-agent-database","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Clear the Cortex XSIAM agent database for endpoint troubleshooting.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"xbPcjTlJnce8IjNfXlSv","title":"Delete Cortex XDR agents","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/delete-cortex-xdr-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Delete Cortex XDR agents from Cortex XSIAM when endpoints are decommissioned.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"1GP5GFcKXRIliRJTXRYS","title":"Manage agent tokens","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-agent-tokens","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM agent tokens for endpoint installation and registration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"bGmPI6tFsmh39wpb6s4N","title":"Retrieve support file password","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/retrieve-support-file-password","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Retrieve the Cortex XSIAM support file password for endpoint troubleshooting.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"dYuKVqbMDCTXfzhraFon","title":"Send push notifications to iOS","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/send-push-notifications-to-ios","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Send Cortex XSIAM push notifications to supported iOS endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"yeFgViUE1x9yzgDhfNz9","title":"Monitor agent operational status","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-operational-status","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XSIAM agent operational status across managed endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"lza2swiAz3zw8nZatbAl","title":"Monitor agent activity","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-activity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XSIAM agent activity and endpoint events.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"wcw3VjaMeECJnqYF10kl","title":"Monitor agent upgrade status","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-upgrade-status","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XSIAM agent upgrade status across your endpoint fleet.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"8FXWITDKwKDjvd6o409P","title":"Endpoint DLP","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Protect sensitive endpoint data and prevent exfiltration with Cortex XSIAM Endpoint DLP.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"}]},{"id":"9HaS5ZndvFyeHsIADI1I","title":"Cortex Data Loss Prevention (DLP) module overview","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/cortex-data-loss-prevention-dlp-module-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about the Cortex Data Loss Prevention (DLP) module in Cortex XSIAM, which provides a solution to prevent sensitive data exfiltration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"}]},{"id":"2808ypAeyY0W4HstKqiG","title":"Archive file classification","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/cortex-data-loss-prevention-dlp-module-overview/archive-file-classification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex Data Loss Prevention in Cortex XSIAM inspects archive files and applies data-in-motion rules to protect sensitive data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"},{"label":"Cortex Data Loss Prevention (DLP) module overview"}]},{"id":"vYlULfOZu7cJMfnZ47O5","title":"True-file type detection","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/cortex-data-loss-prevention-dlp-module-overview/true-file-type-detection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex Data Loss Prevention in Cortex XSIAM identifies true file types to enforce data-in-motion policies and prevent file-extension evasion.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"},{"label":"Cortex Data Loss Prevention (DLP) module overview"}]},{"id":"bHfAQOBsR6nkckFdA22L","title":"Personas workflow for DLP","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/personas-workflow-for-dlp","siteSpaceId":"sitesp_xTOni","lang":"en","description":"The data security administrator and data security viewer in Cortex XSIAM are responsible for identifying DLP requirements for creating data-in-motion rules and investigating issues and cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"}]},{"id":"aOWHYUgwiNu97NZiB0ke","title":"Best Practices","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/best-practices","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Apply Cortex XSIAM Endpoint DLP best practices to design effective data-in-motion rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"}]},{"id":"AoM7R7RsbP3szR1wW8y5","title":"Configure DLP end-to-end","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/configure-dlp-end-to-end","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up Cortex Data Loss Prevention in Cortex XSIAM, including endpoint settings, browser extensions, applications, and data-in-motion rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"}]},{"id":"WhkfATvsHIAM6z0Dc1OO","title":"DLP status in all endpoints","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/dlp-status-in-all-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View Cortex Data Loss Prevention status and browser extension status for managed endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"}]},{"id":"8g3BrZtkiQqFp7TfZZRq","title":"Cortex DLP threat detection and issues","pathname":"/cortex-xsiam/protect-your-endpoints/endpoint-dlp-1/cortex-dlp-threat-detection-and-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate Cortex DLP issues in Cortex XSIAM triggered by data-in-motion rule violations and sensitive data exfiltration attempts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Protect your endpoints","icon":"shield"},{"label":"Endpoint DLP"}]},{"id":"hnrrkp8y47KkgCl6TCNm","title":"Monitor dashboards and reports","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to use Cortex XSIAM dashboards and reports to monitor security operations, visualize data, and share actionable insights.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"t9PWTWxh4I0PYwQ5Qqbx","title":"Overview of dashboards and reports","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM dashboards, widgets, and reports turn security data into operational insights.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"}]},{"id":"Tcj8D0E47O4EtC1XEgvW","title":"Dashboard interface basics","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-interface-basics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn the Cortex XSIAM dashboard interface, including navigation, widgets, filters, and available actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"arMCkzN1fkKlpD8zoy7P","title":"Dashboard types","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM dashboard types and choose the right view for your security operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"2lBucYagbaiqfBAhh5fW","title":"Report basics","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/report-basics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn Cortex XSIAM report concepts, including report templates, scheduling, and data presentation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"czRQ9ol7eMNb8aNNkVac","title":"Widget Library","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/widget-library","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore the Cortex XSIAM Widget Library to find visualizations for dashboards and security monitoring.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"juJTRuHCXplwr7P98nKd","title":"Access and visibility for dashboards and reports","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control Cortex XSIAM dashboard and report access, visibility, ownership, and sharing.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"}]},{"id":"eFfj6vg9vOVhDzsZJV67","title":"Visibility settings","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/visibility-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM dashboard and report visibility settings for the appropriate audience.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"CuWn2nwWaWvqQuXt8XbS","title":"Access to widgets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-to-widgets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM access to dashboard widgets and the data they display.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"8dN8pFfI1XCntdmV85IA","title":"Sharing icons","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/sharing-icons","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM sharing icons and their dashboard and report visibility meanings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"Gs3sGxdLJUwmjzluiY7J","title":"Access and sharing cheat sheet","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-and-sharing-cheat-sheet","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use this Cortex XSIAM reference to manage dashboard and report access and sharing.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"iCWS2x2y8S5xAATvvDVm","title":"Manage dashboards and reports","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM dashboards and reports, including ownership, sharing, imports, and deleted content.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"}]},{"id":"f5yAJHKX5E7ol2OUJmsN","title":"Dashboard Manager","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/dashboard-manager","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Dashboard Manager to organize, find, and manage dashboards.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"uPiI6Gy7BdGpO3Jce1CP","title":"Reports","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM reports and report templates for security operations and stakeholder communication.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"oTGfECMRozJqfl4BLI3Q","title":"Duplicate dashboards and reports","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/duplicate-dashboards-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Duplicate Cortex XSIAM dashboards and reports to reuse existing visualizations and templates.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"hBBY7GlUrawUvLdjcXvS","title":"Share custom dashboards and report templates","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/share-custom-dashboards-and-report-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Share Cortex XSIAM custom dashboards and report templates with users and teams.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"4mxvi0yIt61URn3tnJux","title":"Change ownership to dashboards and report templates","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/change-ownership-to-dashboards-and-report-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Change Cortex XSIAM dashboard and report template ownership to maintain access and accountability.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"T5kBnZYkjjJXHhJ3haLJ","title":"Import and export dashboards and report templates","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/import-and-export-dashboards-and-report-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Import and export Cortex XSIAM dashboards and report templates for reuse across environments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"wkZReK8kccfY81zW2bWi","title":"Configure the notification rule for a failed report","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/configure-the-notification-rule-for-a-failed-report","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM notifications for failed report generation and delivery.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"IOOAlUZjRJ0omPElNQuL","title":"Deleted content","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/deleted-content","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Restore or permanently manage deleted Cortex XSIAM dashboards, reports, and related content.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"ungIOV5qcpiQxki9v21f","title":"Create dashboards","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-dashboards","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM dashboards to monitor security data, trends, and operational outcomes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"}]},{"id":"JD4xfTcs2YJEnhN4ppGf","title":"Create a dashboard","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-dashboards/create-a-dashboard","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create a Cortex XSIAM dashboard with widgets, filters, and layouts for focused monitoring.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Create dashboards"}]},{"id":"0mlDzk8mqX9o88XQftym","title":"Create reports","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM reports to present and share security data with stakeholders.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"}]},{"id":"dO7SCfsv1AB0AyiLYyLQ","title":"Create a report template from scratch","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-reports/create-a-report-template-from-scratch","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create a Cortex XSIAM report template from scratch for repeatable security reporting.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Create reports"}]},{"id":"AZcJ0jeJaubN7FlPUxXK","title":"Advanced configuration","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM dashboards with custom widgets, global filters, and drilldowns.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"}]},{"id":"32XnN1ppb8LXxh9CaNkx","title":"Create custom widgets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM dashboard widgets using AI, XQL, scripts, and parameters.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"CFqoXRjOQUZ4Cc4gkdfS","title":"Create widgets using AI","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-widgets-using-ai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AI to create Cortex XSIAM dashboard widgets from natural language prompts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"W93BObxdlDZeNmPfjetH","title":"Create XQL widgets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-xql-widgets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM XQL widgets to visualize query results on dashboards.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"CLxyR3FUqMQOHNkQgbdt","title":"Add parameters to a custom XQL widget","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/add-parameters-to-a-custom-xql-widget","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add parameters to Cortex XSIAM custom XQL widgets for interactive dashboard filtering.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"N2DcKQBW28rVjPYZ6YFZ","title":"Create script-based widgets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-script-based-widgets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM script-based widgets to display custom dashboard data and insights.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"Txx6YJszcpSzSo7gqpls","title":"Configure global filters","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/configure-global-filters","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM global dashboard filters to refine data across multiple widgets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"3BT78Jrkk7F0tInLa7lz","title":"Configure drilldowns","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/configure-drilldowns","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM dashboard drilldowns to investigate data from widget visualizations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"c2eQ8IQb9sNKX7U1ULUZ","title":"Dashboard reference","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM dashboards, including Command Center and system dashboard views.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"}]},{"id":"WnhgytMR9KMCZgGKx7Bn","title":"Command Center reference","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM Command Center dashboards for security operations visibility and monitoring.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"HrlFNTqF8bKRyqzwiEbj","title":"Cortex Command Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-command-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex Command Center in Cortex XSIAM to monitor operational security insights and priorities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"oHTdwqFqlXimPTuBe0YZ","title":"Cortex Agentic Assistant dashboard","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-agentic-assistant-dashboard","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Agentic Assistant dashboard to monitor AI-assisted security operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"odHuKlfWXMcnBOKmCjg0","title":"XSIAM Command Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the XSIAM Command Center to monitor Cortex XSIAM security operations and key metrics.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"1ZxbTdrhe7pL4KlL7y8c","title":"Data Inventory","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center/data-inventory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Data Inventory to monitor data sources, coverage, and security telemetry.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"},{"label":"XSIAM Command Center"}]},{"id":"gZiJG4DD5UqadFZ3EWgH","title":"Dynamic View","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center/dynamic-view","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Dynamic View to monitor changing security data and operational insights.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"},{"label":"XSIAM Command Center"}]},{"id":"4CqQAgQuf7a3PHMAaL9x","title":"Cases Overview","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center/cases-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Cases Overview to monitor case status, priorities, and investigation workload.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"},{"label":"XSIAM Command Center"}]},{"id":"cGJ2yWqvXJjtlZh2bMhv","title":"Cloud Detection and Response (CDR) Command Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cloud-detection-and-response-cdr-command-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM CDR Command Center to monitor cloud detection and response operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"M48LakWNeEIV88KZECyl","title":"Cortex Cloud Command Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-cloud-command-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex Cloud Command Center in Cortex XSIAM to monitor cloud security operations and insights.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"JGbXafAHURbyCtWSFmAn","title":"System dashboards","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM system dashboards for operational, cloud security, and data ingestion monitoring.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"IztappaFB1TJcai1KgDH","title":"Cortex Cloud Consumption","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cortex-cloud-consumption","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex Cloud Consumption in Cortex XSIAM to monitor cloud security usage and consumption.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"M9XY4PhX905g7rycSvYk","title":"Cloud Security Operations","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cloud-security-operations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Cloud Security Operations to monitor cloud risks, findings, and remediation progress.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"NSrXaHO9SjjXMg1KS8AB","title":"Data Ingestion","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/data-ingestion","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Data Ingestion to monitor data collection health, volume, and coverage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"Wv3XAMO9mwSfUXRtiV1v","title":"Investigation and response","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"b4sWgo520eer8QU1H9k0","title":"Overview of cases","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how cases group security issues, support investigations, and track responses through resolution in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"zF6dBaieGT4s4ur8TVyn","title":"What are cases?","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/what-are-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM cases unify issues, assets, and artifacts for streamlined investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Overview of cases"}]},{"id":"bc6BwVAJjuvV8398koq1","title":"Resolving cases with AI","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/resolving-cases-with-ai","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AI in Cortex XSIAM to prioritize, investigate, and resolve security cases faster.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Overview of cases"}]},{"id":"6jlfc29Q5SDJDCtYd7ry","title":"Case lifecycle","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-lifecycle","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand how Cortex XSIAM moves security cases from detection through resolution.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Overview of cases"}]},{"id":"BCRJE34DCu0v0IDfJGgp","title":"Case thresholds","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-thresholds","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM case thresholds control issue grouping and auto-resolved case reopening.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Overview of cases"}]},{"id":"iS0kjmmdl6VQGYLFZqte","title":"Case scope and impact","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-scope-and-impact","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM uses severity, score, and domain to prioritize and scope cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Overview of cases"}]},{"id":"0YTQj8MhdWxOsntKZhGs","title":"Case and issue domains","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-and-issue-domains","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM assigns case and issue domains to organize response work.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Overview of cases"}]},{"id":"eJPgEw8z8P9rrxBDAloz","title":"Overview of case teams and roles","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/overview-of-case-teams-and-roles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM case teams assign roles and control sensitive case access.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Overview of cases"}]},{"id":"eQIgucyrrfzggXglpbyJ","title":"Case concepts","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn Cortex XSIAM case concepts, including issues, grouping, scoring, SLAs, and causality.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"I5ZSXs7gwJko8qjrg2E3","title":"Issues, findings, and events","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/issues-findings-and-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand how Cortex XSIAM connects issues, findings, and events to support case investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Case concepts"}]},{"id":"AHgNdO2mibIpHYcl2IS2","title":"Case grouping","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/case-grouping","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM automatically groups related issues and artifacts into unified cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Case concepts"}]},{"id":"Mf23vhyeSp8yVGBC0pm3","title":"Case scoring","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/case-scoring","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM scores cases using rules, SmartScore, and manual input.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Case concepts"}]},{"id":"yZtoxLfRaflw8ly0beKN","title":"Case starring","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/case-starring","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM stars important cases manually or through automated configurations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Case concepts"}]},{"id":"5L0HHdLSY6Mk19FdDALE","title":"SLAs and tracking","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/slas-and-tracking","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM tracks case SLAs, timers, and severity-based response targets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Case concepts"}]},{"id":"RWyzBjDQHirSVIkeYTt9","title":"What is Causality?","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/what-is-causality","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM connects activity into causality chains for faster investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Case concepts"}]},{"id":"fIHNE993SooLBJ1v8Kmd","title":"Analyze and resolve cases","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM helps you analyze, investigate, and resolve security cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"UpoPwz9DPy9K6nyr1dgO","title":"Review all cases","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/review-all-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review and prioritize Cortex XSIAM cases using status, severity, scores, and saved views.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"}]},{"id":"eULFtkvwSMDVNf7lYctL","title":"Start case analysis","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/start-case-analysis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Start Cortex XSIAM case analysis from the Cases page, a unified workspace for investigation and response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"}]},{"id":"gOtrOOfOli8HYMrpmtT5","title":"Agentic Assistant- Case Investigation agent","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/start-case-analysis/agentic-assistant-case-investigation-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Case Investigation agent in Cortex XSIAM for contextual summaries and investigation guidance.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Start case analysis"}]},{"id":"dMUKuMOa6o8rnvXVRHUG","title":"Establish case context","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/establish-case-context","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Establish Cortex XSIAM case context by reviewing titles, descriptions, scores, and ownership.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"}]},{"id":"jq8tjgss3DsiSiEC9c2q","title":"AI-generated case summaries","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/establish-case-context/ai-generated-case-summaries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM AI-generated summaries to understand current case scope and context.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"kk6D5cegbaSV6CJzKEf2","title":"Assess case severity and score","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/establish-case-context/assess-case-severity-and-score","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Assess and update Cortex XSIAM case severity and scores to prioritize response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"tnqCfvapMzvJpPStPa6X","title":"Update case attributes","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/establish-case-context/update-case-attributes","siteSpaceId":"sitesp_xTOni","lang":"en","description":"In Cortex XSIAM you can update case titles, descriptions, assignments, and starred status.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"giuolXwRRS1flwLzxfNA","title":"Analyze case details","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details","siteSpaceId":"sitesp_xTOni","lang":"en","description":"To analyze a case in Cortex XSIAM you can review details about case relationships, evidence, issues, assets, tactics, and timelines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"}]},{"id":"VwDkh3lNynDtoDgDF57u","title":"Grouping graph","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/grouping-graph","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM grouping graph to understand linked issues and artifacts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"0VBtF1db8Q2CO5QQMPyo","title":"Evidence","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/evidence","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM evidence to understand threats, validate findings, and guide remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"7NvInZTybgLJVX9C8iOF","title":"Issue feed","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/issue-feed","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review the case issue feed in Cortex XSIAM to trace case activity chronologically.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"dI9Uf9aUB9kH22De4aL8","title":"Associated assets and artifacts","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/associated-assets-and-artifacts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate Cortex XSIAM assets and artifacts associated with a case.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"k8u42Rg6vwhZO6BRj0EG","title":"MITRE ATT&CK tactics and techniques","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/mitre-att-and-ck-tactics-and-techniques","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review the MITRE ATT&CK tactics and techniques associated with issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"hNyVHUz69Idy8UqCubMN","title":"Compliance standards and controls","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/compliance-standards-and-controls","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review compliance standards and violated controls for Posture cases in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"ZjY7VGuq5lBHdDKYHZhd","title":"Case timeline","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/case-timeline","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the case timeline to track events, actions, and investigation evidence in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"yJNapuwFBkbAVR2EH54U","title":"Detailed View","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/detailed-view","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Detailed View for table-based case investigation and analysis in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"H7p1BxyjmxqcBcA1RqGF","title":"Resolve the case","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Resolve Cortex XSIAM cases through remediation tasks and verified closure workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"}]},{"id":"4QZzjcHbw57TCjfaeik3","title":"Resolution Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/resolution-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Resolution Center to manage remediation tasks and resolve cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"GxgckIFseqbD8cOJwZ3q","title":"Collaborative notes and comments","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/collaborative-notes-and-comments","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use notes and comments to coordinate case investigations and responses in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"AWBf4nXX5tdkyTKCyzeu","title":"How to resolve a case","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/resolve-a-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Resolve Cortex XSIAM cases manually, through playbooks, or with the API.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"QKQZCaJGj8bLre78ZIYo","title":"Resolution reasons for cases and issues","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/resolution-reasons-for-cases-and-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Select resolution reasons when closing cases and issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"DCZTAe9oSRsn2ffdFQIZ","title":"Monitor and track resolution times","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/monitor-and-track-resolution-times","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor case and issue resolution times in Cortex XSIAM against configured SLAs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"nSl3auS36KLOtob87l8X","title":"Cortex Response and Remediation content pack","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/cortex-response-and-remediation-content-pack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Response and Remediation playbooks to automate incident workflows in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"Ha7ePT6H46XrVoFS7bXV","title":"Investigate an issue using Cortex Response and Remediation playbooks","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/cortex-response-and-remediation-content-pack/investigate-an-issue-using-cortex-response-and-remediation-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate Cortex XSIAM issues using Response and Remediation playbooks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"},{"label":"Cortex Response and Remediation content pack"}]},{"id":"fNBYXkdT3lX4qWwkAt1Q","title":"Example use cases","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/cortex-response-and-remediation-content-pack/example-use-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Response and Remediation playbook use cases in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"},{"label":"Cortex Response and Remediation content pack"}]},{"id":"wcdubexkmYHzwgIrmABz","title":"Additional case actions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM cases with creation, merging, access, and unified-view actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"}]},{"id":"uoWccxvxIeh12h1xnHt2","title":"Create a case","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/create-a-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM cases manually and link or create associated issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"r52a0hX3NJqYh6KsBRcN","title":"Merge a case","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/merge-a-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Merge related Cortex XSIAM cases to consolidate investigations, teams, and response efforts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"cb4wa5f2MFtF3FELzgH7","title":"Assign a case team and restrict access","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Assign case teams and restrict access to sensitive investigations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"o6BCE7zW9rgkay4CsyoG","title":"Playbook examples","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access/playbook-examples","siteSpaceId":"sitesp_xTOni","lang":"en","description":"See playbook example for assigning case teams and restricting access to cases in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"},{"label":"Assign a case team and restrict access"}]},{"id":"7cjVE4nePXx4WOxYKTxT","title":"Unified case view","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/unified-case-view","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Unified Case View to manage cases across child tenants.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"SMvq1gswBfdZzWMcf1b6","title":"Investigate issues","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM generates issues to bring your attention to security risks in your framework.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"O4HcY75XEd0ikPwFJRbT","title":"Overview of the Issues page","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/overview-of-the-issues-page","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review and prioritize Cortex XSIAM issues from the Issues page.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"5YUCu9BQ4pnRjZ0yCoNL","title":"Issue card","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-card","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the issue card to investigate and respond to issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"VoI2EcVXDG1ugqT8e7rU","title":"Resolution actions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/resolution-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Resolution tab to see all resolution actions to remediate and close issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"0iZTyqGI9edcU6GwI78C","title":"Link or unlink issues from a case","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/link-or-unlink-issues-from-a-case","siteSpaceId":"sitesp_xTOni","lang":"en","description":"You can link or unlink issues from cases in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"OXRv1pAruaTzfghYeRue","title":"Run an automation on an issue","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/run-an-automation-on-an-issue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run automations on issues to accelerate investigation and remediation in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"jwDTEZErjXYfiMk7o4Qv","title":"Use the War Room in an investigation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM War Room to investigate issues and run response actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"XhXrR7bATgs1WYfyOWUq","title":"Use the Work Plan in an investigation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Work Plan to manage issue playbook tasks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"PLqCdzqVbh4J1CJEvC0Y","title":"Issue syncing","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-syncing","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Sync Cortex XSIAM issues with external tickets to coordinate remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"SW2L602bdtffM63MNLm7","title":"Issue deduplication","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-deduplication","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM uses issue deduplication to reduce duplicate security events.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"g5LMISrD7CxlHAlPE8AR","title":"Causality view","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/causality-view","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate event chains behind issues in Cortex XSIAM with the causality view.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"9veQ5jjPZcSQn5zXXxXc","title":"Network causality view","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/causality-view/network-causality-view","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate connected endpoint and firewall events in Cortex XSIAM with the network causality view.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"J7KtPklbqh9rTTsCV9CW","title":"Cloud causality view","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/causality-view/cloud-causality-view","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate cloud identities and resources in Cortex XSIAM with the cloud causality view.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"kH6upkFqkbaq26UytckR","title":"Cloud causality view for audit log issues","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/causality-view/cloud-causality-view-for-audit-log-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate cloud audit log issues in Cortex XSIAM with the cloud causality view.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"6LgJJPoSeae48u2jFkpQ","title":"SaaS causality view","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/causality-view/saas-causality-view","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate SaaS-related issues in Cortex XSIAM with the SaaS causality view..","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"XWxVVeNGT0JO2MWWxeMh","title":"Timeline","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/causality-view/timeline","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM timeline to trace events and issues during an attack.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"MdGDsMsOcGzQDS46n606","title":"Causality icons key","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/causality-view/causality-icons-key","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the causality icons key to interpret investigation data in causality chains in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"UdLzrqVcsJpDT8x9QLms","title":"Issue investigation actions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use issue actions to investigate, enrich, and remediate issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"Dkx7Z7bahPvalxrCUipx","title":"Copy issues","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/copy-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Copy issue details, rows, or URLs for sharing and analysis in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"8oejDk4W4O0XOoSKIFNm","title":"Analyze an issue","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/analyze-an-issue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Analyze Cortex XSIAM issues using issue cards and causality views.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"4KrbMjrBLYsA1OfA6iGU","title":"Update issue fields","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/update-issue-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use CLI commands to update issue fields and statuses through commands, scripts, or playbooks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"CHmLYKyR5E5ScIb7o50r","title":"Query case and issue data","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/query-case-and-issue-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Query case and issue data with Cortex Query Language in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"oB1eCVfpkdHRFHD3agZ9","title":"Exclude an issue","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/exclude-an-issue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Exclude Cortex XSIAM issues that do not indicate a security threat.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"i4eVq2Ik2abKVbtobnLZ","title":"Create a featured field","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/create-a-featured-field","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create featured fields to highlight important issue attributes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"aUkI7jDT0Sv4mM0SUWkk","title":"Export issue details to a file","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/export-issue-details-to-a-file","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Export Cortex XSIAM issue details to a TSV file for offline analysis.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"9s57DpaKWTgv2MifgvBT","title":"Investigate contributing events","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/investigate-contributing-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate correlation rule events in Cortex XSIAM that contributed to an issue.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"AA7qfQvRHWG0apVB6Dde","title":"Retrieve additional issue details","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/retrieve-additional-issue-details","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Retrieve Cortex XSIAM issue data, related files, and packet captures for analysis.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"jQJMZXoySf0YztQULVLV","title":"View generating BIOC or IOC rule","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/view-generating-bioc-or-ioc-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View the BIOC or IOC rule that generated a Cortex XSIAM issue.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"VckJcEgrku8igNkjK9pq","title":"Create profile exceptions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/create-profile-exceptions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create profile exceptions in Cortex XSIAM for relevant XDR agent issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"ezdYbykzmdif8McoKCqy","title":"Add a file path to a malware profile allow list","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/add-a-file-path-to-a-malware-profile-allow-list","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add safe file paths to Cortex XSIAM malware profile allow lists.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"JKKqxkSKMpar4LdkNt1x","title":"Close an issue","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/close-an-issue","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Close Cortex XSIAM issues after completing investigation and remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"5ZOhZJAcRccefuQgQZvK","title":"Review findings","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/review-findings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review findings for an asset to gain insights into an asset’s posture status in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"6YeuFZ4k2RIGN7xa2AQs","title":"Findings card","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/review-findings/findings-card","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View selected finding details and investigation context in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Review findings"}]},{"id":"SEMWJxbqFO5fTaHcLGRM","title":"Investigate artifacts and assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate IP addresses, assets, hosts, users, and file hashes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"51XXZFajqsaM0wQ1i7dx","title":"Investigate an IP address","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets/investigate-an-ip-address","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate IP address activity, threat intelligence, and related cases in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"b1dpAg4WgTerrjieDbHl","title":"Investigate an asset","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets/investigate-an-asset","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate the assets associated with an issue in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"dTKL2jB9VNYI5m1cmkef","title":"Investigate a host","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets/investigate-a-host","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate host activity, risk scores, and related issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"hl3seH4SdKqrCxB2akV3","title":"Investigate a file and process hash","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets/investigate-a-file-and-process-hash","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate SHA256 file and process hashes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"fhlBtWJSvnvfmihVisuc","title":"Investigate a user","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets/investigate-a-user","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate user activity, risk scores, and identity insights in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"jXU5JIeF5hcbcgzwT0ek","title":"Investigate endpoints","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate and take actions on your endpoints in the Cortex XSIAM Action Center.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"LL4GAXc4ipTiU74hZHyM","title":"Overview of the Action Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/overview-of-the-action-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Track investigation, response, and maintenance actions on protected endpoints in the Cortex XSIAM Action Center.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"hSErLTmGemMyMH7knzQw","title":"Initiate and monitor endpoint actions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/overview-of-the-action-center/initiate-and-monitor-endpoint-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Initiate endpoint actions and monitor their progress in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"duVrh2Zq6nChuz8FBAja","title":"Action Center reference information","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/overview-of-the-action-center/action-center-reference-information","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM Action Center fields, statuses, and action details.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"lQ3kaU1fML9KGupL1YgF","title":"Manage endpoints","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/manage-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View, manage, and take actions on endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"ZPtzSHokmcwZyn11zO4o","title":"Retrieve files from an endpoint","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/retrieve-files-from-an-endpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Retrieve investigation files from endpoints and download them in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"7rr5dkU0jkU9FQU0U3Uh","title":"Retrieve support logs from an endpoint","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/retrieve-support-logs-from-an-endpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Retrieve endpoint support logs and forensic data through Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"Ymqzijim2fzWG2Ta63u5","title":"Retrieve support file password","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/retrieve-support-file-password","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Retrieve the password needed to decrypt Cortex XSIAM endpoint support files.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"KnoN18ueooJ3fbBdjhyP","title":"Scan an endpoint for malware","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-endpoints/scan-an-endpoint-for-malware","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run and monitor on-demand malware scans on endpoints with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"ZcLguVNWAbybzHVUrTLH","title":"Investigate files","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-files","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate files, manage execution, and review analysis results in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"GKgdMsezPC8OoBqVmzaz","title":"Manage file execution","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-files/manage-file-execution","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage allow and block lists for endpoint file execution in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"DEB0OwPkgfysosfPsZf9","title":"Manage quarantined files","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-files/manage-quarantined-files","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View, restore, and delete quarantined endpoint files in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"XU1SMAlShsZVAVuzhxil","title":"Review WildFire analysis details","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-files/review-wildfire-analysis-details","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review WildFire verdicts and file analysis reports in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"oP1wIBycCV22WKAJhu1i","title":"Import file hash exceptions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-files/import-file-hash-exceptions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Import file hash exceptions into allow and block lists in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"gADHVb3BDv2ezq3ERMdC","title":"Cortex Assistant","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/cortex-assistant","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex Assistant in Cortex XSIAM to triage, investigate, and remediate security cases.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"RwfV50LmTwE5Nsk0kv6N","title":"Cortex Assistant layout","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/cortex-assistant/cortex-assistant-layout","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Navigate the Cortex Assistant layout to investigate security data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Cortex Assistant"}]},{"id":"1U8BSQ4UdPKY7TI3xSpI","title":"Cortex Assistant capabilities","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/cortex-assistant/cortex-assistant-capabilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex Assistant capabilities to investigate and respond to threats in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Cortex Assistant"}]},{"id":"kfDY3DwGxiUEAynz2Lly","title":"Response actions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM response actions to contain threats and remediate affected endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"kHGzjg9U8DdFGV3Kj2aV","title":"Initiate a Live Terminal session","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/initiate-a-live-terminal-session","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Start a Live Terminal session to investigate and manage remote endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"pczdNEKbD5qGkC8lTiW3","title":"Isolate an endpoint","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/isolate-an-endpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Isolate compromised endpoints to contain threats and protect your network with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"KKGS3nwJzP2cgLKY8wVP","title":"Pause endpoint protection","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/pause-endpoint-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Temporarily pause Cortex XSIAM endpoint protection for approved troubleshooting or maintenance tasks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"7XxtLVJvgQ7pRCCkrHHq","title":"Run agent scripts on an endpoint","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/run-agent-scripts-on-an-endpoint","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run agent scripts to investigate, manage, and remediate endpoints from Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"Hy6TrJXJTzjpezf2qq4j","title":"Remediate changes from malicious activity","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/remediate-changes-from-malicious-activity","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM to remediate endpoint changes caused by malicious activity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"qdj4wuj9J3eaIimoXcfu","title":"Search and destroy malicious files","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/search-and-destroy-malicious-files","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM to find and remove malicious files across managed endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"Mx36gMx6eYIx8LLakv0g","title":"Manage external dynamic lists","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/manage-external-dynamic-lists","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage external dynamic lists to share indicators with network security products with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"Aq1GSMx2YElJul3OnlBT","title":"Collect a memory image","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/response-actions/collect-a-memory-image","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect endpoint memory images in Cortex XSIAM for forensic investigation and analysis.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"lwQpEQf54vUd4cFBye8W","title":"Forensics","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Forensics add-on to collect, analyze, and document endpoint evidence.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"nB7PYNY7gCFcY4lDlCGa","title":"Forensic investigations","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/forensic-investigations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM forensic investigations to organize endpoint hunt and triage collections.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"}]},{"id":"8TuvhP0dvr2vJ3NglGeU","title":"Manage an investigation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/manage-an-investigation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM forensic investigations, collections, alerts, evidence, exports, and access controls.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"}]},{"id":"WXSJ8LY5lZaMcZSoC3Bi","title":"Create a new investigation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/manage-an-investigation/create-a-new-investigation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create forensic investigations to organize collections, evidence, alerts, and user access with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Manage an investigation"}]},{"id":"nEysiW0zdJSDDrKiymBH","title":"Edit an investigation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/manage-an-investigation/edit-an-investigation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Update a Cortex XSIAM forensic investigation's name, description, and user permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Manage an investigation"}]},{"id":"9vGGEQKT8VjhIvMPr1n7","title":"Close an investigation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/manage-an-investigation/close-an-investigation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Close, reopen, or permanently delete Cortex XSIAM forensic investigations and their collections.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Manage an investigation"}]},{"id":"rH6RrVO7eKo1lkEelrW3","title":"User permissions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/manage-an-investigation/user-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to Cortex XSIAM forensic investigations with RBAC and scope-based permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Manage an investigation"}]},{"id":"bWz1MtE7p3IFXc2o7TZY","title":"Data collection","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect endpoint forensic evidence in Cortex XSIAM through hunt and triage collections.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"}]},{"id":"WgX57Nr7Mef9OgS2Yz8m","title":"Hunting","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/hunting","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM hunt collections to search for targeted activity across many endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"}]},{"id":"Wn8ICTou49vL3HCXMWzv","title":"Create a hunt","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/hunting/create-a-hunt","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM hunt collections for scheduled or one-time endpoint artifact searches.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Hunting"}]},{"id":"w9I1iIL31EJs7iMUvyek","title":"Hunt results","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/hunting/hunt-results","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Analyze Cortex XSIAM hunt results across collected endpoint forensic artifacts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Hunting"}]},{"id":"sLlXrc94bkPttbXR0fyf","title":"Hunt status","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/hunting/hunt-status","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XSIAM hunt searches and results across targeted endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Hunting"}]},{"id":"TMcCiBz4rXArBhVUFH4N","title":"Triage","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/triage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM triage collections for in-depth forensic analysis of specific endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"}]},{"id":"3LzMvvl6q0shxaPNKuqN","title":"Create a triage","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/triage/create-a-triage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM triage collections for detailed online and offline endpoint evidence gathering.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"MdCmTMH7IrW4tX8ZegKo","title":"Upload an offline triage package","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/triage/upload-an-offline-triage-package","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Upload offline triage packages to Cortex XSIAM for forensic data ingestion and analysis.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"nOGmppNsHuPrhnLTO0UO","title":"Offline triage collection","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/triage/offline-triage-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect Cortex XSIAM forensic evidence from offline endpoints without an installed agent.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"ERqxPdK4E4ymqyv0UYlu","title":"Triage results","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/triage/triage-results","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM triage alerts, artifacts, and endpoint forensic timelines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"Vazx5DcvwKztBHRAp47k","title":"Triage status","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/triage/triage-status","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Track Cortex XSIAM triage collection and ingestion status for endpoint artifacts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"p0higrWl44asRFW57MPk","title":"Configure collection","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/data-collection/configure-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM hunt and triage artifact collection criteria and filters.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Data collection"}]},{"id":"xaVbM4Be4yTCZO0UJLLO","title":"Analysis and documentation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/analysis-and-documentation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Analyze Cortex XSIAM forensic evidence through issues, timelines, and key assets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"}]},{"id":"tcFAAOvDlux4ebn20iJT","title":"Export","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/forensics/export","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Export Cortex XSIAM forensic collection data for retention or offline analysis.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Forensics"}]},{"id":"9hO13KHBNMkYYoQ0FwXR","title":"Notebooks","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/notebooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Leverage the data collected by Cortex XSIAM using Jupyter Notebooks' data analysis and visualization capabilities within your existing security infrastructure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"OLD35I8KFz29VQPHYVje","title":"Manage datasets in Notebooks","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/notebooks/manage-datasets-in-notebooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage Cortex XSIAM Notebook datasets for queries, rules, and access control.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Notebooks"}]},{"id":"U4YOZapBnLKlsLSJgrTC","title":"Notebooks scheduler","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/notebooks/notebooks-scheduler","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Schedule Cortex XSIAM Notebook jobs to automate recurring data enrichment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Notebooks"}]},{"id":"CSgIbNv94pPKh8gahPg0","title":"Build XQL queries","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build XQL queries with Query Builder for investigation and analysis in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"7ALrWrJn9aM0Xjp7VkBv","title":"About the Query Builder","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand how Query Builder supports XQL queries and data analysis in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"ebKSHhPZyu1giLDhPnP1","title":"How to build XQL queries","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build XQL queries using Query Builder tools and workflows in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"CLwMNuxxGQMXgLXyKrri","title":"Get started with XQL queries","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started building XQL queries in Query Builder with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"M0LaSZFwhdxdEFOqdJGz","title":"Useful XQL user interface features","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Query Builder features help you to create and refine XQL queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"bkzlokw4NzsO9KHdVu3G","title":"XQL Query best practices","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review XQL query best practices for efficient, accurate results when creating queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"N1H92Y4A4Tbb9PG1wCLT","title":"Expected results when querying fields","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand expected field values and results in Cortex XSIAM XQL queries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"WsvncXeegzE5vfOMlHP6","title":"Create XQL query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and run XQL queries with Query Builder in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"MJpSw7AtGHZNPUhZtQeq","title":"Review XQL query results","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review and analyze XQL query results in the Cortex XSIAM Query Builder.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"YFmEaT7zmTOPHCdp0oEL","title":"Translate to XQL","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Translate searches and query logic into XQL with Cortex XSIAM .","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"d21sr3JRGmkKm32DWaJD","title":"Graph query results","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Visualize XQL query results as graphs for faster analysis with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"EbYAipMWkJkoXCaNjdmM","title":"Query Builder templates","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/query-builder-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Query Builder templates to query datasets without writing XQL.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"lYcB0kAe2lX1M4AMLrmk","title":"Get started with Query Builder templates","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/query-builder-templates/get-started-with-query-builder-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with Cortex XSIAM Query Builder templates for guided data queries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"hFW7wYOyNtff29GlM3U1","title":"Considerations for using Query Builder templates","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/query-builder-templates/considerations-for-using-query-builder-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM Query Builder template requirements and limitations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"raT12XS5kYLaTQZlhPwJ","title":"Create a query from a template","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/query-builder-templates/create-a-query-from-a-template","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create data queries from Query Builder templates in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"Jcm9vmnJaJTNBr9qtWo5","title":"Run a free text query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/query-builder-templates/run-a-free-text-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run free-text queries with Query Builder templates in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"MGbVKtB7XiLn1LJUfEEl","title":"Query Builder template examples","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/query-builder-templates/query-builder-template-examples","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM Query Builder template examples for common data queries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"PLU8F4lUhhYvygMCV55G","title":"Overview of the Query Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor in-progress and completed Cortex XSIAM queries in Query Center.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"heiPIlQBn39M5udJ3i16","title":"Edit and run queries in Query Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit and run Cortex XSIAM queries from Query Center.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"db8388O2WbsRs5ULkidE","title":"Query Center reference information","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/overview-of-the-query-center/query-center-reference-information","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex XSIAM Query Center fields, statuses, and query details.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"swLzjwAW2riCg4zvDxUT","title":"Manage scheduled queries","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage scheduled queries for recurring analysis in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"ZsnF9ql96EhAWQ1yR1hN","title":"Scheduled Queries reference information","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review scheduled query settings, statuses, and run details in Cortex XSIAM .","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"cDWLx5Odkw7hSgdGEf28","title":"Manage your personal query library","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_xTOni","lang":"en","description":"The Query Library is a personal library for saving and managing your queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"f6501d444551d658b12a45644a79a24beb16d6e8","title":"XQL macros","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/xql-macros","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use XQL macros to reuse query logic and simplify searches in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"5b9ccd445424de36dc8801534df1a719616428a7","title":"Manage your macros","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage XQL macros for reusable query logic in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"5O7Tf3K9kG75ZmkJiy5W","title":"Federated Search","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/federated-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Federated Search to query supported external data sources in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"ag3VxFpZHSl8ocaNR3W7","title":"Federated Search configuration","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/federated-search/federated-search-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM Federated Search connections for external data sources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Federated Search"}]},{"id":"fmGS0E15nxgNQbDrDhnk","title":"Query using Federated Search","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/federated-search/query-using-federated-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Query external data sources with Federated Search in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Federated Search"}]},{"id":"KKSRRIgGNoj6CvNdQJf8","title":"Manage external datasets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/federated-search/manage-external-datasets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage external datasets used by Federated Search in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Federated Search"}]},{"id":"HoAMyDdarD5tSFigDhW7","title":"Legacy Query Builder","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Legacy Query Builder to query security data entities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"Cmqj0aC49FTpq72SJTuD","title":"Create authentication query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-authentication-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy authentication queries to investigate login activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"Gdn5O94dRfNIL6V7epZp","title":"Create event log query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-event-log-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy event log queries to investigate system activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"QmL0QQMk2rqioO6rv2LH","title":"Create file query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-file-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy file queries to investigate file activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"WKjT6w71URTr1vBU0jqV","title":"Create image load query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-image-load-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy image load queries to investigate loaded modules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"DkAPbuhOK3QTp6MIjxhU","title":"Create network connections query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-network-connections-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy network connection queries to investigate endpoint traffic in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"Db34kVz7s9eplTAyIpKF","title":"Create network query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-network-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy network queries to investigate network activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"gEzBQArm2n5QAVm1vzFl","title":"Create process query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-process-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy process queries to investigate process activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"lfMDdAmjvgbuaD8U9Pnd","title":"Create registry query","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/create-registry-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy registry queries to investigate registry activity in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"PhW5NwSOe3aXOUcbnz3v","title":"Query across all entities","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/build-xql-queries/legacy-query-builder/query-across-all-entities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy queries across all supported security data entities in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"YITAjHhDq1OFpSNqugYv","title":"Research a known threat","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/investigation-and-response/research-a-known-threat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM enables you to investigate any threat, also referred to as a lead, which has been detected.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Investigation and response"}]},{"id":"3KyHoI6BE8Pn00oUWChB","title":"Agentic Assistant chat","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Chat with the Cortex Agentic Assistant in Cortex XSIAM using natural language prompts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"Ct7d6GbOM1xF3sy6Iko5","title":"Get started with Agentic Assistant chat","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/get-started-with-agentic-assistant-chat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable Agentic Assistant and access the chat interface in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"UFcSnJbljeTtVrf3Gh6C","title":"Choose an Agentic Assistant agent","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/choose-an-agentic-assistant-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Choose a system or custom agent for your chat in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"yWG4QTB0cP4SAdre13Bq","title":"Chat with an Agentic Assistant agent","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/chat-with-an-agentic-assistant-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Tips for chatting with the Cortex Agentic Assistant in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"90CqqjQuBCQDKIGef24W","title":"Chat with the Agentic Assistant from Slack","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/chat-with-the-agentic-assistant-from-slack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable chatting in Cortex XSIAM with an Agentic Assistant agent from Slack.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"COnpVctakuNpTpYPlKHo","title":"Streamline troubleshooting and support with the Help Center agent","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"jVWbKnMcqAf0sNMVRtaX","title":"Help Center agent actions","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent/help-center-agent-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"},{"label":"Streamline troubleshooting and support with the Help Center agent"}]},{"id":"hDPrTwbJTbc2JCtXQ1ec","title":"Create and run XQL queries with Agentic Assistant chat","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/create-and-run-xql-queries-with-agentic-assistant-chat","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use natural language in Cortex Agentic Assistant Chat to automatically generate and execute Cortex Query Language (XQL) queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"p8zF7kWUhuGe1TC0perr","title":"Use natural language to query and visualize your data","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/use-natural-language-to-query-and-visualize-your-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Prompt Cortex Agentic Assistant agents to create graphs and charts from its findings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"3RnjmpFDm7v8zi2iguQs","title":"Manage chat history","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/agentic-assistant-chat/manage-chat-history","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage and navigate your past chats with the Cortex Agentic Assistant in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Agentic Assistant chat"}]},{"id":"hpGGwyI1isIL82kdzCjR","title":"Asset management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage assets, inventory, groups, configurations, and risk scores in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"gvXVUylaJ9QekdRwEOD5","title":"Asset inventory overview","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-inventory-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn asset inventory concepts, features, and lifecycles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"NQseNxmbVf7Bocg8es3v","title":"All assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/all-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and manage all discovered assets in Cortex XSIAM Asset Inventory.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"Ym9kr3bluuYUu2lHuS1x","title":"All cloud assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/all-cloud-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and assess cloud assets and your cloud footprint in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"lvywwgo5wrpMAEaF0pwn","title":"Discovery Engine","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/all-cloud-assets/discovery-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM Discovery Engine identifies and discovers cloud assets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"All cloud assets"}]},{"id":"0MoPX3OxjYyd9uZSIRm0","title":"Asset hierarchy","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/all-cloud-assets/asset-hierarchy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore asset relationships and hierarchy views in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"All cloud assets"}]},{"id":"bRBe6d6ZqgnRZ0UTu0oJ","title":"Asset classes","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM asset classes and the resources each class represents.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"5kMybe2Q2fuFb49huLYk","title":"AI assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/ai-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate AI assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"ecUq4KA1oAB9TuWjdVeS","title":"API assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/api-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate API assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"o9LVVJxzQFEA1shjfYfq","title":"Application assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/application-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate application assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"lorGWZo0qIeuZHC0gjiR","title":"Code and Supply Chain Security assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View code and supply chain security assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"EaGHyyAn1Sq67owkpGxj","title":"IaC resources assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets/iac-resources-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View infrastructure-as-code resource assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Code and Supply Chain Security assets"}]},{"id":"aWJHiqBBZIm4LPnyAQt7","title":"Repository assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets/repository-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View repository assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Code and Supply Chain Security assets"}]},{"id":"593cc9TnX4q61ELzn2GV","title":"VCS organization assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets/vcs-organization-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View VCS organization assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Code and Supply Chain Security assets"}]},{"id":"XPnVqHp5fjqpvhmGkDob","title":"CI/CD pipeline assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets/ci-cd-pipeline-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View CI/CD pipeline assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Code and Supply Chain Security assets"}]},{"id":"ewTUoKjRmTGnbm54uezq","title":"CI/CD instances assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets/ci-cd-instances-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View CI/CD instance assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Code and Supply Chain Security assets"}]},{"id":"B875lECbUfX8vLYBzdHC","title":"Software package assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets/software-package-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View software package assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Code and Supply Chain Security assets"}]},{"id":"diumLp1SvmdAjgdmhsk2","title":"Compute assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View compute assets across your environment in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"3zyZUOPPTDvsbJF3sWYu","title":"Container image assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets/container-image-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate container image assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"4hT1urgWyEeur32eCnWu","title":"Serverless functions assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets/serverless-functions-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate serverless function assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"PB4GG9PO7HyYvdIZ1uZI","title":"VM images assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets/vm-images-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate virtual machine image assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"GnNAyMm4cpj3OzGdaJYo","title":"Data assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/data-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate data assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"yb1JX4IKRuZHDXSTl0zu","title":"Device assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/device-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate device assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"lBWx7lZxwhdO2aGkJu4W","title":"External Surface assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/external-surface-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View external surface assets discovered by Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"6Gwefen3DAuyKxlcP28r","title":"Website assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/external-surface-assets/website-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate website assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"Dve006ylMu11DYUrgr1h","title":"Service assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/external-surface-assets/service-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate service assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"olbGrdaBdpV51NI5FdAq","title":"Domain assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/external-surface-assets/domain-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate domain assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"7XJ5WIu2DmtojiAeo5aC","title":"Certificate assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/external-surface-assets/certificate-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate certificate assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"1U9XowPSIKgoLGobAA5o","title":"External Surface attribution evidence","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/external-surface-assets/external-surface-attribution-evidence","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review external surface attribution evidence in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"WzWemqP9zcAg44ZtJOBm","title":"Identity assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/identity-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate identity assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"pI9F9nNv4DR3yoMxnKkd","title":"Network assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/network-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate network assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"lq5YakG9QTw0nblDX9GB","title":"Security services assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-classes/security-services-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View managed security service assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"Vt5U4HmeMnL91LGjODWL","title":"Asset groups","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-groups","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage asset groups in Cortex XSIAM for filtering and access control.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"6F5r5L2h9pHKkl2XTTU3","title":"Manage Risk Scores","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/manage-asset-scores","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and investigate user and host risk scores in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"Aiszl2kx990IOFx6Lzps","title":"Asset configurations","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-configurations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure networks, application criteria, and asset roles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"BwSBs6xWhSbgvnKzFIdI","title":"Network configurations","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/network-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure your internal network parameters, trusted networks, and external IP ranges to help Cortex XSIAM identify and map your network assets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset configurations"}]},{"id":"H7GK2tuumVlfr7bSYmj6","title":"Application criteria","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/application-criteria","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure application criteria for asset management in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset configurations"}]},{"id":"8fIbGgUYK31gViJKIVIU","title":"Asset Roles","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and manage user and endpoint asset roles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset configurations"}]},{"id":"s00E8T4sDHGUw7Wargyr","title":"Manage Asset Roles for Endpoints","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles/manage-asset-roles-for-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage endpoint asset roles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"hLXccytfGJ1o8k1oa8cV","title":"Manage Asset Roles for Users","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles/manage-asset-roles-for-users","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage user asset roles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"5GLeeE9q6kBiQqcAgXp0","title":"Honey user","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles/manage-asset-roles-for-users/honey-user","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure and manage honey users in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"},{"label":"Asset configurations"},{"label":"Asset Roles"},{"label":"Manage Asset Roles for Users"}]},{"id":"SePuLFTASRPMgsoqkOjh","title":"Vulnerability Assessment","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/vulnerability-assessment","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Assess asset vulnerabilities and associated risk in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"BIgm2LKkAq72Vc5ztoUf","title":"Query the asset inventory via XQL","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/query-the-asset-inventory-via-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Query asset inventory data with XQL in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Asset management"}]},{"id":"l2WP2HmCoRgQ5HdfNIPQ","title":"Threat management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"V3tqfFU37ZtByPcYgvcU","title":"Detection rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM detection rules identify threats using IOC, BIOC, and correlation logic.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"}]},{"id":"PD7v8127iKSdfp89NvBu","title":"What are detection rules?","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM IOC, BIOC, and correlation rules for detecting threats and generating issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"}]},{"id":"OZlr3AecGMqM7aOpr7yL","title":"What's an IOC?","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-an-ioc","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM IOC rules detect known malicious or suspicious artifacts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"zkvds282yJvh9MpBoVW2","title":"IOC rule details","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-an-ioc/ioc-rule-details","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM IOC rule fields, conditions, and detection behavior.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's an IOC?"}]},{"id":"eJQ3ZX2BhHh9237a2QE8","title":"Create an IOC rule","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-an-ioc/create-an-ioc-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM IOC rules to generate issues from known threat indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's an IOC?"}]},{"id":"MfrYPpT562FAM6xkpQZw","title":"What's a BIOC?","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM BIOC rules detect suspicious endpoint and network behavior.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"eMaCJXbpcceoIo7ZOuV0","title":"BIOC rule details","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/bioc-rule-details","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM BIOC rule fields, conditions, and detection behavior.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a BIOC?"}]},{"id":"N6YwOVeeJcN64aJh6ceA","title":"Create a BIOC rule","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/create-a-bioc-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM BIOC rules to detect suspicious behavior and generate issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a BIOC?"}]},{"id":"xlDmNpN4MZjBeModis7j","title":"Manage Global BIOC Rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/manage-global-bioc-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM Global BIOC rules for consistent detections across endpoints.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a BIOC?"}]},{"id":"ixo2bPxJwKGyWJNTmEkB","title":"What's a correlation rule?","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM correlation rules detect relationships across events and data sources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"tdnJ2jpzM1G9dnBc0f2g","title":"Correlation rule details","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/correlation-rule-details","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM correlation rule settings, query logic, and issue generation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"7YkObmzkpArfnDIESpsE","title":"Create a correlation rule","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/create-a-correlation-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM correlation rules using XQL to detect patterns across data sources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"84pik6mX4BjmhioQlueS","title":"Field replacement syntax in correlation rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/field-replacement-syntax-in-correlation-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM field replacement syntax in correlation rule queries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"F3sA0ZSKwyMOyc2eXVxQ","title":"Manage correlation rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/manage-correlation-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM correlation rules, including rule settings, status, and configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"y92zYYvQTyRA8h0YGFbo","title":"Monitor correlation rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/monitor-correlation-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor Cortex XSIAM correlation rule runs, errors, and detection health.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"WGHZh9pWkwRnmHY9BmzZ","title":"Troubleshoot server errors in scheduled correlation rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/troubleshoot-server-errors-in-scheduled-correlation-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Troubleshoot scheduled Cortex XSIAM correlation rule server errors and failed executions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"7jCLAp3w27rQ5KV1BZ63","title":"Manage IOC and BIOC rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/detection-rules/what-are-detection-rules/manage-ioc-and-bioc-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM IOC and BIOC rules to maintain threat detections.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"YtQhXMl2BmttDlWG8AG2","title":"Analytics","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM Analytics detects anomalous behavior using analytics engines, sensors, and rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"}]},{"id":"gR3ySmrQUhGdiNwp0eJr","title":"Analytics overview","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM Analytics establishes behavioral baselines, identifies anomalies, and creates issues for investigation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"sZesgGlwl7WBiAblthk0","title":"Analytics engine","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-engine","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how the Cortex XSIAM Analytics engine analyzes data to detect anomalous behavior and generate issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"K8bmSRdk3GFkhM3cF7hO","title":"Analytics sensors","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-sensors","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM Analytics sensors that collect telemetry for behavioral baselines and anomaly detection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"gewdsNvdSPJA8qOtA4rQ","title":"Coverage of MITRE Attack tactics","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/coverage-of-mitre-attack-tactics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM Analytics coverage of MITRE ATT&CK tactics to understand detection visibility.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"yC4KrssEkiWXbmYnNXIs","title":"Review MITRE ATT&CK framework coverage","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/review-mitre-att-and-ck-framework-coverage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM Analytics coverage across the MITRE ATT&CK framework, tactics, and techniques.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"bEE5pZTOlIapWnXnPflX","title":"Analytics detection time intervals","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-detection-time-intervals","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM Analytics detection time intervals and their effect on anomaly identification.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"MVVZT7n7lGEnalYYOjsM","title":"Analytics issues and Analytics BIOCs","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-issues-and-analytics-biocs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM Analytics issues and BIOCs identify anomalous activity for investigation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"9Xw7ZTTptUDOBt4byusb","title":"Identity Analytics","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/identity-analytics","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Identity Analytics to identify anomalous user and identity-related behavior.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"VbGUDF77aYroLPQLI8OK","title":"View and manage Analytics rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/view-and-manage-analytics-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View and manage Cortex XSIAM Analytics rules that detect anomalous behavior and generate issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"UBBhqWLUXvnFoabP2lEF","title":"AI Detection & Response in Cortex XSIAM","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use AI Detection & Response in Cortex XSIAM to identify and investigate AI-related security risks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"rYjjJ3JNlODqL5VlfnQR","title":"Data sources and supported services","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/data-sources-and-supported-services","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review data sources and supported services for AI Detection & Response in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"}]},{"id":"rbd3tWQzmhUOSVndq1Io","title":"Collect prompt logs","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/collect-prompt-logs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Collect prompt logs in Cortex XSIAM to support AI Detection & Response monitoring and investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"}]},{"id":"ehdKDJetKkIOxeeCAv6Q","title":"Prompt log collection in AWS","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/collect-prompt-logs/prompt-log-collection-in-aws","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM to collect prompt logs from AWS for AI Detection & Response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"},{"label":"Collect prompt logs"}]},{"id":"DDO0RKy8OjdrKUdybC9g","title":"Enable prompt log collection in Azure","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/collect-prompt-logs/enable-prompt-log-collection-in-azure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable Azure prompt log collection in Cortex XSIAM for AI Detection & Response monitoring.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"},{"label":"Collect prompt logs"}]},{"id":"uoyKlaKapMnhylYztVMK","title":"Configure the Azure Event Hub collection in Cortex XSIAM","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/collect-prompt-logs/enable-prompt-log-collection-in-azure/configure-the-azure-event-hub-collection-in-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Azure Event Hub collection in Cortex XSIAM to ingest prompt logs for AI Detection & Response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"JlxfaxkVH4hqZmjHpxTi","title":"Set up prompt logging","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/collect-prompt-logs/enable-prompt-log-collection-in-azure/set-up-prompt-logging","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up prompt logging in Cortex XSIAM to collect AI interaction data for security monitoring.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"zLB97eJ0JXkU7eahVXRI","title":"Log HTTP data","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/collect-prompt-logs/enable-prompt-log-collection-in-azure/log-http-data","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM to collect HTTP data for AI Detection & Response monitoring and investigation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"90ATVCjzHHwctiq3OnlI","title":"Configure diagnostic settings","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xsiam-beta/collect-prompt-logs/enable-prompt-log-collection-in-azure/configure-diagnostic-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Azure diagnostic settings for Cortex XSIAM prompt log collection and AI Detection & Response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XSIAM"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"RcpwiBUk7ndGnHWaFFSa","title":"Extended Threat Intelligence","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Extended Threat Intelligence in Cortex XSIAM to research threats, investigate indicators, and strengthen security workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"}]},{"id":"8VxuGA5jgl0MtPt2lVU6","title":"XTI Threat Intel Library","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/xti-threat-intel-library","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore the Cortex XSIAM XTI Threat Intel Library for Unit 42 threat actors, malware families, vulnerabilities, and reports.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"skveOfGm52NUfrmCQF8s","title":"XTI Indicators","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/xti-indicators","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate, manage, and enrich threat indicators in Cortex XSIAM, including domains, IP addresses, URLs, and file hashes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"ZGgp7oqBqPftxeyQk8X1","title":"Threat intel context in cases and issues","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/threat-intel-context-in-cases-and-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM threat intelligence context to analyze indicators and Behavioral Threat Analysis findings in cases and issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"p8hl3EwpJoEbJTOOL6OQ","title":"XTI indicator rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/xti-indicator-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM XTI indicator rules to detect known threat indicators and generate issues from matching data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"fuZ16Uuhmy5kk5LXj6ih","title":"Threat intel investigation through XQL","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/threat-intel-investigation-through-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM XQL to query XTI indicators, threat objects, and relationships for threat intelligence investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"Q2VRFQopQwukqn1BZhFQ","title":"Threat Intel Dashboard","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/threat-intel-dashboard","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Threat Intel Dashboard to monitor intelligence distribution, ingestion health, and emerging threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"AUhRkwrffJeQBVf5G8PJ","title":"Using XTI with Threat Intel Agent","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/using-xti-with-threat-intel-agent","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Threat Intel Agent to list, enrich, and update Extended Threat Intelligence indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"SytiH6p7WmTeAfTauxDU","title":"Using XTI in playbooks","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/using-xti-in-playbooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM playbooks to automate XTI indicator triage, enrichment, and response with supported commands.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"ViVZQ65xMfUAP7TgHUNl","title":"Threat Intel Management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage threat indicators, feeds, enrichment, and detection workflows with Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"}]},{"id":"HMF8sU0F3A4D5zTFuIcA","title":"Get started with Threat Intel Management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn Threat Intel Management concepts, use cases, roles, and the indicator lifecycle.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"}]},{"id":"bKm6tHu1ZNGLXYGjoHh2","title":"What is Threat Intel Management?","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Threat Intel Management centralizes indicators, enrichment, and investigation workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"af5265HNF38FZPEUwxt6","title":"Threat Intel Management use cases","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore workflows for ingesting, enriching, investigating, and acting on threat indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"onWuwIfufiqgcigvNUaT","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand the roles and responsibilities for configuring and operating Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"HxY28UvIlIXz67JkdEc4","title":"Indicator concepts","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn the indicator concepts, fields, types, and sources used in Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"uP8UIdREiGKi2Is67Fo0","title":"Indicator lifecycle","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand how indicators are created, enriched, managed, expired, and removed.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"Rtj5QMjtLbPLI2m4lbsv","title":"Indicator configuration","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure feeds, indicator types, fields, extraction, enrichment, and indicator rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"}]},{"id":"qTZeTryddBdEOU9BNyg6","title":"Configure Threat Intelligence feed integrations","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/configure-threat-intelligence-feed-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect threat intelligence feeds to ingest indicators into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"0fyhPfxJQOnvOy7pl8qQ","title":"Customize indicator fields and types","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Customize indicator types and fields to organize threat intelligence data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"RIY2Elkj1hcZgt2vgMVx","title":"Create an indicator type","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom indicator types and configure their profiles, scripts, and field mappings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"}]},{"id":"56Gmz0KYkNVtDrsEFgV0","title":"Indicator type profile","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/indicator-type-profile","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure profile settings that define an indicator type's behavior and appearance.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"XRGxAa32o2QcZQnJiMUa","title":"Formatting scripts","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/formatting-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use formatting scripts to normalize indicator values before storage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"dqbpPo5tt9LAixeY7UIA","title":"Enhancement scripts","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/enhancement-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use enhancement scripts to add threat intelligence context to indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"S0j4CMPcG11s1MoXIwR3","title":"Reputation scripts","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/reputation-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use reputation scripts to calculate or update an indicator's reputation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"b6K4rK8npLbBcu9Ll9Tj","title":"Reputation commands","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/reputation-commands","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure integration commands that retrieve reputation data for indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"oywln3Vcqu5LGHqLDGfa","title":"Map custom indicator fields","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/map-custom-indicator-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map custom fields to indicator types for consistent indicator data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"V7yXCIrz3t8CyAQuMLSW","title":"Create an indicator field","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-field","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom fields to store additional threat indicator information.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"}]},{"id":"Tpnq6qYA4LPFUHT0X0bP","title":"Indicator field structure","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-field/indicator-field-structure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand the structure and settings available for custom indicator fields.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator field"}]},{"id":"k12GdiA0Cy5M2GZ1LLjm","title":"Indicator field trigger scripts","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-field/indicator-field-trigger-scripts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use trigger scripts to run actions when indicator field values change.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator field"}]},{"id":"Iktb7rJjRU6S3Fi7VGAs","title":"Indicator classification and mapping","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Classify and map extracted values to the appropriate indicator types and fields.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"ESTEGJK3eD30pb5Ii38G","title":"Indicator extraction","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure how Cortex XSIAM extracts indicators from tasks, scripts, and integrations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"tv2CadJdk6D9OdDMFVPw","title":"Set the indicator extraction mode for a playbook task","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/indicator-extraction/set-the-indicator-extraction-mode-for-a-playbook-task","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Choose how a playbook task extracts and creates indicators from its output.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"DXHaq0UxPoxf7wT9IXiv","title":"Disable indicator extraction for scripts or integrations","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/indicator-extraction/disable-indicator-extraction-for-scripts-or-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Prevent selected scripts or integrations from automatically extracting indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"h0wNA1AwjjEMeXxs6of1","title":"Configure Threat Intelligence feed integrations","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/configure-threat-intelligence-feed-integrations-1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure threat intelligence feed integrations and manage their indicator ingestion.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"ZYdZuc4t8HWRIw1psxk3","title":"Exclude indicators from enrichment","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Exclude selected indicators from enrichment to control processing and data usage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"jaRSf1sb3zcmYkBCcoFj","title":"Generate issues from indicators using indicator rules for prevention and detection","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/generate-issues-from-indicators-using-indicator-rules-for-prevention-and-detection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create rules that generate prevention or detection issues from matching indicators.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"J6SqeyUQv0nQZxAI8qE5","title":"Export indicators","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-configuration/export-indicators","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Export threat indicators for use in external systems and workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"yLHdHZsICkr4R1gbAEp6","title":"Indicator management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create, view, edit, and organize threat indicators throughout their lifecycle.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"}]},{"id":"w4kTEkdADiQFL2qJyxtH","title":"Indicator investigation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate indicators using verdicts, enrichment, relationships, expiration, and exclusions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"}]},{"id":"LDEYB41TwPI1cEvkvi4P","title":"Indicator verdict","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand indicator verdicts and how they assess threat relevance.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"mBNoKUKQvHngq70Y8hjl","title":"Extract and enrich an indicator","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Extract indicators from data and enrich them with context from supported integrations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"mpZMkNJCPHYITSGv8GxU","title":"Expire an indicator","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Expire indicators when they no longer require active monitoring or matching.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"L8UFZqqMkROHRsHV7wkA","title":"Manage indicator relationships","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage relationships between indicators to capture threat context.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"NanV7DqCHzCHYTRbW3zS","title":"Delete and exclude indicators","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/threat-management/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Delete unwanted indicators or exclude them from future ingestion and enrichment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Threat management"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"RsdIFXdmUQJF73vH9DBE","title":"Attack surface management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to discover, monitor, and remediate external asset exposures with Cortex XSIAM attack surface management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"70tcxqmVcZTeB5ZVf6CN","title":"Learn about Attack Surface Management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about Cortex XSIAM Attack Surface Management (ASM) capabilities for finding, prioritizing, and remediating external asset exposures.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"}]},{"id":"XCK1SC7b2TtbxLc6YUui","title":"Network mapping","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management/network-mapping","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM discovers, attributes, and validates internet-facing assets to map your public attack surface.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"},{"label":"Learn about Attack Surface Management"}]},{"id":"1v20uaxVkm5k4ZPNbMUN","title":"Scanning","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management/scanning","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM ASM scans internet-facing assets, monitors known assets, and identifies exposed services.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"},{"label":"Learn about Attack Surface Management"}]},{"id":"YWk6vhhr9ELjbClqiUgB","title":"GeoIP data collection","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management/geoip-data-collection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"ASM in Cortex XSIAM uses GeoIP data to validate network distribution, identify location-based compliance risks, and route remediation efforts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"},{"label":"Learn about Attack Surface Management"}]},{"id":"jkyD56IcZ5yekmOIKI2M","title":"Attack Surface Management detections","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about Cortex XSIAM Attack Surface Management detections, findings, and issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"}]},{"id":"ZRprXkQ7vb1veS3DP8X1","title":"Attack surface rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/attack-surface-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM ASM uses attack surface rules to identify risks, generate findings, and manage severity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"f32FhPriJp6NlyaKIMRQ","title":"Attack Surface Testing","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/attack-surface-testing","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Attack Surface Testing to validate external asset exposure and detection coverage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"JlwE5MHtb6Li0OIFw2QR","title":"Externally inferred CVEs","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/externally-inferred-cves","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM to identify externally inferred CVEs affecting internet-facing assets and prioritize remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"A1f9R8FMT5kW5nLdMGGI","title":"Digital Risk Protection","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/digital-risk-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Digital Risk Protection to identify external threats, exposure, and brand-related risks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"F5OjVt5GUEVBv8kPRNaw","title":"Attack surface assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM attack surface assets and submit CSV requests to add or remove them.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"}]},{"id":"l6aSyub9QbSj9SM63lE3","title":"Deploy ASM and Exposure Management enrichment and remediation automation","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/deploy-asm-and-exposure-management-enrichment-and-remediation-automation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable the Exposure Management playbooks in Cortex XSIAM to automate ASM and vulnerability issue enrichment and remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"}]},{"id":"KB3fWSW7WXzwfVO0bxA5","title":"ASM enrichment of cloud assets","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/asm-enrichment-of-cloud-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"ASM enrichment of cloud assets in Cortex XSIAM provides visibility into all the assets in your cloud infrastructure that are exposed to the internet.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"}]},{"id":"gudWk7qRujZwqRvMSUlc","title":"Emerging Vulnerabilities","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/emerging-vulnerabilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Identify external exposures linked to emerging vulnerabilities, zero-day exploits, and global threat events on the Emerging Vulnerabilities page in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"}]},{"id":"tyiiLZGWsix4VkYX7Ta2","title":"Global Lookup","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/global-lookup","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Query and enrich global internet scan data for IP addresses, domains, and certificate hashes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Attack surface management"}]},{"id":"FGWCkaYpBTaiacOLfcXb","title":"Vulnerability management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage, prioritize, and remediate vulnerabilities across endpoints, code, and cloud with Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"rx407euy9VKLAnKJFKsr","title":"Vulnerability management in Cortex XSIAM","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/vulnerability-management-in-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Vulnerability Management to identify, assess, prioritize, and remediate vulnerabilities across your environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Vulnerability management"}]},{"id":"ypjQFMEAFR4PqJyBXKtu","title":"Cortex Vulnerability Risk Score","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/cortex-vulnerability-risk-score","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM calculates and displays Cortex Vulnerability Risk Scores for prioritized remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Vulnerability management"}]},{"id":"nXcpRJPqcTtKaPwdiDvJ","title":"Vulnerability policies","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/vulnerability-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM vulnerability policies to define actions for selected vulnerability findings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Vulnerability management"}]},{"id":"jio9rNNaIstLZsmE07Wt","title":"Investigate and remediate vulnerabilities","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/investigate-and-remediate-vulnerabilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate, prioritize, and remediate vulnerabilities through Cortex XSIAM issues, findings, and vulnerable assets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Vulnerability management"}]},{"id":"aVMHijQvu0RxOEkucZXS","title":"Vulnerability Intelligence","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/vulnerability-intelligence","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Vulnerability Intelligence for real-time data and threat intelligence from certified sources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Vulnerability management"}]},{"id":"80aGayBcDOGzG3ZLSunN","title":"Emerging Vulnerabilities","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/emerging-vulnerabilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Emerging Vulnerabilities to research, assess, and respond to zero-day exploits and global threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Vulnerability management"}]},{"id":"AQUfXjsulDTaHmdGc72j","title":"Recast CVSS scores and CVSS severities","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/recast-cvss-scores-and-cvss-severities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Recast CVSS scores and severities in Cortex XSIAM to align vulnerability risk with organizational priorities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Vulnerability management"}]},{"id":"trAlReenEKZYI51TkKAT","title":"Exposure management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Assess, prioritize, and remediate organizational exposures with Cortex XSIAM Exposure Management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"92LUbWQfcDk2OWutQjMZ","title":"Learn about Exposure Management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/exposure-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM Exposure Management unifies exposure data, prioritization, and remediation workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Exposure management"}]},{"id":"XWQzOiOcjCtZRPGExQR5","title":"Get started with Exposure Management","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/get-started-with-exposure-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up Cortex XSIAM Exposure Management with scanners, integrations, policies, security controls, and automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Exposure management"}]},{"id":"6ih86l9QoR875M55Xo7P","title":"Ingest assets and vulnerabilities from third-party applications","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/ingest-assets-and-vulnerabilities-from-third-party-applications","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest assets and vulnerabilities from third-party applications into Cortex XSIAM Exposure Management.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Exposure management"}]},{"id":"h5yyw2nvtCGe6Bp5cwhQ","title":"Security controls","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/security-controls","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM security controls to assess compensating-control effectiveness and residual exposure risk.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Exposure management"}]},{"id":"foEe4CZHSwTnqqvlqyti","title":"Cortex Network Scanner","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/cortex-network-scanner","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy Cortex XSIAM Network Scanner to discover assets, assess vulnerabilities, and investigate issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Exposure management"}]},{"id":"XbuX7lCi4uGy3jc8NyAT","title":"Exposure Management Command Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/exposure-management-command-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Exposure Management Command Center to prioritize findings and track remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Exposure management"}]},{"id":"B4hYeBSN6B24RhOSL1IY","title":"Cortex Advanced Email Security","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure, monitor, and respond to email security threats with Cortex XSIAM Advanced Email Security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"tq4pwSCG2ObLwP8a3BgX","title":"Cortex Advanced Email Security module overview","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-module-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM Advanced Email Security detects, investigates, and remediates email threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"SbaCxZtZQwkgjVf2Y0Dm","title":"Cortex Advanced Email Security module architecture and data flow","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-module-architecture-and-data-flow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM Advanced Email Security architecture, integrations, and email threat data flow.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"UUQUDwc7vprLY1NQtEVL","title":"Getting started with the Cortex Advanced Email Security module","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/getting-started-with-the-cortex-advanced-email-security-module","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with Cortex XSIAM Advanced Email Security using the deployment workflow and setup requirements.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"DCmRV68QD5Pvczz5jkw0","title":"Deploy and configure the Email Security module","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/deploy-and-configure-the-email-security-module","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Deploy and configure Cortex XSIAM Advanced Email Security to protect your email environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"xcM2BgVmosLqdZSn7Y3c","title":"Cortex Advanced Email Security threat detection and issues","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-threat-detection-and-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Advanced Email Security to detect email threats and investigate related issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"trRQiaXUgCMYeqYw7tAp","title":"Email Security Analytics Rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-threat-detection-and-issues/email-security-analytics-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM Email Security Analytics Rules to detect suspicious email activity and create issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"},{"label":"Cortex Advanced Email Security threat detection and issues"}]},{"id":"WCxwQ0Cg5bjrpwbiwmiM","title":"Investigate and respond to email security issues","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/investigate-and-respond-to-email-security-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate and respond to email security issues with Cortex XSIAM Advanced Email Security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"5eYIEzLgxA7iTUOU9WFK","title":"Automate remediation for the Cortex Advanced Email Security module","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/automate-remediation-for-the-cortex-advanced-email-security-module","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Automate Cortex XSIAM Advanced Email Security remediation workflows for detected email threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"ih0nuouorOiWHjmhcDzM","title":"Email Remediation Response Rules","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/automate-remediation-for-the-cortex-advanced-email-security-module/email-remediation-response-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM Email Remediation Response Rules to automate responses to email threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"},{"label":"Automate remediation for the Cortex Advanced Email Security module"}]},{"id":"jtNLUk0yPkNxTJ9ecHIb","title":"Email Security Remediation Action Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/automate-remediation-for-the-cortex-advanced-email-security-module/email-security-remediation-action-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Email Security Remediation Action Center to track and manage response actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"},{"label":"Automate remediation for the Cortex Advanced Email Security module"}]},{"id":"15X5SpxqL4WZBb7Jw51K","title":"Email Command Center","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/email-command-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Email Command Center to monitor email security status and threat activity.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"XrmlVr5CeStzodzkqwKe","title":"Malicious Email Inventory","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/malicious-email-inventory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Malicious Email Inventory to investigate and manage detected malicious messages.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"ZreOeBPGzH6rEIWEiXAa","title":"Mailbox Inventory","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/mailbox-inventory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Mailbox Inventory to view and investigate protected email mailboxes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"cY5Gtm5WBclT2dAtRpFW","title":"Advanced Email Security module security and compliance","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/advanced-email-security-module-security-and-compliance","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM Advanced Email Security security controls and compliance considerations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Cortex Advanced Email Security"}]},{"id":"phVVUAGpl2m3nmrfJJn8","title":"Identity Threat Detection and Response (ITDR)","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Identity Threat Detection and Response to detect, investigate, and respond to identity threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"}]},{"id":"oD6brIoLsLA7N5Ex9Ewg","title":"Get started with ITDR","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/get-started-with-itdr","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with Cortex XSIAM Identity Threat Detection and Response to protect identities and investigate threats.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"gYBEWvZA6TabM3uj2Z2f","title":"Manage role based access control (RBAC) in ITDR","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/manage-role-based-access-control-rbac-in-itdr","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage role-based access control in Cortex XSIAM ITDR to control access to identity security capabilities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"5RiUzwGlNO5pt2zkqziT","title":"Monitor user risk exposure","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/monitor-user-risk-exposure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor user risk exposure in Cortex XSIAM ITDR to identify risky identity activity and prioritize response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"Tc801hlpsN5eenujNb6r","title":"Investigate user risk","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/investigate-user-risk","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate user risk in Cortex XSIAM ITDR to assess identity threats and guide response actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"WL9kBglIgm6TaaDdT1fp","title":"Manage user asset roles","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/asset-roles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage user asset roles in Cortex XSIAM ITDR to classify identities and strengthen identity risk analysis.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"AGvosok3xlA9k8iMeRIM","title":"Improve Active Directory posture with AD-SPM","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/active-directory-security-posture-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM ITDR AD-SPM to improve Active Directory posture and reduce identity attack risks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"kwnJ0fMAtDnr0s9sdECm","title":"Enforce dynamic access control with CAP","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/conditional-access-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM ITDR Conditional Access Policies to enforce dynamic access control and reduce identity risk.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"fTQkMyJp5SVAayc8AZrm","title":"Prevent malicious LDAP queries","pathname":"/cortex-xsiam/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/prevent-malicious-ldap-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM ITDR to detect and prevent malicious LDAP queries that target Active Directory.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Detect, Investigate, and respond to threats","icon":"search"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"nPol5z8Vpg9VDb9Pct35","title":"Rules and Policies","pathname":"/cortex-xsiam/cloud-security/rules-and-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Discover how Cortex XSIAM detects security risks across your infrastructure, workloads, and container images, and how policies automate the response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"kcUCjWr2PJIYBNByZPWV","title":"Cloud security rules and policies","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how cloud security rules and policies detect threats and misconfigurations across your Cortex XSIAM environment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"YO5nM72xUDDpbZ4iV77y","title":"Cloud security rules","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/cloud-security-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about out-of-the-box and custom cloud security rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"FnInTllzGNlgBiGnGBDs","title":"Cloud security policies","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/cloud-security-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about cloud security policies in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"3qi5f53GvVkOFarZB4qu","title":"Create and manage cloud security rules","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage custom cloud security rules for detecting cloud security risks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"e7b097710ffdbe5d521e20a860b2677e0585f684","title":"Create a graph rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-graph-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom graph detection rules that identify risky relationships and attack paths in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"IwBitFJ9rp3JgbH2ldZP","title":"Create a configuration rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-configuration-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM configuration rules that identify cloud resource misconfigurations and policy violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"HzI01QU6NBZjkTrooJi4","title":"Create a data rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-data-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM data rules to detect data risks, malware, and classification issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"yzywYvlejnkKJZHOjusf","title":"Create an identity rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-identity-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM identity rules to detect excessive or unused cloud permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"G29QfOdepfYJsTQBvP9I","title":"Create a network exposure rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-network-exposure-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM network exposure rules to detect risky inbound, outbound, and east-west access.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"NvOc9XId9f2WdObt91Br","title":"Create an AI rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-ai-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM AI rules to detect risks and misconfigurations across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"Vgck3y9bEq3nDcyjEuQG","title":"Create an attack path (legacy) rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-attack-path-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM attack path rules that identify breach paths to high-value cloud assets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"2acrVkP2hvs2L8ilhLl3","title":"View cloud security rule status","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/view-cloud-security-rule-status","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View, filter, and sort the status of cloud security rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"DgqVzyX7OZOKDVBNe6Zi","title":"Edit a cloud security rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/edit-a-cloud-security-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit cloud security rules in Cortex XSIAM and understand how changes affect related issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"x6sUolRzjMz8KSo7bmnZ","title":"Enable or disable a rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/enable-or-disable-a-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable or disable cloud security rules in Cortex XSIAM to control when they evaluate assets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"MFP5UjPOGEAbjl55F4nJ","title":"Use an existing rule to create a new one","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/use-an-existing-rule-to-create-a-new-one","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Duplicate an existing cloud security rule in Cortex XSIAM and customize it for your needs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"slvcG3qwO9bLgGfKkso0","title":"Delete a custom cloud security rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/delete-a-custom-cloud-security-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Delete custom cloud security rules in Cortex XSIAM that are no longer needed.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"JBKc2ByQl9KujfpvFV4q","title":"Create and manage cloud security policies","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage cloud security policies in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"b5cB2Fc2OKRhbnGauLb4","title":"Create a cloud security policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/create-a-cloud-security-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create a cloud security policy in Cortex XSIAM that applies security rules to selected cloud assets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"BYBnisM8vQ1qnJCBHpF3","title":"Edit a cloud security policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/edit-a-cloud-security-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit cloud security policies in Cortex XSIAM to update their details, rules, and scopes.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"KIdBo9H4zZ6xkddzxAbu","title":"Enable or disable a policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/enable-or-disable-a-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable or disable custom and default cloud security policies in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"NWAaBxFRWm4doF4Fx4Qg","title":"Use an existing policy to create a new one","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/use-an-existing-policy-to-create-a-new-one","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Clone an existing cloud security policy in Cortex XSIAM and tailor it to your needs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"RUKQckeCf8h1TgUBnhw7","title":"Delete a custom cloud security policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/delete-a-custom-cloud-security-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Remove custom cloud security policies in Cortex XSIAM that are no longer needed.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"No4hJO8AAoUtG7TlGIPt","title":"Cloud workload policies and rules","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM cloud workload policies and rules to detect security violations, create issues, and prevent misconfigurations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"dlF2gxdhB8QF9KGeZhVP","title":"How policies and rules work together","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/how-policies-and-rules-work-together","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand how Cortex XSIAM cloud workload rules detect violations and policies create issues or apply preventive actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"}]},{"id":"v5aRRW5kKjvsoIY5Vtsc","title":"Cloud workload policies","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM cloud workload policies to detect violations, create issues, and prevent risks across SDLC stages.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"}]},{"id":"UpTa2wVXvsIbW2ZEABRy","title":"Types of cloud workload policies","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM cloud workload policy types for misconfigurations, malware, secrets, and trusted images.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"pnTko0A7fO0G9sT737i6","title":"Trusted image cloud workload policies","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies/types-of-cloud-workload-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM trusted image policies to evaluate image trust, prevent untrusted deployments, and create security issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"},{"label":"Types of cloud workload policies"}]},{"id":"AnkGI324nd964uvyNLXX","title":"Cloud Workload Policies page","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Cloud Workload Policies page to view, filter, configure, and manage workload security policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"3DIvBY8qY5fGgStvfjiL","title":"Enable or disable a cloud workload policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/enable-or-disable-a-cloud-workload-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable or disable a Cortex XSIAM cloud workload policy to control its evaluation and enforcement.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"KrBlf8wG2wzqKGRjO0gx","title":"Create a cloud workload policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/create-a-cloud-workload-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM cloud workload policies for misconfiguration, malware, secret, and trusted image protection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"WBi14CCe4AGt1pHxzfPW","title":"Use an existing policy to create a new cloud workload policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/use-an-existing-policy-to-create-a-new-cloud-workload-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Duplicate an existing Cortex XSIAM cloud workload policy to reuse and modify its conditions, scope, and actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"n2uCKHQ5Vutb3d7spFl5","title":"Edit a cloud workload policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/edit-a-cloud-workload-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit a Cortex XSIAM cloud workload policy to update its configuration and security enforcement settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"7TUoy1pvbrpsj1RXkSo4","title":"Delete a cloud workload policy","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/delete-a-cloud-workload-policy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Delete a Cortex XSIAM cloud workload policy that is no longer needed for workload security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"IaSF0t3bG8MfCoU3DIOV","title":"Cloud workload preventive action","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-preventive-action","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM cloud workload preventive actions block Kubernetes deployments and fail CI pipelines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"yw32B8CtYiQcGIx2IrOR","title":"Cloud workload rules","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM cloud workload rules to define detection criteria for security violations and policy enforcement.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"}]},{"id":"nXsOHicYERTLP3Mvtedv","title":"Default (pre-defined) rules","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/default-pre-defined-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM predefined cloud workload rules that detect risks, prevent violations, and create issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"O9KF6qiXdH9wvS8xeTji","title":"Custom (user-defined) rules","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/custom-user-defined-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM custom cloud workload rules for organization-specific security, compliance, and misconfiguration checks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"riv8FcGrIHW1tso73XNz","title":"Cloud Workload Rules page","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM Cloud Workload Rules page to view, filter, and manage built-in and custom rules.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"ZSppXp3cdKHHUjjFMza9","title":"Create a new custom detection rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM custom cloud workload detection rules using agentless, Kubernetes, or XDR Agent scanners.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"S1LTURXZvkIsvAKTBXx0","title":"Use an existing rule to create a new custom detection rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/use-an-existing-rule-to-create-a-new-custom-detection-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Duplicate an existing Cortex XSIAM cloud workload rule to create and customize a new detection rule.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"bPVgq5GMKIHYpwDDTyNP","title":"Edit a custom detection rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/edit-a-custom-detection-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit a Cortex XSIAM custom cloud workload detection rule to update its security and compliance checks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"gKzRBtRC1OpmLgToQpbn","title":"Delete a custom detection rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/delete-a-custom-detection-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Delete a Cortex XSIAM custom cloud workload detection rule that is no longer required.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"4dzYFy0DezNRgF09OfwQ","title":"Base image rules","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/base-images-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM base image rules to map container image lineage, trace vulnerabilities, and manage approved foundational images.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"6DTeWpcRQf5z3FCdCZso","title":"Create a base image rule","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/base-images-rule/create-a-base-images-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage Cortex XSIAM base image rules for scanned registry images, including filters, previews, and rule updates.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Base image rules"}]},{"id":"0qBy5UHo6ro99QfroStV","title":"Find the base image for an asset","pathname":"/cortex-xsiam/cloud-security/rules-and-policies/base-images-rule/prerequisites","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Find a container asset's base image in Cortex XSIAM to inspect registry image details and upstream or downstream lineage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Base image rules"}]},{"id":"sCqDAIcNXPOlmgeVnVow","title":"Monitor and track compliance adherence","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Evaluate and track Cortex XSIAM asset compliance against industry standards and organizational policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"FYSRkpNR9vraQkcBcvXt","title":"Choose compliance standards from the compliance catalog","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Select built-in or custom compliance standards and controls from the compliance catalogs in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"}]},{"id":"M14MAGNUrwKPIjMt6BhE","title":"Standards catalog","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/standards-catalog","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Browse available compliance standards in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"dOAmjRejOL5Q8kFd8zM2","title":"Use a built-in or custom standard","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-standard","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use built-in standards or create and edit custom standards in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"4vokHG2L0JvwmQv85qjB","title":"Use a built-in or custom control","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-control","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Add built-in controls or create and manage custom controls for custom standards in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"HCaHjSXAm6zgxwUhDQdO","title":"Create a new custom detection rule","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cortex XSIAM detection rules to enforce compliance requirements and security best practices.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"qw9tHFAvEBK3M6nz01RF","title":"Use an assessment profile to run compliance checks on your assets","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create assessment profiles to evaluate selected asset groups against compliance standards in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"}]},{"id":"zq7BCnHbxK4VQQai7jps","title":"View and manage compliance assessments and reports","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex XSIAM assessment results and generate or schedule downloadable compliance reports.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"}]},{"id":"Ic5Mu8IBJMziT9Ofm4yn","title":"Review compliance assessments","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/assessments","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View Cortex XSIAM assessment results and drill into control, rule, and asset compliance details.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"wkgPV3S2Nbez6G146sgH","title":"Review compliance reports","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View, export, and manage historical Cortex XSIAM compliance assessment reports.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"FZxsm5wwqQA9voBn3ZZH","title":"Compliance Overview Dashboard","pathname":"/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/compliance-overview-dashboard","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor organization-wide Cortex XSIAM compliance scores, standards, failed controls, and asset group performance.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Monitor and track compliance adherence"}]},{"id":"lJdl9KZcgEaMkcOpIl8R","title":"Cloud Data Classification","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage data patterns, profiles, OCR, and masked sample collection for cloud data classification in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"G81NkgaI7tg0wFx5OoBN","title":"How to create and validate a custom data pattern","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and validate custom data patterns in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Data Classification"}]},{"id":"vfxu9E2vAiW96QqaaJe7","title":"Custom data patterns: Guardrails and syntax guide","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern/custom-data-patterns-guardrails-and-syntax-guide","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Follow guardrails and syntax requirements for custom data patterns in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Data Classification"},{"label":"How to create and validate a custom data pattern"}]},{"id":"PPZWeeYvFOYB4XaLRRpk","title":"How to disable and enable data patterns in Data Classification","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-disable-and-enable-data-patterns-in-data-classification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable or disable data patterns in Cortex XSIAM Data Classification.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Data Classification"}]},{"id":"pKlQuuncfU0tN3tHPDlf","title":"How to create and validate a custom data profile","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-profile","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and validate custom data profiles in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Data Classification"}]},{"id":"K7BUYEw5naZsHt6QUvpf","title":"How to disable and enable data profiles in Cloud Data Classification","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-disable-and-enable-data-profiles-in-cortex-cloud-data-classification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable or disable data profiles in Cortex XSIAM Data Classification.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Data Classification"}]},{"id":"CF6jOqOdUlsLAuUWbmNX","title":"How to report a false positive in Cloud Data Classification","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-report-a-false-positive-in-cortex-cloud-data-classification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Report false positives in Cortex XSIAM Data Classification.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Data Classification"}]},{"id":"eBOo5VBXwW2BMox9CweA","title":"Topic classification","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-data-classification/topic-classification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Classify cloud data by topic in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Data Classification"}]},{"id":"gmCet7FGYsOZSOu9wtRJ","title":"Cloud Identity Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Address cloud identity security challenges by managing identity risks and permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"LQrzNDEQj1jzeys4GN5t","title":"What is Cloud Identity Security?","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/what-is-cortex-cloud-identity-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cloud Identity Security in Cortex XSIAM secures cloud identities and permissions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"sAdVhPyH3LUA1E3iUCHV","title":"Review and improve your Identity Security posture","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/review-and-improve-your-identity-security-posture","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to review and improve your Identity Security posture in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"NMf1VbJfG4SwjwNfbncL","title":"How does Effective Permission Calculation work?","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/how-does-effective-permission-calculation-work","siteSpaceId":"sitesp_xTOni","lang":"en","description":"An explanation of how Effective Permission Calculation works in Cloud Identity Security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"eOUYykDInAxpopIfu8b1","title":"Cloud Identity Security functionality","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/cortex-cloud-identity-security-functionality","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cloud Identity Security functionality in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"PX1OdWtEytpteaHBYBaB","title":"Configure Cloud Identity Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/configure-cortex-cloud-identity-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cloud Identity Security settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"G44urwH65MWq7HB0KMDI","title":"Unified Human Identities","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/unified-human-identities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Unified Human Identities correlate accounts in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"mGFAOmlkNOWgpL7xZyKP","title":"Achieve the principle of least privilege access","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/achieve-the-principle-of-least-privilege-access","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cloud Identity Security in Cortex XSIAM to achieve least privilege access.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"nc4BjZzyodg7qbrzM6kp","title":"Explore permissions using the simple and advanced access tables","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/explore-permissions-using-the-simple-and-advanced-access-tables","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore permissions with the Simple and Advanced access tables in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"8CDIMlVwGlgssjnQTdv8","title":"Create a custom detection rule in Cloud Identity Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/create-a-custom-detection-rule-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create custom Cloud Identity Security detection rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"VDMb4L6oN5hgX4rizF8S","title":"Perform advanced Identity Security investigations using XQL","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/perform-advanced-identity-security-investigations-using-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use XQL in Cortex XSIAM to investigate Cloud Identity Security permissions, identity risks, and access data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"w8cPhxpfgO0sNT0cMf0e","title":"Ingest logs and data from Okta","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Okta logs and configuration data into Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"7OR41S3cPAadnM7bBXSW","title":"Enable inactive human identity logs on Azure in Cloud Identity Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/enable-inactive-human-identity-logs-on-azure-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable Azure inactive human identity logs for Cloud Identity Security in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"ckBRVgEYdFfDSdkR64dO","title":"Manage RBAC and SBAC in Cloud Identity Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-identity-security/manage-rbac-and-sbac-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage RBAC and SBAC for Cloud Identity Security in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cloud Identity Security"}]},{"id":"DufIulvT2W4tVLwxX94R","title":"Network exposure detection","pathname":"/cortex-xsiam/cloud-security/network-exposure-detection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Discover how to identify, prioritize, and remediate internet, outbound, and lateral network exposure risks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"TnHUSeSGo3DhRQRNp18a","title":"What is Cloud Network Analyzer?","pathname":"/cortex-xsiam/cloud-security/network-exposure-detection/what-is-cloud-network-analyzer","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cloud Network Analyzer in Cortex XSIAM identifies internet, outbound, and lateral exposure risks across cloud accounts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"hXTTYEB90iBTq71IgnVx","title":"Internet exposure detection","pathname":"/cortex-xsiam/cloud-security/network-exposure-detection/internet-exposure-detection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to detect publicly exposed cloud assets in Cortex XSIAM and validate internet exposure through external network scanning.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"trBqNa9grlPrMvIWmEnC","title":"Outbound exposure detection","pathname":"/cortex-xsiam/cloud-security/network-exposure-detection/outbound-exposure-detection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to detect cloud workloads with unrestricted outbound internet access in Cortex XSIAM and identify responsible security controls.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"rrbE6RASdftDqrtUxG59","title":"East-west exposure detection","pathname":"/cortex-xsiam/cloud-security/network-exposure-detection/east-west-exposure-detection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to identify cloud workloads with unrestricted lateral access in Cortex XSIAM and the controls creating east-west exposure.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"wvCdIe7x9hYcklHghSTR","title":"Investigate an internet exposure","pathname":"/cortex-xsiam/cloud-security/network-exposure-detection/investigate-an-internet-exposure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate internet-exposed cloud assets in Cortex XSIAM using Issues and Graph Search to prioritize and remediate risk.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"QQKLnLqOkQC2fKeJY6uu","title":"Configure trusted IPs","pathname":"/cortex-xsiam/cloud-security/network-exposure-detection/configure-trusted-ips","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure trusted public IP ranges in Cortex XSIAM to exclude approved addresses from Cloud Network Analyzer internet exposure evaluations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"x70QxLbhlowyTIICofyE","title":"Cortex Cloud SaaS Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Discover continuous SaaS visibility and control in Cortex XSIAM across identities, connected applications, and AI agents.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"PAfXPPttGfhZVnkblyk2","title":"Setup SaaS Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/setup-saas-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with SaaS Security in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"rNGpnXlAonT3TTgo5Gpy","title":"Connect a SaaS application","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect supported SaaS applications in Cortex XSIAM to track misconfigurations and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"okaSWHoxRuTd24MFoOCg","title":"Onboard Asana","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-asana","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect an Asana instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"DUqq8cRRKkbZR6hJtcGY","title":"Onboard Atlassian","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-atlassian","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect an Atlassian instance in Cortex XSIAM to detect posture and compliance risks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"Gkx5aCznwVf2nSL2xnj2","title":"Onboard Automox","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-automox","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect an Automox instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"scnri1OGs8g663tAyjIL","title":"Onboard Businessmap","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-businessmap","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Businessmap instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"PYFX4SLShKjHlzpSi9nK","title":"Onboard Celonis","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-celonis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Celonis instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"FLSzMuqCUmUnx4KokB0E","title":"Onboard Cisco Duo","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-cisco-duo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Cisco Duo instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"PfxidpzVJwcTqiLvOzF5","title":"Onboard Cisco Meraki","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-cisco-meraki","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Cisco Meraki instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"iRZI4slf6atxhuXJFWIn","title":"Onboard ClickUp","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-clickup","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a ClickUp instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"99UVskzHuCyOuI60X8Oa","title":"Onboard Contentful","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-contentful","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Contentful instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"KoA7kI5oFaYmcgP9rKf9","title":"Onboard Couchbase","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-couchbase","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Couchbase instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"Xee3eotGaxwNVzREV3pz","title":"Onboard Coveo","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-coveo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Coveo instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"aV9M5XRSagQZarRwVKc8","title":"Onboard Databricks","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-databricks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Databricks instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"Phlkv0zMGTLN00Dzh4g2","title":"Onboard Datadog","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-datadog","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Datadog instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"CqHANHiqUCCQ4L3RaUJO","title":"Onboard Gainsight PX","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-gainsight-px","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Gainsight PX instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"Zt6Htdc79UGzLJBqDTx7","title":"Onboard Grammarly","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-grammarly","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Grammarly instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"EGnPeaXqWrelMAVuCtkq","title":"Onboard Harness","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-harness","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Harness instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"CAn6Y7NrnjC86v38UAwJ","title":"Onboard Intercom","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-intercom","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect an Intercom instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"wuocU2cG29VYtntlELeX","title":"Onboard Jamf Pro","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-jamf-pro","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Jamf Pro instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"QzbB4c6xKcFwQdAWnZ3F","title":"Onboard JumpCloud","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-jumpcloud","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a JumpCloud instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"lqG8SED82lwQa96F9api","title":"Onboard Kustomer","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-kustomer","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Kustomer instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"1JfeNFX2DdGBSi7Fv08H","title":"Onboard Microsoft Entra ID","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-microsoft-entra-id","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Microsoft Entra ID instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"20eYbVlWOFEpyigENIAa","title":"Onboard Monday.com","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-monday.com","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Monday.com instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"39IIYxkJHNapcxSOCKdZ","title":"Onboard MongoDB Atlas","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-mongodb-atlas","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a MongoDB Atlas instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"9SSXqkrke57XqC8Kw4fY","title":"Onboard MuleSoft","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-mulesoft","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a MuleSoft instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"lgYqACoOoEE7cTMQC9Gt","title":"Onboard Mural","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-mural","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Mural instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"4zHhYAHB1ywMdbmPF4Gt","title":"Onboard Office 365","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-office-365","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect an Office 365 instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"uNKEiBLTCsi7J21PnRVT","title":"Onboard Okta","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-okta","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect an Okta instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"IneChorZAuv7BU3zMPvp","title":"Onboard PagerDuty","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-pagerduty","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a PagerDuty instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"VMZx5DhMUkbyg00QdcqH","title":"Onboard Redis Labs","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-redis-labs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Redis Labs instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"gtZweXy9Y9l6iH0jXYiq","title":"Onboard Salesforce","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-salesforce","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Salesforce instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"3rG8Wnp22FlKjqa398Mv","title":"Onboard SAP Ariba","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-sap-ariba","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect an SAP Ariba instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"QS16cc5mUmC002kTJu7J","title":"Onboard Sentry","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-sentry","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Sentry instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"NvbzVYjljLVplzor8TpD","title":"Onboard ServiceNow","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-servicenow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a ServiceNow instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"NHfrz4vk7yGOBoMTzrLV","title":"Onboard Shopify","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-shopify","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Shopify instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"9feRWcnAbvP4tvDHJTk3","title":"Onboard Slack Enterprise","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-slack-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Slack instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"s8a6PMq77gT3WbPZT8oS","title":"Onboard Sumo Logic","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-sumo-logic","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Sumo Logic instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"okL1k61KAEbaDWUjTCpV","title":"Onboard Workday","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-workday","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Workday instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"Bo3vFOI8UwwFeEhbtHa1","title":"Onboard Wrike","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-wrike","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a Wrike instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"hJGxGsKvVdeIh6w4cJWS","title":"Onboard YouTrack","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-youtrack","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect a YouTrack instance in Cortex XSIAM to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"Connect a SaaS application"}]},{"id":"xP2klOkCCbNLO36v9ZBP","title":"SaaS Security Overview","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-security-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the SaaS Security Overview in Cortex XSIAM to monitor posture, identity, data, and AI agent security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"fLzOdzJID0alLQbje4vg","title":"SaaS Security Checks","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-security-checks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SaaS Security Checks in Cortex XSIAM to identify at-risk assets and prioritize remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"F7iMcER6WWijauNcMYGW","title":"Provider Instances Security Check","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/provider-instances-security-check","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Provider Instances Security Check in Cortex XSIAM to assess security posture across application instances.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"WhnNBVNhI7zq7KjmAzix","title":"Detection Rules","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/detection-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View Cloud Security Posture Rules in Cortex XSIAM to detect SaaS application risks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"IcVydNGOHzlVmDpfX4GL","title":"Remediation Actions","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/remediation-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use remediation actions in Cortex XSIAM to resolve SaaS Security issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"IpsHFDh0LFx98hx2u4ph","title":"Create and monitor tickets","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/create-and-monitor-tickets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and monitor synced tickets in Cortex XSIAM to remediate SaaS Security issues.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"yZ6vsi7SisLqeJwW3Mdw","title":"SaaS AI Agent Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use SaaS AI Agent Security in Cortex XSIAM to secure enterprise SaaS AI agents.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"}]},{"id":"od4Tg0nB5QGT3wQDUn8Y","title":"Setup SaaS Security for AISPM","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/setup-saas-security-for-aispm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with SaaS AI Agent Security in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"NfEORrXoWpEOSCVsB1NG","title":"Onboard SaaS AI Agents","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to onboard supported SaaS AI agents in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"nMd4quiwuUXerq1hG2iN","title":"Onboard Atlassian Rovo","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-atlassian-rovo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Atlassian Rovo in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"uIGxvevqdjkOL8Z75AL3","title":"Onboard Box AI Agents","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-box-ai-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Box AI Agents in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"5g4TzsU96Df4v9uKXO0d","title":"Onboard ChatGPT Enterprise","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-chatgpt-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect ChatGPT Enterprise in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"81FFBMNAdGiKajZq5LOx","title":"Onboard Cursor Enterprise","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-cursor-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Cursor Enterprise in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"6tABpA7Sl96fCsjBBSWH","title":"Onboard Gemini Enterprise","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-gemini-enterprise","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Gemini Enterprise in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"6Fh4jMrWHql62UIMYs01","title":"Onboard M365 Copilot","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-m365-copilot","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect M365 Copilot in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"Gct3uQjUqouGoyxE2OnG","title":"Onboard Microsoft Copilot Studio","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-microsoft-copilot-studio","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Microsoft Copilot Studio in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"OxdeCGoHK8WM5yeMIFfh","title":"Onboard Service Now","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-service-now","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect ServiceNow in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"EGJ0UVx479N4Q9AvJYHB","title":"Manage SaaS AI Agents","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage SaaS AI agents in Cortex XSIAM, including agents, datasets, and connected tools.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"o18MFyUIof0ioPuopWAy","title":"View AI Agents","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-ai-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View SaaS AI agents in Cortex XSIAM to assess their security context.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"9IyvoeM2wp9I0vj96bNx","title":"View Datasets","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-datasets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View inference datasets in Cortex XSIAM SaaS AI Agent Security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"LmZ9kKNGNlx4mNh1STaD","title":"View Agent Tools","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-agent-tools","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View tools connected to SaaS AI agents in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"kJv1e7lkqHaTBI1ijlQp","title":"Cortex Cloud AI Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-ai-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cloud AI Security in Cortex XSIAM for AI asset discovery, risk detection, and security investigations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"ikqDZ6VAvmd1Bq9ACCxM","title":"What is Cortex Cloud AI Security?","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-ai-security/what-is-cortex-cloud-ai-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cloud AI Security in Cortex XSIAM discovers AI assets, assesses risks, and supports remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"XqOiX2EKqjBDxLpLnYKx","title":"Supported services in Cortex Cloud AI Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-ai-security/supported-services-in-cortex-cloud-ai-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review platforms and services supported by AI Security in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"23KeB0bGi0ky0iRzMvTf","title":"Cortex Cloud AI Security concepts","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-ai-security-concepts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn Cloud AI Security concepts in Cortex XSIAM, including AI assets, risks, and findings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"BK3QspMOkIZgWRR9FNe9","title":"Cortex Cloud AI Security use cases","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-ai-security-use-cases","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cloud AI Security use cases in Cortex XSIAM for discovering, assessing, and securing AI systems.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"nevx2FRBCPUG6W6XCdWv","title":"How to perform advanced AI Security investigations using XQL","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-ai-security/how-to-perform-advanced-ai-security-investigations-using-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use XQL in Cortex XSIAM to investigate Cloud AI Security datasets and findings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"w0QebtU613cOk1PQDmgr","title":"Serverless function posture security","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM scans AWS, GCP, and Azure serverless functions for vulnerabilities, malware, and exposed secrets.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"MAbwV3BzuV1ffS83zEXX","title":"Onboard cloud providers for serverless functions","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/onboard-cloud-providers-for-serverless-functions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect cloud provider accounts to scan serverless functions for security vulnerabilities, malware, and exposed secrets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"B6sk4KFmM42k9UGERV6p","title":"Serverless function posture rules","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage custom posture rules to identify attack paths, configuration issues, and network exposure in serverless functions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"60MlcHNUcYwdNyyWVVAg","title":"Manage serverless function rules","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/manage-serverless-function-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage, edit, and clone serverless function security rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"jK2CzJbf3PO8raMXEZ2E","title":"Create serverless function rules","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-serverless-function-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create attack path, configuration, and network exposure rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"wkESSKsjR3njXMbdgQL6","title":"Create an attack path rule for serverless functions","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-an-attack-path-rule-for-serverless-functions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create serverless function attack path rules to identify connected risks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"51lXOxfog9Wt6eIWFnMm","title":"Create a configuration rule for serverless functions","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-a-configuration-rule-for-serverless-functions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create serverless function configuration rules to detect misconfigurations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"TN7shG5uBvr5xWJe5isZ","title":"Create a network exposure rule for serverless functions","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-a-network-exposure-rule-for-serverless-functions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create serverless function network exposure rules to find internet access in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"bM5uKynb8RrKTPUCh6cE","title":"Serverless function posture policies","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage serverless function posture policies to detect threats and drive remediation in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"1MVZaux3Xo5NxCLOi7Fo","title":"Manage serverless function policies","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-policies/manage-serverless-function-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage serverless function policies, scopes, and response actions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture policies"}]},{"id":"JCPEZXLzl6RrjupW4VAj","title":"Create serverless function policies","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-policies/create-serverless-function-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create serverless function policies with rules and cloud account scopes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture policies"}]},{"id":"S4YlXLBbXEKGarGTCWTX","title":"Serverless function usage","pathname":"/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-usage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage serverless function assets, vulnerabilities, findings, and scan health in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"uqu0bRB2APNb0n2erwda","title":"Cortex Cloud Application Security","pathname":"/cortex-xsiam/cloud-security/cortex-cloud-application-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Discover Cortex XSIAM Application Security for ASPM, supply chain security, and code security.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"FpD5CzeFO4G668wtttGL","title":"Registry scanning","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect and scan cloud and third-party container registries in Cortex XSIAM to identify image vulnerabilities, malware, exposed secrets, and policy violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"sPvcGB7zAbMQ9E2eAlmD","title":"Supported container registry integrations","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning/supported-container-registry-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about supported container registry integrations in Cortex XSIAM","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"6K3xrYSBE9rx6I25Ruto","title":"How Container Registry Scanning Works","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning/how-container-registry-scanning-works","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM discovers, scans, and evaluates container images in onboarded registries to identify and continuously monitor security risks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"BWGSJk1XLKIPA6eUAnOh","title":"Scan re-evaluation process","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning/how-container-registry-scanning-works/scan-re-evaluation-process","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand how Cortex XSIAM re-evaluates container registry scan results.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Registry scanning"},{"label":"How Container Registry Scanning Works"}]},{"id":"BUkXHFA7iDoSpfRgokmJ","title":"Configure registry scanning for cloud accounts","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning/configure-registry-scanning-for-cloud-accounts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM to scan container registries in connected cloud accounts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"sMI7Z06UerqEANLopGXE","title":"Modify the container registry scanning scope","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning/configure-registry-scanning-for-cloud-accounts/modify-the-container-registry-scanning-scope","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Modify the Cortex XSIAM container registry scanning scope for cloud accounts and registries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Registry scanning"},{"label":"Configure registry scanning for cloud accounts"}]},{"id":"oabBJ5uEvQuAdQMtPfS4","title":"Configure registry scanning for third party integrations","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning/configure-registry-scanning-for-third-party-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to configure Cortex XSIAM to scan container registries in third-party integrations","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"oEqZUPbTwztzmDIIkeuq","title":"Manage registry scanning with APIs","pathname":"/cortex-xsiam/cloud-security/container-registry-scanning/manage-registry-scanning-with-apis","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to onboard and manage registry scanning programatically with APIs for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"IuK4TuAnTmTbYthA0vSm","title":"Web and API Security (WAAS)","pathname":"/cortex-xsiam/cloud-security/overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM Web and API Security (WAAS) to discover, assess, monitor, and protect APIs and web workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"SOfGQ2ztvlgNOZDuTaBT","title":"Personas workflow","pathname":"/cortex-xsiam/cloud-security/overview/personas-workflow","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM API security responsibilities and workflows for SOC analysts, security practitioners, and workload owners.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"}]},{"id":"F6GrJ8Ku2tkDyDbALy3e","title":"Secure your API landscape","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Secure APIs in Cortex XSIAM through gateway integration, risk assessment, threat monitoring, specification validation, and workload protection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"}]},{"id":"Bpgge641Wp5RRzIcSe3r","title":"Gain visibility and assess risk of API endpoints","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/gain-visibility-and-assess-risk-of-api-endpoints","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM to discover API endpoints, inspect traffic, assess risks, and investigate API security findings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"RekL8Nc2GeOxiXdqNU1j","title":"Monitor and investigate API threats","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/monitor-and-investigate-api-threats","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Monitor, investigate, and respond to API attacks, threats, and security issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"IXRtcKXNYQTcXwgrLBzT","title":"Configure API security from end to end","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM API security with gateway integrations, traffic collection, and agent-based protection policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"ki7Jk8jahiMc492cwB94","title":"Ingest AWS API Gateway","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-aws-api-gateway","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest AWS API Gateway logs into Cortex XSIAM for API traffic analysis, threat detection, and risk assessment.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"}]},{"id":"m8VWh51uV1nHQtaxWEfm","title":"Ingest Azure APIM","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-azure-apim","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Ingest Azure API Management traffic into Cortex XSIAM for API security analysis, risk assessment, and threat detection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"}]},{"id":"Xnameddx3UupAeZJcvZM","title":"Ingest Apigee Proxy","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-apigee-proxy","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Apigee Proxy traffic ingestion into Cortex XSIAM for API security analysis and threat detection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"}]},{"id":"HavJJF5LiwNWSANyx2AG","title":"Ingest Kong","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-kong","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Kong API gateway traffic ingestion into Cortex XSIAM for API security analysis and threat detection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"}]},{"id":"tdDNt7ZLVLuH1vOQWdZT","title":"Ingest F5","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-f5","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure F5 BIG-IP LTM traffic ingestion into Cortex XSIAM for API security analysis and threat detection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"}]},{"id":"IRoKKh3BJF3UzD70muay","title":"Agent-based protection","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM agent-based Web and API Security profiles to monitor or block threats on Linux workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"}]},{"id":"p0OrD4p6VML6R4sByXJL","title":"Set up Web and API Security profiles","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/set-up-web-and-api-security-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex XSIAM Web and API Security profiles to detect, report, or block threats on Linux workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"},{"label":"Agent-based protection"}]},{"id":"qsZ2F1gYm8b2zLGwgBbT","title":"Apply Web and API Security profiles to workloads","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/apply-web-and-api-security-profiles-to-workloads","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Apply Cortex XSIAM Web and API Security profiles through prevention policies for selected workloads and workload groups.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"},{"label":"Agent-based protection"}]},{"id":"23ToNwrcDIFDTXco4mnG","title":"Manage Web and API Security prevention profiles","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/manage-web-and-api-security-prevention-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM Web and API Security prevention profiles, including policy usage, editing, exporting, and deletion.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"},{"label":"Agent-based protection"}]},{"id":"hSWLVrfPsHz620ZkxwDX","title":"Add a disable prevention rule for cloud workloads","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/add-a-disable-prevention-rule-for-cloud-workloads","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Cortex XSIAM Web and API Security rules that disable selected prevention actions for cloud workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"},{"label":"Agent-based protection"}]},{"id":"qJ1RJb6nHbBWTlwKxGi6","title":"Add a support exception rule for cloud workloads","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/add-a-support-exception-rule-for-cloud-workloads","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Import Cortex XSIAM support exception rules for Web and API Security protection on cloud workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"},{"label":"Agent-based protection"}]},{"id":"ehnxPwsFSnmE4ETZ7t6l","title":"Add a legacy exception rule for cloud workloads","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/add-a-legacy-exception-rule-for-cloud-workloads","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy Cortex XSIAM Web and API Security exception rules for prevention modules on cloud workloads.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"},{"label":"Agent-based protection"}]},{"id":"d9wEFgUbiePdsIonAb6C","title":"Additional workload management tasks","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/additional-workload-management-tasks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM workloads and workload groups for Web and API Security protection and related endpoint tasks.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"},{"label":"Configure API security from end to end"},{"label":"Agent-based protection"}]},{"id":"LaFpOC6rj9qQJZJiEIkP","title":"API specification inventory","pathname":"/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/api-specification-inventory","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM API specification inventory to import, validate, scan, and assess OpenAPI specifications.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"510YX2Fat3lQfFslXY1f","title":"Serverless function runtime security","pathname":"/cortex-xsiam/cloud-security/overview-1","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM serverless function runtime security: monitor AWS function activity, enforce policies, and investigate violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"}]},{"id":"qsg8YxwAwaVM8Ziw1SuT","title":"Set up serverless function protection","pathname":"/cortex-xsiam/cloud-security/overview-1/set-up-serverless-function-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set up Cortex XSIAM serverless function protection with restriction profiles, policy rules, and agent packages.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function runtime security"}]},{"id":"aSeL7qC5sxKtw8560xf1","title":"Serverless runtime issues","pathname":"/cortex-xsiam/cloud-security/overview-1/serverless-runtime-issues","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Investigate Cortex XSIAM serverless runtime issues from process, network, and filesystem policy violations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Cloud Security","icon":"cloud"},{"label":"Serverless function runtime security"}]},{"id":"vZWKJaw4TeaUtcclE2Yo","title":"Cortex Data Security","pathname":"/cortex-xsiam/data-security/cortex-data-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Discover, classify, protect, and govern sensitive data across your organization in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Data Security"}]},{"id":"DHnT8u9JihSAJl52kXP2","title":"Cortex XSIAM XQL","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to use XQL to query and investigate data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"08G2viMKEDyGWmunpBt9","title":"Get started with XQL","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"XQL is the Palo Alto Networks Cortex Query Language used in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"}]},{"id":"Bpa4SEcLB0OvuV2U2mON","title":"XQL language features","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/xql-language-features","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about XQL language features for querying network and endpoint data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"nXnUR7CXdvOOPpWbhS4z","title":"XQL Language Structure","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/xql-language-structure","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about XQL language structure for creating queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"X7dC4ZxcHgADT8IjfpsD","title":"Supported operators","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/supported-operators","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about XQL comparison, boolean, and set operators in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"uCeC0AJz7u7T5WtJfdps","title":"Datasets and presets","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/datasets-and-presets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about XQL built-in datasets, custom datasets, and presets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"6garSTbuTwBzGA0XUnT5","title":"About examples","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/about-examples","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore XQL query examples in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"TPfduXGBCGuj1FQdbqqL","title":"JSON functions","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/json-functions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to use JSON functions in XQL in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"A21dHkv8Tm4SJF0Q4Uan","title":"How to filter for empty values in the results table","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/how-to-filter-for-empty-values-in-the-results-table","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to filter empty values in XQL results in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"xGgkXxv3Je3pnQitndag","title":"Understanding string manipulation in XQL","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/understanding-string-manipulation-in-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to manipulate strings in XQL using double and triple quotes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Get started with XQL"}]},{"id":"4e3eVgSpWTaK6KBdKFdW","title":"Build XQL queries","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build XQL queries with Query Builder in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"}]},{"id":"6vb6UhBdfeh3e9MqWIHb","title":"About the Query Builder","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Query Builder supports threat detection and data analysis in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"kcxWiqI4AmyrIC2ZZ4F5","title":"How to build XQL queries","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to build XQL queries with Query Builder in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"dz2SezJV47CKKNr81W2S","title":"Get started with XQL queries","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with building XQL queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"lMwtY6Yft6gKXlVb8l5k","title":"Useful XQL user interface features","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Query Builder features for creating XQL queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"mk8wTwx8cQdAAWXC7QQq","title":"XQL Query best practices","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Apply XQL query best practices for efficient results in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"9z0JRnARj0vaWGKW771u","title":"Expected results when querying fields","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand expected XQL field query results in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"iKGhxETtqcYvAb2wqfoz","title":"Create XQL query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and run XQL queries with Query Builder in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"rJHnPmkYLhoApNx2ytXY","title":"Review XQL query results","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review and analyze XQL query results in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"EFxs1wvoIX4DBXq1lTYf","title":"Translate to XQL","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Translate search logic into XQL with Query Builder in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"NaSKeoq4ZwjPJ9wT8ZFw","title":"Graph query results","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Visualize XQL query results as graphs in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"Vm2biowelq4B65LcnP2i","title":"Query Builder templates","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Query Builder templates to query data without writing XQL in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"OIcOzZZbsXbTtJI1lYt4","title":"Get started with Query Builder templates","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/get-started-with-query-builder-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with Query Builder templates for guided queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"XJXjwwW3yCfeZfemqsg6","title":"Considerations for using Query Builder templates","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/considerations-for-using-query-builder-templates","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Query Builder template considerations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"xDZ4D6SOgMU43f7mtFrR","title":"Create a query from a template","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/create-a-query-from-a-template","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create an XQL query from a Query Builder template in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"JQ23HTDqjZwRGuwFTAVf","title":"Run a free text query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/run-a-free-text-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run free-text queries with Query Builder templates in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"M0TcsdO4G8soFsDzrBjy","title":"Query Builder template examples","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/query-builder-template-examples","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Query Builder template examples for data queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"1WpvL0wBJisRbL3ioEXQ","title":"Overview of the Query Center","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View in-progress and completed queries in Query Center in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"DlCPQMZnWYtf2IAQKIM2","title":"Edit and run queries in Query Center","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit and run XQL queries from Query Center in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"NfkLxLEKZdYMC7PQtdj1","title":"Query Center reference information","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/overview-of-the-query-center/query-center-reference-information","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Query Center details, fields, and statuses in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"IXggYW5jLczmGzkMdmzt","title":"Manage scheduled queries","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage scheduled and recurring XQL queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"VJxSelHYzEA2CPi8Wm6O","title":"Scheduled Queries reference information","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference scheduled query settings and run details in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"qbHGv8n9CMjZjWuVWjs2","title":"Manage your personal query library","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Save and manage personal XQL queries in the Query Library in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"g78Vjdgx1LHRhFKVsJQG","title":"XQL macros","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/xql-macros","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use XQL macros to reuse query logic in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"3ppX9wURmiv7IxAcKSUm","title":"Manage your macros","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create and manage XQL macros in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"gtccXA5LLbc0kVjwWUcP","title":"Federated Search","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/federated-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Federated Search to query external data sources in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"Ze2i3ASePLenKZjmjipI","title":"Federated Search configuration","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/federated-search/federated-search-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Federated Search connections for external data in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Federated Search"}]},{"id":"KiKrl7jZGjMx5pUupSop","title":"Query using Federated Search","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/federated-search/query-using-federated-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Query external data sources with Federated Search in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Federated Search"}]},{"id":"mKwtO5pmNCRVYDYbUDL1","title":"Manage external datasets","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/federated-search/manage-external-datasets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage external datasets used by Federated Search in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Federated Search"}]},{"id":"zRQkquM7NJeKG4sHbYKv","title":"Legacy Query Builder","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Legacy Query Builder to query security data entities in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"}]},{"id":"qqIaht12NgbHNFc33euT","title":"Create authentication query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-authentication-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy authentication queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"1VCgIirqveP4NMok2Cll","title":"Create event log query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-event-log-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy event log queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"TRk92p3kJ7aZdKbSW4YG","title":"Create file query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-file-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy file queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"jI690Jiy8PKxfCdCK0XR","title":"Create image load query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-image-load-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy image load queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"t3c4sQEhYDBxQPa6ZZhU","title":"Create network connections query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-network-connections-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy network connection queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"QkFHmVVBiDt5SwK5z7lm","title":"Create network query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-network-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy network queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"vFXc0G7YJVQfYRtrLWt3","title":"Create process query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-process-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy process queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"lA0f0rlkTssdrUPbpah9","title":"Create registry query","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-registry-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy registry queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"qwPDrf1X2S3PHjDVdLqC","title":"Query across all entities","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/query-across-all-entities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create legacy queries across security data entities in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"9Vok6IfPADXvvq5Oorsy","title":"Cortex XQL syntax, parameters, and examples","pathname":"/cortex-xsiam/reference-and-developer-docs/cortex-agentix-xql/cortex-xql-syntax-parameters-and-examples","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Comprehensive syntax rules and structural requirements for XQL queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XSIAM XQL"}]},{"id":"lczGlUsBBdHvlOYPMQPI","title":"Graph Search","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Graph Search for cloud assets and findings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"74WKzds6aJl22W6Ekvia","title":"What is Graph Search?","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/what-is-graph-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Graph Search connects assets, findings, and context in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"XCifoAEH9rXNt1yZkzhM","title":"Get started with Graph Search queries","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/get-started-with-graph-search-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Get started with building Graph Search queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"uG0V52ozfKtm9ode5Uud","title":"How to build Graph Search queries?","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/how-to-build-graph-search-queries","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build Graph Search queries with the query interface in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"cKmAym3LwcUuEYgMj8IZ","title":"Understand Graph Search query results","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/understand-graph-search-query-results","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand and analyze Graph Search query results in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"p0GyuHIbtl11pimcTNKr","title":"Create Graph Search query","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/create-graph-search-query","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create Graph Search queries to investigate assets and findings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"VqeOF1ZMxlS1j5UxgWr8","title":"Graph Search examples","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/graph-search-examples","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Graph Search query examples for investigations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"hm50IatLYI7ubuE8CWgh","title":"Manage the Graph Search Query Library","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/manage-the-graph-search-query-library","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage saved Graph Search queries in the Query Library in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"g0gtatWDmBlNHjR6KXWM","title":"Edit and run queries in Query Center","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Edit, rerun, and review Graph Search queries in Query Center in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"d8Hu7ui5Lhm0jTdpGfgy","title":"Supported assets and findings","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/supported-assets-and-findings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review assets and findings supported by Graph Search in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"1xBGvKXQG3GIrPCU7dG1","title":"FAQ on Graph Search","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/faq-on-graph-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Find answers to common Graph Search questions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"F0NBBBMOTTylHlfEy2bn","title":"Create detection rules based on graph search","pathname":"/cortex-xsiam/reference-and-developer-docs/graph-search/create-detection-rules-based-on-graph-search","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create detection rules from Graph Search queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"FFv8IFn0Pbcf96XW3msX","title":"About Cortex CLI","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex CLI to run Code, API, and Cloud Workload Protection scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"uzBt6yNq2FmMeHdYvcSs","title":"Connect Cortex CLI","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/connect-cortex-cli","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Cortex CLI to configure scans and authentication in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"}]},{"id":"q5KzSRUxrEK48yDwvfC9","title":"Installation workflows","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/connect-cortex-cli/installation-workflows","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Install Cortex CLI for security scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"3nBjzDF0yqJ1uHqo8gLw","title":"Manage the CLI after installation","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/connect-cortex-cli/manage-the-cli-after-installation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex CLI installations and updates for security scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"9fOM9jServFm3J8MI1En","title":"Authenticate credentials","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/connect-cortex-cli/authenticate-credentials","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex CLI credentials for secure scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"btGGUm4LZsyQpKEmjJZX","title":"Self-service API keys for CLI scans","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/connect-cortex-cli/self-service-api-keys-for-cli-scans","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Create self-service API keys for Cortex CLI scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"99sXUhqazwsy4SIqdug5","title":"Cortex CLI usage","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-usage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run Cortex CLI commands for security scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"}]},{"id":"23fAi1Ltiy3h0EgrJ4JB","title":"Exit codes and error handling","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/exit-codes-and-error-handling","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"}]},{"id":"k7dBwlbzGprr0lIXdRe3","title":"Cortex CLI common command line reference guide","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-common-command-line-reference-guide","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference common Cortex CLI commands for security scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"}]},{"id":"PDhXzVrNwSUsUJfxJNMJ","title":"Cortex CLI for Code Security","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex CLI to scan application code and repositories in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"}]},{"id":"3Johl0DVCwOGYXUorq9v","title":"Cortex CLI usage for Cortex Cloud Application Security","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security/cortex-cli-usage-for-application-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run Cortex CLI Code Security scans for applications in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"4kAgqdlOx6JCHZHgD0cT","title":"Cortex CLI Cortex Cloud Application Security command line reference","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security/cortex-cli-application-security-command-line-reference","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex CLI commands for Application Security scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"b0v6LqI96PAt99JgGWet","title":"Custom Cortex checks and signature verification","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security/cortex-cli-application-security-command-line-reference/custom-cortex-checks-and-signature-verification","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Load and verify custom Cortex checks with Cortex CLI in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI Cortex Cloud Application Security command line reference"}]},{"id":"fZJw4qI78SFN0aZSACZC","title":"Cortex CLI pre-commit hooks","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-commit-hooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex CLI pre-commit hooks to scan code before commits in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"F2maCJqFAH0V7yurEaz6","title":"Pre-commit hook usage","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-commit-hooks/pre-commit-hook-usage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run Cortex CLI pre-commit hooks for code security checks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI pre-commit hooks"}]},{"id":"yWMv7TEdZUwQfbHiwoU8","title":"Cortex CLI pre-receive hooks","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-receive-hooks","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex CLI pre-receive hooks to scan code before acceptance in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"k8nfYANQhIV5UmcvUEYM","title":"Pre-receive hook usage","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-receive-hooks/pre-receive-hook-usage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Run Cortex CLI pre-receive hooks for code security checks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI pre-receive hooks"}]},{"id":"ZFWZbDF8BlEpkeO263aZ","title":"Cortex CLI for Cloud Workload Protection","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-cloud-workload-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex CLI for Cloud Workload Protection scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"}]},{"id":"4kyfnqsXiq3skh0Q6rq8","title":"Cloud Workload Protection command line reference","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-cloud-workload-protection/cloud-workload-protection-command-line-reference","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex CLI commands for Cloud Workload Protection scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for Cloud Workload Protection"}]},{"id":"sjcRNJ3fH1qDIUKisf5D","title":"Cortex CLI for API Security","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-api-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex CLI for API Security scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"}]},{"id":"AZ3pgpH492jxHNWV24iU","title":"Cortex CLI API Security command line reference guide","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-api-security/cortex-cli-api-security-command-line-reference-guide","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference Cortex CLI commands for API Security scans in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for API Security"}]},{"id":"UMekCb3r53cxS0iiJzm4","title":"API Security scan report schema","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-api-security/cortex-cli-api-security-command-line-reference-guide/api-security-scan-report-schema","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Reference the API Security scan report schema for Cortex CLI in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for API Security"},{"label":"Cortex CLI API Security command line reference guide"}]},{"id":"CJgoUSjRhJrz2YvHbdJ5","title":"API Security scan output example","pathname":"/cortex-xsiam/reference-and-developer-docs/about-cortex-cli/cortex-cli-for-api-security/cortex-cli-api-security-command-line-reference-guide/api-security-scan-output-example","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Cortex CLI API Security scan report output in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"About Cortex CLI"},{"label":"Cortex CLI for API Security"},{"label":"Cortex CLI API Security command line reference guide"}]},{"id":"5M5phRLF6QbN1uYN7oBx","title":"Role-Based Access Control","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to limit role permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"5R5QVo8YYoaCRaksMfSU","title":"Role permissions by component","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/role-permissions-by-component","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to manage role permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"NC6VpiCU6AucuwlBvg0R","title":"Core tenant and administrative permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/core-tenant-and-administrative-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"KA4cfCWmwdeBtKq6x3IP","title":"Configuration permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about role permissions for Cortex XSIAM configuration components.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"GBbk4B6bhHo8k18PCZOF","title":"Auditing permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/auditing-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM audit logs and administrative activity records.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"sO0uzeNdaZ776ZptyRJx","title":"Alert Notifications permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/alert-notifications-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM alert notification rules, templates, and forwarding settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"LjHKTQ2IticCCv1TdtSy","title":"General Configuration permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/general-configuration-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM general settings and system-wide configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"DJvjnxcY5E2IgFf9bj3b","title":"Cortex XDR Analytics permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/cortex-xdr-analytics-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM analytics configuration and related settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"BlF3RZVRaZ8lWW3DlLsP","title":"Access management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/access-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM users, roles, and access management settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"rrIU9n9Z3OknO838pToK","title":"Data Broker permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/data-broker-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM Data Broker configuration and operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"8MxpbwsLvCX0Ue4hXM1g","title":"Log Collection permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/log-collection-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM log collection configuration and data sources.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"D9AvEuTehb07QBlIAIYH","title":"Data Sources permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/data-sources-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM data source configuration and ingestion settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"6Cw9sbVQpsPIGwcCSZg2","title":"External Issues Mapping permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/external-issues-mapping-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM mappings for external issue integrations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"XQHWu1VPJ5CxJmtVy62I","title":"Integrations - instance permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/integrations-instance-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to individual Cortex XSIAM integration instances and settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"T6ifCOVXXCVHkmuLWJc3","title":"Integrations Permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/integrations-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM integration configuration and available instances.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"udBNlG7DPjzFXjsEHnjZ","title":"Data Management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/data-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM data management and retention settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"5MZrkbyWlRjAbUbmxwH0","title":"Public API","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/public-api","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM public API configuration and credentials.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"A8kzPmb8RhAwdTm4YYRc","title":"Threat Intelligence permission - API configuration","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/threat-intelligence-permission-api-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM Threat Intelligence API configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"cLjqDgx1E6fxIejqKUrb","title":"Long-running HTTP Integrations configuration","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/long-running-http-integrations-configuration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM long-running HTTP integration configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"DF3dZFfG4GkISyHVRmro","title":"Credentials permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/credentials-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM credentials and secure connection settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"KKpX7ydY8lcBuaCS0cRL","title":"Network Scanners permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/network-scanners-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM network scanner configuration and operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"TP6AgzeTj15fatBjGe6p","title":"Apps - Instance permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/apps-instance-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM app instances and their configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"txCEFcigqUNAmt0mMub7","title":"Object Setup permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM object setup and related configuration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"Q95QeA13FIUbjtbEsFiF","title":"Case Properties permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/case-properties-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure access to case domains, custom statuses, and resolution statuses in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"vJOuh6or33BZhgPLHVi7","title":"Exclusion List permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/exclusion-list-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to manage excluded threat indicators and their exclusion settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"T0PBdPVEfuevXkT69GK0","title":"Fields and Types permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/fields-and-types-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to custom fields, indicator types, and SLA rule configurations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"hIRcizNTiJXvlBnzk6E3","title":"Layout permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/layout-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to case and issue layouts, including their layout rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"XGAH560KnNkDHQI814DC","title":"Sync Profile permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/sync-profile-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to sync profiles for mirroring cases with external platforms  in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"VKCkyyIJ0JIWfxruL6RB","title":"Marketplace permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/marketplace-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to discover, install, and manage Marketplace content packs in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"OwcZ3ydEPXnWuPkWyhw8","title":"Help permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/help-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to create and manage in-product technical support cases  in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"zHO44VEirbTmbGCvp8mw","title":"SOC Operations, Investigation & Response permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/soc-operations-investigation-and-response-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"9t2Ub0kvRmOadCL0OHwY","title":"Dashboards and Reports permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Set permissions for dashboards and reports in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"SQL1CphgQx98SKv2wzdW","title":"Dashboards permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/dashboards-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM dashboards, widgets, and dashboard sharing.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"56zuqe1A7RCEd5KklsY8","title":"Command Center Dashboard permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/command-center-dashboard-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM Command Center dashboards and their security metrics.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"PsslWbSABkqVJUHFoWoY","title":"Ingestion Monitoring dashboard permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/ingestion-monitoring-dashboard-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM data ingestion monitoring dashboards.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"IgFlAnCV7cbERySUHhij","title":"Reports permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/reports-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM reports and custom report templates.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"maaNK6npmFI5qZNPGoYX","title":"Email Command Center permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/email-command-center-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to the Cortex XSIAM Email Command Center and email threat metrics.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"aqFm6ocnt3v1zGE0OROx","title":"Cloud Security Command Center permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/cloud-security-command-center-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to the Cortex XSIAM Cloud Security Command Center.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"wbhMC6n8my7ddHofjPVJ","title":"Cases and Issues permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cases-and-issues-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to investigate, manage, and respond to cases and issues in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"QgnYvTRLpazhbkqtFEc4","title":"Investigation and Response permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure role permissions for search, response, and automation capabilities in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"2yCj00mxG11H47TC962N","title":"Search permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure access to threat hunting, query, and forensic investigation tools in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"BsPdVq06cd9a4jcBfxRs","title":"Query Library permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/query-library-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to saved XQL queries in Cortex XSIAM's Query Library.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"NcuaYngYOp2mkQjwr6GA","title":"Query Center permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/query-center-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to write, run, schedule, and export XQL queries in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"GTtAQmGT5QCLTrRwU4bF","title":"Forensics permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/forensics-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM forensic investigations, collections, and threat hunts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"xcI5MkGNMyi07lq09dKY","title":"Host Insights permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/host-insights-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM's endpoint inventory, host details, and hygiene data.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"Yd5AoKa9SjmFX0K1GSoc","title":"Graph Search permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/graph-search-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM's Graph Search for cloud assets and security findings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"sdVc3HLohB8jViqnWTkl","title":"Response permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure access to endpoint and network response actions and tools in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"G6A34VQOAPYzNQIjULrT","title":"Action Center permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/action-center-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM endpoint response actions and action history.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"dOc4GFFSW9IKyx1IQ3r3","title":"EDL permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/edl-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM External Dynamic Lists for firewall-enforced threat blocking.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"m3iePqyQHgRCv9JB2tgw","title":"Agent Scripts Library permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/agent-scripts-library-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM endpoint scripts for response, collection, and automation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"xjA9S4DqODy1grPFx8bZ","title":"Live Terminal permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/live-terminal-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM interactive endpoint shell access for investigation and remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"HKT3bHsDHrSnFjs7LVFk","title":"Automation permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure permissions for playbooks, scripts, playground, and automated exclusions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"4ru1MQF6APhziPuxkDNQ","title":"Playbook permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/playbook-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM playbooks and automated response workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"iBvciIvETF7oMoQvuFbO","title":"Script permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/script-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM scripts for automation and remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"YbLU9WrMUgC61RajbNeR","title":"Jobs permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/jobs-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to Cortex XSIAM scheduled automation jobs and their execution.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"n2lvNcUOVZZa49T5JnDg","title":"Playground permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/playground-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage access to the Cortex XSIAM playground for testing commands and scripts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"ghbs5uLE8ZVdg4PQc4mf","title":"Automation Exclusion Center permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/automation-exclusion-center-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM automation exclusions for commands, scripts, and remediation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"4YjPsAHO1va02JLcArUC","title":"Jupyter and Observability apps permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/jupyter-and-observability-apps-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure permissions to use Jupyter and Observability applications.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"YOvNxCB2OQSaLaNI0yG4","title":"Threat Management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/threat-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Detection Rules and Threat Intel permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"tAS0RtqkZb4tpoFwMk1g","title":"Detection Rules permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/threat-management-permissions/detection-rules-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Detection Rules permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Threat Management permissions"}]},{"id":"w4VCcz4SaexNrqg30gZ0","title":"Threat Intelligence permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/threat-management-permissions/threat-intelligence-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Threat Intelligence permissions in Cortex XSIAM","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Threat Management permissions"}]},{"id":"43wkzLhzh9Zf2x6ADBQO","title":"Exceptions Configuration permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure issue exclusion permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"Bcdp0gP06lcmOQHoweHi","title":"Issue Exclusions permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/issue-exclusions-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Issue Exclusions permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exceptions Configuration permissions"}]},{"id":"skgyNnymkIkcZCExKWyO","title":"Exception Management Admin permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/exception-management-admin-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Exception Management Admin permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exceptions Configuration permissions"}]},{"id":"yCbMrrN8UKgT68x22ElU","title":"Exception Approver Admin permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/exception-approver-admin-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Exception Approver Admin permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exceptions Configuration permissions"}]},{"id":"X63Uby3SN1U5kbnw8qot","title":"Managed Services permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/managed-services-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure access to Managed Services for Unit 42 Managed Threat Hunting and Managed Detection and Response.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"OGW68CJQdNZDGYp2Pc8I","title":"Cortex Agentic Assistant permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cortex-agentic-assistant-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure the Cortex Agentic Assistant permissions, which includes AI Prompts and Agent permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"HgvuMfUpGWM8CmVst3nd","title":"AI Prompts","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cortex-agentic-assistant-permissions/ai-prompts","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure AI Prompts permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cortex Agentic Assistant permissions"}]},{"id":"X4uzzQgsXoKeQAPZex5f","title":"Cortex Agentic Assistant Agents","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cortex-agentic-assistant-permissions/cortex-agentic-assistant-agents","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cortex Agentic Assistant Agents permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cortex Agentic Assistant permissions"}]},{"id":"ROWiwrf4Dyw4dnyvicxb","title":"Agents and endpoint protection","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/agents-and-endpoint-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure permissions for XDR Agent infrastructure and endpoint data loss prevention in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"fMYQtnOWkvNptWkmFy2D","title":"Inventory - Agent permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure permissions for Endpoints (XDR Agent) in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"ITtJDcKUvZKTVzEdAIee","title":"Agent Administrations","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-administrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to endpoint inventory, agent health, and lifecycle operations in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"qLF9WSBW84H4K4a7YQum","title":"Agent Groups","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-groups","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage endpoint groups and policy targeting in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"a3AEI33FWZgynZD7M9uF","title":"Agent Prevention Policies","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-prevention-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure endpoint prevention policies and protection settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"AoGqGBqnX3Vbd4w3gBXy","title":"Global Exceptions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/global-exceptions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage global prevention exceptions and their endpoint scope in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"HEtrvnRtgIhm9F0LBCSc","title":"Agent Profiles","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-profiles","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure endpoint agent profiles and communication settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"PznSNb7MNWbv1FeLcUJr","title":"Agent Extension Policies","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-extension-policies","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure endpoint extension policies and capabilities in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"ftSkf3qvsTGxTWWKPbTi","title":"Agent Installations","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-installations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM agent installation packages and deployments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"JwDwlQei4SKXHoSLb2BC","title":"Host Firewall","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/host-firewall","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure host firewall rules and review firewall events in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"fJrXSzEaF8OG6sT7mf2B","title":"Device Control","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/device-control","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage device control policies, rules, and exceptions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"7vjdt6BpVM4oSE9GiiyC","title":"Data Security - Endpoint DLP permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Endpoint Data Loss Prevention permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"cIypFmrCyBBAbMqdXVJF","title":"Data-in-Motion Rules","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/data-in-motion-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure endpoint data-in-motion protection rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"YFXhkDTCEWkjPgfygsaO","title":"Endpoint Applications","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/endpoint-applications","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage endpoint applications monitored by Data Loss Prevention in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"KNAzXdhapOoggNPQ78EP","title":"Endpoint Applications Groups","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/endpoint-applications-groups","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage endpoint application groups for Data Loss Prevention policies in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"AmdGA8BPHEnttk7kUov3","title":"Endpoint DLP Settings","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/endpoint-dlp-settings","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure endpoint Data Loss Prevention settings in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"EB6gcvCYMc5HclSwJVFv","title":"Inventory - Assets permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure inventory permissions for assets and endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"rmzGer6RopsVvdcsJUdz","title":"Network Configuration permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/network-configuration-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure network topology, ranges, and trusted networks in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"OBRkq2XCcFWTl2r7oqPk","title":"Compliance (Legacy) permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/compliance-legacy-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"View legacy cloud compliance violations for assets in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"CpVty6dgcTfQ1JBlM3UF","title":"Asset Inventory permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-inventory-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control access to asset inventory data and metadata in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"ziMeRdV2B9od0zuaSZt4","title":"Asset Roles configuration permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-roles-configuration-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure functional asset roles and endpoint assignments in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"kRFFgmQATNv28GFvsGh3","title":"Asset Groups permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-groups-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage asset groups and scoped access controls in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"LSuVJczvHBxnxNpCsAEH","title":"Exposure and Vulnerability Management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exposure-and-vulnerability-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure exposure, vulnerability, and attack surface management permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"IpPdG9nVWbWVIu8IXhyC","title":"Attack Surface permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exposure-and-vulnerability-management-permissions/attack-surface-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Attack Surface Management permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exposure and Vulnerability Management permissions"}]},{"id":"iCqAXKZ5QsE5BioEwaA7","title":"Vulnerability Management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exposure-and-vulnerability-management-permissions/vulnerability-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Vulnerability Management permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exposure and Vulnerability Management permissions"}]},{"id":"mKIRYah6BiQ1t6gcIHxO","title":"Exposure Management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exposure-and-vulnerability-management-permissions/exposure-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Exposure Management permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exposure and Vulnerability Management permissions"}]},{"id":"YNcrKd4CIeeLR09IKFQx","title":"Cloud Security and Posture Management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cloud Security and Posture Management permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"VWTXdhedqkqrLAxGOqDz","title":"CLI Tool permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/cli-tool-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure CLI Tool permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"4HpiLKgXk5SA6X3xgoft","title":"Application Security permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Application Security permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"OMqeqqBTujNuQNJihokQ","title":"Application Security - Generic Collector permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-generic-collector-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Generic Collector permissions for Application Security in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"fjOi4cgFaMWz7EkmMH1f","title":"Application Security - Issues permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-issues-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Application Security issue permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"EfNU0vRE8W7Fz40HrDno","title":"Application Security - Scans permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-scans-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Application Security scan permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"WTkBAVK8EdGkBkwChGkb","title":"Application Security - Policy Management permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-policy-management-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Application Security policy management permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"xd6ryovmfzjablUzKxy9","title":"Application Security - 3rd Party tools permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-3rd-party-tools-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure third-party tool permissions for Application Security in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"WYG0hqsXV5WengiUit76","title":"Configurations - Application Security permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/configurations-application-security-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Application Security configuration permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"PEYN5X6SSTJnjjhQOeBW","title":"Policies - Cloud Workload permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/policies-cloud-workload-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cloud Workload policy permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"A0tWGP1VMCZaqVaEKYSr","title":"Cloud Security permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/cloud-security-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Cloud Security permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"0nD82YMP5ZTOMVi9oIa7","title":"Compliance - Cloud permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/compliance-cloud-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure cloud compliance permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"j7o6QcrNyXZZBez3T2Xu","title":"Data Security permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/data-security-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Data Security permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"MlUjx7yN44m3CDkQoI3w","title":"AI Security permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/ai-security-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure AI Security permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"pMBLjcBZqV80rDbUyRF0","title":"Data Classification permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/data-classification-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Data Classification permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"kaTTx4T0VtGytwyZqqoM","title":"Identity Security permissions","pathname":"/cortex-xsiam/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/identity-security-permissions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Identity Security permissions in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"2aM7vpjYlo8JkGb5eELw","title":"API documentation","pathname":"/cortex-xsiam/reference-and-developer-docs/api-documentation","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM APIs to integrate Cortex XSIAM with third-party apps or services to ingest alerts and to leverage alert stitching and investigation capabilities.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"gHGMudhe8RQyo9U9Lj6X","title":"Reference","pathname":"/cortex-xsiam/reference-and-developer-docs/reference","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM reference material: cloud permissions, Windows auditing, XDM mapping, scanner licenses, and fair usage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"oKbf7IkakkHF0rRjzHZY","title":"Microsoft Windows security auditing setup","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Windows security auditing and LDAP event logging for Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"}]},{"id":"LnkHy6PKJkrufgH6RLxy","title":"Enable security auditing event IDs","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable Windows security auditing event IDs for Cortex XSIAM using GPO or local machine settings.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"gJvzUeCJ8OuOM8rRRfjb","title":"Enable security auditing event IDs with GPO","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/enable-security-auditing-event-ids-with-gpo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Group Policy to enable Windows security auditing event IDs for Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"jqL1ksBsFBQsEITiybG8","title":"Set up local machine security auditing without GPO","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/set-up-local-machine-security-auditing-with-gpo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use auditpol to enable Windows security auditing event IDs locally for Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"ZbDHrrH7q2YEaN8dt82j","title":"Additional setup for Active Directory Certificate Services (ADCS) events","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/additional-setup-for-active-directory-certificate-services-adcs-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Active Directory Certificate Services (ADCS) auditing events for Cortex XSIAM data collection.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"xriHWJ7nPUUvSmzmM2QU","title":"Enable auditing access to AD domain objects - 4662","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/enable-auditing-access-to-ad-domain-objects-4662","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure Active Directory domain object auditing for Windows Event ID 4662 in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"z6IWQSJCq7KjyBE1CCL0","title":"Enable additional event logs using Event Viewer","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-additional-event-logs-using-event-viewer","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable additional Windows Event Viewer logs, including PowerShell and Defender events, for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"RrnXwZUQ429J8T6ECvgr","title":"Enable LDAP server events logging (1644)","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Enable LDAP server Event ID 1644 logging for Cortex XSIAM through Registry Editor or Group Policy.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"nsJP0ehNKfYiGmo0TSSn","title":"Enable LDAP server events logging using RegEdit","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/enable-ldap-server-events-logging-using-regedit","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure LDAP server Event ID 1644 logging through Registry Editor for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"gGPXd8x5faKMmCjC8sI6","title":"Enable LDAP server events logging using GPO","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/enable-ldap-server-events-logging-using-gpo","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure LDAP server Event ID 1644 logging through Group Policy for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"aEhloE2ABUp6q4osEJXi","title":"Validate log collection for LDAP Server events","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/validate-log-collection-for-ldap-server-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Validate LDAP server Event ID 1644 collection in Windows Event Viewer for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"dQfSKw4fdHoqCKxi8hgX","title":"XDM fields for mapping authentication events","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/xdm-fields-for-mapping-authentication-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map authentication events to Cortex XSIAM XDM fields for normalized identity data and authentication stories.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"}]},{"id":"M7ENbr4nU1JQf9KDSnRu","title":"XDM fields for mapping network events","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/xdm-fields-for-mapping-network-events","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Map network events to Cortex XSIAM XDM fields for normalized identity data and authentication stories.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"}]},{"id":"p8KYxvz9oZ3m9xag5swG","title":"Advanced network mapping: deep dives","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/xdm-fields-for-mapping-network-events/advanced-network-mapping-deep-dives","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn more about technical conventions for complex network scenarios in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"},{"label":"XDM fields for mapping network events"}]},{"id":"j9hS0hVKjd1V3x4iIG9V","title":"Cortex Network Scanner OSS","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/cortex-network-scanner-oss","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review third-party open-source software licenses used by the Cortex Network Scanner for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"}]},{"id":"yEQA9R7cuMzbWfeSZAs2","title":"Fair Usage policy for Cortex XSIAM","pathname":"/cortex-xsiam/reference-and-developer-docs/reference/fair-usage-policy-for-cortex-xsiam","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand the Fair Usage Policy for data ingestion, connected sources, and API usage for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Reference and developer docs","icon":"code"},{"label":"Reference"}]},{"id":"T3sJY5C7CzaX4v4NNF8O","title":"Endpoint and agent management","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage XDR agents, endpoint protection, and rollout controls in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"}]},{"id":"snc2RNYMcKYa73hzVy5r","title":"Cortex XDR Agent upgrade and rollout control","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-upgrade-and-rollout-control","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Control Cortex XDR agent upgrades and rollout rates in Cortex XSIAM, including automatic updates, schedules, and failure handling.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"zG0cLL7KG6xqOKeG33Rd","title":"Endpoint isolation and live terminal","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/endpoint-isolation-and-live-terminal","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Isolate endpoints and investigate them with Live Terminal in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"8znupvJqIhT4MezHrEho","title":"Cortex XDR Agent-supported platforms","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-supported-platforms","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Review Windows, macOS, Linux, mobile, and ChromeOS platforms supported by the Cortex XDR agent in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"fScSmIK5Sfk2Tw2e03cw","title":"Cortex XDR Agent migration","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-migration","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Plan a phased migration to the Cortex XDR agent in Cortex XSIAM, including compatibility checks, rollout, validation, and rollback.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"9fFdMbrVZu7ek260TWTe","title":"Cortex XDR Agent offline protection","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-offline-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how the Cortex XDR agent protects offline endpoints and which functions resume after reconnection to Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"zVI0IhKVbKByzOCMG060","title":"Cortex XDR Agent temporarily disable protection","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-temporarily-disable-protection","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Temporarily disable Cortex XDR agent protections in Cortex XSIAM for troubleshooting, using exceptions, policy changes, or Cytool.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"ZFnBHUUeSOPoUFVjvlWx","title":"Cortex XDR Agent Linux operation modes","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-linux-operation-modes","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Compare Cortex XDR agent Kernel Mode and User Space (eBPF) operation modes for Linux endpoints in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"irxFFBkKf780D00FclZV","title":"Cortex XDR Agent reboot requirements","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-reboot-requirements","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn when Cortex XDR agent installation, upgrades, or uninstallation require an endpoint reboot, including Device Control and Secure Boot requirements in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"ELo1LhOoBlyT2cJwVp83","title":"Cortex XDR Agent detection techniques","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-detection-techniques","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how the Cortex XDR agent in Cortex XSIAM detects and prevents malware, exploits, ransomware, fileless attacks, and credential theft.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"uVWzl12tSEVwI6TVquDq","title":"Cortex XDR Agent resource usage","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/endpoint-and-agent-management/cortex-xdr-agent-resource-usage","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XDR agent resource usage, minimum system requirements, performance factors, and troubleshooting steps for Windows, macOS, and Linux in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Endpoint and agent management"}]},{"id":"VAba6gnBlsjn8qarwOl7","title":"Data and platform administration","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration","siteSpaceId":"sitesp_xTOni","lang":"en","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"}]},{"id":"AyqeDDNus6AvO1E9UuhE","title":"Audit logs","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/audit-logs","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM audit logs track administrative and investigative activity, retain records, and forward notifications to external services.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"zmEWEfljhmx7pVmLMNTC","title":"Parsing and XQL","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/parsing-and-xql","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to create Cortex XSIAM parsing rules and use XQL to transform, filter, aggregate, combine, and schedule log data queries.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"UeqHONxi0VP6uRiJcSeD","title":"License usage and guardrails","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/license-usage-and-guardrails","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to monitor Cortex XSIAM data ingestion, set quota alerts, and manage storage, retention, and compute costs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"Aa3jItg69gXu5EZHOKLG","title":"Data encryption BYOK","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/data-encryption-byok","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM encrypts tenant data and how Cortex BYOK lets you manage your own encryption keys.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"zBKwawd9FfcSJPSHcFeI","title":"Data ingestion health","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/data-ingestion-health","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM monitors data ingestion health, detects gaps and delays, measures data freshness, and creates custom alerts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"QvEbgJS3KoLnj5OJgx9J","title":"Data retention","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/data-retention","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn about Cortex XSIAM data retention periods, storage tiers, lifecycle options, and ways to manage retention costs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"YCOugNAPzgjJv4D8tbrR","title":"Data ingestion methods","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/data-ingestion-methods","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM ingests endpoint, on-premises, cloud, identity, and third-party data using collectors, integrations, and Broker VMs.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"kXmpO3owHjIY18n0nbzz","title":"Event forwarding and data portability","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/event-forwarding-and-data-portability","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to export Cortex XSIAM event data, query results, detection rules, playbooks, scripts, and layouts for integration or migration.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"vZhCHi8aB6MLgzXMtv1v","title":"Access control and authentication","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/access-control-and-authentication","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM manages role-based and scope-based access, SAML single sign-on, session controls, and tenant isolation.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"6dOjpywuHJzF9EStvFKi","title":"Dashboards and reports","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/data-and-platform-administration/dashboards-and-reports","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to use Cortex XSIAM dashboards, scheduled reports, compliance content, and MITRE ATT&CK coverage to monitor security operations.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Data and platform administration"}]},{"id":"2yNYlLTyKAXJCIhaHCHs","title":"Detection engineering and threat intelligence","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to build and manage Cortex XSIAM detections, threat intelligence, MITRE ATT&CK mapping, and false positive workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"}]},{"id":"VGnzclHWtPdEatZlTIKi","title":"Custom detection rules","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/custom-detection-rules","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to create and validate custom BIOC, correlation, and IOC detection rules in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"ijPXkNnCY9qwojWdSiBJ","title":"Identity analytics and ITDR","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/identity-analytics-and-itdr","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM Identity Analytics and ITDR detect identity threats and assess user risk.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"ArVFgQY0fvUfxbJAyiCe","title":"Threat intel management","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/threat-intel-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to manage threat intelligence feeds, indicators, verdicts, and sharing in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"PMWHSkI2LAyEnf0DWuqZ","title":"Prebuilt detections by data source","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/prebuilt-detections-by-data-source","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM prebuilt detections by data source and review detection coverage in your tenant.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"UIQiVnPJP8SxIRKhveHW","title":"Detection rule change management","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/detection-rule-change-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how to safely test, version, export, and audit detection rule changes in Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"mgZxV4nmqj9uOrbxnIrW","title":"MITRE ATT&CK mapping","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/mitre-att-and-ck-mapping","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM maps detections to MITRE ATT&CK and helps measure coverage gaps.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"RQacAfgzVTzcSVEzL3fK","title":"Detection readiness and learning period","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/detection-readiness-and-learning-period","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn when Cortex XSIAM detections activate and how analytics learning periods establish baselines.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"uzL80bOuNUKXKeMI5Rkz","title":"False positive management","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/detection-engineering-and-threat-intelligence/false-positive-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM reduces false positives with baselining, case grouping, and exceptions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Detection engineering and threat intelligence"}]},{"id":"R6yZvxep5cRiY17z1tzS","title":"Investigation and case management","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/investigation-and-case-management","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM guidance for case investigations, evidence, case lifecycles, asset categorization, and SLA tracking.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"}]},{"id":"9XkOXACasNCgRaITJ8f0","title":"War Room and evidence","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/investigation-and-case-management/war-room-and-evidence","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use the Cortex XSIAM War Room to review evidence, investigate issues, and record response actions.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Investigation and case management"}]},{"id":"IeyKkIsvrt9DtDv00Pum","title":"Categorize cases and assets","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/investigation-and-case-management/categorize-cases-and-assets","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Categorize Cortex XSIAM cases and assets to organize investigations, prioritize response, and improve tracking.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Investigation and case management"}]},{"id":"D9cdZj9T8NBndrfv97lO","title":"Case lifecycle and grouping","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/investigation-and-case-management/case-lifecycle-and-grouping","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Understand Cortex XSIAM case grouping and lifecycle stages, from signal investigation through resolution.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Investigation and case management"}]},{"id":"DwGCGDeO1W7qaya43h2D","title":"SLA timers","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/investigation-and-case-management/sla-timers","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM SLA timers to track response targets, deadlines, and issue-resolution progress.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Investigation and case management"}]},{"id":"VDHfySVEmHTLBixei4Bz","title":"Automation and integrations","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/automation-and-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM automation and integrations, including playbooks, ITSM connections, and promotion workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"}]},{"id":"cHuiDVYCHXquhcGbGLWK","title":"ITSM and collaboration integrations","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/automation-and-integrations/itsm-and-collaboration-integrations","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Connect Cortex XSIAM with ITSM, collaboration, enrichment, and custom tools to automate security workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Automation and integrations"}]},{"id":"kkR1dlMGHmJq56lFmNer","title":"Playbook capabilities","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/automation-and-integrations/playbook-capabilities","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Build Cortex XSIAM playbooks with visual tasks, custom code, flow controls, error handling, and execution tracking.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Automation and integrations"}]},{"id":"zdX7VPP7GTtCvqNQGPTm","title":"Playbook versioning and promotion","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/automation-and-integrations/playbook-versioning-and-promotion","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Manage Cortex XSIAM playbook versions, test safely, and promote automation content between tenants.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Automation and integrations"}]},{"id":"1cKNVV2kWgnAgQObJG4d","title":"Security operations and response","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/security-operations-and-response","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Explore Cortex XSIAM security operations for threat investigation and response across endpoint, email, and network environments.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"}]},{"id":"uFxgw4W6a3uMDty4GBvn","title":"Host firewall overview","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/security-operations-and-response/host-firewall-overview","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Configure and manage the Cortex XSIAM host firewall through the Cortex XDR agent, including rules and location-based policies.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Security operations and response"}]},{"id":"dPylnRdKWws8mleRsi9S","title":"Managed threat hunting","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/security-operations-and-response/managed-threat-hunting","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Cortex XSIAM Managed Threat Hunting provides 24/7 proactive hunting with threat and impact reports.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Security operations and response"}]},{"id":"SHCU55nDiaQEllTdUhpB","title":"Email security","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/security-operations-and-response/email-security","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM email security to detect, investigate, and respond to Microsoft 365 threats and third-party alerts.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Security operations and response"}]},{"id":"3aN7UKeKwtPSgKzw6SZO","title":"Network detection and IoT","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/security-operations-and-response/network-detection-and-iot","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM detects network threats and provides visibility into IoT and unmanaged devices.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Security operations and response"}]},{"id":"uhBODbGgg3ZgMV4X6LhI","title":"Ransomware protection and response","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/security-operations-and-response/ransomware-protection-and-response","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Learn how Cortex XSIAM prevents, contains, investigates, and recovers from ransomware across every attack stage.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Security operations and response"}]},{"id":"rRvhRoYpayW5lgAY0Pxm","title":"Remediation actions","pathname":"/cortex-xsiam/insights-and-tips-cortex-xsiam/security-operations-and-response/remediation-actions","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Use Cortex XSIAM remediation actions to restore files, scan endpoints, isolate devices, and automate recovery workflows.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Insights & Tips - Cortex XSIAM"},{"label":"Security operations and response"}]},{"id":"fhfTWtIP4TJKPWJ85FMh","title":"Learn more about migrating to the latest broker VM image","pathname":"/cortex-xsiam/migrating-to-a-new-broker-vm-image/migrating-to-a-new-broker-vm-image","siteSpaceId":"sitesp_xTOni","lang":"en","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Migrating to a new Broker VM image"}]},{"id":"P2ZNTRnjhDEG6SrrChuw","title":"Standalone Broker VM","pathname":"/cortex-xsiam/migrating-to-a-new-broker-vm-image/standalone-broker-vm","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Migrate a standalone Broker VM to the latest Cortex XSIAM broker image, including configuration import and log-source updates.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Migrating to a new Broker VM image"}]},{"id":"svu5iCEo8oML2X1kK32Y","title":"Broker VM high availability cluster node","pathname":"/cortex-xsiam/migrating-to-a-new-broker-vm-image/broker-vm-high-availability-cluster-node","siteSpaceId":"sitesp_xTOni","lang":"en","description":"Migrate a Broker VM high-availability cluster node to the latest Cortex XSIAM broker image, including cluster and load-balancer updates.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"head-side-gear"},{"label":"Cortex XSIAM Documentation","icon":"head-side-gear"},{"label":"Migrating to a new Broker VM image"}]},{"id":"kH6pzJqpqEEuK8AQzbTD","title":"Navigate the Cortex XDR 5.x docs","pathname":"/cortex-xdr-5.x","siteSpaceId":"sitesp_WVm4R","description":"Start here for a visual overview of the main Cortex XDR 5.x documentation areas.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"Ll44v2g3jIGZMkEwLh6x","title":"What is Cortex XDR ?","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/readme-1","siteSpaceId":"sitesp_WVm4R","description":"Learn about Cortex XDR and the security challenges it addresses.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"UYwty7bhow1ERW1ZjBO4","title":"Cortex XDR architecture","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/readme-1/cortex-xdr-architecture","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the Cortex XDR architecture.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"What is Cortex XDR ?"}]},{"id":"dnyWq6wDiksMiQadnn1k","title":"Agentic AI in Cortex XDR","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/agentic-ai-in-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Use the Cortex Agentic Assistant to investigate cases, perform threat hunting, and create scripts. Embed and run LLM prompts in playbooks. View AI case summaries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"LkfY072bh66syFSyC8vC","title":"Agentic Assistant use cases","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/agentic-ai-in-cortex-xdr/agentic-assistant-use-cases","siteSpaceId":"sitesp_WVm4R","description":"Recommended prompts to automate your SOC using the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"Agentic AI in Cortex XDR"}]},{"id":"3aYCoY7PDC3HqqBFj2Bk","title":"Agentic Assistant security","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/agentic-ai-in-cortex-xdr/agentic-assistant-security","siteSpaceId":"sitesp_WVm4R","description":"Learn about how the Agentic Assistant is built using responsible AI principles.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"Agentic AI in Cortex XDR"}]},{"id":"S0HB2iR6MTpPJxOd80Fu","title":"Best practices for using Agentic AI in Cortex XDR","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/agentic-ai-in-cortex-xdr/best-practices-for-using-agentic-ai-in-cortex-xdr","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"Agentic AI in Cortex XDR"}]},{"id":"Jg25sQ3Wx4PEwk0JOJ2a","title":"What is Cortex Gateway?","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/what-is-cortex-gateway","siteSpaceId":"sitesp_WVm4R","description":"A brief introduction to Cortex Gateway","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"g8fcqMgj66hpwdSXfM1i","title":"Fair Usage policy for Cortex XDR","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/fair-usage-policy-for-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Understand fair-use expectations for data ingestion, connected data sources, and API usage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"60Bhba6F4y8TnWCLzLnC","title":"Cortex XDR license plan","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/cortex-xdr-license-plan","siteSpaceId":"sitesp_WVm4R","description":"Explore Cortex XDR license variants, included capabilities, and available add-ons.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"xR3xxzwi8KNdtFaFjwut","title":"Data retention in Cortex XDR","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/cortex-xdr-license-plan/data-retention-in-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the default retention periods for all Cortex XDR licenses, and the available retention add-ons.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"Cortex XDR license plan"}]},{"id":"SylnEM6K5F6xrIVoRGeW","title":"Data storage lifecycle","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/cortex-xdr-license-plan/data-storage-lifecycle","siteSpaceId":"sitesp_WVm4R","description":"Understand Cortex XDR hot storage, cold storage, export, and data-retention options.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"Cortex XDR license plan"}]},{"id":"vvcgSClHlPBVNnIC38gL","title":"License allocation","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/cortex-xdr-license-plan/license-allocation","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how Cortex XDR regulates licenses.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"Cortex XDR license plan"}]},{"id":"mEGEOzktMzZAkQEKbDUJ","title":"License expiration","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/cortex-xdr-license-plan/license-expiration","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the Cortex XDR license expiration and validation period.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"},{"label":"Cortex XDR license plan"}]},{"id":"xPfWip6yXeejzqwc64Vm","title":"Security Operations Center roles and responsibilities","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/security-operations-center-roles-and-responsibilities","siteSpaceId":"sitesp_WVm4R","description":"Learn about the typical core roles that make up a SOC team.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"lfoCgRQPp4ya7qALF1mL","title":"In-product support ticket creation","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/in-product-support-case-creation","siteSpaceId":"sitesp_WVm4R","description":"Open a support ticket directly in Cortex XDR and record your console to capture your issues and have the ticket handled efficiently.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"U9TaT29yJBjeZbZxyohM","title":"Use the interface","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/use-the-interface","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how to use the Cortex XDR interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"wOfh1SvVvKnB2dhoccSF","title":"Supported web browsers","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/supported-web-browsers","siteSpaceId":"sitesp_WVm4R","description":"Review the web browsers and minimum versions supported by Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"yGySDAZIb5PyIJIKXi38","title":"Upgrade to Cortex XDR 5.x","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/upgrade-to-cortex-xdr-5.x","siteSpaceId":"sitesp_WVm4R","description":"Review the Cortex XDR 5.x upgrade process, scheduling options, and key considerations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"6tULgISgIASjjhKszQ5I","title":"Extend Cortex XDR 5.x with Cortex Cloud Runtime Security","pathname":"/cortex-xdr-5.x/learn-about-cortex-xdr-5.x/extend-cortex-xdr-5.x-with-cortex-cloud-runtime-security","siteSpaceId":"sitesp_WVm4R","description":"Extend Cortex XDR with Cortex Cloud Runtime Security capabilities for cloud environments.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Learn about Cortex XDR 5.x","icon":"book"}]},{"id":"DngtRQO9le384K6LgCAH","title":"Deployment steps","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps","siteSpaceId":"sitesp_WVm4R","description":"Plan, deploy, and onboard Cortex XDR using the required deployment steps.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"}]},{"id":"GqZlESbzFvw1HB2bacuE","title":"Plan and prepare","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/plan-and-prepare","siteSpaceId":"sitesp_WVm4R","description":"Learn more about deployment considerations and onboarding steps.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"vNDnHTPIl2XRQNnEBCzU","title":"Cortex XDR onboarding checklist","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/cortex-xdr-onboarding-checklist","siteSpaceId":"sitesp_WVm4R","description":"Review the steps to deploy and onboard Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"p2nRDhhxqZiguNMmKrfy","title":"Activate Cortex XDR","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/activate-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Learn how to activate your tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"vb5iphUgqLKNP9eJInrZ","title":"Cortex XDR supported regions","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/activate-cortex-xdr/cortex-xdr-supported-regions","siteSpaceId":"sitesp_WVm4R","description":"Review available Cortex XDR hosting regions and their data residency details.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XDR"}]},{"id":"UVuQxxZUrGHw1dykeNOL","title":"Enable access to required PANW resources","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/activate-cortex-xdr/enable-access-to-required-panw-resources","siteSpaceId":"sitesp_WVm4R","description":"Configure firewall access for Cortex XDR resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XDR"}]},{"id":"DLiygWEN484BR7784p3d","title":"Regional egress resources","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/activate-cortex-xdr/enable-access-to-required-panw-resources/regional-egress-resources","siteSpaceId":"sitesp_WVm4R","description":"Allow required regional endpoints for Cortex XDR agent and tenant communication.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XDR"},{"label":"Enable access to required PANW resources"}]},{"id":"kevdTUoCnTxKTtwrF0xp","title":"Engines IP addresses (outbound)","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/activate-cortex-xdr/enable-access-to-required-panw-resources/engines-ip-addresses-outbound","siteSpaceId":"sitesp_WVm4R","description":"Allow outbound engine IP addresses to access your network resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XDR"},{"label":"Enable access to required PANW resources"}]},{"id":"Dzublvj2cmLI1eWlHY43","title":"Inbound source resources","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/activate-cortex-xdr/enable-access-to-required-panw-resources/inbound-source-resources","siteSpaceId":"sitesp_WVm4R","description":"Allow Cortex XDR source IP addresses to access your resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XDR"},{"label":"Enable access to required PANW resources"}]},{"id":"A4IyHub7w4fKUwKCrcae","title":"FedRamp and the US Federal Government required resources","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/activate-cortex-xdr/enable-access-to-required-panw-resources/fedramp-and-the-us-federal-government-required-resources","siteSpaceId":"sitesp_WVm4R","description":"Configure required resources for FedRAMP and US federal deployments.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex XDR"},{"label":"Enable access to required PANW resources"}]},{"id":"DHNmn2HkttjyXAmeTg0t","title":"Set up users, groups, and roles","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-users-and-roles","siteSpaceId":"sitesp_WVm4R","description":"Learn how to set up users, groups, and roles in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"79MQYJCWLHWGGG0JFNQh","title":"User group management","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-users-and-roles/user-group-management","siteSpaceId":"sitesp_WVm4R","description":"Create and manage user groups, group mappings, and group-based access in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up users, groups, and roles"}]},{"id":"q6ivY626ROjdf8ZdZuma","title":"Assign user roles and groups","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-users-and-roles/assign-user-roles-and-groups","siteSpaceId":"sitesp_WVm4R","description":"Assign roles and groups to control each user's Cortex XDR access.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up users, groups, and roles"}]},{"id":"biuuG1IS5OSUz5bKfSom","title":"Set up authentication","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication","siteSpaceId":"sitesp_WVm4R","description":"Authenticate Cortex XDR users using SAML 2.0 or Customer Support Portal (CSP).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"cxqbabK5NDzGSx2edAxi","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_WVm4R","description":"Add Customer Support Portal users and grant them access to Cortex Gateway and Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"tSXz8kZ8xFNdguQFzMCc","title":"Authenticate users using SSO","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_WVm4R","description":"Configure single sign-on authentication for Cortex XDR users.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"4nZ6FZzDxgp3HD6Lwrhq","title":"Set up okta as the Identity provider using SAML 2.0","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_WVm4R","description":"Configure Okta as a SAML 2.0 identity provider for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"JsM43ytgb3URIsj7qOKH","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_WVm4R","description":"Configure Microsoft Entra ID as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"vSTUCFZSu0yRLNL9SpOJ","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-through-the-customer-support-portal-1","siteSpaceId":"sitesp_WVm4R","description":"Add Customer Support Portal users and grant tenant access.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"b8lI8jWNSPxky0UQPb9Y","title":"Authenticate users using SSO","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-using-sso-1","siteSpaceId":"sitesp_WVm4R","description":"Configure SAML 2.0 single sign-on for Cortex XDR users.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"}]},{"id":"PGKwxteikGL0BtSj3xxI","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-using-sso-1/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_WVm4R","description":"Configure Okta SAML single sign-on for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"},{"label":"Authenticate users using SSO"}]},{"id":"2ZDqo0h8jpIgUQMUKOoO","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-using-sso-1/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_WVm4R","description":"Configure Microsoft Entra ID SAML single sign-on for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Set up authentication"},{"label":"Authenticate users using SSO"}]},{"id":"gm7Bzwbapkj30kEFkRc3","title":"Pre-installation steps for Cortex XDR agents","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/pre-installation-steps-for-cortex-xdr-agents","siteSpaceId":"sitesp_WVm4R","description":"Complete system and network prerequisites before installing Cortex XDR agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"hev0RapKha68HW2zfWaj","title":"Install Cortex XDR agents","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/install-cortex-xdr-agents","siteSpaceId":"sitesp_WVm4R","description":"Learn about the initial steps required to deploy Cortex XDR agent software to endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"VDf0k9YWyqpQw6xzj7eC","title":"Plan your agent deployment","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/install-cortex-xdr-agents/plan-your-agent-deployment","siteSpaceId":"sitesp_WVm4R","description":"Plan a Cortex XDR agent rollout for your endpoints and environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"SIHwAfkbpxqnrduttBDc","title":"Guidelines for keeping Cortex XDR agents and content updated","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/install-cortex-xdr-agents/guidelines-for-keeping-cortex-xdr-agents-and-content-updated","siteSpaceId":"sitesp_WVm4R","description":"Keep Cortex XDR agents and security content current and supported.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"1oeKnxtbizcScKRDWjan","title":"Create an installation package","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/install-cortex-xdr-agents/create-an-installation-package","siteSpaceId":"sitesp_WVm4R","description":"Create an installation package for deploying Cortex XDR agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"Fiq4H4HDiNgAmeMzxzfo","title":"Deploy agent installation packages","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/install-cortex-xdr-agents/deploy-agent-installation-packages","siteSpaceId":"sitesp_WVm4R","description":"Deploy Cortex XDR agent installation packages across your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Install Cortex XDR agents"}]},{"id":"wLftRO2TFkyJ87heaUSH","title":"Configure XDR Analytics","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/configure-xdr-analytics","siteSpaceId":"sitesp_WVm4R","description":"Configure XDR Analytics to analyze data and detect threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"YEOIcSYTAXpip0yyMaAL","title":"Set up Cloud Identity Engine","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-cloud-identity-engine","siteSpaceId":"sitesp_WVm4R","description":"Set up Cloud Identity Engine to enrich Cortex XDR identity data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"sGF0CM10daMHPjAL5sxD","title":"Manage API keys","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/manage-api-keys","siteSpaceId":"sitesp_WVm4R","description":"Create, manage, and revoke API keys for Cortex XDR integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"JAN3SHM6JjsKQ53ChDTw","title":"Post-deployment steps","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps","siteSpaceId":"sitesp_WVm4R","description":"Configure and manage Cortex XDR after completing the initial deployment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"}]},{"id":"Dnkp0sHaCjuNPCkksURo","title":"Set up your environment","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment","siteSpaceId":"sitesp_WVm4R","description":"Learn more about setting up the Cortex XDR environment based on your preferences.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"PEpRfSIxLnSMIPTI5DF5","title":"Configure server settings","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/configure-server-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure tenant-wide and user-specific Cortex XDR server settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"zn9FuCTDKR4fNa48Qy6b","title":"Configure security settings","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/configure-security-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure login sessions, access restrictions, and user expiration settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"lo7XDuWX5SKkIIBoqJQT","title":"Data and log forwarding","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding","siteSpaceId":"sitesp_WVm4R","description":"Configure forwarding of Cortex XDR data, logs, and notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"Oa0P8n9NzzWLk3d1leHB","title":"Forward logs and data from Cortex XDR to external services","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services","siteSpaceId":"sitesp_WVm4R","description":"Send Cortex XDR logs, cases, and issues to external services.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"}]},{"id":"ZckVB5pItfPC2wwzXRoa","title":"Configure external applications for forwarding","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-external-applications-for-forwarding","siteSpaceId":"sitesp_WVm4R","description":"Configure external applications before forwarding Cortex XDR notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"}]},{"id":"ce6G3RnLrPkIKA7Dmkg2","title":"Forward notifications to Amazon SQS","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-sqs","siteSpaceId":"sitesp_WVm4R","description":"Configure Amazon SQS to receive Cortex XDR issue and case notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"7hsJvNqG9s1PO2Grp425","title":"Forward notifications to Amazon S3","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-s3","siteSpaceId":"sitesp_WVm4R","description":"Configure Amazon S3 to receive Cortex XDR issue and case notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"JG8nsDY1MulQEAGRi0vz","title":"Forward notifications to Splunk","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-splunk","siteSpaceId":"sitesp_WVm4R","description":"Configure Splunk to receive Cortex XDR issue and case notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"p52hzTIq68XUq2hnUC7h","title":"Forward notifications to webhook","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-webhook","siteSpaceId":"sitesp_WVm4R","description":"Configure a webhook to receive Cortex XDR issue and case notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"lKXWGN2Ea2U28wDmf7d4","title":"Integrate a syslog receiver","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-external-applications-for-forwarding/integrate-a-syslog-receiver","siteSpaceId":"sitesp_WVm4R","description":"Configure a syslog receiver for Cortex XDR log and notification forwarding.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"QVPlAUpZlUmlPaiQGR4v","title":"Integrate Slack for outbound notifications","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-external-applications-for-forwarding/integrate-slack-for-outbound-notifications","siteSpaceId":"sitesp_WVm4R","description":"Connect Slack to receive Cortex XDR issue and report notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"jaNMEyeGH3TbwoiEvHU2","title":"Configure notification forwarding","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/configure-notification-forwarding","siteSpaceId":"sitesp_WVm4R","description":"Select Cortex XDR notifications and configure where to forward them.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"}]},{"id":"tg7UPENNWQoLxJcNTRqe","title":"Set up email notifications for tenant updates","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/set-up-email-notifications-for-tenant-updates","siteSpaceId":"sitesp_WVm4R","description":"Receive email notifications when Cortex XDR tenant updates are scheduled or complete.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"}]},{"id":"R4Sp3NMovmrjFVL4Bi2D","title":"Monitor administrative activity","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-xdr-to-external-services/monitor-administrative-activity","siteSpaceId":"sitesp_WVm4R","description":"Review and forward audit logs for Cortex XDR administrative activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex XDR to external services"}]},{"id":"ktYBtQTpbrv6lDvLPUDZ","title":"Data and log notification formats","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats","siteSpaceId":"sitesp_WVm4R","description":"Review formats for forwarded Cortex XDR cases, issues, and logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"}]},{"id":"ZpqbQ2ZOWOEywNOyevpu","title":"Management audit log messages","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-messages","siteSpaceId":"sitesp_WVm4R","description":"Review management audit log types and messages generated by Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"pQAjBzMyg4hfflQWIxDL","title":"Issue notification format","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/issue-notification-format","siteSpaceId":"sitesp_WVm4R","description":"Review issue notification formats for email and external forwarding destinations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"j7plHKu1ldr4ScdbeZZQ","title":"Agent Audit log notification format","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/agent-audit-log-notification-format","siteSpaceId":"sitesp_WVm4R","description":"Review the email and syslog formats for agent audit log notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"30gHt4PEgBe3PtLMcxUP","title":"Management Audit log notification format","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-notification-format","siteSpaceId":"sitesp_WVm4R","description":"Review the email and syslog formats for management audit log notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"cTMzUbhEN5Azmy1aEjez","title":"Log format for IOC and BIOC issues","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/log-format-for-ioc-and-bioc-issues","siteSpaceId":"sitesp_WVm4R","description":"Review legacy log formats for IOC and BIOC issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"BQ4t6rXc2k8jDHNEI8rY","title":"Analytics log format","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/analytics-log-format","siteSpaceId":"sitesp_WVm4R","description":"Review legacy log formats and fields for Cortex XDR Analytics issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"WBrLWoc8jdNvDqXguED6","title":"Manage user roles and access management","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management","siteSpaceId":"sitesp_WVm4R","description":"Learn how to manage access for users, user roles, user groups, and Single Sign-On (SSO) for users on a specific Cortex XDR tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"y1pSO1FcRM02axaD5UAW","title":"Manage user roles","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-user-roles","siteSpaceId":"sitesp_WVm4R","description":"Create, edit, and assign roles that control Cortex XDR permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"FqHV5fDYyU6RR5qNVu3P","title":"Manage user acces","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-user-access","siteSpaceId":"sitesp_WVm4R","description":"Manage users and their access to the Cortex XDR tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"y1EwzaBuv39RevhSmonp","title":"Manage user scope","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-user-scope","siteSpaceId":"sitesp_WVm4R","description":"Configure Scope-Based Access Control (SBAC) to limit access to Cortex XDR data and content.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"qmtGGScUXqDhDJFX05V1","title":"Manage access to objects","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects","siteSpaceId":"sitesp_WVm4R","description":"Control user access to Cortex XDR objects and saved content.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"7q8qi0ycsBfr1BCOeXYW","title":"Manage access to custom dashboards","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-custom-dashboards","siteSpaceId":"sitesp_WVm4R","description":"Control which users can view and manage custom dashboards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"d38hRHY1aomvQZo6Axr4","title":"Manage access to report templates","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-report-templates","siteSpaceId":"sitesp_WVm4R","description":"Control which users can view and manage report templates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"uGnwTDwpvQxXPLRyY3Wc","title":"Manage access to playbooks and scripts","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-playbooks-and-scripts","siteSpaceId":"sitesp_WVm4R","description":"Control which users can view and manage playbooks and scripts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"CmzQqlO8Ymy6vb0noago","title":"Manage access to saved queries","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-saved-queries","siteSpaceId":"sitesp_WVm4R","description":"Control which users can view and manage saved queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"dIgHTUvGQrtH1WiXupS7","title":"Configure the Cortex Agentic Assistant","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant","siteSpaceId":"sitesp_WVm4R","description":"Create and manage agents and actions in the Agents Hub and configure access to the Cortex Agentic Assistant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"GKquCT7xpNAvJ62BKcRl","title":"Agents Hub","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub","siteSpaceId":"sitesp_WVm4R","description":"Manage Cortex Agentic Assistant agents, actions, and integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"LgKhufcl4ABkME3hH8lD","title":"Manage actions","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-actions","siteSpaceId":"sitesp_WVm4R","description":"Create and manage actions that agents can perform.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agents Hub"}]},{"id":"yBXKcHgXFyuWVjD8Wtku","title":"Register actions","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/register-actions","siteSpaceId":"sitesp_WVm4R","description":"Register actions for use by Cortex Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agents Hub"}]},{"id":"aZOXTqfrBMVZPxKNCRYy","title":"Manage agents","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-agents","siteSpaceId":"sitesp_WVm4R","description":"View, configure, and manage Cortex Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agents Hub"}]},{"id":"alUuMReRHOAwWf5RNnGA","title":"Build agents","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/build-agents","siteSpaceId":"sitesp_WVm4R","description":"Build Cortex Agentic Assistant agents for your security workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agents Hub"}]},{"id":"QUfmyhzgG4nUkHhXIldD","title":"Expand agent capabilities with MCP integrations","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/expand-agent-capabilities-with-mcp-integrations","siteSpaceId":"sitesp_WVm4R","description":"Extend agent capabilities by configuring Model Context Protocol integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agents Hub"}]},{"id":"iAutd2kClPH1lFkCcfSS","title":"Agentic Assistant role based access control","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/configure-the-cortex-agentic-assistant/agentic-assistant-role-based-access-control","siteSpaceId":"sitesp_WVm4R","description":"Configure role-based access to the Cortex Agentic Assistant and Agents Hub.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"Pw5ielmvCAAfuDXEl5jj","title":"Dashboards and reports","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/post-deployment-steps/dashboards-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Create dashboards and reports to monitor your Cortex XDR environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"saddJyvbcmwJGjnYG7rq","title":"Multi-Tenant","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant","siteSpaceId":"sitesp_WVm4R","description":"Manage licensing, onboarding, and operations across Cortex XDR tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"}]},{"id":"RKQrbabneGJt4q5JdIXY","title":"What is Cortex XDR multi-tenant?","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/what-is-cortex-xdr-multi-tenant","siteSpaceId":"sitesp_WVm4R","description":"Learn about Cortex multi-tenant deployments that provide data segregation while enabling you to manage multiple tenants from a single console.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"}]},{"id":"bdbc87e6c4f942c0418f3060f634df92edb119e6","title":"Multi-tenant central licensing management","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/multi-tenant-central-licensing-management","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"}]},{"id":"KxVVLwoVVC8Z9Dm51QBv","title":"Onboard Cortex multi-tenant","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/onboard-cortex-multi-tenant","siteSpaceId":"sitesp_WVm4R","description":"Learn how to activate and manage tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"}]},{"id":"bHCpWEtxbOd0GJOXp9C1","title":"Dynamic license allocation","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/dynamic-license-allocation","siteSpaceId":"sitesp_WVm4R","description":"In a multi-tenant central licensing management environment, you can dynamically edit child tenant allocations, add child tenants, and delete child tenants with the license pool automatically updated.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"}]},{"id":"l39ccDQIYGHAhB9yG1H1","title":"Child tenant management","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_WVm4R","description":"Track, manage, and investigate child tenant data from the parent tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"}]},{"id":"b5UNF1A9uCaIY8tpMp88","title":"Track your tenant management","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/child-tenant-management/track-your-tenant-management","siteSpaceId":"sitesp_WVm4R","description":"Monitor tenant management activity across your multi-tenant environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"1en7HW2XhSvd5PcN3dR0","title":"Investigate child tenant data","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/child-tenant-management/investigate-child-tenant-data","siteSpaceId":"sitesp_WVm4R","description":"Investigate security data from child tenants in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"kcp7cnRnaKfRZSma4bbC","title":"Create and allocate configurations","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/child-tenant-management/create-and-allocate-configurations","siteSpaceId":"sitesp_WVm4R","description":"Create configurations and allocate them to child tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"3yyNTbjO1lu0h1SFRSmR","title":"Create a security managed action","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/child-tenant-management/create-a-security-managed-action","siteSpaceId":"sitesp_WVm4R","description":"Create managed actions to apply security changes across child tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"1heEiFD3nXplsccOtvfz","title":"About managed threat hunting","pathname":"/cortex-xdr-5.x/onboard-cortex-xdr/multi-tenant/about-managed-threat-hunting","siteSpaceId":"sitesp_WVm4R","description":"Understand how Managed Threat Hunting can help your organization.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Onboard Cortex XDR","icon":"rocket"},{"label":"Multi-Tenant"}]},{"id":"U10wO6IygutWL54D9xIC","title":"Configure and deploy Cortex XDR","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Configure Cortex XDR capabilities, network settings, analytics, and integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"bU7ilRN6IbLf0Ab6SGKo","title":"Cortex XDR - Analytics","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/cortex-xdr-analytics","siteSpaceId":"sitesp_WVm4R","description":"Learn how to enable Cortex XDR - Analytics, which allows Cortex XDR to analyze data from a variety of sensors and develop a baseline to raise analytics alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"}]},{"id":"OSf4fpNSBV6PjgQb1XSw","title":"Configure Cortex XDR network parameters","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-cortex-xdr-network-parameters","siteSpaceId":"sitesp_WVm4R","description":"Define the IP address ranges and domain names used by Cortex XDR to identify your network assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"}]},{"id":"6h469EefgaGNBlzTuWxe","title":"Enable the Analytics Engine and Identity Analytics","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/enable-the-analytics-engine-and-identity-analytics","siteSpaceId":"sitesp_WVm4R","description":"Learn how to enable the Analytics Engine and Identity Analytics.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"}]},{"id":"KEC1iMFbTEOK8R0cVZ8j","title":"Set up Cloud Identity Engine","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/set-up-cloud-identity-engine","siteSpaceId":"sitesp_WVm4R","description":"Learn how to set up Cloud Identity Engine to use with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"}]},{"id":"ZIys1FLNflaVMKqb7Rzc","title":"Configure the Cortex Agentic Assistant","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant","siteSpaceId":"sitesp_WVm4R","description":"Configure Cortex Agentic Assistant agents, actions, and access.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"}]},{"id":"WaQdNvCgtoS9jhcJgwFB","title":"Agentic Assistant components and concepts","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agentic-assistant-components-and-concepts","siteSpaceId":"sitesp_WVm4R","description":"Learn about the key components and concepts, such as agents and actions in the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"FpDR55VQJTsX1BYqFpPU","title":"Agentic Assistant Hub","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agents-hub","siteSpaceId":"sitesp_WVm4R","description":"Learn about personal and system agents in in the Agentic Assistant Hub","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"BMFclwgMf5oMVBKHYzNs","title":"Manage actions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agents-hub/manage-actions","siteSpaceId":"sitesp_WVm4R","description":"Create and manage actions for Cortex Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"9fRsaI5MlyVmvvvTFWJI","title":"Register actions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agents-hub/register-actions","siteSpaceId":"sitesp_WVm4R","description":"Register actions for use by Cortex Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"LsK75yEQZqU3s7t8r76Q","title":"Manage agents","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agents-hub/manage-agents","siteSpaceId":"sitesp_WVm4R","description":"View, configure, and manage Cortex Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"mfuiW2ZAMdc7CrJMPrmY","title":"Build agents","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agents-hub/build-agents","siteSpaceId":"sitesp_WVm4R","description":"Build Cortex Agentic Assistant agents for security workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"Jaf0mDfvR31agVQ9mTvn","title":"Manage knowledge sources (preview)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agents-hub/manage-knowledge-sources-preview","siteSpaceId":"sitesp_WVm4R","description":"Enhance AI agent capabilities by leveraging the Knowledge Center (preview) to provide agents with your business-specific source of truth and built-in Cortex (system) knowledge.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"hdJFwuvsYoIlWpSlbFK4","title":"Expand agent capabilities with MCP integrations","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agents-hub/expand-agent-capabilities-with-mcp-integrations","siteSpaceId":"sitesp_WVm4R","description":"Extend agent capabilities with Model Context Protocol integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"iMIZIVg4TkeUOHD0AvaY","title":"Agentic Assistant role-based access control","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/configure-the-cortex-agentic-assistant/agentic-assistant-role-based-access-control","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions to access Cortex Agentic Assistant features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"JoNAnLiWIz1HwUt8fSE3","title":"About the Cortex MCP server","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/cortex-mcp-server","siteSpaceId":"sitesp_WVm4R","description":"Install, configure, use, and extend the Cortex MCP server.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"}]},{"id":"aZ87AoRDteR9IdVF5eCc","title":"Install the Cortex MCP sever","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/cortex-mcp-server/install-the-cortex-mcp-sever","siteSpaceId":"sitesp_WVm4R","description":"Install the Cortex MCP server for supported MCP clients.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"About the Cortex MCP server"}]},{"id":"mdDeD5iIuGdOGvE4CJTx","title":"Confgure the MCP client","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/cortex-mcp-server/confgure-the-mcp-client","siteSpaceId":"sitesp_WVm4R","description":"Configure an MCP client to connect to the Cortex MCP server.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"About the Cortex MCP server"}]},{"id":"nRPkfErKWROqhNYRQm8J","title":"Use the Cortex MCP server","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/cortex-mcp-server/use-the-cortex-mcp-server","siteSpaceId":"sitesp_WVm4R","description":"Investigate Cortex data with built-in MCP tools.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"About the Cortex MCP server"}]},{"id":"nvKf4GlXzOdYryBh0xW4","title":"Create custom Cortex MCP server tools","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/configure-and-deploy-cortex-xdr/cortex-mcp-server/create-custom-cortex-mcp-server-tools","siteSpaceId":"sitesp_WVm4R","description":"Extend the Cortex MCP server with OpenAPI or Python tools.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Configure and deploy Cortex XDR"},{"label":"About the Cortex MCP server"}]},{"id":"ourtyxYJWaCBFjbq6gD6","title":"Data management","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management","siteSpaceId":"sitesp_WVm4R","description":"Manage data collection, storage, parsing, and usage in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"d5OuEbAeMrKHSP3Hh0vS","title":"Broker VM","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm","siteSpaceId":"sitesp_WVm4R","description":"Deploy and manage Broker VM data collectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"}]},{"id":"S1h83KvUFhAZKi5velVl","title":"What is the Broker VM?","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/what-is-the-broker-vm","siteSpaceId":"sitesp_WVm4R","description":"Learn how Broker VM collects and forwards data to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"1zT4Z7rYgSLMJV58NOYZ","title":"Set up and configure Broker VM","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm","siteSpaceId":"sitesp_WVm4R","description":"Set up and configure Broker VM for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"Q4p7mDkmcJbbLMP6TPaN","title":"Broker VM image installations","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations","siteSpaceId":"sitesp_WVm4R","description":"Install Broker VM on a supported cloud or virtualization platform.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"oYTjNXoVZB00pYSuFns0","title":"Set up Broker VM on Alibaba Cloud","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-alibaba-cloud","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on Alibaba Cloud for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"q5VtqS7RUS9BignLRz2z","title":"Set up Broker VM on Amazon Web Services","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-amazon-web-services","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on Amazon Web Services for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"vAU6UxUOnvyhWuaqiuV4","title":"Set up Broker VM on Google Cloud Platform (GCP)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-google-cloud-platform-gcp","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on Google Cloud Platform for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"7GfJ4VI1uWgnExW53ETM","title":"Set up Broker VM on KVM using Ubuntu","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-kvm-using-ubuntu","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on KVM with Ubuntu for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"oLSCKA59qmZIWvomWWbb","title":"Set up Broker VM on Microsoft Azure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-azure","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on Microsoft Azure for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"1GgmcQWPlgWEfBCYTZad","title":"Set up Broker VM on Microsoft Hyper-V","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-hyper-v","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on Microsoft Hyper-V for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"P7SEhvvn4IvvIRbvEs8Q","title":"Set up Broker VM on Nutanix Hypervisor","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-nutanix-hypervisor","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on Nutanix Hypervisor for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"PHKFcp6J3FWwOIhuMMc5","title":"Set up Broker VM on VMware ESXi using vSphere Client","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-vmware-esxi-using-vsphere-client","siteSpaceId":"sitesp_WVm4R","description":"Deploy Broker VM on VMware ESXi for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"1tnM6VOVkf6jDihzdK46","title":"Broker VM data collector applets","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets","siteSpaceId":"sitesp_WVm4R","description":"Configure Broker VM data collector applets for supported data sources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"KG7s2oyQD7vlZysemTZs","title":"Manage Broker VM","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm","siteSpaceId":"sitesp_WVm4R","description":"Manage Broker VM configuration, monitoring, upgrades, and clustering.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"wKzKbWIIZ2kjtPcuJTgQ","title":"Edit Broker VM Configuration","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/edit-broker-vm-configuration","siteSpaceId":"sitesp_WVm4R","description":"Update the configuration of an existing Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"qGhOH8UtWD5vlAuNgqKH","title":"Increase Broker VM storage allocated for data caching","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-caching","siteSpaceId":"sitesp_WVm4R","description":"Increase Broker VM storage for cached data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"W8hU130eI9ANYto8s2Ak","title":"Monitor Broker VM using Prometheus","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/monitor-broker-vm-using-prometheus","siteSpaceId":"sitesp_WVm4R","description":"Monitor Broker VM metrics with Prometheus.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"vkSBr6oa07jWbqQjO98y","title":"Collect Broker VM Logs","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/collect-broker-vm-logs","siteSpaceId":"sitesp_WVm4R","description":"Collect logs from Broker VM for troubleshooting.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"SmOEM4IZIYBMRW06Oxwy","title":"Upgrade Broker VM","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/upgrade-broker-vm","siteSpaceId":"sitesp_WVm4R","description":"Upgrade Broker VM to a supported release.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"xny3nREGXa6SXVFQ1auN","title":"Update Broker VM applets independently","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/update-broker-vm-applets-independently","siteSpaceId":"sitesp_WVm4R","description":"Update Broker VM data collector applets without upgrading the VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"ZNnOkKM3vnZzoXpIoUI4","title":"Import Broker VM Configuration","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/import-broker-vm-configuration","siteSpaceId":"sitesp_WVm4R","description":"Import a saved Broker VM configuration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"mu5bXEne4MC9aVkkjSoY","title":"Open Live Terminal","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/open-live-terminal","siteSpaceId":"sitesp_WVm4R","description":"Open a live terminal session on Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"4n8tLQgNgwZvnh0mS3qh","title":"Add Broker VM to cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/add-broker-vm-to-cluster","siteSpaceId":"sitesp_WVm4R","description":"Add a Broker VM node to a high availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"DJcKp4grLunrK5b5zyQr","title":"Switchover Primary Node in Cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/switchover-primary-node-in-cluster","siteSpaceId":"sitesp_WVm4R","description":"Switch the primary node in a Broker VM cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"764Hl55BQZTwvKIXfIYT","title":"Remove from Cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm/remove-from-cluster","siteSpaceId":"sitesp_WVm4R","description":"Remove a Broker VM node from its cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"cpUgx3SycWJE9DD4CluK","title":"Manage Broker VM data collector applets","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/manage-broker-vm-data-collector-applets","siteSpaceId":"sitesp_WVm4R","description":"Manage applets installed on Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"Sz6NeeHeADnFKfqWlmxA","title":"Broker VM High Availability Cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster","siteSpaceId":"sitesp_WVm4R","description":"Configure Broker VM clusters for high availability.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"9tC4RDs3NYTkMsWaNifh","title":"Configure High Availability Cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster/configure-high-availability-cluster","siteSpaceId":"sitesp_WVm4R","description":"Configure a high availability cluster for Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"bB8pCeOaDypquTCB90gZ","title":"Manage Broker VM clusters","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters","siteSpaceId":"sitesp_WVm4R","description":"View and manage Broker VM high availability clusters.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"5lzeeBGJIuFTMXjaRNnt","title":"View cluster details","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/view-cluster-details","siteSpaceId":"sitesp_WVm4R","description":"View configuration and status details for a Broker VM cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"bWCIbUiCUGf7lnZ7IEHm","title":"Edit cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/edit-cluster","siteSpaceId":"sitesp_WVm4R","description":"Update the configuration of a Broker VM cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"mmQgVus9wogXTcOiFCcv","title":"Add applet to cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-applet-to-cluster","siteSpaceId":"sitesp_WVm4R","description":"Add a data collector applet to a Broker VM cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"5UIHv4l1szGpYQ8SNVVQ","title":"Add Broker VM to cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-broker-vm-to-cluster","siteSpaceId":"sitesp_WVm4R","description":"Add a Broker VM node to an existing cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"wZLuT9eKDijscRwAkHot","title":"Remove cluster","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/remove-cluster","siteSpaceId":"sitesp_WVm4R","description":"Remove a Broker VM high availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"BMOWeSP0PlCWQnx0aQ7T","title":"Broker VM notifications","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/broker-vm-notifications","siteSpaceId":"sitesp_WVm4R","description":"Configure and manage Broker VM notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"F3W1ANSnlt3lAKAWH2Rv","title":"Monitor Broker VM activity","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/monitor-broker-vm-activity","siteSpaceId":"sitesp_WVm4R","description":"Monitor Broker VM activity and operational status.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"DRrZv1lD5zuNJDw7N8eS","title":"Troubleshoot Broker VM applet errors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/broker-vm/troubleshoot-broker-vm-applet-errors","siteSpaceId":"sitesp_WVm4R","description":"Diagnose and resolve Broker VM data collector applet errors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"SlVy1PeKVwWJMqMnlkmY","title":"Dataset management","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/dataset-management","siteSpaceId":"sitesp_WVm4R","description":"Learn more about managing your datasets and understanding your overall data storage, period-based retention.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"}]},{"id":"UjzCokPKRXOuWfAgshmi","title":"What are datasets?","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/dataset-management/what-are-datasets","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR datasets store and organize your data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"g9cHCQxd33GodTsBDlsW","title":"Lookup datasets","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/dataset-management/lookup-datasets","siteSpaceId":"sitesp_WVm4R","description":"Create and manage lookup datasets for Cortex XDR queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"ky5TtEU7X1GK86KlmDx4","title":"Import a lookup dataset","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/dataset-management/lookup-datasets/import-a-lookup-dataset","siteSpaceId":"sitesp_WVm4R","description":"Import a lookup dataset into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"15zjmowo6fkuDQzJ9Y4E","title":"Download JSON file of lookup dataset","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/dataset-management/lookup-datasets/download-json-file-of-lookup-dataset","siteSpaceId":"sitesp_WVm4R","description":"Download a lookup dataset as a JSON file.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"EL6ELDySPeBv4lgve1jc","title":"Set time to live for lookup datasets","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/dataset-management/lookup-datasets/set-time-to-live-for-lookup-datasets","siteSpaceId":"sitesp_WVm4R","description":"Set retention periods for lookup datasets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"S9vFQEMJdWaVV5DLRHUW","title":"Monitor datasets and dataset views activity","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/dataset-management/monitor-datasets-and-dataset-views-activity","siteSpaceId":"sitesp_WVm4R","description":"Monitor activity for datasets and dataset views.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"38oi4UlL4BoRlZpL7AP5","title":"Parsing Rules","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules","siteSpaceId":"sitesp_WVm4R","description":"Learn more about Cortex XDR Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"}]},{"id":"CoxzhA38iFdBXJmEqZoM","title":"Parsing Rules file structure and syntax","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax","siteSpaceId":"sitesp_WVm4R","description":"Understand Parsing Rules file structure, syntax, and commands.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"jidtQkCAvjRUbsZEK0yx","title":"INGEST","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest","siteSpaceId":"sitesp_WVm4R","description":"Use the INGEST command to parse and normalize ingested data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"pjVAmaHqlp1HudsITDv7","title":"fields","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/fields","siteSpaceId":"sitesp_WVm4R","description":"Use 'fields' in Cortex XDR Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"L8oY0iRbO0dlGbAJ6Gfv","title":"parse_cef","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_cef","siteSpaceId":"sitesp_WVm4R","description":"Use the parse_cef function in Cortex XDR Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"C6vF9FnMtShBmQMR1ZXK","title":"parse_cisco","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_cisco","siteSpaceId":"sitesp_WVm4R","description":"Use the parse_cisco function in Cortex XDR Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"CacXHKWxhRhZWZbJP0cx","title":"parse_json","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_json","siteSpaceId":"sitesp_WVm4R","description":"Use the parse_json function in Cortex XDR Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"xhD5TUUkbqQA3bR0uhgO","title":"COLLECT","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/collect","siteSpaceId":"sitesp_WVm4R","description":"Use the COLLECT command to collect parsed data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"4X9Lupz2klGFuGqHYO7d","title":"CONST","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/const","siteSpaceId":"sitesp_WVm4R","description":"Use the CONST command to define constant values.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"zbWFGXbI4A84fkd1fGEX","title":"RULE","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/rule","siteSpaceId":"sitesp_WVm4R","description":"Use the RULE command to define Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"npSa3wsZsO74oSKzE7WN","title":"Create Parsing Rules","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/create-parsing-rules","siteSpaceId":"sitesp_WVm4R","description":"Create Parsing Rules to normalize ingested data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"GfWUQMvf9lIeFD57XH0P","title":"Troubleshooting Parsing rules errors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/troubleshooting-parsing-rules-errors","siteSpaceId":"sitesp_WVm4R","description":"Troubleshoot errors when creating and running Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"AA3TEstBp4mrVKgjeC5H","title":"Parsing Rules Raw Dataset","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/parsing-rules/parsing-rules-raw-dataset","siteSpaceId":"sitesp_WVm4R","description":"Understand the raw dataset used by Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"KNw7Aoad75PU4G8jmas9","title":"Manage Event Forwarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/manage-event-forwarding","siteSpaceId":"sitesp_WVm4R","description":"Save your ingested, parsed data in an external location by exporting your event logs to a temporary GCP storage bucket.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"}]},{"id":"UAUHoWidUQ9RNgJZxpiK","title":"Manage compute units","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/manage-compute-units","siteSpaceId":"sitesp_WVm4R","description":"Learn more about managing and tracking your compute units usage for API and Cold Storage XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"}]},{"id":"KFcSkRMKoAQstqslHYQt","title":"Compute units usage","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/data-management/manage-compute-units/compute-units-usage","siteSpaceId":"sitesp_WVm4R","description":"Monitor compute unit usage for data management tasks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Data management"},{"label":"Manage compute units"}]},{"id":"cd9xSHYO9rBb7f5ZT86g","title":"Cortex XDR Data Sources and Connectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources","siteSpaceId":"sitesp_WVm4R","description":"Connect Cortex XDR to cloud, SaaS, network, and endpoint data sources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"AoQ75YnvVwxM8By1TReb","title":"What are Cortex XDR data sources and connectors?","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/what-are-cortex-xdr-data-sources","siteSpaceId":"sitesp_WVm4R","description":"Learn more about Cortex XDR data sources and connectors with a unified approach to integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"YFZBqaH0ckCjkQg6vEgU","title":"What is the data source and connector catalog?","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/complete-data-source-catalog","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the complete data source and connector catalog available in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"HtAfglF2VpplFrDL4aP8","title":"Vendor-specific data sources and connectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources","siteSpaceId":"sitesp_WVm4R","description":"Configure data sources and connectors for supported technology vendors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"Kx7Z4X978XSucRq6Bt2Q","title":"AbuseIPDB","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/abuseipdb","siteSpaceId":"sitesp_WVm4R","description":"Configure the AbuseIPDB connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"nk9VOFtsFmcQ71B2ZoNH","title":"AbuseIPDB","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/abuseipdb/abuseipdb","siteSpaceId":"sitesp_WVm4R","description":"Use AbuseIPDB data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AbuseIPDB"}]},{"id":"fVMDuXT2dcncXethaDfJ","title":"AIOps","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/aiops","siteSpaceId":"sitesp_WVm4R","description":"Configure the AIOps connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Z2VmrmofYA4xqbAK8g6v","title":"AIOps","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/aiops/aiops","siteSpaceId":"sitesp_WVm4R","description":"Use AIOps data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AIOps"}]},{"id":"tUWfVZT9fJu5Kla6DHus","title":"Amazon","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon","siteSpaceId":"sitesp_WVm4R","description":"Configure Amazon data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yzdrJQxf9V9NPSlpyHTr","title":"Amazon S3","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-s3","siteSpaceId":"sitesp_WVm4R","description":"Use Amazon S3 data in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"FdlzObsTATA6cBBerot5","title":"Ingest audit logs from AWS CloudTrail","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-s3/ingest-audit-logs-from-aws-cloudtrail","siteSpaceId":"sitesp_WVm4R","description":"Collect audit logs from AWS CloudTrail in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"ToyGwt22eyvy0pC3Netz","title":"Ingest network flow logs from Amazon S3","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-s3/ingest-network-flow-logs-from-amazon-s3","siteSpaceId":"sitesp_WVm4R","description":"Collect network flow logs from Amazon S3 in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"5E3xNUyzdeAKNTbnq8zG","title":"Ingest network Route 53 logs from Amazon S3","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-s3/ingest-network-route-53-logs-from-amazon-s3","siteSpaceId":"sitesp_WVm4R","description":"Collect network Route 53 logs from Amazon S3 in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"XLcrebacUUmGfXErAcWX","title":"Create an assumed role","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-s3/create-an-assumed-role","siteSpaceId":"sitesp_WVm4R","description":"Create an assumed AWS role for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"8FpKE3467ubc7iVScbbW","title":"Create a Workload Federated Identity role","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-s3/create-a-workload-federated-identity-role","siteSpaceId":"sitesp_WVm4R","description":"Learn more about creating a Workload Federated Identity role in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"s0j4wwU29eUiVA6vpOzH","title":"Configure data collection from Amazon S3 manually","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-s3/configure-data-collection-from-amazon-s3-manually","siteSpaceId":"sitesp_WVm4R","description":"Collect data from Amazon S3 manually in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"PCXBC7X4N7xXljPL1JZC","title":"Amazon Web Services","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/amazon-web-services","siteSpaceId":"sitesp_WVm4R","description":"Use Amazon Web Services data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"3uf5guofEDmZdRwAEHj2","title":"AWS Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/amazon/aws-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure AWS automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"WDll15lzuT9WItjWAsNS","title":"Anomali","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/anomali","siteSpaceId":"sitesp_WVm4R","description":"Configure the Anomali connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"LleXlYFUFFztHYZFBOE9","title":"Anomali","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/anomali/anomali","siteSpaceId":"sitesp_WVm4R","description":"Use Anomali data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anomali"}]},{"id":"Owm0ki2qEJLoh3TcrB3x","title":"API Security","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/api-security","siteSpaceId":"sitesp_WVm4R","description":"Use API data in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bB59XCwd77DHaptyUckM","title":"Ingest data for API security","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/api-security/ingest-data-for-api-security","siteSpaceId":"sitesp_WVm4R","description":"Collect API Security data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"}]},{"id":"QJrwE28iBtR0prh7O3sj","title":"Ingest AWS API Gateway","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-aws-api-gateway","siteSpaceId":"sitesp_WVm4R","description":"Ingest AWS API Gateway logs for Cortex XDR API security analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"p7kiGDvyNxYgmD3RnUyn","title":"Ingest Azure APIM","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-azure-apim","siteSpaceId":"sitesp_WVm4R","description":"Ingest Azure API Management traffic for Cortex XDR API security analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"9B8VB7QwOX5ho7YLZOQT","title":"Ingest Apigee Proxy","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-apigee-proxy","siteSpaceId":"sitesp_WVm4R","description":"Ingest Apigee Proxy traffic for Cortex XDR API security analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"M4rb5C1Q2XOfgtHvyJGG","title":"Ingest Kong","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-kong","siteSpaceId":"sitesp_WVm4R","description":"Ingest Kong traffic for Cortex XDR API security analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"IiSxGg4OmKxqBx15I1ia","title":"Ingest F5","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-f5","siteSpaceId":"sitesp_WVm4R","description":"Ingest F5 traffic for Cortex XDR API security analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"do1Iy63AdIv6DN19a8e1","title":"Atlassian","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/atlassian","siteSpaceId":"sitesp_WVm4R","description":"Configure Atlassian connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1sSzmbJDYS9jIaBhhjVS","title":"Atlassian Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/atlassian/atlassian-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure Atlassian automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"AUPrNuZxLn2gTb6zUaG6","title":"Box","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/box","siteSpaceId":"sitesp_WVm4R","description":"Configure Box data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"5Ej79zlQ0qiN5HXDGhsv","title":"Ingest logs and data from Box","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/box/ingest-logs-and-data-from-box","siteSpaceId":"sitesp_WVm4R","description":"Ingest Box logs and data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"2sunJzru9gYIcmoGKy6N","title":"Check Point","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/check-point","siteSpaceId":"sitesp_WVm4R","description":"Configure Check Point data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lM88xf3S8eRJaccdH2Ac","title":"Check Point FW1/VPN1","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/check-point/check-point-fw1-vpn1","siteSpaceId":"sitesp_WVm4R","description":"Use Check Point FW1/VPN1 data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Check Point"}]},{"id":"OykJBp1SAmMpsc4oV3i6","title":"Cisco","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/cisco","siteSpaceId":"sitesp_WVm4R","description":"Configure Cisco data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mVo7hKaS7R826ySPAvSb","title":"Cisco ASA firewalls and AnyConnect","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/cisco/cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_WVm4R","description":"Use Cisco ASA firewall and AnyConnect data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"wCFr34bYb2vPsCDCc0bC","title":"Corelight","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/corelight","siteSpaceId":"sitesp_WVm4R","description":"Configure the Corelight data source for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"U6GRt8vcNxLGbYDULv4j","title":"Corelight Zeek","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/corelight/corelight-zeek","siteSpaceId":"sitesp_WVm4R","description":"Use Corelight Zeek data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Corelight"}]},{"id":"BdC9CQBsnVhz00obV0Ez","title":"Cribl","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/cribl","siteSpaceId":"sitesp_WVm4R","description":"Configure the Cribl data source and connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"coqS0KE8pC4oxkvcJl26","title":"Cribl connector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/cribl/cribl-connector","siteSpaceId":"sitesp_WVm4R","description":"Use Cribl connector data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"}]},{"id":"xevdsBTibI9TDHuRkcnX","title":"CyberArk","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/cyberark","siteSpaceId":"sitesp_WVm4R","description":"Configure the CyberArk connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sXHTVpiFLtm5Mri29wNS","title":"CyberArk","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/cyberark/cyberark","siteSpaceId":"sitesp_WVm4R","description":"Use CyberArk data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CyberArk"}]},{"id":"6MRYx9bqpPkE301sO8lJ","title":"Dropbox","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/dropbox","siteSpaceId":"sitesp_WVm4R","description":"Configure the Dropbox data source and connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HiyBmoSsPp0peA5EtTvU","title":"Ingest logs and data from Dropbox","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/dropbox/ingest-logs-and-data-from-dropbox","siteSpaceId":"sitesp_WVm4R","description":"Ingest Dropbox logs and data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Dropbox"}]},{"id":"C0KseB1XYUfq9SZeHRxg","title":"Elastic","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/elastic","siteSpaceId":"sitesp_WVm4R","description":"Configure Elastic data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hp7QJxHm0dqDyENmtwtz","title":"Elasticsearch Filebeat","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/elastic/elasticsearch-filebeat","siteSpaceId":"sitesp_WVm4R","description":"Configure Elasticsearch Filebeat log collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"kumzv9iLYk8zmurhypxZ","title":"Ingest logs from Elasticsearch Filebeat","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/elastic/elasticsearch-filebeat/ingest-logs-from-elasticsearch-filebeat","siteSpaceId":"sitesp_WVm4R","description":"Ingest Elasticsearch Filebeat logs into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"},{"label":"Elasticsearch Filebeat"}]},{"id":"0aftxsAQ3SAnyFQOa1gC","title":"Windows DHCP via Elasticsearch Filebeat","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/elastic/windows-dhcp-via-elasticsearch-filebeat","siteSpaceId":"sitesp_WVm4R","description":"Configure Windows DHCP ingestion through Elasticsearch Filebeat for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"Gh2bfvPboheA18kiqica","title":"Ingest logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/elastic/windows-dhcp-via-elasticsearch-filebeat/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_WVm4R","description":"Ingest Windows DHCP logs through Elasticsearch Filebeat into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"},{"label":"Windows DHCP via Elasticsearch Filebeat"}]},{"id":"Uw693c7PhbkGTantFHQ8","title":"ElasticSearch","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/elastic/elasticsearch","siteSpaceId":"sitesp_WVm4R","description":"Use Elasticsearch data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"4viJ9FRylqbytx6r53oB","title":"Envoy","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/envoy","siteSpaceId":"sitesp_WVm4R","description":"Configure the Envoy connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FiD5ocOgREoeKZATUeMr","title":"Envoy","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/envoy/envoy","siteSpaceId":"sitesp_WVm4R","description":"Use Envoy data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Envoy"}]},{"id":"zc3aagn3em3tPCaZLg6f","title":"Forcepoint","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/forcepoint","siteSpaceId":"sitesp_WVm4R","description":"Configure the Forcepoint data source and connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"kmVOUMVYE5KDKgxF4m0F","title":"Forcepoint DLP","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/forcepoint/forcepoint-dlp","siteSpaceId":"sitesp_WVm4R","description":"Use Forcepoint DLP data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Forcepoint"}]},{"id":"9GsaArSwGZyXlEtJHN96","title":"Fortinet","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/fortinet","siteSpaceId":"sitesp_WVm4R","description":"Configure Fortinet data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"CCAdM5jpojSb6nSjhVnw","title":"Fortinet Fortigate","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/fortinet/fortinet-fortigate","siteSpaceId":"sitesp_WVm4R","description":"Use Fortinet FortiGate data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"3iFH07Q0YAZxUvozuu7C","title":"Freshworks","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/freshworks","siteSpaceId":"sitesp_WVm4R","description":"Configure the Freshworks connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Q1QNDn91moXCtdAIsXGt","title":"Freshworks","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/freshworks/freshworks","siteSpaceId":"sitesp_WVm4R","description":"Use Freshworks data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Freshworks"}]},{"id":"lFwlhJERrOUSFSEyvQ4s","title":"Generic","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/generic","siteSpaceId":"sitesp_WVm4R","description":"Configure Generic connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gedagYyBYgNADQ6xonrL","title":"Generic MCP","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/generic/generic-mcp","siteSpaceId":"sitesp_WVm4R","description":"Configure generic MCP connections in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"BSYWAHCSDqtug8HeoV7j","title":"Generic SQL","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/generic/generic-sql","siteSpaceId":"sitesp_WVm4R","description":"Configure generic SQL connections in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"VikWV76JS9lhlhEB4sQx","title":"GitHub","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/github","siteSpaceId":"sitesp_WVm4R","description":"Configure the GitHub connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BbCdUpMKvU8mVSKuTdFB","title":"GitHub","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/github/github","siteSpaceId":"sitesp_WVm4R","description":"Use GitHub data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitHub"}]},{"id":"wkadHG8GhPkRwFEjtprQ","title":"Google","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google","siteSpaceId":"sitesp_WVm4R","description":"Configure Google data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xKiz5jBdT6VJoW0q4LfD","title":"Google Cloud Platform","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google/google-cloud-platform","siteSpaceId":"sitesp_WVm4R","description":"Use Google Cloud Platform data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"MGiCLCrSOt18Vq7rWwgV","title":"Ingest logs and data from a GCP Pub/Sub","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google/google-cloud-platform/ingest-logs-and-data-from-a-gcp-pub-sub","siteSpaceId":"sitesp_WVm4R","description":"Ingest logs and data from Google Cloud Pub/Sub into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Cloud Platform"}]},{"id":"1MyEwtUsOzJgYJCrHcuM","title":"Google Kubernetes Engine","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google/google-kubernetes-engine","siteSpaceId":"sitesp_WVm4R","description":"Use Google Kubernetes Engine data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"ga3oxO3bnAhK51CWlYgV","title":"Ingest logs from Google Kubernetes Engine","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google/google-kubernetes-engine/ingest-logs-from-google-kubernetes-engine","siteSpaceId":"sitesp_WVm4R","description":"Ingest logs from Google Kubernetes Engine into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Kubernetes Engine"}]},{"id":"vGyP0tLvoCgG8y72PEVI","title":"Google Workspace","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google/google-workspace","siteSpaceId":"sitesp_WVm4R","description":"Use Google Workspace data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"5cx8CXOrDUZhUIXBhR3u","title":"Ingest logs and data from Google Workspace","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google/google-workspace/ingest-logs-and-data-from-google-workspace","siteSpaceId":"sitesp_WVm4R","description":"Ingest logs and data from Google Workspace into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"HqffylKB9BPPmBKYg3wE","title":"Google Workspace Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/google/google-workspace/google-workspace-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure Google Workspace automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"Uv03TKGgeALgB3Gznb8C","title":"HTTP log collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/http-log-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure the HTTP log collector data source for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9W5XrE0l83JdoVk73o60","title":"Set up an HTTP log collector to receive logs","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/http-log-collector/set-up-an-http-log-collector-to-receive-logs","siteSpaceId":"sitesp_WVm4R","description":"Set up an HTTP log collector to receive logs in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HTTP log collector"}]},{"id":"WlrTFuSyWEZC3Hpv2Bbz","title":"IBM","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/ibm","siteSpaceId":"sitesp_WVm4R","description":"Configure IBM connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aafVwNdkRhc0y51ggtiY","title":"IBM QRadar","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/ibm/ibm-qradar","siteSpaceId":"sitesp_WVm4R","description":"Use IBM QRadar data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"Tp6Z7paUlsXZ7snhM2UF","title":"Intellum","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/intellum","siteSpaceId":"sitesp_WVm4R","description":"Configure the Intellum connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hQDNHrA7jYvp446zyCBY","title":"Intellum","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/intellum/intellum","siteSpaceId":"sitesp_WVm4R","description":"Use Intellum data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Intellum"}]},{"id":"Pg8a72IskOKc79O2JBeV","title":"iZOOlogic","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/izoologic","siteSpaceId":"sitesp_WVm4R","description":"Configure the iZOOlogic connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wtA83iGKZ9Ztdlk0L4dy","title":"iZOOlogic","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/izoologic/izoologic","siteSpaceId":"sitesp_WVm4R","description":"Use iZOOlogic data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"iZOOlogic"}]},{"id":"w7LQAjNuHDmWZwnsBoCS","title":"Koi","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/koi","siteSpaceId":"sitesp_WVm4R","description":"Configure the Koi connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UHcj08doTz47wQ19936K","title":"Koi","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/koi/koi","siteSpaceId":"sitesp_WVm4R","description":"Use Koi data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Koi"}]},{"id":"PXvyuu0GTDINiqh0XxdZ","title":"Kubernetes","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/kubernetes","siteSpaceId":"sitesp_WVm4R","description":"Configure the Kubernetes data source for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wuh8kOJ4Rj753QfpGihE","title":"LOLBAS","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/lolbas","siteSpaceId":"sitesp_WVm4R","description":"Configure the LOLBAS connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"l4Oen8G43x6e9t0ZWtE8","title":"LOLBAS","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/lolbas/lolbas","siteSpaceId":"sitesp_WVm4R","description":"Use LOLBAS data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LOLBAS"}]},{"id":"e8pNNLFn95aLnqKVyLuE","title":"Mail Utilities","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/mail-utilities","siteSpaceId":"sitesp_WVm4R","description":"Configure the Mail Utilities connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JXvS0LZHpmqwtD1m3Vjj","title":"Mail Utilities","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/mail-utilities/mail-utilities","siteSpaceId":"sitesp_WVm4R","description":"Use Mail Utilities data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mail Utilities"}]},{"id":"ugQWG32kv88zQFRFRyjZ","title":"Microsoft","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft","siteSpaceId":"sitesp_WVm4R","description":"Configure Microsoft data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"SUax08QdhIt0h8LMS9iz","title":"Azure Event Hub","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/azure-event-hub","siteSpaceId":"sitesp_WVm4R","description":"Configure Azure Event Hub log collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"B1x7rvViHXgFTEQYavnd","title":"Ingest logs from Microsoft Azure Event Hub","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/azure-event-hub/ingest-logs-from-microsoft-azure-event-hub","siteSpaceId":"sitesp_WVm4R","description":"Ingest logs from Microsoft Azure Event Hub into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Azure Event Hub"}]},{"id":"riDCr6vUiROzzCalXDn5","title":"Azure Network Watcher","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/azure-network-watcher","siteSpaceId":"sitesp_WVm4R","description":"Configure Azure Network Watcher flow-log collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"5KA7tmeTbVkkkbWybUB0","title":"Ingest network flow logs from Microsoft Azure Network Watcher","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/azure-network-watcher/ingest-network-flow-logs-from-microsoft-azure-network-watcher","siteSpaceId":"sitesp_WVm4R","description":"Ingest network flow logs from Azure Network Watcher into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Azure Network Watcher"}]},{"id":"uCLux9eiOPm4y0CPyhSA","title":"Microsoft Azure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-azure","siteSpaceId":"sitesp_WVm4R","description":"Use Microsoft Azure data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"sZ9fuiEL7jd8t2Y6jsZg","title":"Microsoft 365","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-365","siteSpaceId":"sitesp_WVm4R","description":"Use Microsoft 365 data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"ZBfiRcFIeipCYPZsF0GH","title":"Microsoft Office 365","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-office-365","siteSpaceId":"sitesp_WVm4R","description":"Configure Microsoft Office 365 log collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"T8TRfTyWfakysIFvX1m2","title":"Ingest logs from Microsoft Office 365","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-office-365/ingest-logs-from-microsoft-office-365","siteSpaceId":"sitesp_WVm4R","description":"Ingest Microsoft Office 365 logs into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"axPAqMN4c6cI1Tti33GR","title":"Microsoft Office 365 (email)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-office-365-email","siteSpaceId":"sitesp_WVm4R","description":"Configure Microsoft 365 email data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"EC9DhjAMKhp36KoZ6NxT","title":"Ingest logs and data from Microsoft 365","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-office-365-email/ingest-logs-and-data-from-microsoft-365","siteSpaceId":"sitesp_WVm4R","description":"Ingest Microsoft 365 email logs and data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365 (email)"}]},{"id":"DZIN1nlge05u0ES3vnTs","title":"Microsoft Active Directory","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-active-directory","siteSpaceId":"sitesp_WVm4R","description":"Use Microsoft Active Directory data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"gJpJEaQUcX4ge6GHpljY","title":"Microsoft Graph","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-graph","siteSpaceId":"sitesp_WVm4R","description":"Use Microsoft Graph data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"9uuqy6dn46LD78lNt6Sy","title":"Microsoft Identity","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-identity","siteSpaceId":"sitesp_WVm4R","description":"Use Microsoft Identity data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"GJdpxvotCH7GIULiHrGS","title":"Microsoft Security Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/microsoft-security-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure Microsoft Security automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"THM9t3NqIPL1ZwxshyCr","title":"M365 Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/microsoft/m365-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure Microsoft 365 automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"Pux9AhVTubFGduasdcCt","title":"Okta","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/okta","siteSpaceId":"sitesp_WVm4R","description":"Configure Okta data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WIvelD31nAI5ZL5PkcZx","title":"Ingest logs and data from Okta","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/okta/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_WVm4R","description":"Ingest Okta logs and data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"yZUgg9R4l35UkhxptkC1","title":"Okta Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/okta/okta-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure Okta automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"UOXG6RCiAOkVLPs71Uz2","title":"OneLogin","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/onelogin","siteSpaceId":"sitesp_WVm4R","description":"Configure the OneLogin connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UdqT6ttGV54NutIhLrfY","title":"Ingest logs and data from OneLogin","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/onelogin/ingest-logs-and-data-from-onelogin","siteSpaceId":"sitesp_WVm4R","description":"Ingest OneLogin logs and data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OneLogin"}]},{"id":"UoI8q6gyKfkXDV5CQqkU","title":"Oracle","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/oracle","siteSpaceId":"sitesp_WVm4R","description":"Configure Oracle data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"7IJ0nmD9tSKEoHf1p24c","title":"Oracle Cloud Infrastructure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/oracle/oracle-cloud-infrastructure","siteSpaceId":"sitesp_WVm4R","description":"Use Oracle Cloud Infrastructure data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"6xNPYVg6QzQmEMjz2thX","title":"PagerDuty","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/pagerduty","siteSpaceId":"sitesp_WVm4R","description":"Configure the PagerDuty connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3IGJYYyadD2qGFmMIA8b","title":"PagerDuty Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/pagerduty/pagerduty-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure PagerDuty automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PagerDuty"}]},{"id":"AbXlN1cSTzc3KJ67mY3e","title":"Ping Identity","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/ping-identity","siteSpaceId":"sitesp_WVm4R","description":"Configure Ping Identity data sources and connectors for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"uStuH1jVA01zeJC8NMCF","title":"PingFederate","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/ping-identity/pingfederate","siteSpaceId":"sitesp_WVm4R","description":"Use PingFederate data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"uRsMQmYmnkOQaTkrsq4X","title":"PingOne","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/ping-identity/pingone","siteSpaceId":"sitesp_WVm4R","description":"Use PingOne data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"8hHQm5Q7gHnXePnseVVu","title":"Ingest authentication logs and data from PingOne","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/ping-identity/pingone/ingest-authentication-logs-and-data-from-pingone","siteSpaceId":"sitesp_WVm4R","description":"Ingest PingOne authentication logs and data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"},{"label":"PingOne"}]},{"id":"6HUkRxvP9orfUv7yFqZa","title":"Salesforce","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/salesforce","siteSpaceId":"sitesp_WVm4R","description":"Configure Salesforce data sources for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MpzoSMOSDBVNV7lDXV1y","title":"Ingest logs and data from Salesforce","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/salesforce/ingest-logs-and-data-from-salesforce","siteSpaceId":"sitesp_WVm4R","description":"Ingest Salesforce logs and data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"MCfxukGO4hHyD7UVpIEq","title":"Salesforce connector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/salesforce/ingest-and-run-salesforce-automation-and-remediation","siteSpaceId":"sitesp_WVm4R","description":"Use Salesforce connector data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"LH1mjnQuZEhHiyCEMdkL","title":"Automation and remediation commands","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/salesforce/ingest-and-run-salesforce-automation-and-remediation/automation-and-remediation-commands","siteSpaceId":"sitesp_WVm4R","description":"Salesforce Automation and Remediation commands for playbooks and the War Room for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"},{"label":"Salesforce connector"}]},{"id":"T64IdwBnWV6TkPHl0ZXD","title":"ServiceNow","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/servicenow","siteSpaceId":"sitesp_WVm4R","description":"Configure ServiceNow data sources for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6AhjCgNngUUlaaOBsqLz","title":"ServiceNow Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/servicenow/servicenow-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure ServiceNow automation and collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"og0DD9ZivPGWeotvwv7i","title":"Slack","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/slack","siteSpaceId":"sitesp_WVm4R","description":"Configure Slack data sources for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cg2WfuvKcxpOi95p3eQb","title":"Slack Automation and Collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/slack/slack-automation-and-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure Slack automation, notifications, and log collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"tD3yAht8vMmzNNuDJkJP","title":"SMB","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/smb","siteSpaceId":"sitesp_WVm4R","description":"Configure the SMB connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"S24mCefKGiXBkSwp9pKp","title":"SMB","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/smb/smb","siteSpaceId":"sitesp_WVm4R","description":"Use SMB data for file and directory management in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SMB"}]},{"id":"OaELdTpWbL1U2AUNPV5s","title":"Workday","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/workday","siteSpaceId":"sitesp_WVm4R","description":"Configure Workday data sources for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"DvytLVjZrT7cSf5sc4oZ","title":"Ingest report data from Workday","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/workday/ingest-report-data-from-workday","siteSpaceId":"sitesp_WVm4R","description":"Ingest Workday report data into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"Y6y5Wj94GspvCLRo6tEp","title":"Zendesk","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zendesk","siteSpaceId":"sitesp_WVm4R","description":"Configure the Zendesk connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lYFvfLTIe2fkL9bOhwRb","title":"Zendesk","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zendesk/zendesk","siteSpaceId":"sitesp_WVm4R","description":"Use Zendesk data with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zendesk"}]},{"id":"mfDgnKO7JaBpSKGXTj6x","title":"Zoom","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zoom","siteSpaceId":"sitesp_WVm4R","description":"Configure the Zoom connector for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UFifrkmyuZDnKpVU27jp","title":"Zoom","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zoom/zoom","siteSpaceId":"sitesp_WVm4R","description":"Use Zoom users, meetings, logs, and feeds with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zoom"}]},{"id":"i6wafebesODrdeJZSsRe","title":"Zscaler","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zscaler","siteSpaceId":"sitesp_WVm4R","description":"Configure Zscaler data sources for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cfAzQorua0oZuckdSBxQ","title":"Zscaler Internet Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zscaler/zscaler-internet-access","siteSpaceId":"sitesp_WVm4R","description":"Configure Zscaler Internet Access log collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"RVC3mmndbtGq7MEamXtK","title":"Zscaler Private Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zscaler/zscaler-private-access","siteSpaceId":"sitesp_WVm4R","description":"Configure Zscaler Private Access log collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"CJBeb5Upy0SGU43nVdji","title":"Zscaler","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/vendor-specific-data-sources/zscaler/zscaler","siteSpaceId":"sitesp_WVm4R","description":"Use Zscaler data for log collection and security management in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"4mdKimmmNlFfYVCrV19u","title":"Connectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/connectors","siteSpaceId":"sitesp_WVm4R","description":"Browse supported connectors for Cortex XDR data ingestion.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"sTpYXcUJZcuLjawGqF11","title":"Standard data sources","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/standard-data-sources","siteSpaceId":"sitesp_WVm4R","description":"Browse supported standard data sources for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"RH8PuVRVm0cbd8hEMY04","title":"Cloud service provider (CSP) onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Learn about onboarding your cloud service provider to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"vVsACZ86raUfktrgQMt8","title":"Amazon Web Services cloud onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Follow the AWS onboarding wizard, and Cortex XDR creates a custom authentication template to be deployed in AWS.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"v2mE6s83yU1rC4oaz2bU","title":"AWS security capabilities and deployment planning","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"XrSTz2kNvLyXx7EpaTSK","title":"AWS resource inventory","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-resource-inventory","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"ERdFThXBBhxaByQ6OCSb","title":"AWS security model and authentication","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-model-and-authentication","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"gj2faE8mxVJIGCs1OFvF","title":"Cortex XDR and AWS audit log collection architecture","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/cortex-cloud-and-aws-audit-log-collection-architecture","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"wVHbmLWORqFHcG3sbfm8","title":"Onboard Amazon Web Services","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/onboard-amazon-web-services","siteSpaceId":"sitesp_WVm4R","description":"Follow the AWS onboarding wizard, and Cortex XDR creates a custom authentication template to be executed in AWS.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"4tOYzY3ulj1DlDqZcYi8","title":"Prerequisites for onboarding AWS","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/prerequisites-for-onboarding-aws","siteSpaceId":"sitesp_WVm4R","description":"Before you begin onboarding AWS, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"HAuk1s0PxlOnDurXeduD","title":"How to onboard Amazon Web Services","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/how-to-onboard-amazon-web-services","siteSpaceId":"sitesp_WVm4R","description":"Follow the AWS onboarding wizard and Cortex XDR creates a custom authentication template to be deployed in AWS CloudFormation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"Y0QocWUg2IB2CRuBAXnV","title":"Deploy the authentication template in AWS","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/deploy-the-authentication-template-in-aws","siteSpaceId":"sitesp_WVm4R","description":"Learn how to deploy the Terraform or CloudFormation authentication template in Amazon Web Services.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"qc3OXadsDuikTNNnrZY9","title":"Post-deployment: Custom (BYOB) and Control Tower audit log collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/post-deployment-custom-byob-audit-log-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"TGokkQ7yx24sfft2qOyO","title":"Grant cross-account KMS key access for Control Tower BYOB log collection","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/grant-cross-account-kms-key-access-for-control-tower-byob-log-collection","siteSpaceId":"sitesp_WVm4R","description":"Learn how to configure cross-account AWS KMS key permissions for Cortex Control Tower BYOB log collection. Step-by-step guide to updating KMS key policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"K50jjVCQRdX7g1hqHsXS","title":"AWS post-deployment verification","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-post-deployment-verification","siteSpaceId":"sitesp_WVm4R","description":"After you have completed the AWS onboarding wizard and you have deployed the authentication template in AWS (using CloudFormation or Terraform), verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"DJ5lROLvHZRACzNE8u4A","title":"Amazon Web Services (AWS) provider permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/amazon-web-services-aws-provider-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Amazon Web Services (AWS) permissions for use during Cortex XDR onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"SAZVzRBe8sMbMF2fut78","title":"Microsoft Azure cloud onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"SUK7DYXnEStOnm0RQz5o","title":"Onboard Microsoft Azure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/onboard-microsoft-azure","siteSpaceId":"sitesp_WVm4R","description":"Follow the Azure onboarding wizard, and Cortex XDR creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"I2korg5inIiMwbH5bUMX","title":"Prerequisites for onboarding Azure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/prerequisites-for-onboarding-azure","siteSpaceId":"sitesp_WVm4R","description":"Before you begin onboarding Microsoft Azure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"d8e9FA64dAQY8Lmwcdte","title":"How to onboard Microsoft Azure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/how-to-onboard-microsoft-azure","siteSpaceId":"sitesp_WVm4R","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"wCS04UoS0I0pceHIYDRK","title":"Finalize Microsoft Azure onboarding by executing the authentication template","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/finalize-microsoft-azure-onboarding-by-executing-the-authentication-template","siteSpaceId":"sitesp_WVm4R","description":"Learn how to execute the authentication template file in Microsoft Azure for subscriptions, tenants, and management groups. We provide instructions both for applying the Terraform template's configura","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"eTim7tizWFSnPZY1CfWi","title":"Microsoft Azure offboarding overview","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview","siteSpaceId":"sitesp_WVm4R","description":"This section contains the technical procedures required to safely decommission and offboard your Cortex XDR resources in Microsoft Azure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"OzCk3ZunZoLWelaLLKIj","title":"Offboard Terraform-based Azure deployments (all scopes)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-terraform-based-azure-deployments-all-scopes","siteSpaceId":"sitesp_WVm4R","description":"How to offboard all Terraform-based Microsoft Azure scopes from Cortex XDR: A step-by-step technical guide to safely running Terraform destroy and cleaning up policy-deployed resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"m3idLxFtjYRgjNk7Lqey","title":"Offboard Azure subscription (ARM)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-subscription-arm","siteSpaceId":"sitesp_WVm4R","description":"How to offboard a Microsoft Azure subscription scope that was onboarded using ARM: A step-by-step technical guide to safely running the interactive offboarding script and cleaning up all resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"8LFu3nVRCyiSeBx6pMzi","title":"Offboard Azure management group or tenant scope (ARM)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-management-group-or-tenant-scope-arm","siteSpaceId":"sitesp_WVm4R","description":"How to offboard Microsoft Azure management group or tenant scopes from Cortex XDR: A step-by-step technical guide to safely removing all Azure resources deployed by Cortex onboarding templates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"HkHSymYeJlWdjgE1VnBd","title":"Offboard Azure tenant with Entra ID only","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-tenant-with-entra-id-only","siteSpaceId":"sitesp_WVm4R","description":"How to offboard a Microsoft Azure tenant onboarded with the Entra ID only option from Cortex XDR: A step-by-step technical guide to safely removing deployed resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"JOLvwGsgFTnDDQkh899E","title":"Microsoft Azure provider permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-provider-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Microsoft Azure provider permissions for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"5Gzzl8rLaVA0YJE1TSN0","title":"Google Cloud Platform cloud onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"VSJHbImSg3n88EOjllJo","title":"Onboard Google Cloud Platform","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/onboard-google-cloud-platform","siteSpaceId":"sitesp_WVm4R","description":"Follow the GCP onboarding wizard, and Cortex XDR creates a custom authentication template to be executed in GCP.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"JTpDugt3V5uPMMFQNEMR","title":"Prerequisites for onboarding GCP","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp","siteSpaceId":"sitesp_WVm4R","description":"Before you begin onboarding GCP, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"tKYqQkVojsFmmXNfyPYn","title":"Required APIs","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp/required-apis","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"},{"label":"Prerequisites for onboarding GCP"}]},{"id":"FcyYdKd3SBRXI7QbH2LS","title":"How to onboard Google Cloud Platform","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/how-to-onboard-google-cloud-platform","siteSpaceId":"sitesp_WVm4R","description":"Follow the GCP onboarding wizard, and Cortex XDR creates a custom authentication template to be applied in GCP.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"ajF5xEmIUwVKNAe3CXSS","title":"Deploy the Terraform authentication template in GCP","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/deploy-the-terraform-authentication-template-in-gcp","siteSpaceId":"sitesp_WVm4R","description":"Learn how to deploy the Terraform authentication template in Google Cloud Console.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"zttpWFwcmtlMXaEIDNL5","title":"Connect Google Workspace with your GCP cloud instance","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/connect-google-workspace-with-your-gcp-cloud-instance","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"jvaG3jnwVsez89bgRwiE","title":"Monitor GCP resources inside service perimeters","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/monitor-gcp-resources-inside-service-perimeters","siteSpaceId":"sitesp_WVm4R","description":"Learn how to grant authorization to Cortex XDR to scan within your GCP service perimeter.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"VywcQHU59K7xYPGXIbyW","title":"Google Cloud Platform (GCP) provider permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/google-cloud-platform-gcp-provider-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex XDR onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"YkVSZJVlzHaYVvLcAsmj","title":"Oracle Cloud Infrastructure cloud onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Follow the Oracle Cloud Infrastructure onboarding wizard and Cortex XDR creates a custom Terraform authentication template to be deployed in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"TcvkfnxggHkgeWEhPQNq","title":"Onboard Oracle Cloud Infrastructure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_WVm4R","description":"Follow the OCI onboarding wizard, and Cortex XDR creates a custom authentication template to be executed in OCI.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"jrtXrpbt9wvH3HshExIw","title":"Prerequisites for onboarding OCI","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/prerequisites-for-onboarding-oci","siteSpaceId":"sitesp_WVm4R","description":"Before you begin onboarding Oracle Cloud Infrastructure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"55at40giGwvvajMx93GX","title":"How to onboard Oracle Cloud Infrastructure","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/how-to-onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_WVm4R","description":"Follow the OCI onboarding wizard and Cortex XDR creates a custom authentication template to be applied in OCI.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"HAm7vFWfpvj2Ioh0K1rT","title":"Deploy the Terraform authentication template in OCI","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/deploy-the-terraform-authentication-template-in-oci","siteSpaceId":"sitesp_WVm4R","description":"Learn how to deploy the Terraform authentication template in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"XyvYbqXUAQsh4dtcbmOz","title":"Oracle Cloud Infrastructure (OCI) provider permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/oracle-cloud-infrastructure-oci-provider-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Oracle Cloud Infrastructure provider permissions for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"vY4VgAohxCD56gXUwtfM","title":"Alibaba Cloud cloud onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Follow the Alibaba Cloud onboarding wizard and Cortex XDR creates a custom Terraform authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"76VVEMrCR0KGCHZLFwdD","title":"Alibaba security capabilities and deployment planning","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"8isxaxjO6BRLlyfCSqnn","title":"Alibaba Cloud resource inventory","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-resource-inventory","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"FLpA5v01GlKwWePbtZSO","title":"Alibaba Cloud security model and authentication","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-security-model-and-authentication","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"yDkcPjqzGFpDVf3m1MbD","title":"Onboard Alibaba Cloud","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/onboard-alibaba-cloud","siteSpaceId":"sitesp_WVm4R","description":"Follow the Alibaba Cloud onboarding wizard and Cortex XDR creates a custom CloudFormation authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"jW0pWUdRwZoSyAs2XE0l","title":"Prerequisites for onboarding Alibaba Cloud","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/prerequisites-for-onboarding-alibaba-cloud","siteSpaceId":"sitesp_WVm4R","description":"Before you begin onboarding Alibaba Cloud, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"ByjHDFXWPV4fsDhMSDDs","title":"How to onboard Alibaba Cloud","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/how-to-onboard-alibaba-cloud","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"4qjF8IVPpexbmWkrgRpR","title":"Alibaba Cloud post-deployment verification","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-post-deployment-verification","siteSpaceId":"sitesp_WVm4R","description":"After you have completed the Alibaba Cloud onboarding wizard and you have deployed the authentication template in Alibaba Cloud, verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"wMRRUAUbFIuLKKxkDHo2","title":"Alibaba Cloud provider permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-provider-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Alibaba Cloud permissions for use during Cortex XDR onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"L3QkB27bWEt8DCrXJhCV","title":"Outpost onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Learn about outposts, which are a dedicated set of infrastructure resources that extends the reach of Cortex XDR into your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"hYCPxoL3J5sjsiPJHQPp","title":"Outpost fundamentals and planning","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-fundamentals-and-planning","siteSpaceId":"sitesp_WVm4R","description":"An outpost enables you to have security scans performed on infrastructure in a cloud account owned by you. Learn about outpost fundamentals and what to consider when planning your outpost.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"NdsBH679AjSwK4uvvNaQ","title":"Outpost creation workflow","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-creation-workflow","siteSpaceId":"sitesp_WVm4R","description":"Learn about the creation process for an outposts, which facilitate security scanning performed on infrastructure in a cloud account owned by you.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"usHYKHRzoioQmzQdeYVa","title":"Working with standard outposts","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts","siteSpaceId":"sitesp_WVm4R","description":"Standard outposts are the recommended way to create dedicated set of infrastructure resources that extends the reach of Cortex XDR into your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"O9OD7RTalvVxQ1KcZbhk","title":"Create a standard outpost","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts/create-a-standard-outpost","siteSpaceId":"sitesp_WVm4R","description":"Instructions for creating a standard outpost while onboarding your CSP.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with standard outposts"}]},{"id":"2mkqNEuf3vvXFYaDNUor","title":"Working with Bringing your own Azure app (BYOA) outposts","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts","siteSpaceId":"sitesp_WVm4R","description":"Using advanced settings while creating your outpost, you can deploy a Cortex XDR Azure outpost using your own pre-created Entra ID app registration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"EcKkSwVN6nTrdgOtPC4f","title":"Task 1: Meet the prerequisites for Azure BYOA outposts","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-1-meet-the-prerequisites-for-azure-byoa-outposts","siteSpaceId":"sitesp_WVm4R","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page lists the prerequisites that must be met before customizing your outpost in this way.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"GRP3c9WoRmMJZQRkR36z","title":"Task 2: Create the app registration for the Azure BYOA outpost","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-2-create-the-app-registration-for-the-azure-byoa-outpost","siteSpaceId":"sitesp_WVm4R","description":"You can customize your own outpost for Azure by bringing your own app (BYOA). This page describes the steps for creating the app registration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"f2wXpe7Kax09zkGfHfDO","title":"Task 3: Deploy the Azure BYOA outpost","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-3-deploy-the-azure-byoa-outpost","siteSpaceId":"sitesp_WVm4R","description":"You can customize your own outpost by bringing your own app (BYOA). This page describes the steps for deploying the Azure BYOA outpost.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"TmGh9D15rewpDayaOqDc","title":"Task 4: Verify the BYOA outpost deployment","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-4-verify-the-byoa-outpost-deployment","siteSpaceId":"sitesp_WVm4R","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page describes the steps for verifying your BYOA outpost deployment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"PpSL34mCvev7ncHdEg8z","title":"The shell script for Azure app registration","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/the-shell-script-for-azure-app-registration","siteSpaceId":"sitesp_WVm4R","description":"You can run this helper shell script to set up your resources and retrieve their IDs for use while creating your Azure BYOA outpost. This page provides technical, \"read-me style\" details about the scr","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"KJJYNVGlCbzZNT4mnlWY","title":"Outpost troubleshooting","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-troubleshooting","siteSpaceId":"sitesp_WVm4R","description":"Check here for solutions to issues that might occur while configuring, deploying, and operating outposts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"nmH4R5oQqc8q1PpJjtUG","title":"Outpost Cloud Service Provider (CSP) permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions","siteSpaceId":"sitesp_WVm4R","description":"This page lists and explains the various roles and permissions needed for working with resources for outposts by CSP.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"cgpBnicT9EtC2gNjvkoO","title":"Amazon Web Services (AWS) outpost permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/amazon-web-services-aws-outpost-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Amazon Web Services (AWS) permissions for use during Cortex XDR outpost onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"rp49fNmeuVzRiCMABOPb","title":"Microsoft Azure outpost permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/microsoft-azure-outpost-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Microsoft Azure provider outpost permissions for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"EzFqFSEy7l3Z3NY4W0IV","title":"Google Cloud Platform (GCP) outpost permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/google-cloud-platform-gcp-outpost-permissions","siteSpaceId":"sitesp_WVm4R","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex XDR onboarding outposts to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"ilBTIkvLBAUJAC0H6Aw3","title":"Introduction to Terraform for Cloud service provider (CSP) onboarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/introduction-to-terraform-for-cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_WVm4R","description":"Learn how to onboard Cloud Service Providers (CSPs) using Terraform. Discover step-by-step workflows for initial provisioning, updates, and Cloud Shell deployment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"EanpvoKiRJ87UDBLBzxz","title":"Manually connect a cloud instance","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/manually-connect-a-cloud-instance","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"sbffnpUsJxINitHvwoNb","title":"Manage cloud instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/manage-cloud-instances","siteSpaceId":"sitesp_WVm4R","description":"Learn how to manage, edit, and troubleshoot cloud instances in Cortex XDR. Monitor connector health, view security capabilities, and investigate errors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"6Lt53r3kA6C9UDUTktNH","title":"Pending cloud instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/pending-cloud-instances","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"PLzAapifhuft5N1M3oh1","title":"Edit your onboarded CSP configuration","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/edit-your-onboarded-csp-configuration","siteSpaceId":"sitesp_WVm4R","description":"Configure cloud service provider onboarding for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"jUD8tUEd9Y0kIa9dbqHO","title":"Update cloud permissions after Cortex XDR release updates","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_WVm4R","description":"Manage permission updates for your cloud instances following new feature releases or bug fixes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"jiMPaLdowE2psWv9FzAy","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_WVm4R","description":"You can troubleshoot errors on cloud instances by drilling down on an instance from the Data Sources & Integrations page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"SOKDDf0K7qHRyMLmLpsM","title":"Cloud service provider permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/cloud-service-provider-csp-onboarding/cloud-service-provider-permissions","siteSpaceId":"sitesp_WVm4R","description":"Grant the correct cloud service provider permissions for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"1SnQYxLoNtvYEiMg0eZO","title":"Generic on-premise data collectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"cvgqKx21cyzkEPv9wW87","title":"Broker VM data collector applets","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"LkHHGu4NIfy4mWmLxWmD","title":"Activate Apache Kafka Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-apache-kafka-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"QRYFWVKWi8Vxk1xR0uqc","title":"Activate Cortex Network Scanner","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-cortex-network-scanner","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"Jrit1L6Cots9iZoOv7Oi","title":"Activate CSV Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-csv-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"7F5H5uZ5wTd7GUPS2mdh","title":"Activate Database Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-database-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"LGc3CkmHYwAiCS3uUuJ6","title":"Activate Files and Folders Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-files-and-folders-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"wNPkEruyxVaNuvFV05QE","title":"Activate FTP Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-ftp-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"83G95qAez8GnRwIsDHz6","title":"Activate Local Agent Settings","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-local-agent-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"PMUKNMUQdKI4oMtSgg0E","title":"Activate NetFlow Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-netflow-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"foaNs0ocTVZsQt8OpCVw","title":"Activate Network Mapper","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-network-mapper","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"G08JcRvYFTsdBvaE24Yo","title":"Syslog Collector applet","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"oNpsUOdvx4xNWGQYYe30","title":"Activate Syslog Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/activate-syslog-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"e2awdTHwo4kCszmknVQb","title":"Ingest logs from a Syslog receiver","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/ingest-logs-from-a-syslog-receiver","siteSpaceId":"sitesp_WVm4R","description":"To extend visibility, Cortex XDR can receive Syslog from additional vendors that use CEF or LEEF formatted over Syslog (TLS not supported).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"wBOS7XkMU9XuEyV3Fo1f","title":"Check Point FW1 VPN1","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/check-point-fw1-vpn1","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"t1K41Hv82eGvXQAEmrwl","title":"Ingest logs from Check Point firewalls","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/check-point-fw1-vpn1/ingest-logs-from-check-point-firewalls","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Check Point FW1 VPN1"}]},{"id":"RaL8aFwZqa3h3SBaU1Yb","title":"Cisco ASA firewalls and AnyConnect","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"toMELKohmhsBANmTn2FD","title":"Ingest logs from Cisco ASA firewalls and AnyConnect","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/cisco-asa-firewalls-and-anyconnect/ingest-logs-from-cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Cisco ASA firewalls and AnyConnect"}]},{"id":"jAgkaomPcAn2ubytayiv","title":"Corelight Zeek","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/corelight-zeek","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"SquqXlzfEg4uScqVZ2Ro","title":"Ingest logs from Corelight Zeek","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/corelight-zeek/ingest-logs-from-corelight-zeek","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Corelight Zeek"}]},{"id":"MDxoahxz1RGyIe8fdBda","title":"Forcepoint DLP","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/forcepoint-dlp","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"pUky8Xguofo7JouVnOk0","title":"Ingest logs from Forcepoint DLP","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/forcepoint-dlp/ingest-logs-from-forcepoint-dlp","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Forcepoint DLP"}]},{"id":"jD2QCTrwaakobCCOxKpH","title":"Fortinet Fortigate","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/fortinet-fortigate","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"Wk5VYqF9DaLlbyoNs1SK","title":"Ingest logs from Fortinet Fortigate firewalls","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/fortinet-fortigate/ingest-logs-from-fortinet-fortigate-firewalls","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Fortinet Fortigate"}]},{"id":"JLgT2WBvZqaVmP6wX0GX","title":"Next Generation Firewall","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/next-generation-firewall","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"fOH6NJ1PX1VivKVINOTS","title":"Ingest Next-Generation Firewall logs using the Syslog Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Next Generation Firewall"}]},{"id":"wb56vpbnmZJ5ypbTYy3F","title":"PingFederate","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/pingfederate","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"aC2zYNeI04IBhbRHiONA","title":"Ingest authentication logs from PingFederate","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/pingfederate/ingest-authentication-logs-from-pingfederate","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"PingFederate"}]},{"id":"4d3ULqnZQYXFHJKnq6ut","title":"Zscaler Internet Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-internet-access","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"U1s7vuy5UergxqlCuIe2","title":"Ingest logs from Zscaler Internet Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-internet-access/ingest-logs-from-zscaler-internet-access","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Zscaler Internet Access"}]},{"id":"gwpDrnVgTGRd5jE62zvt","title":"Zscaler Private Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-private-access","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"vLw9QU5M1uDxMJ3oDag9","title":"Ingest logs from Zscaler Private Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-private-access/ingest-logs-from-zscaler-private-access","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Zscaler Private Access"}]},{"id":"YAAIdoTUE3RT1HRbJ2y4","title":"Activate Windows Event Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"LB2Wj6K6gInX9gwiTirB","title":"Activate Windows Event Collector on Windows Core","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector/activate-windows-event-collector-on-windows-core","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"MK01aJn9EIHmihMjTA9o","title":"Renew WEC certificates","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector/renew-wec-certificates","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"VjaSZTxxP5cBaAh89kyi","title":"XDR Collectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"fMBssMw0tz6GpBW6pB3D","title":"XDR Collector audit logs","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-audit-logs","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"tapyqs7wSq9bHbnMhZ6W","title":"XDR Collector machine requirements and supported operating systems","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-machine-requirements-and-supported-operating-systems","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"mVcwSkiCANVLHwzkyYRp","title":"Resources required to enable access to XDR collectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/resources-required-to-enable-access-to-xdr-collectors","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"pSOhTngTVEnqaF0f25El","title":"Manage XDR Collectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"FfOq6tut2btQRV10wwWs","title":"XDR Collectors installation resource for Windows and Linux","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/xdr-collectors-installation-resource-for-windows-and-linux","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"23BgA62Cj8St9IBuNw9t","title":"Create an XDR Collector installation package","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/create-an-xdr-collector-installation-package","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"gNmQAJuOEyWToSo7BCgS","title":"Install the XDR Collector installation package for Windows","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"cfJGYipyeX7fPSu5LtHB","title":"Install the XDR collector on Windows using the MSI","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-the-msi","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"yx0i8gYM40tOrijCFAx5","title":"Install the XDR Collector on Windows using Msiexec","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-msiexec","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"E2hfPhOZL2EWnCFb84bW","title":"Install the XDR Collector installation package for Linux","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-linux","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"L5zVDNfJNrT2DZvFJnsf","title":"Configure XDR Collector upgrade scheduler","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/configure-xdr-collector-upgrade-scheduler","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"IBhcM3VjtSh0JmQIdogF","title":"Set an application proxy for XDR Collectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/set-an-application-proxy-for-xdr-collectors","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"KNzjtURFbtFrAoJUh5HG","title":"Set an alias for an XDR Collector machine","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/set-an-alias-for-an-xdr-collector-machine","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"Q76DvOjItw3qGxuFVfy3","title":"Upgrade XDR Collectors","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/upgrade-xdr-collectors","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"6Zce3L4ltGt7gVYW9CNV","title":"Uninstall the XDR Collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/uninstall-the-xdr-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"XMke4eMs1dF2x6ZPmXS2","title":"Define XDR Collector machine groups","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/define-xdr-collector-machine-groups","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"t98qDupTn37KjywxQ44Q","title":"About Cortex XDR Collector content updates","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/about-cortex-xdr-collector-content-updates","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"6o0TWPNtxDUVwegtrnkw","title":"XDR Collector profiles","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"fKVtLHtO3Ob6ZQVRrX40","title":"Add an XDR Collector profile for Windows","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"qamLtVIVdoZPueP4EsMr","title":"How to configure XDR Collector profiles","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/how-to-configure-xdr-collector-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"OTNfIURKK1r66LslCYoU","title":"Additional XDR Collector profile management options","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/additional-xdr-collector-profile-management-options","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"AnpBBcsja1Flr7PSnSBN","title":"Query Windows Event Log records","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/query-windows-event-log-records","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"VBNPUZPOOJJFCM0cCKvZ","title":"Ingest logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"SBxzWUaC8XdNy6xCJ8K3","title":"Ingest Windows DNS debug logs using Elasticsearch Filebeat","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/ingest-windows-dns-debug-logs-using-elasticsearch-filebeat","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"eFlFfm17kgcSedanZLBX","title":"Add an XDR Collector profile for Linux","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-linux","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"Rjg1ZkjKs6PM2hV6Rirb","title":"Apply profiles to collection machine policies","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/apply-profiles-to-collection-machine-policies","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"nOUFv9WJ3JM028xySgic","title":"XDR Collector datasets","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-datasets","siteSpaceId":"sitesp_WVm4R","description":"Configure on-premises data collection for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"YThTDtc4ttXfV8fXSokm","title":"Palo Alto Networks integrations","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"6OT7Vn9fbRz7ViFcVvyl","title":"Cloud Next-Generation Firewall","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/cloud-next-generation-firewall","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"o7KNrqyjxdiGzuBNQCV1","title":"Ingest data from Cloud Next-Generation Firewall","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/cloud-next-generation-firewall/ingest-data-from-cloud-next-generation-firewall","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Cloud Next-Generation Firewall"}]},{"id":"E2u8xPaeD0jK9bhdxByl","title":"Next-Generation Firewall","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/next-generation-firewall","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"cRJTjfQ1FGeSv9s2rKC4","title":"Ingest data from Next-Generation Firewall","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/next-generation-firewall/ingest-data-from-next-generation-firewall","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"Z13uKj3jgeB4G2509Tfb","title":"Ingest Next-Generation Firewall logs using the Syslog collector","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"DqbXJ5LOA7Bai5siYMTu","title":"Panorama","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/next-generation-firewall/panorama","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"VMdux3LXeYc2pmaXP2aU","title":"Prisma Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/prisma-access","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"g93l3PRR3PrAquXkiCBG","title":"Ingest data from Prisma Access","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/prisma-access/ingest-data-from-prisma-access","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"eJ4LGPVABob0ssvBlyyE","title":"Palo Alto Networks Prisma","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/prisma-access/palo-alto-networks-prisma","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"f0ttQ7cCKdAxj8oFQQGR","title":"Prisma Access Browser","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/prisma-access-browser","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"TU4qMae0jzFcNFSwgcbS","title":"Ingest logs from Prisma Access Browser","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/prisma-access-browser/ingest-logs-from-prisma-access-browser","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access Browser"}]},{"id":"lHBxDUeXSK1nqtVFeTEu","title":"Prisma Browser Integration","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/prisma-browser-integration","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"NMQAODqQvSeOfCyADUMV","title":"Ingest detection data from Strata Logging Service","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/ingest-detection-data-from-strata-logging-service","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"HwdvDiHsaZ8dTD9M3PCO","title":"IoT Security","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/iot-security","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"fuFLwvj3e3Ehc2gjEFLp","title":"Ingest alerts and assets from IoT Security (Deprecated)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/iot-security/ingest-alerts-and-assets-from-iot-security","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"XF2LkUt2kwTFZC7XeUOO","title":"Ingest alerts and assets from Device Security","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/iot-security/ingest-alerts-and-assets-from-device-security","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"r4SJZ1i1kY1ai70hHZb9","title":"Cortex Internals","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/cortex-internals","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"LGVTe4Kyl5oILdYsj94O","title":"Enterprise DLP","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/enterprise-dlp","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"hal4DlsXCmVUyI5f9xKG","title":"Palo Alto Networks Cortex","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/palo-alto-networks-cortex","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"bOn4uXh1l2w7BsTB0egz","title":"SaaS Security (Aperture)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/saas-security-aperture","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"AewUdPiV5slF9o4UAW7E","title":"WildFire Cloud","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/wildfire-cloud","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"wbL1rbIWvC7SmIdHlK3R","title":"Log type filtering","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/log-type-filtering","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"nbOfK1th8zr1Zl35lOUt","title":"Collecting URL and File log types","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/collecting-url-and-file-log-types","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"iB5DnPxnYLX2SYFajeXD","title":"Detectors connected to URL and File log types","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/palo-alto-networks-integrations/collecting-url-and-file-log-types/detectors-connected-to-url-and-file-log-types","siteSpaceId":"sitesp_WVm4R","description":"Configure Palo Alto Networks data integration for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Collecting URL and File log types"}]},{"id":"vJtppwk9hhP6nakCA5Fn","title":"Administration and troubleshooting","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the administration and troubleshooting of the different data collector integrations in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"}]},{"id":"T6WTwDkC9gJJMgzhrzVu","title":"Manage instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"qqsIrmiYa9krQQFW3eM2","title":"Add a new data source or instance","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances/add-a-new-data-source-or-instance","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"Kt9Is0B7LsiyFoTnioem","title":"How to configure the scanning settings for supported services","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances/how-to-configure-the-scanning-settings-for-supported-services","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"nlnQOYd5ZMC8HQaQdety","title":"Manage cloud instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances/manage-cloud-instances","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"DmOuVxgOMjebkrF3zXYW","title":"Update cloud permissions after Cortex XDR release updates","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"fCmEnJewSS2yyascfxpt","title":"Pending cloud instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances/pending-cloud-instances","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"ksJTa34BND2G7iIlFjdS","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"3sIQz8Q2JDRzfrIjPn34","title":"Manage Kubernetes Connector instances","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/manage-instances/manage-kubernetes-connector-instances","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"zsYg5M5gxsNcBzNON1r2","title":"Integrations","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/integrations","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"9QuRZ03GAEOoJhYK0XJh","title":"Integrations in Cortex XDR","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/integrations/integrations-in-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"zO4ypupMxgwAq0A1cstH","title":"Add an integration instance","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/integrations/add-an-integration-instance","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"ErMV35azK42AblJAIXZE","title":"Use integration commands in the CLI","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/integrations/use-integration-commands-in-the-cli","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"TOGH1dgZCeKyAXY3QmRK","title":"Configure integration permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/integrations/configure-integration-permissions","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"Cuc5ZpfflNDXm6fLcwRo","title":"Troubleshoot Integrations","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/integrations/troubleshoot-integrations","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"fAY0fzS76nMo0HzeC6sg","title":"Manage credentials","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/integrations/manage-credentials","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"YmW1z7OGXh754tdvl1wH","title":"Verify collector connectivity","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/verify-collector-connectivity","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"lm70Ppmx0caQZHxALoeB","title":"Overview of data ingestion metrics","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/overview-of-data-ingestion-metrics","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"Qrjpgfwjy57o1Qu4FVCK","title":"Creating correlation rules to monitor data ingestion health","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/overview-of-data-ingestion-metrics/creating-correlation-rules-to-monitor-data-ingestion-health","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Overview of data ingestion metrics"}]},{"id":"0aZzx9sT5HuFFaUDrRo6","title":"Measuring data freshness","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/overview-of-data-ingestion-metrics/measuring-data-freshness","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Overview of data ingestion metrics"}]},{"id":"ysu2LZOo0XO0qQZSm97H","title":"About health issues","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/about-health-issues","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"lQG9VEfPF1bOPHvJGLUq","title":"Investigate and resolve health issues","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/about-health-issues/investigate-and-resolve-health-issues","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"XpxLH6f2rHhysNAsrDDb","title":"Monitor data ingestion health (BETA)","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/about-health-issues/monitor-data-ingestion-health","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"Md6xoczXC9DXn3H5Sgw9","title":"Monitor Correlation rules","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/cortex-xdr-data-sources/administration-and-troubleshooting/about-health-issues/monitor-correlation-rules","siteSpaceId":"sitesp_WVm4R","description":"Manage and troubleshoot Cortex XDR data integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Cortex XDR Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"YVakYAqXqQrlBTaxgNuj","title":"Marketplace","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/marketplace","siteSpaceId":"sitesp_WVm4R","description":"Use the Marketplace, a centralized content portal, to manage content packs in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"oSbEg1gThvV9Nv9rdNCE","title":"Cortex Marketplace","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/marketplace/cortex-marketplace","siteSpaceId":"sitesp_WVm4R","description":"Search the Cortex Marketplace and find content. Search by use cases, integrations, and categories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"UAmgt6w3m4ovzmUo47IM","title":"Content Pack Support Types","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/marketplace/content-pack-support-types","siteSpaceId":"sitesp_WVm4R","description":"Types of content packs support - Cortex supported, Partner-Supported, Developer-Supported, Community-Supported.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"nbkq10yYC0VNuTSn3gfH","title":"Cortex XDR content","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/marketplace/cortex-xdr-content","siteSpaceId":"sitesp_WVm4R","description":"The type of content in Cortex XDR","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"nTne2MjaxjzDNlRcwlXy","title":"Manage content packs","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/marketplace/manage-content-packs","siteSpaceId":"sitesp_WVm4R","description":"Install, delete, update, and revert content packs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"VqwSkirR9ZTMRFBVfRAk","title":"Marketplace FAQs","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/marketplace/marketplace-faqs","siteSpaceId":"sitesp_WVm4R","description":"Frequently Asked Questions about Cortex XDR Marketplace Content","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"FzTHz5SvpRf5P8hLdez7","title":"Content changes when upgrading Cortex XDR versions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/marketplace/content-changes-when-upgrading-cortex-xdr-versions","siteSpaceId":"sitesp_WVm4R","description":"Content updates when upgrading Cortex XDR versions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"7qoLoiHJcVpl4AEDJW38","title":"Manage API keys","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/manage-api-keys","siteSpaceId":"sitesp_WVm4R","description":"Create and manage API keys for Cortex XDR integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"GthrLJ5jxmXtOioWdFIw","title":"XQL query management","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/xql-query-management","siteSpaceId":"sitesp_WVm4R","description":"Administrators can set controls on running XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"Dfgl1Ey6rM50qvh8pBbO","title":"Customize cases and issues","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues","siteSpaceId":"sitesp_WVm4R","description":"Customize case and issue behavior for your workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"1UBc8pQSsDFZYIGfacDp","title":"External integrations","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/external-integrations","siteSpaceId":"sitesp_WVm4R","description":"Integrate external threat intelligence and case management services with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"lqPfzMCDepDzqp4DdEf2","title":"Set up case scoring","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/set-up-case-scoring","siteSpaceId":"sitesp_WVm4R","description":"Enable SmartScore and configure scoring rules for cases and issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"hgNVZx4Gl9VwxjIWyIHK","title":"Create a starring configuration","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-a-starring-configuration","siteSpaceId":"sitesp_WVm4R","description":"Create rules that automatically star matching issues and their linked cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"3mlZ4Kj6hmF0YZTaX2Gk","title":"Create SLAs for case and issue resolution","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-slas-for-issue-resolution","siteSpaceId":"sitesp_WVm4R","description":"Create SLA rules to set and track issue-resolution timers and time goals.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"cBbjFqoUFp3Uv3PfkBC6","title":"Create additional case timers and SLAs","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas","siteSpaceId":"sitesp_WVm4R","description":"Create case timers and service level agreements.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"}]},{"id":"JkTzCQQGoQFbeaRvDRNI","title":"Update case timer and SLA fields","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas/update-case-timer-and-sla-fields","siteSpaceId":"sitesp_WVm4R","description":"Update case timer and SLA fields.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"},{"label":"Create additional case timers and SLAs"}]},{"id":"nUHE85BZSsewpQRBBJHV","title":"Create issue exceptions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-issue-exceptions","siteSpaceId":"sitesp_WVm4R","description":"Create time-bound exceptions that pause issue SLA timers during approved remediation delays.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"g7XvTL8UiodIbOJ7dH2W","title":"Configure the issue exception approval workflow","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-issue-exceptions/configure-the-issue-exception-approval-workflow","siteSpaceId":"sitesp_WVm4R","description":"Manage approvers and approval requirements for issue exception rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"rLf3XtXHSgr7P0jRbzzx","title":"Create issue exception rules","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-issue-exceptions/create-issue-exception-rules","siteSpaceId":"sitesp_WVm4R","description":"Create approval-based rules that temporarily pause SLA timers for selected issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"lCMDDZyDBk3G7Bovpric","title":"Create an exception rule from an issue","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-issue-exceptions/create-an-exception-rule-from-an-issue","siteSpaceId":"sitesp_WVm4R","description":"Create an issue exception rule from an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"H9GmDamaEUJ7H4Xc5u0w","title":"View issue exception rules","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-issue-exceptions/view-issue-exception-rules","siteSpaceId":"sitesp_WVm4R","description":"View configured issue exception rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"dQjA51WQsjIvJtu19lYr","title":"Disable issue exception rules","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-issue-exceptions/disable-issue-exception-rules","siteSpaceId":"sitesp_WVm4R","description":"Disable issue exception rules that no longer apply.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"T1UW0LwZhGMDKOVmJ6uZ","title":"View excepted issues","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/create-issue-exceptions/view-excepted-issues","siteSpaceId":"sitesp_WVm4R","description":"View issues excluded by exception rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"x0F1hs9JoWAQkGmSncnb","title":"Optimize case grouping in correlations","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/customize-cases-and-issues/optimize-case-grouping-in-correlations","siteSpaceId":"sitesp_WVm4R","description":"Optimize case grouping for correlation alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Customize cases and issues"}]},{"id":"FtvVcNLC2MJee0ANbDfM","title":"Managed Services configuration","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/managed-services-configuration","siteSpaceId":"sitesp_WVm4R","description":"Configure Cortex XDR for managed security services.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"}]},{"id":"lPV4rW75MIVGjacIgU8K","title":"Configure report forwarding","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/managed-services-configuration/configure-report-forwarding","siteSpaceId":"sitesp_WVm4R","description":"Configure managed security services in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Managed Services configuration"}]},{"id":"FuTXjekPlsWW5HRyriwx","title":"Configure actions permissions","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/managed-services-configuration/configure-actions-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure managed security services in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Managed Services configuration"}]},{"id":"ppP86dM6VmzC5mEQuNAA","title":"Manage escalation contacts","pathname":"/cortex-xdr-5.x/configure-cortex-xdr/managed-services-configuration/manage-escalation-contacts","siteSpaceId":"sitesp_WVm4R","description":"Configure managed security services in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Configure Cortex XDR","icon":"sliders"},{"label":"Managed Services configuration"}]},{"id":"WsHuXU7QVgMF3T6v2BaU","title":"Endpoint protection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR protects endpoints from malware, exploits, and unknown threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"}]},{"id":"EmLLaczqS3F2lUxSiiew","title":"Malware protection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/malware-protection","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR detects and prevents malware on endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"7ft23CJOyxXLWQ7rmvUy","title":"Exploit protection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/exploit-protection","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR protects endpoints from exploits and malicious techniques.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"kl3MH32nhAAWTYHB3CNn","title":"File analysis and protection flow","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/file-analysis-and-protection-flow","siteSpaceId":"sitesp_WVm4R","description":"Understand how Cortex XDR analyzes files and applies protection verdicts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"SUkawQdSAzBpHXqe8umE","title":"Endpoint protection capabilities","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/endpoint-protection-capabilities","siteSpaceId":"sitesp_WVm4R","description":"Review endpoint protection capabilities and security modules supported by each operating system.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"SHG0XRubnWYuWSYMPde5","title":"Processes protected by exploit security policy","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/processes-protected-by-exploit-security-policy","siteSpaceId":"sitesp_WVm4R","description":"Review processes protected by the exploit security policy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"BAPk60pSZrdyonuqxLtv","title":"File Integrity Monitoring (FIM)","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/file-integrity-monitoring-fim","siteSpaceId":"sitesp_WVm4R","description":"Monitor critical files and directories for unauthorized changes on protected endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"JIoU1WGbHQoOYtFuXc2o","title":"CaaS Workloads","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/caas-workloads","siteSpaceId":"sitesp_WVm4R","description":"Protect container-as-a-service workloads with Cortex XDR endpoint security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"eJ7EwCOabtXCy6ZZlmLk","title":"WildFire analysis concepts","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/wildfire-analysis-concepts","siteSpaceId":"sitesp_WVm4R","description":"Learn how WildFire analyzes files and returns verdicts to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"MJxmV0JFH6w4LiN2WEZD","title":"Guidelines for keeping Cortex XDR agents and content updated","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/guidelines-for-keeping-cortex-xdr-agents-and-content-updated","siteSpaceId":"sitesp_WVm4R","description":"Keep Cortex XDR agents and security content current and supported.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"dVKjb8XhESY7NAFyyOiF","title":"About content updates","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/about-content-updates","siteSpaceId":"sitesp_WVm4R","description":"Understand Cortex XDR security content updates and their endpoint protection coverage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"ZLYiKhapYvEV4raWC1vo","title":"Endpoint data collection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/endpoint-data-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure endpoint data collection for Cortex XDR visibility and threat detection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"}]},{"id":"kSJd1OLj9E66ZW5IVCQS","title":"Endpoint data collection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-protection/endpoint-data-collection/endpoint-data-collection-1","siteSpaceId":"sitesp_WVm4R","description":"Understand the endpoint data collected by Cortex XDR agents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint protection"},{"label":"Endpoint data collection"}]},{"id":"9USPlYFlavmigVuQX849","title":"Install and manage endpoints","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints","siteSpaceId":"sitesp_WVm4R","description":"Learn how to set up profiles, policies and other settings for endpoint protection, how to install Cortex XDR agent on endpoints, and how to manage them after installation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"}]},{"id":"HgkM2n8LkebgBCxChAEU","title":"Set up endpoint protection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection","siteSpaceId":"sitesp_WVm4R","description":"Configure profiles, policies, and settings to protect your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"}]},{"id":"YbNfwOTGs71ozDB3QVGp","title":"Set up endpoint profiles and exception rules","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules","siteSpaceId":"sitesp_WVm4R","description":"Configure endpoint security profiles and exception rules for your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"6Gz08po6oUpp1a7YmsdB","title":"Set up malware prevention profiles","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-malware-prevention-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure malware prevention profiles for supported endpoint platforms.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"EyswzfkZdQgMFPHnMBPR","title":"Set up exploit prevention profiles","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exploit-prevention-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure exploit prevention profiles to block exploit techniques on endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"ZJIRdh4QyAmKeUkG9Y2b","title":"Set up agent settings profiles","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-agent-settings-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure agent settings profiles for Cortex XDR endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"sDlSK8YynqeZlk8KWcL0","title":"Set up restrictions prevention profiles","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-restrictions-prevention-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure restrictions profiles to limit risky endpoint activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"lCDE2DGcRqA5cyi2Cjc9","title":"Set up exception profiles and rules","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules","siteSpaceId":"sitesp_WVm4R","description":"Configure exception profiles and rules for trusted endpoint activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"0uFJfj2qwlTK4NSqZygC","title":"Exception configuration","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/exception-configuration","siteSpaceId":"sitesp_WVm4R","description":"Configure global and profile-based exceptions for endpoint protection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"MnkpA6gMKUB5H7IL0qNs","title":"Issue exclusions","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions","siteSpaceId":"sitesp_WVm4R","description":"Exclude matching endpoint issues from investigation and case creation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"Sn1sa1KbjWKBLiU3kfMc","title":"Add an issue exclusion rule","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions/add-an-issue-exclusion-rule","siteSpaceId":"sitesp_WVm4R","description":"Create a rule that excludes matching endpoint issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Issue exclusions"}]},{"id":"DS4UGddUeHBHptJpPzFo","title":"Add an IOC or BIOC rule exception","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-an-ioc-or-bioc-rule-exception","siteSpaceId":"sitesp_WVm4R","description":"Create exceptions for IOC and BIOC rules on selected endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"xGohpnrkLwrQFfycoudG","title":"Add a disable prevention rule for endpoints","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-prevention-rule-for-endpoints","siteSpaceId":"sitesp_WVm4R","description":"Create an exception that disables prevention for selected endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"AT2bQo1WWkkUQVAxTYD2","title":"Add a disable injection and prevention rule","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-injection-and-prevention-rule","siteSpaceId":"sitesp_WVm4R","description":"Create an exception that disables injection and prevention for selected endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"aH5Wuk93REYim7eTuwxw","title":"Add a support exception rule for endpoints","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-support-exception-rule-for-endpoints","siteSpaceId":"sitesp_WVm4R","description":"Create a support exception rule for troubleshooting selected endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"gWRzs9y7vELk9QWQwaC9","title":"Add a legacy exception rule for endpoints","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints","siteSpaceId":"sitesp_WVm4R","description":"Create legacy exception rules for endpoint protection policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"VANZuFAYxMB8i9aQSR85","title":"Add a new exceptions security profile","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-new-exceptions-security-profile","siteSpaceId":"sitesp_WVm4R","description":"Create an exceptions security profile for endpoint policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule for endpoints"}]},{"id":"BFD8lJqDuWrJrCO62xCV","title":"Add a global endpoint policy exception","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-global-endpoint-policy-exception","siteSpaceId":"sitesp_WVm4R","description":"Create a global exception for endpoint protection policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule for endpoints"}]},{"id":"YDDZ9zj0dWhUDvYscCDE","title":"Set up Identity profiles","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-identity-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure the Identity Profile to unify AD-SPM, Conditional Access, and LDAP Protection controls in one centralized hub.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"Ocehmwuf5rU9r8NsDzeX","title":"Define endpoint groups","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/define-endpoint-groups","siteSpaceId":"sitesp_WVm4R","description":"Create and manage endpoint groups for targeted policy assignment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"Za0vnasYqGQhesfSskAg","title":"Configure global agent settings","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/configure-global-agent-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure global Cortex XDR agent settings for your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"ikICWXU8TP9mZ0tkukba","title":"Apply profiles to endpoints","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/apply-profiles-to-endpoints","siteSpaceId":"sitesp_WVm4R","description":"Assign endpoint security profiles and policies to endpoint groups.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"gMlSIELOSQ0CuPUmUIKx","title":"Create an agent installation package","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/create-an-agent-installation-package","siteSpaceId":"sitesp_WVm4R","description":"Create a Cortex XDR agent installation package for endpoint deployment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"MlpIZbCfcFtpx5oStdKL","title":"Manage an agent installation package","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/set-up-endpoint-protection/manage-an-agent-installation-package","siteSpaceId":"sitesp_WVm4R","description":"View and manage Cortex XDR agent installation packages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"A4N7UUB4nt0wdTIHL3Uk","title":"Harden endpoint security","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security","siteSpaceId":"sitesp_WVm4R","description":"Configure endpoint security features that harden devices against threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"}]},{"id":"9F1HK85m6mkLPnWnhL2s","title":"Device control","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/device-control","siteSpaceId":"sitesp_WVm4R","description":"Control removable devices and peripheral access on managed endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"Jm1gpuGsXO9hJvvqSylN","title":"Host firewall","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/host-firewall","siteSpaceId":"sitesp_WVm4R","description":"Configure host firewall policies to control endpoint network traffic.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"HBtYTbsYqlNEVbXHd8jA","title":"Host firewall for Windows","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-windows","siteSpaceId":"sitesp_WVm4R","description":"Configure Windows host firewall rules and settings for managed endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"oj2ll0AccZrtqBpR1XOr","title":"Host firewall for macos","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-macos","siteSpaceId":"sitesp_WVm4R","description":"Configure macOS host firewall rules and settings for managed endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"fH30q6lVQ4OnbNWEKyZx","title":"Disk encryption","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/disk-encryption","siteSpaceId":"sitesp_WVm4R","description":"Manage disk encryption settings for supported endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"aO9yciTQ36QkSh5NwWOd","title":"Host Inventory","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/host-inventory","siteSpaceId":"sitesp_WVm4R","description":"View hardware, software, and system details for managed endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"ivqOZrHx6gWxwilRWGhq","title":"Vulnerability Assessment","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/vulnerability-assessment","siteSpaceId":"sitesp_WVm4R","description":"Assess endpoint vulnerabilities and prioritize remediation across your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"qiHJXBX4Pxvv1heYy7q5","title":"Set a Cortex XDR agent Critical Environment version","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/harden-endpoint-security/set-a-cortex-dr-agent-critical-environment-version","siteSpaceId":"sitesp_WVm4R","description":"Set a critical environment agent version for sensitive endpoint deployments.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"9k5fcgdAdLEJO2c78e11","title":"Manage endpoint protection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"}]},{"id":"ORgEfO3x9KWcFeYdj33i","title":"Move agents between managing servers","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/move-agents-between-managing-servers","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"jKXkMTTSeLFSGLGeuXYn","title":"Manage endpoint tags","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"jSOi9o6DjkBcAQpk89ZA","title":"Create an endpoint tag","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/create-an-endpoint-tag","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"k4QNk2nTOz6LkXX9lpvt","title":"Remove an endpoint tag","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/remove-an-endpoint-tag","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"vVgaOdoGOByPKVSJ2eWY","title":"Track your endpoint tags","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/track-your-endpoint-tags","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"RiC4tgQ3Nj5YI6dZqUyY","title":"Permanently remove Endpoint tags from the system","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/permanently-remove-endpoint-tags-from-the-system","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"M7KdgmgKajufKQirTLDH","title":"Set an alias for an endpoint","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/set-an-alias-for-an-endpoint","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"qksMQaDNgczqyySpgXSx","title":"Manage endpoint prevention profiles","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-prevention-profiles","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"JFY4u9CoPyWAJOGCtH5W","title":"Create a new prevention policy rule for serverless function","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/create-a-new-prevention-policy-rule-for-serverless-function","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"lWt29DJP5T0RuZXI54a7","title":"View information about your endpoint prevention profiles","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/view-information-about-your-endpoint-prevention-profiles","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"AycYmff6p4M9mTjJYRhg","title":"Upgrade Cortex XDR agents","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/upgrade-cortex-xdr-agents","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"aGS7MmLIKCOKF9OF2JxM","title":"Restart agent","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/restart-agent","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"mpOcf3uNVEe7mampzpo6","title":"Uninstall the Cortex XDR agent","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/uninstall-the-cortex-xdr-agent","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"0EsholKAljB31bCsk5sn","title":"Clear agent database","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/clear-agent-database","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"k2SxYXxjnCDF7WOn7JK1","title":"Delete Cortex XDR agents","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/delete-cortex-xdr-agents","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"SZZ0aKy0c53Np691eo0W","title":"Manage agent tokens","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-agent-tokens","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"47UJafIowc7FYrXmZd3i","title":"Retrieve support file password","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/retrieve-support-file-password","siteSpaceId":"sitesp_WVm4R","description":"Learn how to retrieve the password to access files from the Tech Support File (TSF), which is generated in a zip format protected by an encrypted password.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"2uQRqqHK6jy6rOcZe9mH","title":"Send push notifications to iOS","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/send-push-notifications-to-ios","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"QHldiSxdbScPkX7DYN1O","title":"Monitor agent operational status","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-operational-status","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"B6LeIjVzpFGiTONSXX7D","title":"Monitor agent activity","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-activity","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"ox8OBN7tfs3Y6nupfwds","title":"Monitor agent upgrade status","pathname":"/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-upgrade-status","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"Iymp8kUdUYbRnB4u2j61","title":"Web and API Security (WAAS)","pathname":"/cortex-xdr-5.x/protect-your-endpoints/web-and-api-security-waas","siteSpaceId":"sitesp_WVm4R","description":"Discover, assess, monitor, and protect APIs and web workloads with Cortex XDR WAAS.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"}]},{"id":"9esUkwtxp2TI8cJmZ2y4","title":"Overview","pathname":"/cortex-xdr-5.x/protect-your-endpoints/web-and-api-security-waas/overview","siteSpaceId":"sitesp_WVm4R","description":"Explore Cortex XDR Web and API Security capabilities for APIs and Linux workloads.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Web and API Security (WAAS)"}]},{"id":"HfVumXdxdKNZHy8KHSgr","title":"Personas workflow","pathname":"/cortex-xdr-5.x/protect-your-endpoints/web-and-api-security-waas/personas-workflow","siteSpaceId":"sitesp_WVm4R","description":"Cortex API security distributes responsibilities across SOC analysts, security practitioners, and workload owners.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Web and API Security (WAAS)"}]},{"id":"wdXFC16qAR7PJzeXyUiV","title":"Secure your API landscape","pathname":"/cortex-xdr-5.x/protect-your-endpoints/web-and-api-security-waas/secure-your-api-landscape","siteSpaceId":"sitesp_WVm4R","description":"Discover, assess, monitor, and protect API traffic, endpoints, and specifications in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Web and API Security (WAAS)"}]},{"id":"s9lQczm2lmAeHdz1Qdr5","title":"Endpoint DLP","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp","siteSpaceId":"sitesp_WVm4R","description":"Protect sensitive endpoint data and prevent exfiltration with Cortex XDR Endpoint DLP.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"}]},{"id":"lgfvvSput5l5lJeM4DxU","title":"Cortex Data Loss Prevention (DLP) module overview","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview","siteSpaceId":"sitesp_WVm4R","description":"Learn about Cortex Data Loss Prevention (DLP) module, which provides a solution to prevent sensitive data exfiltration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"}]},{"id":"L4Kqb15O9FKHeoIWjf2b","title":"Archive file classification","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview/archive-file-classification","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR classifies archive files for Endpoint DLP.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"},{"label":"Cortex Data Loss Prevention (DLP) module overview"}]},{"id":"kBW5DPLI7dqftPgX8hvT","title":"True-file type detection","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview/true-file-type-detection","siteSpaceId":"sitesp_WVm4R","description":"Learn how Endpoint DLP detects true file types in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"},{"label":"Cortex Data Loss Prevention (DLP) module overview"}]},{"id":"DCVboko0BNo4VNaGePPd","title":"Personas workflow for DLP","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/personas-workflow-for-dlp","siteSpaceId":"sitesp_WVm4R","description":"The data security administrator and data security viewer are responsible for identifying DLP requirements for creating data-in-motion rules and investigating issues and cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"}]},{"id":"Pli1vKxwKendAdxqkPqL","title":"Best Practices","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/best-practices","siteSpaceId":"sitesp_WVm4R","description":"Apply Endpoint DLP best practices to design effective data-in-motion rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"}]},{"id":"goIBNOILcIgAzTsCvQVn","title":"Configure DLP end-to-end","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/configure-dlp-end-to-end","siteSpaceId":"sitesp_WVm4R","description":"Configure Cortex XDR Endpoint DLP from setup through policy enforcement.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"}]},{"id":"rkCa6CGBr0y7xLBwuTgM","title":"DLP status in all endpoints","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/dlp-status-in-all-endpoints","siteSpaceId":"sitesp_WVm4R","description":"View DLP and browser extension status for managed Cortex XDR endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"}]},{"id":"wi6rl3dq4RLiVTupwXf7","title":"Cortex DLP threat detection and issues","pathname":"/cortex-xdr-5.x/protect-your-endpoints/endpoint-dlp/cortex-dlp-threat-detection-and-issues","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR detects and investigates Endpoint DLP policy violations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Protect your endpoints","icon":"shield-halved"},{"label":"Endpoint DLP"}]},{"id":"uRZBiMbePduVUvjTISxm","title":"Monitor dashboards and reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Monitor security data with Cortex XDR dashboards and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"ayLSYF8moFHCTCG5NBZu","title":"Overview of dashboards and reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Learn about Cortex XDR dashboards, reports, widgets, and their workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"}]},{"id":"8pox3XQpYC59j1ZYeS5X","title":"Dashboard interface basics","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-interface-basics","siteSpaceId":"sitesp_WVm4R","description":"Explore the controls and layout of the Cortex XDR dashboard interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"nC93dmrWUmJ5XdZrg6X6","title":"Dashboard types","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-types","siteSpaceId":"sitesp_WVm4R","description":"Compare available dashboard types and their intended uses.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"nAc9I7i37HsUOTBZcH0x","title":"Report basics","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/report-basics","siteSpaceId":"sitesp_WVm4R","description":"Learn how reports organize and deliver dashboard data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"Ui74c4xxDIM1uXG5ZlCH","title":"Widget Library","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/widget-library","siteSpaceId":"sitesp_WVm4R","description":"Browse available widgets for dashboards and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"zpB8AlMtxNCB9UegNSzH","title":"Access and visibility for dashboards and reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Control access, visibility, and sharing for dashboards and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"}]},{"id":"gFJ6xNC0sC4NYMBWNvsi","title":"Visibility settings","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/visibility-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure who can view dashboards and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"5qCx2aLKZUVCfhzZib72","title":"Access to widgets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-to-widgets","siteSpaceId":"sitesp_WVm4R","description":"Manage user access to dashboard widgets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"pE7SVQs3SPjZcRQ7LJpA","title":"Sharing icons","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/sharing-icons","siteSpaceId":"sitesp_WVm4R","description":"Understand dashboard and report sharing status icons.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"nSVomUXkp66u2VU1IrvP","title":"Access and sharing cheat sheet","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-and-sharing-cheat-sheet","siteSpaceId":"sitesp_WVm4R","description":"Reference dashboard and report access and sharing permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"DrLkkv49kcJ66Topamn8","title":"Manage dashboards and reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Manage dashboard and report ownership, sharing, imports, and deleted content.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"}]},{"id":"NrMlx6lXPuPnfRO8LwQ0","title":"Dashboard Manager","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/dashboard-manager","siteSpaceId":"sitesp_WVm4R","description":"Use Dashboard Manager to organize and maintain dashboards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"dtPaYwcsCMUYWB7W4vub","title":"Reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/reports","siteSpaceId":"sitesp_WVm4R","description":"Manage and generate reports from Cortex XDR data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"wKajpKzqfRNGYiVGijwQ","title":"Duplicate dashboards and reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/duplicate-dashboards-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Create copies of existing dashboards and report templates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"XGNOewj7OD1bdtHaZZPN","title":"Share custom dashboards and report templates","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/share-custom-dashboards-and-report-templates","siteSpaceId":"sitesp_WVm4R","description":"Share custom dashboards and report templates with other users.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"r19zmmrAS4x3do8VU4AH","title":"Change ownership to dashboards and report templates","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/change-ownership-to-dashboards-and-report-templates","siteSpaceId":"sitesp_WVm4R","description":"Transfer ownership of dashboards and report templates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"NOepbtEaGBt4Dt5SkXdC","title":"Import and export dashboards and report templates","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/import-and-export-dashboards-and-report-templates","siteSpaceId":"sitesp_WVm4R","description":"Import and export dashboards and report templates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"odXdkpWm2ZT9vVBf7Ojs","title":"Configure the notification rule for a failed report","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/configure-the-notification-rule-for-a-failed-report","siteSpaceId":"sitesp_WVm4R","description":"Get notified when a scheduled report fails.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"wi8VjQsHomwlzHdNavzu","title":"Deleted content","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/deleted-content","siteSpaceId":"sitesp_WVm4R","description":"Restore or permanently remove deleted dashboards and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"1OjGZSHDzdYi3kEWgLy1","title":"Create dashboards","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-dashboards","siteSpaceId":"sitesp_WVm4R","description":"Create dashboards that monitor the data most important to your team.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"}]},{"id":"2orFC8delVGbGr79SpwZ","title":"Create a dashboard","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-dashboards/create-a-dashboard","siteSpaceId":"sitesp_WVm4R","description":"Build a dashboard with the widgets and filters you need.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Create dashboards"}]},{"id":"ZwNs9ZL6rD3sPCYmzTj9","title":"Create reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-reports","siteSpaceId":"sitesp_WVm4R","description":"Create reports that summarize Cortex XDR data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"}]},{"id":"29odc5gbUGLObhunsz4L","title":"Create a report template from scratch","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-reports/create-a-report-template-from-scratch","siteSpaceId":"sitesp_WVm4R","description":"Build a report template from an empty layout.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Create reports"}]},{"id":"E2LCXWUwb4FYCVWGbyHA","title":"Advanced configuration","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration","siteSpaceId":"sitesp_WVm4R","description":"Configure custom widgets, global filters, and drilldowns.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"}]},{"id":"wokNua714m3xN3vOCxvq","title":"Create custom widgets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets","siteSpaceId":"sitesp_WVm4R","description":"Create custom widgets for dashboards and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"YTz3WH5X4Q0XN31NF7zD","title":"Create widgets using AI","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-widgets-using-ai","siteSpaceId":"sitesp_WVm4R","description":"Use AI to create custom dashboard widgets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"bXU5YQlYrXWw4CAbezBf","title":"Create XQL widgets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-xql-widgets","siteSpaceId":"sitesp_WVm4R","description":"Build custom widgets with XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"dv0HUz1s0715ukTlwdUV","title":"Add parameters to a custom XQL widget","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/add-parameters-to-a-custom-xql-widget","siteSpaceId":"sitesp_WVm4R","description":"Add reusable parameters to custom XQL widgets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"xAsEitZc31E6EQ4ViD6V","title":"Create script-based widgets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-script-based-widgets","siteSpaceId":"sitesp_WVm4R","description":"Create dashboard widgets that run scripts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"2dEmKR9SY4iBiGuz5XbO","title":"Configure global filters","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/configure-global-filters","siteSpaceId":"sitesp_WVm4R","description":"Apply filters across dashboard widgets and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"qs8BegiQdNlA3L99NuCP","title":"Configure drilldowns","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/configure-drilldowns","siteSpaceId":"sitesp_WVm4R","description":"Configure drilldowns from dashboard widgets to detailed data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"rRjruKMndpEYqnDtxJXu","title":"Dashboard reference","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference","siteSpaceId":"sitesp_WVm4R","description":"Reference system dashboards and Command Center dashboards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"}]},{"id":"gU3X8i6TJfrLJlVRehwA","title":"Command Center reference","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference","siteSpaceId":"sitesp_WVm4R","description":"Reference dashboards available in Command Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"MT93EJ23uLliW195Ycgq","title":"Cloud Detection and Response (CDR) Command Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cloud-detection-and-response-cdr-command-center","siteSpaceId":"sitesp_WVm4R","description":"Explore the Cloud Detection and Response Command Center dashboard.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"Snd3lTxjKqnQKXg2tzeK","title":"Cortex Cloud Command Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-cloud-command-center","siteSpaceId":"sitesp_WVm4R","description":"Explore the Cortex Cloud Command Center dashboard.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"BFI9YGLnkSjJPNJAOkvc","title":"System dashboards","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards","siteSpaceId":"sitesp_WVm4R","description":"Reference dashboards provided with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"8qHjYQ2TXnkDqj2DES5m","title":"Cloud Security Operations","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cloud-security-operations","siteSpaceId":"sitesp_WVm4R","description":"Monitor cloud security operations with system dashboards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"EIJTRB3QqSIxnGFvEOS6","title":"Data Ingestion","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/data-ingestion","siteSpaceId":"sitesp_WVm4R","description":"Use Cortex XDR Data Ingestion to monitor data collection health, volume, and coverage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"ikf1E7GZ46m41n6xoQJZ","title":"Asset management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management","siteSpaceId":"sitesp_WVm4R","description":"Discover, organize, and manage assets across your Cortex XDR environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"YByzLN2VSlYM90vOLani","title":"Asset inventory overview","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-inventory-overview","siteSpaceId":"sitesp_WVm4R","description":"Learn about the core concepts, features, and lifecycle of assets within the Asset Inventory.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"JX1b6BPEyjDmR2ANhiVN","title":"All assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/all-assets","siteSpaceId":"sitesp_WVm4R","description":"Learn about the All Assets page, under Asset Inventory.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"Gt6qDG3igtUhP11Edk9E","title":"All cloud assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/all-cloud-assets","siteSpaceId":"sitesp_WVm4R","description":"Learn about the All Cloud Assets page to view and assess your cloud footprint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"3dCTkVl1qLmvrYrwpKoi","title":"Discovery Engine","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/all-cloud-assets/discovery-engine","siteSpaceId":"sitesp_WVm4R","description":"Learn how Discovery Engine identifies assets in your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"All cloud assets"}]},{"id":"OfJuPvLgLNXCNY2JaWob","title":"Asset hierarchy","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/all-cloud-assets/asset-hierarchy","siteSpaceId":"sitesp_WVm4R","description":"Understand how Cortex XDR organizes related assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"All cloud assets"}]},{"id":"FOI5iwAyvDTMx4aI9IdX","title":"Asset classes","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes","siteSpaceId":"sitesp_WVm4R","description":"Accelerating remediation: Automated fix suggestions and manual remediation guidance enable developers to resolve code weaknesses directly in the source repository without context-switching to external","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"K6pkL1z6vrmDiXHGFEtu","title":"AI assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/ai-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage AI assets in your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"q1DJvyBpOjy66KSw5Wme","title":"API assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/api-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage discovered API assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"HWWHdqDrJnOtk0bUBHoV","title":"Application assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/application-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage application assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"TKKNTCbORTHr8rhZj8Jg","title":"Code and Supply Chain Security assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/code-and-ci-cd-assets","siteSpaceId":"sitesp_WVm4R","description":"View code and supply chain security assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"UO5bd6Xu5BCSyBM9DsGB","title":"Compute assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage compute assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"KDc6nlWRE7YODxw7AJfz","title":"Container image assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets/container-image-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage container image assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"W4NGYtWNF4AmlZyIVjG3","title":"Serverless functions assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets/serverless-functions-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage serverless function assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"BBjWCc8nrG7RKd3VmygS","title":"VM images assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/compute-assets/vm-images-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage virtual machine image assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"8pp2mPfuBAYAzmhjFTP2","title":"Data assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/data-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage data assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"0BxLqt9ZMrew6eeNffw4","title":"Device assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/device-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage device assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"pjYdaGsHbsdFC7TXwMGn","title":"External Surface assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/external-surface-assets","siteSpaceId":"sitesp_WVm4R","description":"View assets discovered across your external attack surface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"Ofakh368WTUQwpUkxPkK","title":"Identity assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/identity-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage identity assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"IRU6tIO2hI30euZj9xhL","title":"Network assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/network-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage network assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"zmNpYbDaNSa7QX768j7r","title":"Security services assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/security-services-assets","siteSpaceId":"sitesp_WVm4R","description":"View and manage security service assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset classes"}]},{"id":"ktM38FkNrncExCFoITby","title":"Asset groups","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-groups","siteSpaceId":"sitesp_WVm4R","description":"Group assets based on shared attributes to address them collectively, simplify filtering, and enable strict access control boundaries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"NnkChCoypF4c1svL3Dfu","title":"Manage Risk Scores","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/manage-asset-scores","siteSpaceId":"sitesp_WVm4R","description":"View and investigate User Scores and Host Scores using the Risk Scores page to identify high-risk assets and detect compromised accounts or malicious activities.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"VaEX8lRV9FEMDyTzmjZt","title":"Asset configurations","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-configurations","siteSpaceId":"sitesp_WVm4R","description":"Configure criteria and roles used to manage assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"kRxeb0VTUIicPhxEDHeq","title":"Network configurations","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/network-configuration","siteSpaceId":"sitesp_WVm4R","description":"Configure your internal network parameters, trusted networks, and external IP ranges to help Cortex XDR identify and map your network assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset configurations"}]},{"id":"FX9PTy95uGC8rgcs7MYa","title":"Application criteria","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/application-criteria","siteSpaceId":"sitesp_WVm4R","description":"Define criteria used to identify application assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset configurations"}]},{"id":"uIYAsKAUjDK2CuyW6mrg","title":"Asset Roles","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles","siteSpaceId":"sitesp_WVm4R","description":"View asset roles and the number of assets that are associated with each role. Learn how to manage asset roles for users and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset configurations"}]},{"id":"ni8RlUPhmSPqM1ro4OdY","title":"Manage Asset Roles for Endpoints","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles/manage-asset-roles-for-endpoints","siteSpaceId":"sitesp_WVm4R","description":"Assign and manage roles for endpoint assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"mQ1jyXDbsScgoTaTM3PV","title":"Manage Asset Roles for Users","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles/manage-asset-roles-for-users","siteSpaceId":"sitesp_WVm4R","description":"Assign and manage roles for user assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"IPiTccQQSioVkunB4lWC","title":"Honey user","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-configurations/asset-roles/manage-asset-roles-for-users/honey-user","siteSpaceId":"sitesp_WVm4R","description":"Configure honey users to detect suspicious identity activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"},{"label":"Asset configurations"},{"label":"Asset Roles"},{"label":"Manage Asset Roles for Users"}]},{"id":"BZOTuiLOIk2FrI5VwxE3","title":"Vulnerability Assessment","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/vulnerability-assessment","siteSpaceId":"sitesp_WVm4R","description":"Perform a vulnerability assessment of all endpoints in your network using Cortex XDR. This includes CVE, endpoint, and application analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Asset management"}]},{"id":"IlWJfKKC3ClSLKVFZEbj","title":"Investigate and respond to cases","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases","siteSpaceId":"sitesp_WVm4R","description":"Investigate, contain, and resolve cases and issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"ZrgwQPaFp59MEUFtb2cX","title":"Overview of cases","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases","siteSpaceId":"sitesp_WVm4R","description":"Understand how cases work in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"amCRC6drG3eRdWQBYCPE","title":"What are cases?","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases/what-are-cases","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR groups related security activity into cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Overview of cases"}]},{"id":"Oo2Jfsw4FDXvrmTvSXPf","title":"Resolving cases with AI","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases/resolving-cases-with-ai","siteSpaceId":"sitesp_WVm4R","description":"Use AI capabilities to help resolve security cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Overview of cases"}]},{"id":"NxQ1QUDMX6maJ3nD8REU","title":"Case lifecycle","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases/case-lifecycle","siteSpaceId":"sitesp_WVm4R","description":"Understand each stage of a case from creation through resolution.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Overview of cases"}]},{"id":"eNxL5BlCjnIgLglVnl8e","title":"Case thresholds","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases/case-thresholds","siteSpaceId":"sitesp_WVm4R","description":"Learn how thresholds determine case creation and updates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Overview of cases"}]},{"id":"7Wom3tjcNlCnfAMYYrRa","title":"Case scope and impact","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases/case-scope-and-impact","siteSpaceId":"sitesp_WVm4R","description":"Understand how Cortex XDR calculates case scope and impact.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Overview of cases"}]},{"id":"zPTZwVx7NXapOwJ625Mo","title":"Case and issue domains","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases/case-and-issue-domains","siteSpaceId":"sitesp_WVm4R","description":"Understand the domains associated with cases and issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Overview of cases"}]},{"id":"6tMMKgmmchrUthnrG9c0","title":"Overview of case teams and roles","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/overview-of-cases/overview-of-case-teams-and-roles","siteSpaceId":"sitesp_WVm4R","description":"Learn how case teams and roles control case access.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Overview of cases"}]},{"id":"So2XpGqjbKvpIdE77fb3","title":"Case concepts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/case-concepts","siteSpaceId":"sitesp_WVm4R","description":"Learn the concepts that shape case analysis and resolution.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"9HTX1n4zOIuCVlr2l0M5","title":"Issues, findings, and events","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/case-concepts/issues-findings-and-events","siteSpaceId":"sitesp_WVm4R","description":"Understand the relationships among issues, findings, and events.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Case concepts"}]},{"id":"hZzx8bnckH9G1HDWWAB9","title":"Case grouping","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/case-concepts/case-grouping","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR groups related activity into cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Case concepts"}]},{"id":"cm6D6dhD5Eai63gvjvkJ","title":"Case scoring","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/case-concepts/case-scoring","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR calculates case scores.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Case concepts"}]},{"id":"9i28REn3BBQtaNhHUCnV","title":"Case starring","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/case-concepts/case-starring","siteSpaceId":"sitesp_WVm4R","description":"Star cases to prioritize them for investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Case concepts"}]},{"id":"ZwIcVGRD9JeURmQAIipT","title":"What is Causality?","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/case-concepts/what-is-causality","siteSpaceId":"sitesp_WVm4R","description":"Learn how Causality connects related events and alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Case concepts"}]},{"id":"shOZLT3ss7tRM4p9m5Mo","title":"Analyze and resolve cases","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases","siteSpaceId":"sitesp_WVm4R","description":"Learn how to analyze and resolve cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"xIBYOIVDR8krgbYhibXD","title":"Review all cases","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/review-all-cases","siteSpaceId":"sitesp_WVm4R","description":"Monitor and prioritize cases across your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"}]},{"id":"lzBci3oofH8tSPvirhcx","title":"Start case analysis","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/start-case-analysis","siteSpaceId":"sitesp_WVm4R","description":"Open a case and begin an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"}]},{"id":"pfXqmas4C64CPcnm1pmP","title":"Establish Case context","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/establish-case-context","siteSpaceId":"sitesp_WVm4R","description":"Establish the case context before deeper analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"}]},{"id":"37qagReR2p9BCVABF5Zx","title":"AI-generated case summaries","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/establish-case-context/ai-generated-case-summaries","siteSpaceId":"sitesp_WVm4R","description":"Review AI-generated summaries of case activity and context.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Establish Case context"}]},{"id":"PPjB0l17x2FyBijxtcMC","title":"Assess case severity and score","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/establish-case-context/assess-case-severity-and-score","siteSpaceId":"sitesp_WVm4R","description":"Assess and update a case severity and score.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Establish Case context"}]},{"id":"w2rAhmkI6FAd3igm962f","title":"Update case attributes","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/establish-case-context/update-case-attributes","siteSpaceId":"sitesp_WVm4R","description":"Update the attributes associated with a case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Establish Case context"}]},{"id":"cpZEQDQ2dxJpdGlZbxGJ","title":"Analyze case details","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details","siteSpaceId":"sitesp_WVm4R","description":"Investigate case evidence, relationships, and activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"}]},{"id":"DaKtjpGsf0C3AC7TDWb8","title":"Grouping graph","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/grouping-graph","siteSpaceId":"sitesp_WVm4R","description":"Use the grouping graph to examine related case activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"H849XxgUJK80watrBOiO","title":"Evidence","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/evidence","siteSpaceId":"sitesp_WVm4R","description":"Review evidence that supports case investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"ZCwc42rDV528MeuwxcwF","title":"Issue feed","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/issue-feed","siteSpaceId":"sitesp_WVm4R","description":"Review issues associated with a case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"wxWuZ9mHfYQ2PjNKjeR0","title":"Associated assets and artifacts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/associated-assets-and-artifacts","siteSpaceId":"sitesp_WVm4R","description":"Review assets and artifacts associated with a case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"waQduxQtdZ4fsNKBnWqN","title":"MITRE ATT&CK tactics and techniques","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/mitre-att-and-ck-tactics-and-techniques","siteSpaceId":"sitesp_WVm4R","description":"Review mapped MITRE ATT&CK tactics and techniques.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"VwfUnxrQvbBd7bLADiCu","title":"Compliance standards and controls","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/compliance-standards-and-controls","siteSpaceId":"sitesp_WVm4R","description":"Review compliance standards and controls linked to a case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"XYL4ArIDRKToEVysLEAr","title":"Case timeline","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/case-timeline","siteSpaceId":"sitesp_WVm4R","description":"Review a chronological timeline of case activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"pDlqhaeNRRIPndH1HPrL","title":"Detailed View","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/analyze-case-details/detailed-view","siteSpaceId":"sitesp_WVm4R","description":"Review detailed information about a case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"2QvKF0KYlekheGCfd2Os","title":"Resolve the case","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/resolve-the-case","siteSpaceId":"sitesp_WVm4R","description":"Remediate findings and close the case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"}]},{"id":"r44eOwuPwZkqOqslXUBm","title":"Resolution Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/resolve-the-case/resolution-center","siteSpaceId":"sitesp_WVm4R","description":"Use Resolution Center to complete case resolution tasks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"23g1bCvsd1kNHtFqHov3","title":"Collaborative notes and comments","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/resolve-the-case/collaborative-notes-and-comments","siteSpaceId":"sitesp_WVm4R","description":"Add notes and comments while resolving a case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"b70a4idQsNoty4Db7QmP","title":"How to resolve a case","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/resolve-the-case/resolve-a-case","siteSpaceId":"sitesp_WVm4R","description":"Resolve a case and document its outcome.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"sNPkzDmn6rrcjQbNwpD8","title":"Resolution reasons for cases and issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/resolve-the-case/resolution-reasons-for-cases-and-issues","siteSpaceId":"sitesp_WVm4R","description":"Select resolution reasons for cases and issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"RidqIAeAztDiMHONBG7y","title":"Monitor and track resolution times","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/resolve-the-case/monitor-and-track-resolution-times","siteSpaceId":"sitesp_WVm4R","description":"Monitor and track case and issue resolution times.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"xaDNZArlQxLciOJG5Bii","title":"Use Cortex Agentic Assistant chat in an investigation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/use-cortex-agentic-assistant-chat-in-an-investigation","siteSpaceId":"sitesp_WVm4R","description":"Use Agentic Assistant chat during an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"}]},{"id":"IuX0eZztPPoLoK855ZdH","title":"Additional case actions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/additional-case-actions","siteSpaceId":"sitesp_WVm4R","description":"Create, merge, assign, and manage cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"}]},{"id":"N478YLhCzsLnjDCiHfk1","title":"Create a case","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/additional-case-actions/create-a-case","siteSpaceId":"sitesp_WVm4R","description":"Create a case to track a security investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"QyhAjomPLRHrPvbeDGUq","title":"Merge a case","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/additional-case-actions/merge-a-case","siteSpaceId":"sitesp_WVm4R","description":"Merge related cases into a single investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"LuGqoDeo3bPwUIkIUOH9","title":"Assign a case team and restrict access","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access","siteSpaceId":"sitesp_WVm4R","description":"Assign a team and restrict access to sensitive cases.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"v0dAaa4kI9S4V5nCv7BW","title":"Playbook examples","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access/playbook-examples","siteSpaceId":"sitesp_WVm4R","description":"Review playbook examples for case teams and access controls.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"},{"label":"Assign a case team and restrict access"}]},{"id":"6J5rgnEPwn7PPRIbbYhR","title":"Unified case view","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/analyze-and-resolve-cases/additional-case-actions/unified-case-view","siteSpaceId":"sitesp_WVm4R","description":"Use the unified case view to investigate related activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"hNV0vO3K2w0rXnvwpEKB","title":"Investigate issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues","siteSpaceId":"sitesp_WVm4R","description":"Cortex XDR generates issues to bring your attention to security risks in your framework.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"yagH1BwNYXBY5gCrqhuR","title":"Overview of the Issues page","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/overview-of-the-issues-page","siteSpaceId":"sitesp_WVm4R","description":"Learn how to review and manage issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"y6vJRaYxmupqGWpqJYak","title":"Issue card","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-card","siteSpaceId":"sitesp_WVm4R","description":"Understand the information shown on an issue card.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"Zy6idjBfUenzdcmB3I2P","title":"Resolution actions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/resolution-actions","siteSpaceId":"sitesp_WVm4R","description":"Apply resolution actions to issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"gietIXUvqYvBGqc5WTX8","title":"Link or unlink issues from a case","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/link-or-unlink-issues-from-a-case","siteSpaceId":"sitesp_WVm4R","description":"Link issues to cases or remove existing links.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"A9HWd9ATrkPBHPfGVfew","title":"Run an automation on an issue","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/run-an-automation-on-an-issue","siteSpaceId":"sitesp_WVm4R","description":"Run an automation directly from an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"aL5TXpg7YnBlk9GEKUVh","title":"Use the War Room in an investigation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_WVm4R","description":"Use War Room to investigate, collaborate, and run response actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"y6aA0e7DT2f0EdUtYUvh","title":"Use the Work Plan in an investigation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_WVm4R","description":"Use Work Plan to monitor and manage issue playbook tasks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"KTaKamJgrGKtTVTOcQP9","title":"Issue deduplication","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-deduplication","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR deduplicates related issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"X6zjUOaekcpG9iatCGfz","title":"Causality view","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/causality-view","siteSpaceId":"sitesp_WVm4R","description":"Investigate issue activity through the Causality view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"hlF51sqYNUABF5KBkv56","title":"Network causality view","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/causality-view/network-causality-view","siteSpaceId":"sitesp_WVm4R","description":"Investigate network activity in the Causality view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"UVpeZYgHNrzYPIwBIULJ","title":"Cloud causality view","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/causality-view/cloud-causality-view","siteSpaceId":"sitesp_WVm4R","description":"Investigate cloud activity in the Causality view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"F8OfQDeF6YH5RFXN3JIp","title":"Cloud causality view for audit log issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/causality-view/cloud-causality-view-for-audit-log-issues","siteSpaceId":"sitesp_WVm4R","description":"Investigate cloud attacks faster with entity context directly in the Cloud causality view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"dzzgvw0YWLIHcc65SMfC","title":"Saas causality view","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/causality-view/saas-causality-view","siteSpaceId":"sitesp_WVm4R","description":"Investigate SaaS activity in the Causality view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"c5CTFDEk6UTO9p1HwMJ3","title":"Timeline","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/causality-view/timeline","siteSpaceId":"sitesp_WVm4R","description":"Review a timeline of related issue activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"sZiorPJuOguD1vFSVVh1","title":"Causality icons key","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/causality-view/causality-icons-key","siteSpaceId":"sitesp_WVm4R","description":"Reference icons used in the Causality view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"vOLKKa6sCfTZDABRN35y","title":"Issue investigation actions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions","siteSpaceId":"sitesp_WVm4R","description":"Use actions that support issue investigation and resolution.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"}]},{"id":"YvdntsXObYOwRJonRuaY","title":"Copy issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/copy-issues","siteSpaceId":"sitesp_WVm4R","description":"Copy issues for separate investigation or recordkeeping.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"kNYK43yGFU24KkbEsy8I","title":"Analyze an issue","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/analyze-an-issue","siteSpaceId":"sitesp_WVm4R","description":"Analyze issue details and related security activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"a1mvMwiOCroDit6O4nFQ","title":"Create profile exceptions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/create-profile-exceptions","siteSpaceId":"sitesp_WVm4R","description":"Create profile exceptions from an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"12fojBkK9sUnR7g33kyG","title":"Retrieve additional issue details","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/retrieve-additional-issue-details","siteSpaceId":"sitesp_WVm4R","description":"Retrieve additional details for an issue investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"6lOvSJCTwo7LiTDDbHz5","title":"Add a file path to a malware profile allow list","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/add-a-file-path-to-a-malware-profile-allow-list","siteSpaceId":"sitesp_WVm4R","description":"Add file paths to the malware profile allow list.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"IMMrLLxYAy9bhT0ShWgl","title":"Investigate contributing events","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/investigate-contributing-events","siteSpaceId":"sitesp_WVm4R","description":"Investigate events that contributed to an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"ZzeMWBLPg8UJDPVtkGgu","title":"Create a featured field","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/create-a-featured-field","siteSpaceId":"sitesp_WVm4R","description":"Create a featured field for issue analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"8A9GwqrgF2DhHQzXXWEt","title":"View generating BIOC or IOC rule","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/view-generating-bioc-or-ioc-rule","siteSpaceId":"sitesp_WVm4R","description":"View the BIOC or IOC rule that generated an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"E4pJwYJWhNCyMvyDpuav","title":"Export issue details to a file","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/export-issue-details-to-a-file","siteSpaceId":"sitesp_WVm4R","description":"Export issue details to a file for sharing or recordkeeping.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"VgunDQ5dSRhUU35zoFMd","title":"Exclude an issue","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/exclude-an-issue","siteSpaceId":"sitesp_WVm4R","description":"Exclude an issue from further detection processing.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"E9YhJMWSJO8En3u0tWyD","title":"Query case and issue data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/query-case-and-issue-data","siteSpaceId":"sitesp_WVm4R","description":"Query data associated with cases and issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"SJ4WHAPywaTUQ4he1EqK","title":"Update issue fields","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/update-issue-fields","siteSpaceId":"sitesp_WVm4R","description":"Update fields associated with an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"WnTxfTmMguASHCqSDECH","title":"Close an issue","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-issues/issue-investigation-actions/close-an-issue","siteSpaceId":"sitesp_WVm4R","description":"Close an issue after completing its investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"YDSUlK0VYv7rbkCqBJqD","title":"Review findings","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/review-findings","siteSpaceId":"sitesp_WVm4R","description":"Review findings for an asset to gain insights into an asset’s posture status.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"r283FNotEegsuwNmZS4K","title":"Findings card","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/review-findings/findings-card","siteSpaceId":"sitesp_WVm4R","description":"Understand the information displayed on a findings card.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Review findings"}]},{"id":"cULjPnagbloTXxbGnSL5","title":"Investigate artifacts and assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-artifacts-and-assets","siteSpaceId":"sitesp_WVm4R","description":"You can investigate specific artifacts and assets on dedicated views related to IP address, Network Assets, and File and Process Hash information.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"EPR1rK49nK0e7MyA2saG","title":"Investigate an IP address","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-artifacts-and-assets/investigate-an-ip-address","siteSpaceId":"sitesp_WVm4R","description":"Investigate an IP address from an issue or elsewhere in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate artifacts and assets"}]},{"id":"9BFSvBzh0haFq2CnFSSL","title":"Investigate an asset","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-artifacts-and-assets/investigate-an-asset","siteSpaceId":"sitesp_WVm4R","description":"Investigate an asset and its related activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate artifacts and assets"}]},{"id":"tW9HMcZsMZphF6YqEeZG","title":"Investigate a host","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-artifacts-and-assets/investigate-a-host","siteSpaceId":"sitesp_WVm4R","description":"Investigate host details, activity, and related security events.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate artifacts and assets"}]},{"id":"4g7ecZPKWrFSozzPH2Aj","title":"Investigate a file and process hash","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-artifacts-and-assets/investigate-a-file-and-process-hash","siteSpaceId":"sitesp_WVm4R","description":"Investigate a file or process hash and its related activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate artifacts and assets"}]},{"id":"NRrNP9hgFOYBuD9EcpMm","title":"Investigate a user","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-artifacts-and-assets/investigate-a-user","siteSpaceId":"sitesp_WVm4R","description":"Investigate a user and their related security activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate artifacts and assets"}]},{"id":"w7EOdO68JKYD877td99b","title":"Investigate endpoints","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints","siteSpaceId":"sitesp_WVm4R","description":"You can investigate and take actions on your endpoints in the Action Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"aPR0esRtYLRtLMVjiz6E","title":"Overview of the Action Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/overview-of-the-action-center","siteSpaceId":"sitesp_WVm4R","description":"Use the Action Center to monitor and manage response actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"}]},{"id":"hPBXrKFwLspcT0bS9y0T","title":"Initiate and monitor endpoint actions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/overview-of-the-action-center/initiate-and-monitor-endpoint-actions","siteSpaceId":"sitesp_WVm4R","description":"Initiate and monitor response actions on endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"LqhZWxKK6C7Mhc1rh1LP","title":"Action Center reference information","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/overview-of-the-action-center/action-center-reference-information","siteSpaceId":"sitesp_WVm4R","description":"Reference Action Center statuses, fields, and available actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"mYNNGaeeT3TNpmc0Aab1","title":"Manage endpoints","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/manage-endpoints","siteSpaceId":"sitesp_WVm4R","description":"Manage endpoints during security investigations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"}]},{"id":"mnErey3g9FmjtjjbFVix","title":"Retrieve files from an endpoint","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/retrieve-files-from-an-endpoint","siteSpaceId":"sitesp_WVm4R","description":"Retrieve a file from an endpoint for investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"}]},{"id":"0r7tU6amgftXyqapzqp3","title":"Retrieve support logs from an endpoint","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/retrieve-support-logs-from-an-endpoint","siteSpaceId":"sitesp_WVm4R","description":"Retrieve endpoint support logs for troubleshooting and analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"}]},{"id":"EHZMS5v8IzR9sgH487Wn","title":"Retrieve support file password","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/retrieve-support-file-password","siteSpaceId":"sitesp_WVm4R","description":"Retrieve the password for an endpoint support file.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"}]},{"id":"J7Wtvc1TGv86s3EAsbF7","title":"Scan an endpoint for malware","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-endpoints/scan-an-endpoint-for-malware","siteSpaceId":"sitesp_WVm4R","description":"Scan an endpoint for malware and review the results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate endpoints"}]},{"id":"DgQNb2CyVaJyF7fos36t","title":"Investigate files","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-files","siteSpaceId":"sitesp_WVm4R","description":"Investigate files and manage file-related response actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"Fs6guK1jm9uKOsp9s4bi","title":"Manage file execution","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-files/manage-file-execution","siteSpaceId":"sitesp_WVm4R","description":"Manage file execution during an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate files"}]},{"id":"l6S61CZITozufswnnmXN","title":"Manage quarantined files","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-files/manage-quarantined-files","siteSpaceId":"sitesp_WVm4R","description":"Review and manage quarantined files.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate files"}]},{"id":"rqNxJiv6JRU9y91oxbg5","title":"Review WildFire analysis details","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-files/review-wildfire-analysis-details","siteSpaceId":"sitesp_WVm4R","description":"Review WildFire analysis details for a submitted file.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate files"}]},{"id":"LNSsGsEYmIkYCByxky2H","title":"Import file hash exceptions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/investigate-files/import-file-hash-exceptions","siteSpaceId":"sitesp_WVm4R","description":"Import file hash exceptions for endpoint protection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Investigate files"}]},{"id":"d5feughEOvdsa3YYertu","title":"Automation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation","siteSpaceId":"sitesp_WVm4R","description":"Automate investigation and response workflows in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"2csPgPZhOMerIZCvVesP","title":"Quick Actions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/quick-actions","siteSpaceId":"sitesp_WVm4R","description":"Run common automation actions during an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"Etj4SxEIIl3H1XJWyvP5","title":"Automation Exclusion Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/automation-exclusion-center","siteSpaceId":"sitesp_WVm4R","description":"Review automation exclusions that protect critical assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"msQuN7x2tZm3O8JIZrr1","title":"Manage automation exclusion policies","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/manage-automation-exclusion-policies","siteSpaceId":"sitesp_WVm4R","description":"Create and manage automation exclusion policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"Y5ufdocbTkhpqQ4pSBOH","title":"Playbooks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks","siteSpaceId":"sitesp_WVm4R","description":"Build and manage playbooks for automated response workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"gzlxXAaJLYK86U4oJsun","title":"Playbooks overview","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/playbooks-overview","siteSpaceId":"sitesp_WVm4R","description":"Learn how playbooks automate security investigation and response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"TY4rjjZkwCwe6eZH4ebY","title":"Access to playbooks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/access-to-playbooks","siteSpaceId":"sitesp_WVm4R","description":"Configure access permissions for playbooks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"yBGA8uRcFYGYv4Hgbx7F","title":"Playbook development checklist","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_WVm4R","description":"Use a checklist to plan and validate playbook development.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"FzDCCLjlApFafAMQaNAX","title":"Plan your playbook","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/plan-your-playbook","siteSpaceId":"sitesp_WVm4R","description":"Plan the logic, inputs, and outcomes for a playbook.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"MvWjSBUUWdirOLif2buX","title":"Manage playbooks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/manage-playbooks","siteSpaceId":"sitesp_WVm4R","description":"Manage existing playbooks and their versions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"TLnxOdl1opn3Wo7iBSMv","title":"Build your playbook","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook","siteSpaceId":"sitesp_WVm4R","description":"Build a playbook that automates your investigation workflow.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"lQlDYbcZGaBNVOxzusMB","title":"Choose from existing playbooks or create your own","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_WVm4R","description":"Choose an existing playbook or create one for your response workflow.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"nW8X3B8Xgj7oHM2K1vky","title":"Configure playbook settings","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/configure-playbook-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure playbook settings, triggers, and inputs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"DYfV58Lsgq8MQdwOgJlq","title":"Add objects from the Task Library","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library","siteSpaceId":"sitesp_WVm4R","description":"Add tasks and objects from the Task Library.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"9xZb1ACesaOQ6roUwUFA","title":"Add commands and scripts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-commands-and-scripts","siteSpaceId":"sitesp_WVm4R","description":"Add commands and scripts to playbook tasks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"tfnQ9pz52SZkb2EJyoTv","title":"Add sub-playbooks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-sub-playbooks","siteSpaceId":"sitesp_WVm4R","description":"Add sub-playbooks to reuse automation steps within a playbook.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"deQ2u7wIWRltoQTEBICC","title":"Add AI Prompt tasks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-ai-prompt-tasks","siteSpaceId":"sitesp_WVm4R","description":"Add AI Prompt tasks to a playbook.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"SlkErcqGDCzA6sE4NJRI","title":"Add manual tasks and blank tasks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks","siteSpaceId":"sitesp_WVm4R","description":"Add manual and blank tasks to a playbook.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"eyDv9IjKP7fwqFgyzCdN","title":"Create a standard task","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-standard-task","siteSpaceId":"sitesp_WVm4R","description":"Define a Standard task in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"Xh8u49AhKWjgkffaQAFv","title":"Create a conditional task","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-conditional-task","siteSpaceId":"sitesp_WVm4R","description":"Create a Conditional task in a playbook.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"jRe6HDTanetDszeoSCjr","title":"Create a communication task","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-communication-task","siteSpaceId":"sitesp_WVm4R","description":"Communication tasks let you send surveys and collect issue data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"f0zw2vucIS6kj2hwSGeV","title":"Create a section header","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/create-a-section-header","siteSpaceId":"sitesp_WVm4R","description":"Organize playbook tasks with section headers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"08hlfIwDJ1BLmoK4EtyB","title":"Configure script error handling in a playbook","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_WVm4R","description":"Configure how a playbook handles errors from script tasks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"pM8yUopqp7HjjlQNgBrQ","title":"Customize your playbook","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook","siteSpaceId":"sitesp_WVm4R","description":"Customize playbook behavior, data, and task flow.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"YLcHcl67jkae1lzZWcnT","title":"Configure a sub-playbook loop","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_WVm4R","description":"Configure loops that run a sub-playbook for each input item.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"Xd5V2oU1OqVIGHEmw32v","title":"Filter and Transform data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_WVm4R","description":"Filter and transform data in playbook tasks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"y8PyDMNKX1ofaUDxJSZd","title":"Create custom filter and transformers","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/create-custom-filter-and-transformers","siteSpaceId":"sitesp_WVm4R","description":"Create custom filters and transformers for playbook data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"McpEe4vSJ7Sj0uHQdK5r","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_WVm4R","description":"Learn about filters and select the right built-in option.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"ohLPPkq3hOJgnO7h7jtO","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_WVm4R","description":"Learn about transformers and select the right built-in option.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"WCXDAGetL9CEQmHdJMfj","title":"Extend context","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/extend-context","siteSpaceId":"sitesp_WVm4R","description":"Add task output to the investigation context.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"vAVxI375HPgi2VogtDGE","title":"Extract Indicators","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_WVm4R","description":"Extract indicators from playbook task output.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"wTFR5ivdweK9oKgcAHpo","title":"Update issue fields with playbook tasks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/customize-your-playbook/update-issue-fields-with-playbook-tasks","siteSpaceId":"sitesp_WVm4R","description":"Update Cortex XDR issue fields with playbook task results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"SKTTUrwmPewEwYRM7XtH","title":"Test your playbook","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/test-your-playbook","siteSpaceId":"sitesp_WVm4R","description":"Set breakpoints, conditional breakpoints, skips, and input or output overrides in the playbook debugger.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"Je3INwKQokyRwkEqChU4","title":"Troubleshoot playbook performance","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/test-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_WVm4R","description":"Diagnose and improve playbook performance.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Test your playbook"}]},{"id":"j1ICuBoivA6E0dHomCJP","title":"Manage playbook content","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/build-your-playbook/manage-playbook-content","siteSpaceId":"sitesp_WVm4R","description":"Manage tasks, inputs, outputs, and content in playbooks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"GvCI7NQmU9X15TCK2Os0","title":"Best practices for playbooks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/playbooks/best-practices-for-playbooks","siteSpaceId":"sitesp_WVm4R","description":"Follow recommended practices for creating and maintaining playbooks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"PZz41vQRVsyqVcBopoSo","title":"AI Prompts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/ai-prompts","siteSpaceId":"sitesp_WVm4R","description":"Create and manage AI prompts for automation workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"3TF9ov8nOZ9yNOB653H8","title":"AI prompts role-based access control","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/ai-prompts/ai-prompts-role-based-access-control","siteSpaceId":"sitesp_WVm4R","description":"Manage AI prompt permissions with role-based access control.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"6GkOcQkxmzcnfC7WPwOS","title":"Use existing prompts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/ai-prompts/use-existing-prompts","siteSpaceId":"sitesp_WVm4R","description":"Find, duplicate, and edit prompts from the Prompts Library.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"kSxcK5nygHd8ROS68p2U","title":"Create a prompt","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/ai-prompts/create-a-prompt","siteSpaceId":"sitesp_WVm4R","description":"Create or edit prompts, configure settings, and use them in agents or playbooks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"FY81Pm7BdVKvEnJPkhtS","title":"Write effective prompts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/ai-prompts/write-effective-prompts","siteSpaceId":"sitesp_WVm4R","description":"Tips for creating effective AI prompts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"ZXe8OShW64LlNV0c0sD6","title":"Create an automation rule","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/create-an-automation-rule","siteSpaceId":"sitesp_WVm4R","description":"Learn how to create an automation rule for an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"X2YHCtp3Xuvw7N2H5Vxw","title":"Scripts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/scripts","siteSpaceId":"sitesp_WVm4R","description":"Create and manage scripts for automated workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"Pm6NOyYapm3Wvt8f0eyU","title":"Use existing scripts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/scripts/use-existing-scripts","siteSpaceId":"sitesp_WVm4R","description":"Find and use existing scripts in automation workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"Gmls0zpsCuE5gpT1AAdE","title":"Create a script","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/scripts/create-a-script","siteSpaceId":"sitesp_WVm4R","description":"Create a script for use in automation workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"zORP6VHohJhdo09cHxVG","title":"Accelerate script development using the Automation Engineer agent","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/scripts/accelerate-script-development-using-the-automation-engineer-agent","siteSpaceId":"sitesp_WVm4R","description":"Use the Automation Engineer agent to accelerate script development.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"BFaUukHbV6DeaOpDfUfQ","title":"Change the Docker image in a script","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/scripts/change-the-docker-image-in-a-script","siteSpaceId":"sitesp_WVm4R","description":"Change the Docker image used when a script runs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"PCwpBK2BXIEaOQmIMQl6","title":"Connect an engine to an image registry","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/scripts/change-the-docker-image-in-a-script/connect-an-engine-to-an-image-registry","siteSpaceId":"sitesp_WVm4R","description":"Connect an engine to an image registry for script dependencies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Scripts"},{"label":"Change the Docker image in a script"}]},{"id":"SDRtQkxMI83X6IeFPwrq","title":"Context data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data","siteSpaceId":"sitesp_WVm4R","description":"Use context data to assist with the investigation and remediation process.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"vxIjgeEgSofkROvfvChT","title":"Issue context data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data/issue-context-data","siteSpaceId":"sitesp_WVm4R","description":"View and manage context data stored for an issue.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Context data"}]},{"id":"Y4Jg6u5D6GVDSeiuWjne","title":"Case context data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data/case-context-data","siteSpaceId":"sitesp_WVm4R","description":"View and manage context data stored for a case.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Context data"}]},{"id":"7hqPD7sLFWODxJyxlBmp","title":"Search context data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data/search-context-data","siteSpaceId":"sitesp_WVm4R","description":"Search context data to support issue investigation and automation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Context data"}]},{"id":"aSCi9lC0M2d1wAbJfAIO","title":"Add context data to an issue","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data/add-context-data-to-an-issue","siteSpaceId":"sitesp_WVm4R","description":"Add context data to an issue for investigation and automation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Context data"}]},{"id":"2Tx5zvYpRAFtidKWxJqc","title":"Add context data to a case","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data/add-context-data-to-a-case","siteSpaceId":"sitesp_WVm4R","description":"Add context data to a case for investigation and automation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Context data"}]},{"id":"XeerUJ8RU3isVeFXk02T","title":"Delete context data from a case","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data/delete-context-data-from-a-case","siteSpaceId":"sitesp_WVm4R","description":"Delete context data from a case when it is no longer needed.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Context data"}]},{"id":"H87o8WqPBGHrujFEpeJr","title":"Use context data in a playbook","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/context-data/use-context-data-in-a-playbook","siteSpaceId":"sitesp_WVm4R","description":"Use context data as inputs and outputs in playbooks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Context data"}]},{"id":"I5GziHtwpePPU9IN40f3","title":"Lists","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/lists","siteSpaceId":"sitesp_WVm4R","description":"Create and manage lists for use in playbooks and scripts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"lo7uorXg4d6yk47SeX5B","title":"Create a list","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/lists/create-a-list","siteSpaceId":"sitesp_WVm4R","description":"Create a list for playbooks, scripts, and automation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Lists"}]},{"id":"ViS6AVmMY3W4YZHWCGgq","title":"List commands","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/lists/list-commands","siteSpaceId":"sitesp_WVm4R","description":"Use list commands to retrieve and update list data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Lists"}]},{"id":"om5sUXQ7ahUvrjRPubx5","title":"Use cases: JSON lists","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/lists/use-cases-json-lists","siteSpaceId":"sitesp_WVm4R","description":"Use JSON lists to store and process structured automation data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Lists"}]},{"id":"lGPcQJ70fQQUAp39lnjf","title":"Transform a list into an array","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_WVm4R","description":"Convert a list into an array for use in automation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Lists"}]},{"id":"ndl8eSDKM2VsIv7M0XvV","title":"Integrations","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/integrations","siteSpaceId":"sitesp_WVm4R","description":"Configure integrations that connect Cortex XDR to external services.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"lv5LJ5bw9Aw4m8JBrak8","title":"Add an integration instance","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/integrations/add-an-integration-instance","siteSpaceId":"sitesp_WVm4R","description":"Add and configure an integration instance.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"K42AB4vGkYreMvwYUC3X","title":"Use integration commands in the CLI","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/integrations/use-integration-commands-in-the-cli","siteSpaceId":"sitesp_WVm4R","description":"Run integration commands from the command-line interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"92k9q34Ciuj9qk15mWbn","title":"Troubleshoot integations","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/integrations/troubleshoot-integations","siteSpaceId":"sitesp_WVm4R","description":"Diagnose and resolve integration configuration and connectivity issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"NQuC3zSnRNIUl4Zjjph7","title":"Manage credentials","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/integrations/manage-credentials","siteSpaceId":"sitesp_WVm4R","description":"Create and manage credentials for integration authentication.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"uKXQHqTXVlxFZ1mFiLBN","title":"Engines","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines","siteSpaceId":"sitesp_WVm4R","description":"Install, manage, configure, and troubleshoot engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"}]},{"id":"EnZkhcEdUMFO2T7pnzVH","title":"What is an engine?","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/what-is-an-engine","siteSpaceId":"sitesp_WVm4R","description":"Learn how engines run integrations and automation tasks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"XamP4EZPanzPUE77Iupm","title":"Engine requirements","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/engine-requirements","siteSpaceId":"sitesp_WVm4R","description":"Hardware, OS, and required URLs for engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"u6YtlbXGjpYdAqJsUxUQ","title":"Install an engine","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine","siteSpaceId":"sitesp_WVm4R","description":"Install, deploy and configure Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"LAvGg0OOUopMAlXniBzF","title":"Docker","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker","siteSpaceId":"sitesp_WVm4R","description":"Install, configure, secure, and troubleshoot Docker for Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"xOV9NVrZMJDhWCNPLju0","title":"Install Docker","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_WVm4R","description":"Install Docker and verify engine user permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"DL1y0kX0wgTTwIMt3kTN","title":"Install Docker distribution for Red Hat","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/install-docker-distribution-for-red-hat","siteSpaceId":"sitesp_WVm4R","description":"Configure Docker and SELinux on Red Hat engine servers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"qzjDcoDsqtQItQevP2mA","title":"Docker image security","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_WVm4R","description":"Secure, harden, and troubleshoot Docker images and containers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"T0gP4x7fnQQuxjcVLrA8","title":"Docker FAQs","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_WVm4R","description":"Find answers to common Docker questions for engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"YqsnAxRfgx8c2TNQ8LvJ","title":"Troubleshoot Docker Issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_WVm4R","description":"Diagnose and resolve Docker issues on engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"paFMeRP7aLACxpVlMUvZ","title":"Configure Docker pull rate limit","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_WVm4R","description":"Configure Docker image pull rate limits for engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"jzKS6pduOgj1qmvZIkcP","title":"Change the Docker Installation folder","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_WVm4R","description":"Change the Docker installation directory on an engine.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"upS3m5a5pjBDnWcKBsH8","title":"Docker hardening guide","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_WVm4R","description":"Harden Docker environments used by Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"8P833iFZTM7GOT6T3l9R","title":"Docker network hardening","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_WVm4R","description":"Configure Docker network settings to improve engine security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"9fJzHaxBps8RTe4PNHia","title":"Configure Docker images","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-docker-images","siteSpaceId":"sitesp_WVm4R","description":"Configure Docker images used by Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"usPoBODa91XCaCcczilO","title":"Run Docker with non-root internal users","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_WVm4R","description":"Run Docker containers with non-root internal users.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"mqDsAt9qfKdMz131xfod","title":"Configure the memory limit support without swap capabilities","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limit-support-without-swap-capabilities","siteSpaceId":"sitesp_WVm4R","description":"Configure memory limits when swap is unavailable.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"w6zR1wxwBEEhSJthAa5O","title":"Configure the memory limitation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_WVm4R","description":"Configure memory limits for Docker containers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"umeq5Ga3ToQnZv4XYysv","title":"Configure the CPU, PIDs, and open the file descriptors limit","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-cpu-pids-and-open-the-file-descriptors-limit","siteSpaceId":"sitesp_WVm4R","description":"Configure CPU, process, and file descriptor limits for Docker containers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"6HbjN46LzvCuJda9GT4x","title":"Check Docker hardening configurations","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/docker/docker-hardening-guide/check-docker-hardening-configurations","siteSpaceId":"sitesp_WVm4R","description":"Verify that Docker hardening settings are configured correctly.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"djMObqRuP9m05jh5R5dX","title":"Podman","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/podman","siteSpaceId":"sitesp_WVm4R","description":"Install, configure, and troubleshoot Podman for Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"fgB38CY98o1MFv6BIvj3","title":"Change the Container storage","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/podman/change-the-container-storage","siteSpaceId":"sitesp_WVm4R","description":"Configure Podman container storage for an engine.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"a2MV0MKAyGl7ZqzGBxD5","title":"Install Podman","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_WVm4R","description":"Install and configure Podman for Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"etvletJMxx5OlpCMRrk0","title":"Migrate from Docker to Podman","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_WVm4R","description":"Migrate an existing engine from Docker to Podman.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"5NpAZvr7wCV7eIewgtyc","title":"Troubleshoot Podman","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_WVm4R","description":"Resolve common Podman issues on Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"zsOfdXp9fYmf3o1Ly2EV","title":"Manage engines","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/manage-engines","siteSpaceId":"sitesp_WVm4R","description":"Manage engines and load balancing groups.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"CYZADMiGzQFvn3z6Rjpn","title":"Upgrade an engine","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/upgrade-an-engine","siteSpaceId":"sitesp_WVm4R","description":"Upgrade an engine on Cortex XDR or directly on the remote machine.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"khxG3Et2R628JeBhuCfO","title":"Remove an engine","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/remove-an-engine","siteSpaceId":"sitesp_WVm4R","description":"Remove an engine by running the relevant command, depending on your operating system.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"QX69jTio9V1AcIOhXd2l","title":"Configure engines","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/configure-engines","siteSpaceId":"sitesp_WVm4R","description":"Configure Cortex XDR engines by editing the d1.conf file or modifying the configuration in the UI (for shell installations).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"PgrqjT7opv5aM4Jy9NeB","title":"Configure the engine to use a web proxy","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_WVm4R","description":"Configure an engine to connect through a web proxy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"lht1GiyMy6yKCCYxNAqf","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_WVm4R","description":"Configure an engine to connect directly without a proxy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"D0SEgK2iYUTTA90uTHjr","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/configure-engines/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_WVm4R","description":"Use NGINX as a reverse proxy for an engine.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"AX5An3mtavgbhgBysy9O","title":"Configure an engine to use custom certificates","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_WVm4R","description":"Configure custom certificates for a Cortex XDR engine.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"Tysh2q7ZM8NR2RF1XMNm","title":"Use an engine in an integration","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_WVm4R","description":"Use an engine or a load-balancing group of engines to fetch issues and run commands for an integration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"krpulyTxXDASxR3kSUsr","title":"Run a script using an engine","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_WVm4R","description":"Run a script on an engine or load-balancing group to distribute the workload and improve performance.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"JghNJsYheOA4MgRsRSKK","title":"Troubleshoot engines","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/troubleshoot-engines","siteSpaceId":"sitesp_WVm4R","description":"Troubleshoot engines by accessing logs and viewing errors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"yXVoeY5mKE36M6q3ccdk","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/automation/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_WVm4R","description":"Troubleshoot integrations that run on Cortex XDR engines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Automation"},{"label":"Engines"}]},{"id":"I4GxvbQwQuFXf7B1djKx","title":"Response actions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions","siteSpaceId":"sitesp_WVm4R","description":"During the case investigation, various response actions are available.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"GTyXmLMOefgxwVBy6UYR","title":"Initiate a Live Terminal session","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions/initiate-a-live-terminal-session","siteSpaceId":"sitesp_WVm4R","description":"Open a Live Terminal session on an endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Response actions"}]},{"id":"cAJH0RnPonWpMaJLhNKk","title":"Isolate an endpoint","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions/isolate-an-endpoint","siteSpaceId":"sitesp_WVm4R","description":"Isolate an endpoint to contain potential threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Response actions"}]},{"id":"WA7cZ6u7dDxiVwupI6Uy","title":"Pause endpoint protection","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions/pause-endpoint-protection","siteSpaceId":"sitesp_WVm4R","description":"Temporarily pause endpoint protection when required.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Response actions"}]},{"id":"ADmlxOVrkjO0OOHMmduz","title":"Remediate changes from malicious activity","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions/remediate-changes-from-malicious-activity","siteSpaceId":"sitesp_WVm4R","description":"Remediate endpoint changes caused by malicious activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Response actions"}]},{"id":"katKFynxwpfjHMXzzHmA","title":"Search and destroy malicious files","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions/search-and-destroy-malicious-files","siteSpaceId":"sitesp_WVm4R","description":"Locate and remove malicious files from endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Response actions"}]},{"id":"Fqmi13yaGkSW6PJ3hcJr","title":"Manage external dynamic lists","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions/manage-external-dynamic-lists","siteSpaceId":"sitesp_WVm4R","description":"Create and manage external dynamic lists for enforcement.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Response actions"}]},{"id":"TTlMTUPzSZfEzWBMXGEj","title":"Collect a memory image","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/response-actions/collect-a-memory-image","siteSpaceId":"sitesp_WVm4R","description":"Collect an endpoint memory image for forensic analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Response actions"}]},{"id":"YqbpC6NnB5Izwuj3gmWP","title":"Forensics","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics","siteSpaceId":"sitesp_WVm4R","description":"Collect and analyze endpoint evidence during forensic investigations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"oH7vmi1PnsFcJtP0kctj","title":"Forensic investigations","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations","siteSpaceId":"sitesp_WVm4R","description":"Start, manage, and review endpoint forensic investigations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"}]},{"id":"deSkZ1Yi05cGolQhX2c1","title":"Manage an investigation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/manage-an-investigation","siteSpaceId":"sitesp_WVm4R","description":"Manage forensic investigations and their collected evidence.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"rM4r1OwhsU63PiR4CLac","title":"Create a new investigation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/manage-an-investigation/create-a-new-investigation","siteSpaceId":"sitesp_WVm4R","description":"Create a forensic investigation, assign access, and start a data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"0SMdU9IMtczidkorgOEO","title":"Edit an investigation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/manage-an-investigation/edit-an-investigation","siteSpaceId":"sitesp_WVm4R","description":"Update an active investigation's details and user access.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"ivwj5w6PTzwZh8W5HZ4B","title":"Close an investigation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/manage-an-investigation/close-an-investigation","siteSpaceId":"sitesp_WVm4R","description":"Close an investigation and manage its 24-hour grace period.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"sK4EXZkNRddpm5rSHEvc","title":"User permissions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/manage-an-investigation/user-permissions","siteSpaceId":"sitesp_WVm4R","description":"You can assign users to the investigation for them to view and manage the investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"aSh07V4ldksXMxL5pB9U","title":"Data collection","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/data-collection","siteSpaceId":"sitesp_WVm4R","description":"Collect endpoint data for forensic investigation and analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"D7V3GONeGa09eeRejSw0","title":"Hunting","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/data-collection/hunting","siteSpaceId":"sitesp_WVm4R","description":"Hunt for evidence and suspicious activity in collected endpoint data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"UrHdKDmg9pFF2vQ9DgIx","title":"Triage","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/data-collection/triage","siteSpaceId":"sitesp_WVm4R","description":"Triage collected data to prioritize investigation findings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"KrubNH4qf0TglBkQrdMt","title":"Configure collection","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/data-collection/configure-collection","siteSpaceId":"sitesp_WVm4R","description":"Configure the endpoint data collected for forensic investigations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"7j2WiP8xqGaXerAk61vh","title":"Analysis and documentation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/analysis-and-documentation","siteSpaceId":"sitesp_WVm4R","description":"Analyze findings and document the forensic investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"iAYxDKzdIwtxVcqejW2W","title":"Review alerts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/analysis-and-documentation/review-alerts","siteSpaceId":"sitesp_WVm4R","description":"Review alerts related to the forensic investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"beJAfqssOiFvEANTM6cg","title":"Investigation timeline","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/analysis-and-documentation/investigation-timeline","siteSpaceId":"sitesp_WVm4R","description":"Review the timeline of events collected during an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"AeoJpwCzHGeDzMeVT9iO","title":"Key assets & artifacts","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/analysis-and-documentation/key-assets-and-artifacts","siteSpaceId":"sitesp_WVm4R","description":"Review key assets and artifacts identified during an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"e6JDYpST9UhgwAQBYW0m","title":"Export","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/forensics/forensic-investigations/export","siteSpaceId":"sitesp_WVm4R","description":"Export forensic investigation findings and collected evidence.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"tghksThQmb0mMAiJRGqv","title":"Build XQL queries","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"E4zbZ1Wdb1JWfGVjiSb7","title":"About the Query Builder","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_WVm4R","description":"The Query Builder facilitates threat detection, case expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"k4mNi3RRs3WtnkTnxOfd","title":"How to build XQL queries","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"xfEw8Tum8aj7rREMqR63","title":"Get started with XQL queries","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_WVm4R","description":"Get started writing and running XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"QhXHJ9b9q8t7ynCZDOB1","title":"Useful XQL user interface features","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_WVm4R","description":"Use the query builder interface to create and run XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"UhFzapoqmEqOWL8BKjqy","title":"XQL Query best practices","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_WVm4R","description":"Apply recommended practices when writing XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"srtV0rsGP46ZbTCqrQgX","title":"Expected results when querying fields","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_WVm4R","description":"Define the expected results before writing an XQL query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"9OqTVKl9xTww6GCN0gjW","title":"Create XQL query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_WVm4R","description":"Create an XQL query to search and analyze data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"Nq8bGYMNjuxURZPH0uev","title":"Review XQL query results","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_WVm4R","description":"Review and refine the results returned by an XQL query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"YpeMuKWOwtJJlQSw7dqB","title":"Translate to XQL","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_WVm4R","description":"Translate supported search queries into XQL syntax.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"O0p24oKpdjDUKIyf5e3G","title":"Graph query results","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_WVm4R","description":"Visualize XQL query results as a graph.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"Rsrr9kUsAEXewrOn6Mwy","title":"XQL query entities","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the entities in the Legacy Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"DKIFMzmgm2EFMkKl4kGt","title":"Create authentication query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-authentication-query","siteSpaceId":"sitesp_WVm4R","description":"Query authentication events with the XQL dataset.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"PEXVMLbWde9h7lVcfCQn","title":"Create event log query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-event-log-query","siteSpaceId":"sitesp_WVm4R","description":"Query Windows event log data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"PRAXiNNjQRV5DOrMI3oG","title":"Create file query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-file-query","siteSpaceId":"sitesp_WVm4R","description":"Query file activity data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"dfLOZUh3rpoqLFpOLUOA","title":"Create image load query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-image-load-query","siteSpaceId":"sitesp_WVm4R","description":"Query image load events with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"EJ9cCuRuEYoz5CEZVTSG","title":"Create network connections query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-network-connections-query","siteSpaceId":"sitesp_WVm4R","description":"Query network connection data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"QtptqXQ572UjgupPkvzy","title":"Create network query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-network-query","siteSpaceId":"sitesp_WVm4R","description":"Query network event data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"aSVTbSnLR2oBb5qUPjQg","title":"Create process query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-process-query","siteSpaceId":"sitesp_WVm4R","description":"Query process activity data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"HsCN8lTThFVYZVVh3WSw","title":"Create registry query","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/create-registry-query","siteSpaceId":"sitesp_WVm4R","description":"Query registry activity data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"ILrTHc9fC23xw5HLs1eh","title":"Query across all entities","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/legacy-query-builder/query-across-all-entities","siteSpaceId":"sitesp_WVm4R","description":"Query across multiple datasets with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"i35CRtamFPvXqBqWzcyM","title":"Overview of the Query Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_WVm4R","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"GrYugYybAPNTl0QXDUsT","title":"Edit and run queries in Query Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_WVm4R","description":"Edit, test, and run XQL queries in the query builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"0cgopYjLNDghQLIWOKdJ","title":"Query Center reference information","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/overview-of-the-query-center/query-center-reference-information","siteSpaceId":"sitesp_WVm4R","description":"Reference XQL query syntax, functions, and commands.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"pjkLgMIAsXCSKxPa9W07","title":"Manage scheduled queries","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"Z2DocbFgw3fU1rvfMWRB","title":"Scheduled Queries reference information","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_WVm4R","description":"Reference fields and settings for scheduled XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"Tqj86vmmVgnR5FRGxah1","title":"Manage your personal query library","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_WVm4R","description":"Cortex XDR provides as part of the Query Library a personal library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"VYG6KgrW4X3P9btMg9fL","title":"XQL macros","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/xql-macros","siteSpaceId":"sitesp_WVm4R","description":"Create reusable XQL logic with query macros.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"Gk9ZruDdm3F2iVYWodjH","title":"Manage your macros","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_WVm4R","description":"Create, edit, and manage XQL query macros.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"},{"label":"Build XQL queries"}]},{"id":"i7HXjzt536qtNdYh2VCT","title":"Quick Launcher","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/quick-launcher","siteSpaceId":"sitesp_WVm4R","description":"The Quick Launcher provides a quick, in-context shortcut that you can use to search for information, perform common investigation tasks, or initiate actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"TNw5F2xVkeRgb8u2xabc","title":"Research a known threat","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/investigate-and-respond-to-cases/research-a-known-threat","siteSpaceId":"sitesp_WVm4R","description":"Cortex XDR enables you to investigate any threat, also referred to as a lead, which has been detected.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Investigate and respond to cases"}]},{"id":"UjOPOknWYnZtPwSCQsHC","title":"Agentic Assistant chat","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat","siteSpaceId":"sitesp_WVm4R","description":"Chat with the Cortex Agentic Assistant using natural language prompts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"92UNe8ZrWIR5M8X1ntyI","title":"Get started with Agentic Assistant chat","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/get-started-with-agentic-assistant-chat","siteSpaceId":"sitesp_WVm4R","description":"Enable Agentic Assistant and access the chat interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"r1i37MS6FcAiQFR4jEl7","title":"Choose an Agentic Assistant agent","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/choose-an-agentic-assistant-agent","siteSpaceId":"sitesp_WVm4R","description":"Choose a system or custom agent for your chat.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"tPIBn9LClW8DfBPn3i1x","title":"Chat with an Agentic Assistant agent","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/chat-with-an-agentic-assistant-agent","siteSpaceId":"sitesp_WVm4R","description":"Tips for chatting with the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"CklMwr8HjWfg1UGof9Qm","title":"Chat with the Agentic Assistant from Slack","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/chat-with-the-agentic-assistant-from-slack","siteSpaceId":"sitesp_WVm4R","description":"Enable chatting with an Agentic Assistant agent from Slack.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"StlD8EuWSY2RD7C9R5SL","title":"Create and run XQL queries with Agentic Assistant chat","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/create-and-run-xql-queries-with-agentic-assistant-chat","siteSpaceId":"sitesp_WVm4R","description":"Use natural language in Cortex Agentic Assistant Chat to generate and run Cortex Query Language (XQL) queries in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"90HgVdcVg2oEus3JxMlN","title":"Use natural language to query and visualize your data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/use-natural-language-to-query-and-visualize-your-data","siteSpaceId":"sitesp_WVm4R","description":"Prompt Cortex Agentic Assistant agents to create graphs and charts from its findings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"3BHWC4cYOGKvtT1Duc6a","title":"Manage chat history","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/manage-chat-history","siteSpaceId":"sitesp_WVm4R","description":"Manage and navigate your past chats with the Cortex Agentic Assistant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"bTpwd23R2LFTNoS9TmnD","title":"Streamline troubleshooting and support with the Help Center agent","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"}]},{"id":"JegMX7fDa8B0XNwnSSDZ","title":"Help Center agent actions","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent/help-center-agent-actions","siteSpaceId":"sitesp_WVm4R","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Agentic Assistant chat"},{"label":"Streamline troubleshooting and support with the Help Center agent"}]},{"id":"4K8Afclw0jWfkJu5hmu2","title":"Threat management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management","siteSpaceId":"sitesp_WVm4R","description":"Detect, investigate, and respond to threats across your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"4ZR7Ee0M54KjNurvQqkA","title":"Extended Threat Intelligence","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence","siteSpaceId":"sitesp_WVm4R","description":"Research threats, investigate indicators, and apply intelligence across Cortex XDR workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"}]},{"id":"aELrVKjQ9wXHmOd0RNIT","title":"XTI Threat Intel Library","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/xti-threat-intel-library","siteSpaceId":"sitesp_WVm4R","description":"Research curated threat actors, malware families, vulnerabilities, and reports from Unit 42.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"2bNPpfVNs5wM2wG85Q2Z","title":"XTI Indicators","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/xti-indicators","siteSpaceId":"sitesp_WVm4R","description":"Investigate, manage, and enrich threat indicators, including domains, IP addresses, URLs, and file hashes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"XdO7jWiwRyX6jtTgXtFP","title":"Threat intel context in cases and issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/threat-intel-context-in-cases-and-issues","siteSpaceId":"sitesp_WVm4R","description":"Analyze indicator intelligence and Behavioral Threat Analysis (BTA) findings in cases and issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"2RARVQv3Xb5qNc0aAr8n","title":"XTI indicator rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/xti-indicator-rules","siteSpaceId":"sitesp_WVm4R","description":"Create rules that detect known threat indicators and generate issues from matching data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"TzxPgiMkHHfqO2JBRs3x","title":"Threat intel investigation through XQL","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/threat-intel-investigation-through-xql","siteSpaceId":"sitesp_WVm4R","description":"Query XTI indicators, threat objects, and their relationships using Cortex Query Language.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"mjdz0EjLKi8JqgRoSQPG","title":"Threat Intel Dashboard","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/threat-intel-dashboard","siteSpaceId":"sitesp_WVm4R","description":"Visualize threat intelligence data to monitor distribution, ingestion health, and emerging trends.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"AjS7IDTkgqgLLdWr4WyW","title":"Using XTI with Threat Intel Agent","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/using-xti-with-threat-intel-agent","siteSpaceId":"sitesp_WVm4R","description":"Use the Threat Intel Agent to list, enrich, and update XTI indicators.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"ShQNSYQd9v18PE8E6Rt1","title":"Using XTI in playbooks","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/extended-threat-intelligence/using-xti-in-playbooks","siteSpaceId":"sitesp_WVm4R","description":"Automate XTI indicator triage, enrichment, and response with supported playbook commands.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Extended Threat Intelligence"}]},{"id":"o4ofmCtUTuNGZU4RI73G","title":"Detection rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules","siteSpaceId":"sitesp_WVm4R","description":"Create and manage rules that detect suspicious activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"}]},{"id":"IaSAeecpxUN5FOFKl44D","title":"What's an IOC?","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-an-ioc","siteSpaceId":"sitesp_WVm4R","description":"Learn how indicators of compromise identify known threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"}]},{"id":"kCPTz7reU4ftA7DPb4MR","title":"IOC rule details","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-an-ioc/ioc-rule-details","siteSpaceId":"sitesp_WVm4R","description":"Review available fields and settings for IOC rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's an IOC?"}]},{"id":"zQU2yhFInmsRsDmuf5gJ","title":"Create an IOC rule","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-an-ioc/create-an-ioc-rule","siteSpaceId":"sitesp_WVm4R","description":"Create an IOC rule to detect and respond to known threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's an IOC?"}]},{"id":"hQC9tAtUwyyAWir0OP7x","title":"What's a BIOC?","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-bioc","siteSpaceId":"sitesp_WVm4R","description":"Learn how behavioral indicators of compromise detect suspicious behavior.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"}]},{"id":"zflg4aOliwPLiwBkhZOO","title":"BIOC rule details","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-bioc/bioc-rule-details","siteSpaceId":"sitesp_WVm4R","description":"Review available fields and settings for BIOC rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a BIOC?"}]},{"id":"Dbkzi8HtYplnUwb957J1","title":"Create a BIOC rule","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-bioc/create-a-bioc-rule","siteSpaceId":"sitesp_WVm4R","description":"Create a BIOC rule to detect suspicious behavior.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a BIOC?"}]},{"id":"RDfsxYqyU8HAIDxSKhf3","title":"Manage Global BIOC Rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-bioc/manage-global-bioc-rules","siteSpaceId":"sitesp_WVm4R","description":"Manage Global BIOC rules across your organization.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a BIOC?"}]},{"id":"U3UkOkcEqAn6aM28dQMy","title":"What's a correlation rule?","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-correlation-rule","siteSpaceId":"sitesp_WVm4R","description":"Learn how correlation rules connect related security events.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"}]},{"id":"BLpdXdcbP36phms36yuv","title":"Correlation rule details","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-correlation-rule/correlation-rule-details","siteSpaceId":"sitesp_WVm4R","description":"Reference correlation rule fields, settings, and behavior.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"2yEbnhGDVmTSqTEU1ujm","title":"Create a correlation rule","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-correlation-rule/create-a-correlation-rule","siteSpaceId":"sitesp_WVm4R","description":"Create a correlation rule to detect related security events.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"Hbl9EwuMRMXmYOO4ncw5","title":"Field replacement syntax in correlation rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-correlation-rule/field-replacement-syntax-in-correlation-rules","siteSpaceId":"sitesp_WVm4R","description":"Use field replacement syntax in correlation rule definitions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"6Sxhbw1OtE3GUZ3tokBg","title":"Manage correlation rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-correlation-rule/manage-correlation-rules","siteSpaceId":"sitesp_WVm4R","description":"Create, edit, and manage correlation rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"wcwnVLEGZwl05EmEDSWC","title":"Monitor correlation rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-correlation-rule/monitor-correlation-rules","siteSpaceId":"sitesp_WVm4R","description":"Monitor correlation rule execution and status.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"H2ZPfuTo0AhY43yhNS4z","title":"Troubleshoot server errors in scheduled correlation rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/whats-a-correlation-rule/troubleshoot-server-errors-in-scheduled-correlation-rules","siteSpaceId":"sitesp_WVm4R","description":"Resolve server errors in scheduled correlation rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"THIxhhxfy1JVwxIFA5wO","title":"Manage IOC and BIOC rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/detection-rules/manage-ioc-and-bioc-rules","siteSpaceId":"sitesp_WVm4R","description":"Manage IOC and BIOC rules in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Detection rules"}]},{"id":"qDVHjSo48nuQeOwXSMG1","title":"Analytics","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics","siteSpaceId":"sitesp_WVm4R","description":"Use analytics to detect threats from correlated endpoint activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"}]},{"id":"cHSNyXhTy76Iwb8dDA6H","title":"Analytics overview","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-overview","siteSpaceId":"sitesp_WVm4R","description":"Understand Cortex XDR analytics and their threat detection coverage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"54Ea5JSeAt9wq3dY5Iov","title":"Analytics engine","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-engine","siteSpaceId":"sitesp_WVm4R","description":"Learn how the analytics engine detects suspicious activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"Xa3KVyVD8th4yHXHvetA","title":"Analytics sensors","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-sensors","siteSpaceId":"sitesp_WVm4R","description":"Learn about analytics sensors and the data they analyze.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"CCiU6ykY1ilmdYVBsgaR","title":"Coverage of MITRE Attack tactics","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/coverage-of-mitre-attack-tactics","siteSpaceId":"sitesp_WVm4R","description":"Review analytics coverage aligned with the MITRE ATT&CK framework.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"PxjEfRZC16v4aemJjHwO","title":"Review MITRE ATT&CK framework coverage","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/review-mitre-att-and-ck-framework-coverage","siteSpaceId":"sitesp_WVm4R","description":"Review analytics rules mapped to MITRE ATT&CK techniques.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"suM9l7v5E4ICfh9hu9yX","title":"Analytics detection time intervals","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-detection-time-intervals","siteSpaceId":"sitesp_WVm4R","description":"Understand analytics time intervals and their effect on detection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"XPKGdaudUCF6T81uc9a1","title":"Analytics issues and Analytics BIOCs","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/analytics-issues-and-analytics-biocs","siteSpaceId":"sitesp_WVm4R","description":"Resolve analytics issues related to BIOC rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"l36RfQkKKifQQds5289w","title":"View and manage Analytics rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/view-and-manage-analytics-rules","siteSpaceId":"sitesp_WVm4R","description":"View and manage analytics rules and their detection settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"0sdeLknS0i7FBbiJ3N57","title":"AI Detection & Response in Cortex XDR","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Use AI-driven detection and response to investigate potential threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"}]},{"id":"gF9hWKyrIcFC4yusMgu8","title":"Data sources and supported services","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/data-sources-and-supported-services","siteSpaceId":"sitesp_WVm4R","description":"Configure data sources for AI-driven detection and response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"}]},{"id":"Zso4heo37GzbUnpZpv3r","title":"Collect prompt logs","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/collect-prompt-logs","siteSpaceId":"sitesp_WVm4R","description":"Collect prompt logs for AI-driven detection and response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"}]},{"id":"mWwS3k9rcXpWs4jO6n1v","title":"Prompt log collection in AWS","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/collect-prompt-logs/prompt-log-collection-in-aws","siteSpaceId":"sitesp_WVm4R","description":"Configure AWS prompt logging for AI-driven detection and response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"},{"label":"Collect prompt logs"}]},{"id":"RKXps5SPNaSY2twJfsFC","title":"Enable prompt log collection in Azure","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/collect-prompt-logs/enable-prompt-log-collection-in-azure","siteSpaceId":"sitesp_WVm4R","description":"Enable Azure data collection for AI-driven detection and response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"},{"label":"Collect prompt logs"}]},{"id":"fYExt0ktOj97WwfSowOa","title":"Configure the Azure Event Hub collection in Cortex XSIAM","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/collect-prompt-logs/enable-prompt-log-collection-in-azure/configure-the-azure-event-hub-collection-in-cortex-xsiam","siteSpaceId":"sitesp_WVm4R","description":"Configure an Azure Event Hub to collect prompt logging data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"sbQUUyFh1Magw1mb0SU0","title":"Set up prompt logging","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/collect-prompt-logs/enable-prompt-log-collection-in-azure/set-up-prompt-logging","siteSpaceId":"sitesp_WVm4R","description":"Set up prompt logging to collect AI activity data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"8SO6DOvy5yqRDa6eMJz2","title":"Log HTTP data","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/collect-prompt-logs/enable-prompt-log-collection-in-azure/log-http-data","siteSpaceId":"sitesp_WVm4R","description":"Log HTTP data for AI-driven detection and response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"h3wSxaDGeKw3D07bEvuN","title":"Configure diagnostic settings","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/threat-management/analytics/ai-detection-and-response-in-cortex-xdr/collect-prompt-logs/enable-prompt-log-collection-in-azure/configure-diagnostic-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure diagnostic settings for AI activity data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Threat management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex XDR"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"GvMkJfzpsx1YgstcIKx3","title":"Attack surface management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management","siteSpaceId":"sitesp_WVm4R","description":"Learn how to discover, monitor, and remediate external asset exposures with attack surface management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"kaSjnpGCY5SIWPFCjCUs","title":"Learn about Attack Surface Management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management","siteSpaceId":"sitesp_WVm4R","description":"Learn about Cortex XDR Attack Surface Management capabilities for finding, prioritizing, and remediating external asset exposures.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"}]},{"id":"nGG3e3Jq8Ey0H9fddnx8","title":"Network mapping","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management/network-mapping","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR discovers, attributes, and validates internet-facing assets to map your public attack surface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"},{"label":"Learn about Attack Surface Management"}]},{"id":"2ceUZNwYYoXExkvcumea","title":"Scanning","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management/scanning","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR ASM scans internet-facing assets, monitors known assets, and identifies exposed services.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"},{"label":"Learn about Attack Surface Management"}]},{"id":"wl94nMINUOXCcx7fwjgS","title":"GeoIP data collection","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/get-started-with-attack-surface-management/geoip-data-collection","siteSpaceId":"sitesp_WVm4R","description":"Use GeoIP data to validate network distribution, identify location-based compliance risks, and route remediation efforts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"},{"label":"Learn about Attack Surface Management"}]},{"id":"wN9jfIRAukD7VBif10gd","title":"Attack Surface Management detections","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections","siteSpaceId":"sitesp_WVm4R","description":"Review attack surface management detections and their details.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"}]},{"id":"ELFtQKzClXRrlBrOs5rf","title":"Attack surface rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/attack-surface-rules","siteSpaceId":"sitesp_WVm4R","description":"Create and manage attack surface management rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"aoDhtU8sqEbkqSlwwyB3","title":"Attack Surface Testing","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/attack-surface-testing","siteSpaceId":"sitesp_WVm4R","description":"Test attack surface management rules before deployment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"kzn7QuCvwnLOOE6SuQkE","title":"Externally inferred CVEs","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/externally-inferred-cves","siteSpaceId":"sitesp_WVm4R","description":"Review externally inferred CVEs affecting your attack surface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"MGnNFncW1NdUVb8E6SLm","title":"Digital Risk Protection","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/digital-risk-protection","siteSpaceId":"sitesp_WVm4R","description":"Monitor digital risk protection findings and related threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"},{"label":"Attack Surface Management detections"}]},{"id":"c5F4HWSUyuh0ZrCp4faj","title":"Attack surface assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-assets","siteSpaceId":"sitesp_WVm4R","description":"The assets discovered in an attack surface management scan are called External Surface assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"}]},{"id":"XRx2jfpfaVDKG7f0PBfu","title":"Deploy ASM and Exposure Management enrichment and remediation automation","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/deploy-asm-and-exposure-management-enrichment-and-remediation-automation","siteSpaceId":"sitesp_WVm4R","description":"Enable the Cortex Exposure Management playbooks to automate ASM and vulnerability issue enrichment and remediation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"}]},{"id":"WcXfL1DnLXyElbh6Wrwk","title":"ASM enrichment of cloud assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/asm-enrichment-of-cloud-assets","siteSpaceId":"sitesp_WVm4R","description":"ASM enrichment of cloud assets provides visibility into all the assets in your cloud infrastructure that are exposed to the internet.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"}]},{"id":"sJtIC1QSfkHh6gFKkRTF","title":"Emerging Vulnerabilities","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/emerging-vulnerabilities","siteSpaceId":"sitesp_WVm4R","description":"Identify external exposures linked to emerging vulnerabilities, zero-day exploits, and global threat events on the Emerging Vulnerabilities page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"}]},{"id":"PoCWRcEx3NPFJcfDj9zA","title":"Global Lookup","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/attack-surface-management/global-lookup","siteSpaceId":"sitesp_WVm4R","description":"Search global intelligence for indicators and related context.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Attack surface management"}]},{"id":"xsdLvOOBM1JeoU82t1m6","title":"Monitor and track compliance adherence","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence","siteSpaceId":"sitesp_WVm4R","description":"Evaluate and track asset compliance against industry standards and organizational policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"QNsEAPxEbSjZ89vGLT4R","title":"Choose compliance standards from the compliance catalog","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog","siteSpaceId":"sitesp_WVm4R","description":"Select built-in or custom compliance standards and controls from the compliance catalogs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"}]},{"id":"6xcGZvWrF84VdxjU9g0i","title":"Standards catalog","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/standards-catalog","siteSpaceId":"sitesp_WVm4R","description":"Browse available compliance standards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"DYJwS54oZzSKgB5Jv104","title":"Use a built-in or custom standard","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-standard","siteSpaceId":"sitesp_WVm4R","description":"Use built-in standards or create and edit custom standards for your organization.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"Q9Sj0Aw0zG6K3rznDUbE","title":"Use a built-in or custom control","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-control","siteSpaceId":"sitesp_WVm4R","description":"Add built-in controls or create and manage custom controls for custom standards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"4FH907yua3EJpmXxyCZJ","title":"Create a new custom detection rule","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_WVm4R","description":"Create custom detection rules to enforce compliance requirements and security best practices.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"o53UH5jwLtXpE5n4xoCJ","title":"Use an assessment profile to run compliance checks on your assets","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets","siteSpaceId":"sitesp_WVm4R","description":"Create assessment profiles to evaluate selected asset groups against compliance standards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"}]},{"id":"PRVMRVw0165EatFKxB11","title":"View and manage compliance assessments and reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Review assessment results and generate or schedule downloadable compliance reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"}]},{"id":"iwOzOYZeuXLUBHJXxgRD","title":"Review compliance assessments","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/assessments","siteSpaceId":"sitesp_WVm4R","description":"View assessment results and drill into control, rule, and asset compliance details.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"wJSu5QZZhh0taB0d4DOx","title":"Review compliance reports","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/reports","siteSpaceId":"sitesp_WVm4R","description":"View, export, and manage historical compliance assessment reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"aqNNfwGcmKeCR5vwsfwz","title":"Compliance Overview Dashboard","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-and-track-compliance-adherence/compliance-overview-dashboard","siteSpaceId":"sitesp_WVm4R","description":"Monitor organization-wide compliance scores, standards, failed controls, and asset group performance.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Monitor and track compliance adherence"}]},{"id":"yeCe6RJRgAdRF8vv7d0y","title":"Exposure management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/exposure-management","siteSpaceId":"sitesp_WVm4R","description":"Identify and prioritize security exposures across your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"709pH0kSbJHIMu2HI0px","title":"Exposure Management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/exposure-management/exposure-management","siteSpaceId":"sitesp_WVm4R","description":"Consolidate, prioritize, and remediate exposures across Palo Alto Networks and third-party data sources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Exposure management"}]},{"id":"odFMj77pMbgMf6Z74lc3","title":"Get started with Exposure Management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/exposure-management/get-started-with-exposure-management","siteSpaceId":"sitesp_WVm4R","description":"Set up Exposure Management by configuring scanners, integrations, policies, security controls, and automation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Exposure management"}]},{"id":"42WeV1xomenBdwESOoQL","title":"Ingest assets and vulnerabilities from third-party applications","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/exposure-management/ingest-assets-and-vulnerabilities-from-third-party-applications","siteSpaceId":"sitesp_WVm4R","description":"Ingest assets and vulnerabilities into Cortex Exposure Management from Palo Alto Networks sensors and third-party applications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Exposure management"}]},{"id":"kJiwVkgNSZUR68aWpLX5","title":"Security controls","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/exposure-management/security-controls","siteSpaceId":"sitesp_WVm4R","description":"Detect, create, and manage security controls to assess compensating-control effectiveness and residual risk.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Exposure management"}]},{"id":"6sp8KgBI6Cs8UOIDZMFv","title":"Cortex Network Scanner","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/exposure-management/cortex-network-scanner","siteSpaceId":"sitesp_WVm4R","description":"Use Cortex Network Scanner to identify network exposures.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Exposure management"}]},{"id":"6l40X2fx14zA37B4DmrM","title":"Exposure Management Command Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/exposure-management/exposure-management-command-center","siteSpaceId":"sitesp_WVm4R","description":"Use the Exposure Management Command Center to prioritize exposures.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Exposure management"}]},{"id":"aeA3lJ1adf6fM9wTzlPf","title":"Vulnerability management","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management","siteSpaceId":"sitesp_WVm4R","description":"Learn how to identify, prioritize, and remediate vulnerabilities across your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"hzXWopDny8kw1AmL8SjX","title":"Vulnerability management in Cortex XDR","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/vulnerability-management-in-cortex-xdr","siteSpaceId":"sitesp_WVm4R","description":"Vulnerability management helps you identify, assess, prioritize, and remediate security vulnerabilities across your entire IT infrastructure, including endpoints, code, and cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Vulnerability management"}]},{"id":"J2PuYbQu5INbfgYOK089","title":"Cortex Vulnerability Risk Score","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/cortex-vulnerability-risk-score","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex Vulnerability Risk Score prioritizes vulnerabilities using asset context and threat intelligence.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Vulnerability management"}]},{"id":"ap1BBFT1dH6GjqA7DxKZ","title":"Vulnerability policies","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/vulnerability-policies","siteSpaceId":"sitesp_WVm4R","description":"A vulnerability policy defines the action you want to take for a specific set of vulnerability findings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Vulnerability management"}]},{"id":"oZKIBTN5uFInxClGe68J","title":"Investigate and remediate vulnerabilities","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/investigate-and-remediate-vulnerabilities","siteSpaceId":"sitesp_WVm4R","description":"Learn how to investigate vulnerability issues, findings, and affected assets, then track remediation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Vulnerability management"}]},{"id":"zEV7vykjIEEBOCYmi7TU","title":"Vulnerability Intelligence","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/vulnerability-intelligence","siteSpaceId":"sitesp_WVm4R","description":"Vulnerability Intelligence is an in-product, real-time feed that provides vulnerability data and threat intelligence from a variety of certified upstream sources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Vulnerability management"}]},{"id":"VQGgS2vJFlGcXCJniYni","title":"Recast CVSS scores and CVSS severities","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/recast-cvss-scores-and-cvss-severities","siteSpaceId":"sitesp_WVm4R","description":"Customize CVSS scores and CVSS severities in the platform to align your risk management approach with your organizational context and priorities.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Vulnerability management"}]},{"id":"SpWYpDjfQgAVouTAGC6m","title":"Cortex Advanced Email Security","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security","siteSpaceId":"sitesp_WVm4R","description":"Configure, monitor, and respond to email security threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"l63EdKILIlfBJr7ag7Bj","title":"Cortex Advanced Email Security module overview","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-module-overview","siteSpaceId":"sitesp_WVm4R","description":"Learn how to onboard, configure, and operate the Email Security module.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"qAQxhe8cVO7CnjOqnpkk","title":"Cortex Advanced Email Security module architecture and data flow","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-module-architecture-and-data-flow","siteSpaceId":"sitesp_WVm4R","description":"The Cortex Advanced Email Security module, a cloud-native system, integrates multiple components to ingest, analyze, and respond to email-borne threats effectively.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"M5kEAdqAH1TEuiokkinb","title":"Getting started with the Cortex Advanced Email Security module","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/getting-started-with-the-cortex-advanced-email-security-module","siteSpaceId":"sitesp_WVm4R","description":"High level deployment workflow","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"450l3YwFF0JKYCkwrWLu","title":"Deploy and configure the Email Security module","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/deploy-and-configure-the-email-security-module","siteSpaceId":"sitesp_WVm4R","description":"Configure the Microsoft O365 integration and the module.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"sFEMHOADy93vw4CqVc6l","title":"Cortex Advanced Email Security threat detection and issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-threat-detection-and-issues","siteSpaceId":"sitesp_WVm4R","description":"The Cortex Advanced Email Security module uses artifact-based, metadata-driven, and LLM-powered engines to generate detections and insights.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"YX5SoxX3aLjSiIhYtmAY","title":"Email Security Analytics Rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/cortex-advanced-email-security-threat-detection-and-issues/email-security-analytics-rules","siteSpaceId":"sitesp_WVm4R","description":"Manage analytics rules for Email Security detections.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"},{"label":"Cortex Advanced Email Security threat detection and issues"}]},{"id":"7brIMJrKfPqcirrIMKR7","title":"Investigate and respond to email security issues","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/investigate-and-respond-to-email-security-issues","siteSpaceId":"sitesp_WVm4R","description":"Investigate the issues generated by the Cortex Advanced Email Security module.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"ixYgY9no2zgrhjyjMRfo","title":"Automate remediation for the Cortex Advanced Email Security module","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/automate-remediation-for-the-cortex-advanced-email-security-module","siteSpaceId":"sitesp_WVm4R","description":"Automated response actions through the Cortex Advanced Email Security module improve efficiency and reduce noise.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"UkiBe1j6haxDQXIWsSGH","title":"Email Remediation Response Rules","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/automate-remediation-for-the-cortex-advanced-email-security-module/email-remediation-response-rules","siteSpaceId":"sitesp_WVm4R","description":"Manage Email Security response rules for remediation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"},{"label":"Automate remediation for the Cortex Advanced Email Security module"}]},{"id":"1etYI5yjHX4wXNK7folC","title":"Email Security Remediation Action Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/automate-remediation-for-the-cortex-advanced-email-security-module/email-security-remediation-action-center","siteSpaceId":"sitesp_WVm4R","description":"Use the Email Security Remediation Action Center to manage actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"},{"label":"Automate remediation for the Cortex Advanced Email Security module"}]},{"id":"qjnhxP6bfhOTV7hM580M","title":"Email Command Center","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/email-command-center","siteSpaceId":"sitesp_WVm4R","description":"View a dynamic overview of your email security status in the Email Command Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"AC5ItvMNSRpEvrKhQ85p","title":"Malicious Email Inventory","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/malicious-email-inventory","siteSpaceId":"sitesp_WVm4R","description":"Triage, analyze, and act on malicious email threats","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"bh0HC3ap1dhA4jYhvkc9","title":"Mailbox Inventory","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/mailbox-inventory","siteSpaceId":"sitesp_WVm4R","description":"View and manage your active email security assets","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"DDrWnm5GtpYwxoa868xP","title":"Advanced Email Security module security and compliance","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/cortex-advanced-email-security/advanced-email-security-module-security-and-compliance","siteSpaceId":"sitesp_WVm4R","description":"Configure security and compliance for the Advanced Email Security module.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Cortex Advanced Email Security"}]},{"id":"H2qPP5dOMVnpIsY1J2v9","title":"Identity Threat Detection and Response (ITDR)","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr","siteSpaceId":"sitesp_WVm4R","description":"Detect, investigate, and respond to identity-based threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"}]},{"id":"DYzWejBScdVTAnPU7GOt","title":"Get started with ITDR","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/get-started-with-itdr","siteSpaceId":"sitesp_WVm4R","description":"Get started with Identity Threat Detection and Response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"ocdypuBrWkFZLstz2nAc","title":"Manage role based access control (RBAC) in ITDR","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/manage-role-based-access-control-rbac-in-itdr","siteSpaceId":"sitesp_WVm4R","description":"Configure ITDR permissions with role-based access control.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"c3C9j5kZZq0eo1wRLR3q","title":"Monitor user risk exposure","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/monitor-user-risk-exposure","siteSpaceId":"sitesp_WVm4R","description":"Monitor user risk and prioritize potential threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"jItyZ3CGoGXW48zsOMTJ","title":"Investigate user risk","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/investigate-user-risk","siteSpaceId":"sitesp_WVm4R","description":"Investigate user risks and related security activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"5IxxHyFSG2LfDbfXiBae","title":"Manage user asset roles","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/asset-roles","siteSpaceId":"sitesp_WVm4R","description":"Manage roles assigned to user assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"lr1Lkh1NtOnmk0DQnJ3M","title":"Improve Active Directory posture with AD-SPM","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/active-directory-security-posture-management","siteSpaceId":"sitesp_WVm4R","description":"Improve Active Directory security posture with AD-SPM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"EgKsqPhgfokiGNp2hRrf","title":"Enforce dynamic access control with CAP","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/conditional-access-policy","siteSpaceId":"sitesp_WVm4R","description":"Enforce risk-based access control with Conditional Access Policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"BjMxkKTi2uzBG6RYrsFN","title":"Prevent malicious LDAP queries","pathname":"/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/identity-threat-module-itdr/prevent-malicious-ldap-queries","siteSpaceId":"sitesp_WVm4R","description":"Prevent malicious LDAP queries that target identity infrastructure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Detect, investigate, and respond to threats","icon":"radar"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"U5yQBCAEmPizAmFAArVV","title":"Cortex XDR XQL","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql","siteSpaceId":"sitesp_WVm4R","description":"Explore XQL language documentation, query guidance, and reference material.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"RpvRUIDv5AivxOvZYeaa","title":"Get started with XQL","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql","siteSpaceId":"sitesp_WVm4R","description":"XQL is the Palo Alto Networks Cortex Query Language used in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"}]},{"id":"IUjad86NA6cyHB44y0GD","title":"XQL language features","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/xql-language-features","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the Cortex Query Language features to query for raw network and endpoint data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"1w9U0VUciWs8TLXFqnct","title":"XQL Language Structure","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/xql-language-structure","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the Cortex Query Language structure when creating a query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"sjxlEiqxcNFFxSV5fZD8","title":"Supported operators","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/supported-operators","siteSpaceId":"sitesp_WVm4R","description":"Cortex Query Language supports specific comparison, boolean, and set operators in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"P19ttu62TqllrA0LTjX8","title":"Datasets and presets","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/datasets-and-presets","siteSpaceId":"sitesp_WVm4R","description":"The Cortex Query Language supports built-in datasets, custom datasets, and presets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"yIAVOXDyABYSs4GB4cE2","title":"About examples","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/about-examples","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the Cortex Query Language (XQL) examples provided.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"W7VP4vWY8cZgdLoVTQPk","title":"JSON functions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/json-functions","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how Cortex XDR treats JSON functions in the Cortex Query Language.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"QasCowTwBG5Uh81Kwkku","title":"How to filter for empty values in the results table","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/how-to-filter-for-empty-values-in-the-results-table","siteSpaceId":"sitesp_WVm4R","description":"Learn how to filter for empty values in the results table in Cortex Query Language.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"LcIYt7Sk6cKxyqt7I7Iy","title":"Understanding string manipulation in XQL","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/get-started-with-xql/understanding-string-manipulation-in-xql","siteSpaceId":"sitesp_WVm4R","description":"Learn more about string manipulation in Cortex Query Language (XQL) using double and triple quotes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"sTQDB2psSkB3dI3Te79O","title":"Build XQL queries","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"}]},{"id":"XzO4cmT8EmV8pphdwCOL","title":"About the Query Builder","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_WVm4R","description":"The Query Builder facilitates threat detection, case expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"6f003XJCTOGy7Y5IY3Sj","title":"How to build XQL queries","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"NDEKrOlIjAdVOhVfV0Da","title":"Get started with XQL queries","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_WVm4R","description":"Get started writing and running XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"utIC1pTHVz7E7mNbHOnH","title":"Useful XQL user interface features","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_WVm4R","description":"Use Query Builder features to create and run XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"QHU9OXJJhAGE9r5p7p39","title":"XQL Query best practices","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_WVm4R","description":"Apply recommended practices when writing XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"jfVJGs6QAwwwDnIwMPhT","title":"Expected results when querying fields","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_WVm4R","description":"Define expected results before writing an XQL query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"6ldLZzssvQVt5c5hVkbM","title":"Create XQL query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_WVm4R","description":"Create an XQL query to search and analyze data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"PNhHSyQLAA8GYGuYyACq","title":"Review XQL query results","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_WVm4R","description":"Review and refine the results returned by an XQL query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"X6yQ5jEI5DuW2fLYctnq","title":"Translate to XQL","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_WVm4R","description":"Translate supported search queries into XQL syntax.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"z0iCJLPHwIXYJ9Jk44fC","title":"Graph query results","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_WVm4R","description":"Visualize XQL query results as a graph.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"ys0pX6UsmHuoND9IyuKw","title":"XQL query entities","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the entities in the Legacy Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"F2k8oI9YaREq6Plbvq8f","title":"Create authentication query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-authentication-query","siteSpaceId":"sitesp_WVm4R","description":"Query authentication events with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"1DrXFyxmCFAqf6iYJEQ4","title":"Create event log query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-event-log-query","siteSpaceId":"sitesp_WVm4R","description":"Query Windows event log data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"EjoHpGYOazDSgViewWJQ","title":"Create file query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-file-query","siteSpaceId":"sitesp_WVm4R","description":"Query file activity data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"5Y0kWchrbwCoMffll07F","title":"Create image load query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-image-load-query","siteSpaceId":"sitesp_WVm4R","description":"Query image load events with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"6QsC0o8y3dMfdbAxTdnX","title":"Create network connections query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-network-connections-query","siteSpaceId":"sitesp_WVm4R","description":"Query network connection data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"I0kwc0OQq01g4i91bYqR","title":"Create network query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-network-query","siteSpaceId":"sitesp_WVm4R","description":"Query network event data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"QcDn330GcBtmNFusQEkN","title":"Create process query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-process-query","siteSpaceId":"sitesp_WVm4R","description":"Query process activity data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"cItxV6rw2jKETTemyoq6","title":"Create registry query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/create-registry-query","siteSpaceId":"sitesp_WVm4R","description":"Query registry activity data with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"FOBYqTkASSgFHRpWapAy","title":"Query across all entities","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/legacy-query-builder/query-across-all-entities","siteSpaceId":"sitesp_WVm4R","description":"Query across multiple datasets with XQL.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"CAQ9j5TslpNGlmq3ex1m","title":"Overview of the Query Center","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_WVm4R","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"hchWoQeBRYjmvncgtgWI","title":"Edit and run queries in Query Center","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_WVm4R","description":"Edit, test, and run XQL queries in Query Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"LD6OihlqBp6NUjTGb0Hx","title":"Query Center reference information","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/overview-of-the-query-center/query-center-reference-information","siteSpaceId":"sitesp_WVm4R","description":"Reference XQL query syntax, functions, and commands.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"2OZ8oogQfk3noPaPuiZc","title":"Manage scheduled queries","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"Zkw6MKUv66bk5jNhVDjt","title":"Scheduled Queries reference information","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_WVm4R","description":"Reference fields and settings for scheduled XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"yXpFPuP9mfKVASFmHkek","title":"Manage your personal query library","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_WVm4R","description":"Cortex XDR provides as part of the Query Library a personal library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"bwaLs4kdYNHjV66h8UuU","title":"XQL macros","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/xql-macros","siteSpaceId":"sitesp_WVm4R","description":"Create reusable XQL logic with query macros.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"3PXS2QRVSZGXJIl4EwWl","title":"Manage your macros","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_WVm4R","description":"Create, edit, and manage XQL query macros.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"E2ZKAkPsfSjqRwBWHpei","title":"Cortex XQL syntax, parameters, and examples","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-xql/cortex-xql-syntax-parameters-and-examples","siteSpaceId":"sitesp_WVm4R","description":"Comprehensive syntax rules and structural requirements for XQL queries","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Cortex XDR XQL"}]},{"id":"VsZZHlyO0xwXx0MvAxCu","title":"Graph Search","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search","siteSpaceId":"sitesp_WVm4R","description":"Learn more about Graph Search in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"9Lk2lIdnF0zS7ALBkCfh","title":"What is Graph Search?","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/what-is-graph-search","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how to use Graph Search to search assets, findings, and their contextual data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"eHxQ6plwo2ej8OOirEjx","title":"Get started with Graph Search queries","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/get-started-with-graph-search-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn more about how to get started before building a Graph Search query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"xMCsk2SedoEyT5d5na5i","title":"How to build Graph Search queries?","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/how-to-build-graph-search-queries","siteSpaceId":"sitesp_WVm4R","description":"Learn more about building Graph Search queries using the built-in query interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"sxwk0hqQq6OOgVJYNFyT","title":"Understand Graph Search query results","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/understand-graph-search-query-results","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the Graph Search query results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"RhHyLOI2oInaUlnwL9s0","title":"Create Graph Search query","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/create-graph-search-query","siteSpaceId":"sitesp_WVm4R","description":"Learn how to create Graph Search queries in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"Qtr0Vme6FU2npk3MWey6","title":"Graph Search examples","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/graph-search-examples","siteSpaceId":"sitesp_WVm4R","description":"Learn how to build Graph Search queries by working through a few examples.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"B9MtT4g8eRMFAAptbsXC","title":"Manage the Graph Search Query Library","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/manage-the-graph-search-query-library","siteSpaceId":"sitesp_WVm4R","description":"Learn more about the Cortex XDR Graph Search Query Library to manage your queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"gIZBD6ArZ9jr90XuXoT0","title":"Edit and run queries in Query Center","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_WVm4R","description":"Learn more about viewing the results of a query, modifying a query, and rerunning queries from Query Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"oX68vixPcCFbr4mywNOS","title":"Supported assets and findings","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/supported-assets-and-findings","siteSpaceId":"sitesp_WVm4R","description":"Review assets and findings supported by Graph Search.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"2KpMxlt4RTpGpnTdHvXt","title":"FAQ on Graph Search","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/faq-on-graph-search","siteSpaceId":"sitesp_WVm4R","description":"Answer some frequently asked questions relating to Graph Search.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"fv8Cwb0EWIaM8lj2fFlP","title":"Create detection rules based on graph search","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/graph-search/create-detection-rules-based-on-graph-search","siteSpaceId":"sitesp_WVm4R","description":"Create detection rules from Graph Search query results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Graph Search"}]},{"id":"Egj6qf33qxbKJhrzf8x5","title":"Cortex XDR API Reference","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-xdr-api-reference","siteSpaceId":"sitesp_WVm4R","description":"Reference Cortex XDR API endpoints, requests, and responses.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"EBMh8c7UDX9ZQw4EnDBt","title":"Role-Based Access Control","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control","siteSpaceId":"sitesp_WVm4R","description":"Learn how to limit role permissions in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"1HTzDovV2NWCk4H4s5lC","title":"Role permissions by component","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/role-permissions-by-component","siteSpaceId":"sitesp_WVm4R","description":"Learn how to manage role permissions in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"He7hrrxSyjEShzFDn3ms","title":"Core tenant and administrative permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/core-tenant-and-administrative-permissions","siteSpaceId":"sitesp_WVm4R","description":"Review permissions for core tenant administration and management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"52YASIGAvxqfJ577ZTdJ","title":"Configuration permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Cortex XDR configuration features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"Jw9qq6yqlTvoYf5IChRM","title":"Auditing permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/auditing-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for auditing features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"DLPPajYHFcWexKatOIcN","title":"Alert Notifications permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/alert-notifications-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for alert notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"JrvysxV6tkiBRVsvKeXr","title":"General Configuration permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/general-configuration-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for general Cortex XDR settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"pYmyW7dlUsoQoRAxh5eW","title":"Cortex XDR Analytics permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/cortex-xdr-analytics-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Cortex XDR Analytics.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"OEekXWRgawUtkEtFBIg6","title":"Access management permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/access-management-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for user access and role management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"dafjqYSgFBkoAxoRLug2","title":"Data Broker permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/data-broker-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Data Broker management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"qBTbpFvo2L0SAkQn51qH","title":"Log Collection permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/log-collection-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for log collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"ZKaQkLhbkBPLKwSPEtW8","title":"Data Sources permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/data-sources-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for data source management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"STKuwJNQs2aNAVHHdkiY","title":"External Issues Mapping permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/external-issues-mapping-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for external issue mappings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"rJdbdQ7a2px9qkCOfytr","title":"Integrations - instance permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/integrations-instance-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for integration instances.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"9oKZpMXjUQNkgNLgMXQB","title":"Integrations Permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/integrations-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"dVwI7ZkYf2Z7v0YuAIb7","title":"Data Management permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/data-management-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for data management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"LnZ596CLFhT7Dlsp8NOG","title":"Public API","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/public-api","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for the Cortex XDR public API.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"mgXzrnUR9hOKWOYddqVO","title":"Threat Intelligence permission - API configuration","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/threat-intelligence-permission-api-configuration","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Threat Intelligence API settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"HS2jnXQTvhIKFje93lLO","title":"Long-running HTTP Integrations configuration","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/long-running-http-integrations-configuration","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for long-running HTTP integrations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"MPLUR07vVQUdnO3ZGvo2","title":"Credentials permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/credentials-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for credentials.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"WUBFeltAx1tjBQ3MSNZw","title":"Object Setup permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for object setup features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"}]},{"id":"mfR1A8R02YChAu1G54Uf","title":"Case Properties permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/case-properties-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for case properties.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"wxFtj79Zn4wznZcESIPk","title":"Exclusion List permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/exclusion-list-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for exclusion lists.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"Lckf8wVzoVCJdhnaY8Eh","title":"Fields and Types permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/fields-and-types-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for fields and types.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"Txj8vXrQnCxh7gHGPgID","title":"Sync Profile permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/configuration-permissions/object-setup-permissions/sync-profile-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for sync profiles.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Configuration permissions"},{"label":"Object Setup permissions"}]},{"id":"QpeDzTEWV3h2zcIugylD","title":"Marketplace permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/marketplace-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure Marketplace permissions for RBAC.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"O4baBabPaQtCL1uEX8yq","title":"Help permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/help-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Help features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"nrxflvm3L83QjRXmZcgS","title":"SOC Operations, Investigation & Response permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/soc-operations-investigation-and-response-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for SOC operations, investigation, and response.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"rwKEoBm6CVDchCIKWM9x","title":"Dashboards and Reports permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions","siteSpaceId":"sitesp_WVm4R","description":"Set permissions for dashboards and reports in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"cxkEsxppXs4XAkqFZPoK","title":"Dashboards permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/dashboards-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for dashboards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"7QtYxYsbKWPFTshhH2jx","title":"Command Center Dashboard permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/command-center-dashboard-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Command Center dashboards.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"PceGxoq8EZRfmXfg1Lzz","title":"Ingestion Monitoring dashboard permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/ingestion-monitoring-dashboard-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for the Ingestion Monitoring dashboard.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"PUXXVEtJB5RKexLzB3Xd","title":"Reports permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/reports-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"2wUtppkLQUmkVy8u0ROq","title":"Email Command Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/email-command-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Email Command Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"BzkKAA60UeqZH7FvaYif","title":"Cloud Security Command Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/dashboards-and-reports-permissions/cloud-security-command-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Cloud Security Command Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Dashboards and Reports permissions"}]},{"id":"vkhLHWdYiFLJie1HSzXg","title":"Cases and Issues permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cases-and-issues-permissions","siteSpaceId":"sitesp_WVm4R","description":"Set up Cases and Issues permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"wESRpVEApHvGzbnClYtj","title":"Investigation and Response permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure investigation and response permissions, which include search, response, and automation permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"csVSFxq48Hesz9DsEwGx","title":"Search permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for search features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"Gh1KUlKOLO5IX97XVAhr","title":"Query Library permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/query-library-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Query Library.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"5Fyo1zxYMS6j3HnsYfjS","title":"Query Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/query-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Query Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"wyIf266ro4MpciqVh8ig","title":"Forensics permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/forensics-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for forensics.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"UyXoFArqdi7LqNWqej3Q","title":"Host Insights permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/host-insights-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Host Insights.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"NelBBESF36x5jonnAqz6","title":"Graph Search permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions/graph-search-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Graph Search.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"n25foQJOYStCM0TJoSCp","title":"Response permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for response actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"bq3ZdQ3ccz0vGY3jKmMR","title":"Action Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/action-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Action Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"osOWaeUQFBB6XACwg4bO","title":"EDL permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/edl-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for external dynamic lists.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"sSSZ8JfIsGMpUCdAq0MH","title":"Agent Scripts Library permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/agent-scripts-library-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Agent Scripts Library.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"SxzfbI84CTx4mXF99l34","title":"Live Terminal permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/live-terminal-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Live Terminal.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"OWzqPrlPJaqPjLTsN26r","title":"Automation Rules","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions/automation-rules","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for automation rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"vkmCeSdY9UaA64W9fQtK","title":"Automation permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for automation features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"V1TiKsRgvzQfkWc7nswF","title":"Playbook permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/playbook-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for playbooks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"eKfV3KL2WJlnoRZoWFGk","title":"Script permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/script-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for scripts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"HNtGsCaibVMpq1fANLd7","title":"Playground permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/playground-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Playground.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"Q3YosIRiPpvFsmdelZu7","title":"Automation Exclusion Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions/automation-exclusion-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Automation Exclusion Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"dDNF6xx17I5TMkJEw9ty","title":"Search permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions-1","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for search features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"XXlfZkfO9WkeBMbUpvlJ","title":"Query Library permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions-1/query-library-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Query Library.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"UmFZ2jyfJk7qapr3liZr","title":"Query Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions-1/query-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Query Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"oiU8VvfixigQSM9mxkEc","title":"Forensics permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions-1/forensics-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for forensics.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"xDQLJCL0BiF5UmpyNxc2","title":"Host Insights permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions-1/host-insights-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Host Insights.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"29KBkkh8ZrAugF1CVNbN","title":"Graph Search permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/search-permissions-1/graph-search-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Graph Search.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Search permissions"}]},{"id":"l5ltxLZj4bbvvfh8lJhF","title":"Response permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions-1","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for response actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"TT6ERbjr4HyCtHYsQhCN","title":"Action Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions-1/action-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Action Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"qmtTaWWGuLrjmULYVfIl","title":"EDL permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions-1/edl-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for external dynamic lists.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"VTSIanoNPjuQog9gj7JP","title":"Agent Scripts Library permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions-1/agent-scripts-library-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Agent Scripts Library.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"EwyiB1pPgrhLMFhtMZZP","title":"Live Terminal permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/response-permissions-1/live-terminal-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Live Terminal.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Response permissions"}]},{"id":"z7OLzPX29tJIA3OHt95v","title":"Automation permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions-1","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for automation features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"}]},{"id":"aPh40pAl5fq0gQTbtyq2","title":"Playbook permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions-1/playbook-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for playbooks.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"OoU7nKH15bi897oo9l0c","title":"Script permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions-1/script-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for scripts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"EvJmuNu9uXuu5rrZmjqz","title":"Playground permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions-1/playground-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Playground.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"qh2jCOreX3z1MPw8AwjI","title":"Automation Exclusion Center permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/investigation-and-response-permissions/automation-permissions-1/automation-exclusion-center-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Automation Exclusion Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Investigation and Response permissions"},{"label":"Automation permissions"}]},{"id":"2ko1A2xAa3zylnxx68b9","title":"Threat Management permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/threat-management-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure Detection Rules and Threat Intel permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"QyWjKvcMX4Rk22v1JwDH","title":"Detection Rules permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/threat-management-permissions/detection-rules-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure Detection Rules permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Threat Management permissions"}]},{"id":"VsfjZ4WqHIWHllGJ5cSt","title":"Threat Intelligence permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/threat-management-permissions/threat-intelligence-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Threat Intelligence.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Threat Management permissions"}]},{"id":"9jc6Q7KMdXgnJtuzfV6k","title":"Exceptions Configuration permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure issue exclusion permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"Jy6plilIxVkFFfmo6AmM","title":"Issue Exclusions permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/issue-exclusions-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure Issue Exclusions permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exceptions Configuration permissions"}]},{"id":"gzn2pQut5b7I9sijL6Cl","title":"Exception Management Admin permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/exception-management-admin-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure Exception Management Admin permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exceptions Configuration permissions"}]},{"id":"8afq5PnYhlq6mJBAh4Yt","title":"Exception Approver Admin permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/exception-approver-admin-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure Exception Approver Admin permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Exceptions Configuration permissions"}]},{"id":"LDWbvOeU4iAAaGaZdz7K","title":"Cortex Agentic Assistant permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cortex-agentic-assistant-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure the Cortex Agentic Assistant permissions, which include AI Prompts and Agent permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"7SFU50MjAuSY9NAobBdI","title":"AI Prompts","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cortex-agentic-assistant-permissions/ai-prompts","siteSpaceId":"sitesp_WVm4R","description":"Configure AI Prompts permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cortex Agentic Assistant permissions"}]},{"id":"0dbtPaYF5ovS3Zg9qiax","title":"Cortex Agentic Assistant Agents","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cortex-agentic-assistant-permissions/cortex-agentic-assistant-agents","siteSpaceId":"sitesp_WVm4R","description":"Configure Cortex Agentic Assistant Agents permissions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cortex Agentic Assistant permissions"}]},{"id":"wmehLB1VqDps6iFDvDT4","title":"Agents and endpoint protection","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/agents-and-endpoint-protection","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for agents and endpoint protection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"6T6u4Q6ecx0ThV0FDoMB","title":"Inventory - Agent permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Endpoints (XDR Agent).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"TWAr38SDx0ExcOc8NznS","title":"Agent Administrations","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-administrations","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for agent administration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"n2qRmwMhZnyu5nqnkyPa","title":"Agent Groups","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-groups","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for agent groups.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"XoB21lpbWHtOdlUSKjLo","title":"Agent Prevention Policies","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-prevention-policies","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for agent prevention policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"XsfCasO7qwcnVGfar7Yp","title":"Global Exceptions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/global-exceptions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for global exceptions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"yN1dChkDZtLvFw7QpJEr","title":"Agent Profiles","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-profiles","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for agent profiles.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"POI4TezPpkXC56YldBMX","title":"Agent Extension Policies","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-extension-policies","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for agent extension policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"LCRgxOHQLHSV7usjWWRz","title":"Agent Installations","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/agent-installations","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for agent installation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"FpkwJ70WTnprw4feWDMP","title":"Host Firewall","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/host-firewall","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for host firewall.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"bT20KV54HuV8uz5jzxc7","title":"Device Control","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-agent-permissions/device-control","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for device control.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Agent permissions"}]},{"id":"7y8Xvzzkfd8JUk9CDNzV","title":"Data Security - Endpoint DLP permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Endpoint DLP features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"N5hx8yP1AuHK2JSPzepV","title":"Data-in-Motion Rules","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/data-in-motion-rules","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for data-in-motion rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"e1V3YCxpcAaZcydFmiKk","title":"Endpoint Applications","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/endpoint-applications","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for endpoint applications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"3ZV2WfEFEYW7SkBinZ7n","title":"Endpoint Applications Groups","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/endpoint-applications-groups","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for endpoint application groups.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"Y7ghMpRO9ZQDfX3GRyA2","title":"Endpoint DLP Settings","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/data-security-endpoint-dlp-permissions/endpoint-dlp-settings","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Endpoint DLP settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Data Security - Endpoint DLP permissions"}]},{"id":"HC2r6Cxj6V98j5tyWZ2y","title":"Inventory - Assets permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions","siteSpaceId":"sitesp_WVm4R","description":"Consider adding inventory permissions for Assets and Agents (Endpoints).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"neYL2gmYcI60hyc7IkwZ","title":"Network Configuration permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/network-configuration-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for network configuration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"ORfwqKgnFQchQuk5fzDG","title":"Compliance (Legacy) permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/compliance-legacy-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for legacy compliance features.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"B6KeMQOOUqwHnjI7Reh0","title":"Asset Inventory permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-inventory-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Asset Inventory.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"HbokVGcleY1lJIVjqcAx","title":"Asset Roles configuration permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-roles-configuration-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for asset role configuration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"bbYNaCKCyIijHknfh00e","title":"Asset Groups permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/inventory-assets-permissions/asset-groups-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for asset groups.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Inventory - Assets permissions"}]},{"id":"Pl2GE84p7UoVE4gLwW9C","title":"Attack Surface permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/attack-surface-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Attack Surface Management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"9DIr92542CFRgsqh6UYo","title":"Vulnerability Management permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/vulnerability-management-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Vulnerability Management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"c1grOM2FuhsebewKpUTk","title":"Cloud Security and Posture Management permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Cloud Security and Posture Management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"}]},{"id":"83Tq4sFjJvHnfl2eVEqH","title":"CLI Tool permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/cli-tool-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for CLI tools.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"wofOr0x7PGelnPP8Af4x","title":"Application Security permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Application Security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"0fiFjyQkA8q0Umij7sZe","title":"Application Security - Generic Collector permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-generic-collector-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Application Security generic collectors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"tz7gKqOvNVaUdx0aMThD","title":"Application Security - Issues permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-issues-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Application Security issues.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"3nQSx0H86CzwvyIADTWP","title":"Application Security - Scans permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-scans-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Application Security scans.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"38OGJyML4lpaejU5fUBe","title":"Application Security - Policy Management permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-policy-management-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Application Security policy management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"T7YoNNc80gtOO8iSyPZG","title":"Application Security - 3rd Party tools permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/application-security-3rd-party-tools-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for third-party Application Security tools.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"onmfIArsz2cJqMiflOvQ","title":"Configurations - Application Security permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/application-security-permissions/configurations-application-security-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Application Security configurations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"},{"label":"Application Security permissions"}]},{"id":"rrgZvc99IFPnkmKcx5Ke","title":"Policies - Cloud Workload permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/policies-cloud-workload-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for cloud workload policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"E9uj0emhXAkdgOwqnjBm","title":"Cloud Security permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/cloud-security-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Cloud Security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"56Y7XGc8ETcwUBZUjYGH","title":"Compliance - Cloud permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/compliance-cloud-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for cloud compliance.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"3B4YS5vhoA1znUmGeJDb","title":"Data Security permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/data-security-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Data Security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"vLZhl1rnj6o6do3j22Qv","title":"AI Security permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/ai-security-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for AI Security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"0JVJA2MKuDhDKYgSymSR","title":"Data Classification permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/data-classification-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for data classification.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"1owZ1TLur3sGQxS0OvSh","title":"Identity Security permissions","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/role-based-access-control/cloud-security-and-posture-management-permissions/identity-security-permissions","siteSpaceId":"sitesp_WVm4R","description":"Configure permissions for Identity Security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Role-Based Access Control"},{"label":"Cloud Security and Posture Management permissions"}]},{"id":"VmJrVaZs8BtF08NVPgMV","title":"Cortex secure deployment practices","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/cortex-secure-deployment-practices","siteSpaceId":"sitesp_WVm4R","description":"Follow secure deployment practices for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"WHmuVNaH0HAyTkOxJa2C","title":"Microsoft Windows security auditing setup","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup","siteSpaceId":"sitesp_WVm4R","description":"Configure Windows security auditing for Cortex XDR data collection.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"}]},{"id":"bzUdQL4zqQIoDu9jpAgw","title":"Enable security auditing event IDs","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids","siteSpaceId":"sitesp_WVm4R","description":"Enable required Windows security auditing event IDs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"XRHi4uhVFQdY5DfKH31x","title":"Enable security auditing event IDs with GPO","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/enable-security-auditing-event-ids-with-gpo","siteSpaceId":"sitesp_WVm4R","description":"Enable Windows security auditing event IDs through Group Policy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"DhJTJHqxLvnmNb2Y4Qad","title":"Set up local machine security auditing without GPO","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/set-up-local-machine-security-auditing-with-gpo","siteSpaceId":"sitesp_WVm4R","description":"Configure Windows security auditing locally without Group Policy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"9fD4H2iW4nFcktkGyzZN","title":"Additional setup for Active Directory Certificate Services (ADCS) events","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/additional-setup-for-active-directory-certificate-services-adcs-events","siteSpaceId":"sitesp_WVm4R","description":"Configure auditing for Active Directory Certificate Services events.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"f8CUMfR7adlskqjnIkPE","title":"Enable auditing access to AD domain objects - 4662","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/enable-auditing-access-to-ad-domain-objects-4662","siteSpaceId":"sitesp_WVm4R","description":"Enable auditing for Active Directory domain object access event 4662.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"arcjCUqNAWaE0T8HUe0S","title":"Enable additional event logs using Event Viewer","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-additional-event-logs-using-event-viewer","siteSpaceId":"sitesp_WVm4R","description":"Enable additional Windows event logs using Event Viewer.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"s1ZOaUWAx72m57QOxqsQ","title":"Enable LDAP server events logging (1644)","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644","siteSpaceId":"sitesp_WVm4R","description":"Enable LDAP server event logging for event ID 1644.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"kob4pzcwRNExmXxlqZu7","title":"Enable LDAP server events logging using RegEdit","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/enable-ldap-server-events-logging-using-regedit","siteSpaceId":"sitesp_WVm4R","description":"Enable LDAP server event logging using Registry Editor.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"3yJ1ouCB0ZXdyMSIb1AY","title":"Enable LDAP server events logging using GPO","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/enable-ldap-server-events-logging-using-gpo","siteSpaceId":"sitesp_WVm4R","description":"Enable LDAP server event logging using Group Policy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"gN1hwxNNiws7Zdumd8sJ","title":"Validate log collection for LDAP Server events","pathname":"/cortex-xdr-5.x/reference-and-developer-docs/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/validate-log-collection-for-ldap-server-events","siteSpaceId":"sitesp_WVm4R","description":"Verify Cortex XDR collects LDAP server event logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Reference and developer docs","icon":"code"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"TrRaqTukim37Hv90VMwY","title":"Release and documentation updates","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/release-and-documentation-updates","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"}]},{"id":"ffprqQP8VDoj4ynCePC2","title":"Endpoint and Cortex XDR agent management","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"}]},{"id":"8pVyAaPRVBbh80ewRgP8","title":"Cortex XDR agent upgrade and rollout control","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-upgrade-and-rollout-control","siteSpaceId":"sitesp_WVm4R","description":"Control Cortex XDR agent upgrades and rollout rates in Cortex XDR, including automatic updates, schedules, and failure handling.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"EOgyNNItO3a5PboeFppb","title":"Endpoint isolation and live terminal","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/endpoint-isolation-and-live-terminal","siteSpaceId":"sitesp_WVm4R","description":"Isolate endpoints and investigate them with Live Terminal in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"MlxT7QFNtb5nMTVAaEkq","title":"Cortex XDR agent supported platforms","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-supported-platforms","siteSpaceId":"sitesp_WVm4R","description":"Review Windows, macOS, Linux, mobile, and ChromeOS platforms supported by the Cortex XDR agent in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"kTe0vUHJeXawHXgf5b2l","title":"Cortex XDR agent migration","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-migration","siteSpaceId":"sitesp_WVm4R","description":"Plan a phased migration to the Cortex XDR agent in Cortex XDR, including compatibility checks, rollout, validation, and rollback.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"3wMMDFqLbxIH27hO3gk4","title":"Cortex XDR agent offline protection","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-offline-protection","siteSpaceId":"sitesp_WVm4R","description":"Learn how the Cortex XDR agent protects offline endpoints and which functions resume after reconnection to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"Bzjd3URGmHntSEAOpaDo","title":"Cortex XDR agent temporarily disable protection","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-temporarily-disable-protection","siteSpaceId":"sitesp_WVm4R","description":"Temporarily disable Cortex XDR agent protections in Cortex XDR for troubleshooting, using exceptions, policy changes, or Cytool.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"BENUNL1BLY37KekHB5RA","title":"Cortex XDR agent Linux operation modes","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-linux-operation-modes","siteSpaceId":"sitesp_WVm4R","description":"Compare Cortex XDR agent Kernel Mode and User Space (eBPF) operation modes for Linux endpoints in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"VDxWBO992KMn2XcI80Ua","title":"Cortex XDR agent reboot requirements","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-reboot-requirements","siteSpaceId":"sitesp_WVm4R","description":"Learn when Cortex XDR agent installation, upgrades, or uninstallation require an endpoint reboot, including Device Control and Secure Boot requirements in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"y7VbZrCNjV1o8qzEeAq0","title":"Cortex XDR agent detection techniques","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-detection-techniques","siteSpaceId":"sitesp_WVm4R","description":"Learn how the Cortex XDR agent in Cortex XDR detects and prevents malware, exploits, ransomware, fileless attacks, and credential theft.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"Jgi4IUaHdvnOPBBn4wV9","title":"Cortex XDR agent resource usage","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-resource-usage","siteSpaceId":"sitesp_WVm4R","description":"Understand Cortex XDR agent resource usage, minimum system requirements, performance factors, and troubleshooting steps for Windows, macOS, and Linux in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"BJLmHpAeswWmiReJTm3h","title":"Data and platform administration","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"}]},{"id":"8CqAKehtg48d82glonCn","title":"Audit logs","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/audit-logs","siteSpaceId":"sitesp_WVm4R","description":"Learn how audit logs in Cortex XDR track administrative and investigative activity, retain records, and forward notifications to external services.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"7VpbEkssgHh858p3c44Z","title":"Parsing and XQL","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/parsing-and-xql","siteSpaceId":"sitesp_WVm4R","description":"Learn how to create parsing rules in Cortex XDR and use XQL to transform, filter, aggregate, combine, and schedule log data queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"VlV88KmZ3eFU7OFDjqhh","title":"Data ingestion health","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/data-ingestion-health","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR monitors data ingestion health, detects gaps and delays, measures data freshness, and creates custom alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"IAZh4c6HVMKtIvOoh0Ik","title":"Data retention","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/data-retention","siteSpaceId":"sitesp_WVm4R","description":"Learn about data retention periods, storage tiers, lifecycle options, and ways to manage retention costs in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"4RvvLjt8FBG1DEqqaN8t","title":"Data ingestion methods","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/data-ingestion-methods","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR ingests endpoint, on-premises, cloud, identity, and third-party data using collectors, integrations, and Broker VMs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"p71pzGE31k9kC29cBeuF","title":"Event forwarding and data portability","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/event-forwarding-and-data-portability","siteSpaceId":"sitesp_WVm4R","description":"Learn how to export Cortex XDR event data, query results, detection rules, playbooks, scripts, and layouts for integration or migration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"2C1ZzRHsDjDT5Rnb5uYE","title":"Access control and authentication","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/access-control-and-authentication","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR manages role-based and scope-based access, SAML single sign-on, session controls, and tenant isolation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"qYZM26EbQw3Rq5wNu3Q3","title":"Dashboards and reports","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/data-and-platform-administration/dashboards-and-reports","siteSpaceId":"sitesp_WVm4R","description":"Learn how to use Cortex XDR dashboards, scheduled reports, compliance content, and MITRE ATT&CK coverage to monitor security operations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Data and platform administration"}]},{"id":"78XzZJ1clixir8PNVUoW","title":"Detection engineering and threat intelligence","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"}]},{"id":"kwYW3Oheuztu7M7Kg3Km","title":"Custom detection rules","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence/custom-detection-rules","siteSpaceId":"sitesp_WVm4R","description":"Learn how to create and validate custom BIOC, correlation, and IOC detection rules in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Detection engineering and threat intelligence"}]},{"id":"AlSzg4SRICwh6EJNp0lS","title":"Identity analytics and ITDR","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence/identity-analytics-and-itdr","siteSpaceId":"sitesp_WVm4R","description":"Learn how Identity Analytics and ITDR detect identity threats and assess user risk in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Detection engineering and threat intelligence"}]},{"id":"exiMEMPdU5UkLOaUFufK","title":"Prebuilt detections by data source","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence/prebuilt-detections-by-data-source","siteSpaceId":"sitesp_WVm4R","description":"Explore Cortex XDR prebuilt detections by data source and review detection coverage in your tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Detection engineering and threat intelligence"}]},{"id":"KJW9u2p1EhkBxlRuRV21","title":"Detection rule change management","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence/detection-rule-change-management","siteSpaceId":"sitesp_WVm4R","description":"Learn how to safely test, version, export, and audit detection rule changes in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Detection engineering and threat intelligence"}]},{"id":"YPqsNeomy71MhkjBmaCJ","title":"MITRE ATT&CK mapping","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence/mitre-att-and-ck-mapping","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR maps detections to MITRE ATT&CK and helps measure coverage gaps.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Detection engineering and threat intelligence"}]},{"id":"A6Z4TThO8Sts2qvRuSjJ","title":"Detection readiness and learning period","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence/detection-readiness-and-learning-period","siteSpaceId":"sitesp_WVm4R","description":"Learn when Cortex XDR detections activate and how analytics learning periods establish baselines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Detection engineering and threat intelligence"}]},{"id":"ReQ3qWp9iiHTrVxuBGHS","title":"False positive management","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/detection-engineering-and-threat-intelligence/false-positive-management","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR reduces false positives with baselining, case grouping, and exceptions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Detection engineering and threat intelligence"}]},{"id":"KSVWu25uafxkriGoAN29","title":"Investigation and case management","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/investigation-and-case-management","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"}]},{"id":"qGF5iNNrfLkMSqrjHXOL","title":"Case lifecycle and grouping","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/investigation-and-case-management/case-lifecycle-and-grouping","siteSpaceId":"sitesp_WVm4R","description":"Understand Cortex XDR case grouping and lifecycle stages, from signal investigation through resolution.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Investigation and case management"}]},{"id":"1LOGapWhzC8uVaWxUmuB","title":"Security operations and response","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/security-operations-and-response","siteSpaceId":"sitesp_WVm4R","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"}]},{"id":"JqJaiLAc4f3etY9muKbg","title":"Host firewall overview","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/security-operations-and-response/host-firewall-overview","siteSpaceId":"sitesp_WVm4R","description":"Configure and manage the Cortex XDR host firewall through the Cortex XDR agent, including rules and location-based policies.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Security operations and response"}]},{"id":"qO5gAeASUxbIhH1zmalS","title":"Managed threat hunting","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/security-operations-and-response/managed-threat-hunting","siteSpaceId":"sitesp_WVm4R","description":"Managed Threat Hunting provides 24/7 proactive hunting with threat and impact reports in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Security operations and response"}]},{"id":"Ieqshg2FyUAsHVhkzVAM","title":"Email security","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/security-operations-and-response/email-security","siteSpaceId":"sitesp_WVm4R","description":"Use  email security in Cortex XDR to detect, investigate, and respond to Microsoft 365 threats and third-party alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Security operations and response"}]},{"id":"UeshaNa4m8vtrfm5qplr","title":"Network detection and IoT","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/security-operations-and-response/network-detection-and-iot","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR detects network threats and provides visibility into IoT and unmanaged devices.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Security operations and response"}]},{"id":"grv1oMzrqIg0uXEGtuwZ","title":"Ransomware protection and response","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/security-operations-and-response/ransomware-protection-and-response","siteSpaceId":"sitesp_WVm4R","description":"Learn how Cortex XDR prevents, contains, investigates, and recovers from ransomware across every attack stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Security operations and response"}]},{"id":"CshJn2Qpdb2tpeRyeTUF","title":"Remediation actions","pathname":"/cortex-xdr-5.x/insights-and-tips-cortex-xdr/security-operations-and-response/remediation-actions","siteSpaceId":"sitesp_WVm4R","description":"Use Cortex XDR remediation actions to restore files, scan endpoints, isolate devices, and automate recovery workflows.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Insights & tips - Cortex XDR"},{"label":"Security operations and response"}]},{"id":"Aju3BolW0eRcu3PftDlw","title":"Learn more about migrating to the latest Broker VM image","pathname":"/cortex-xdr-5.x/migrate-to-a-new-broker-vm-image/migrating-to-a-new-broker-vm-image","siteSpaceId":"sitesp_WVm4R","description":"Learn more about migrating to the latest broker VM image in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Migrate to a new Broker VM image","icon":"server"}]},{"id":"aOBH58HxZTDzq1YAouvl","title":"Standalone Broker VM","pathname":"/cortex-xdr-5.x/migrate-to-a-new-broker-vm-image/standalone-broker-vm","siteSpaceId":"sitesp_WVm4R","description":"Learn more about migrating a standalone broker VM image.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Migrate to a new Broker VM image","icon":"server"}]},{"id":"z1k1mThNJ7Jrt8bR4P47","title":"Broker VM high availability cluster node","pathname":"/cortex-xdr-5.x/migrate-to-a-new-broker-vm-image/broker-vm-high-availability-cluster-node","siteSpaceId":"sitesp_WVm4R","description":"Learn more about migrating a broker VM High Availability (HA) cluster node.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 5.x Documentation","icon":"shield-halved"},{"label":"Migrate to a new Broker VM image","icon":"server"}]},{"id":"9TSUtu9XZXA29jvuK122","title":"Get started with Cortex XDR","pathname":"/cortex-xdr-3.x","siteSpaceId":"sitesp_QDc6d","description":"Learn about key functionality within Cortex XDR, the available license plans, and the typical roles and responsibilities in a Security Operations Center (SOC) team.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"YjPbTfqF2WFjJqDYJsJj","title":"What is Cortex XDR?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/what-is-cortex-xdr","siteSpaceId":"sitesp_QDc6d","description":"Learn about Cortex XDR and the security challenges it addresses.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"qZwkantNk6hHjJijdA4m","title":"Concepts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/concepts","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR main concepts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"l5PYQXGwROIpPMwrUbCT","title":"Supported web browsers","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/supported-web-browsers","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"UZA9lgHj8K5OLXFTgfde","title":"Use the interface","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/use-the-interface","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to use the Cortex XDR interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"JxjYIa3WO5CiM4qsPoNP","title":"What is Cortex Gateway?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/what-is-cortex-gateway","siteSpaceId":"sitesp_QDc6d","description":"A brief introduction to Cortex Gateway","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"YX2bjxBYe8V85pbG0lig","title":"Understand Cortex XDR license plans","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/understand-cortex-xdr-license-plans","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the available Cortex XDR licenses and add-ons.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"0bfnPwJSgiC64PWNP5QU","title":"Data retention in Cortex XDR","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/understand-cortex-xdr-license-plans/data-retention-in-cortex-xdr","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the default retention periods for all Cortex XDR licenses, and the available retention add-ons.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"},{"label":"Understand Cortex XDR license plans"}]},{"id":"6l3WeEkLkIn8m5G868gd","title":"Data storage lifecycle","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/understand-cortex-xdr-license-plans/data-storage-lifecycle","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"},{"label":"Understand Cortex XDR license plans"}]},{"id":"UPUTlJ1ueYjotb5UA5sU","title":"License allocation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/understand-cortex-xdr-license-plans/license-allocation","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how Cortex XDR regulates licenses.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"},{"label":"Understand Cortex XDR license plans"}]},{"id":"oFnVHIPNbroP3SEm3O6I","title":"License expiration","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/understand-cortex-xdr-license-plans/license-expiration","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR license expiration and validation period.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"},{"label":"Understand Cortex XDR license plans"}]},{"id":"zVFRNqxn4teMPwXZiE83","title":"Upgrade your tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/understand-cortex-xdr-license-plans/upgrade-your-tenant","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"},{"label":"Understand Cortex XDR license plans"}]},{"id":"sYDyPNr1XUvNsjWmq3WS","title":"Security Operations Center roles and responsibilities","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/security-operations-center-roles-and-responsibilities","siteSpaceId":"sitesp_QDc6d","description":"Learn about the typical core roles that make up a SOC team.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"Xfzoxzh78hc0dOX9DNyq","title":"In-product support case creation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/in-product-support-case-creation","siteSpaceId":"sitesp_QDc6d","description":"Open a support case directly in Cortex XDR and record your console to capture your issues and have the case handled efficiently.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"dSHHbOzWOqW76PNf3WeH","title":"Upgrade to Cortex XDR 5.x","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/readme/upgrade-to-cortex-xdr-5.x","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Get started with Cortex XDR"}]},{"id":"AQzJBctnWtbIVopKtHxc","title":"Onboard and configure Cortex XDR","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr","siteSpaceId":"sitesp_QDc6d","description":"Learn about the deployment preparation and procedures to onboard and configure Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"PqvtHDAyMfGS6iiqPUpv","title":"Deployment steps","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps","siteSpaceId":"sitesp_QDc6d","description":"Follow the steps in the onboarding checklist to successfully deploy and onboard Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"}]},{"id":"v5NvfUqMBhqVQSZd4m0K","title":"Plan and prepare","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/plan-and-prepare","siteSpaceId":"sitesp_QDc6d","description":"Learn more about deployment considerations and onboarding steps.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"hbkk3BjX55ZLxoQ0H4Me","title":"Cortex XDR onboarding checklist","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/cortex-xdr-onboarding-checklist","siteSpaceId":"sitesp_QDc6d","description":"Review the steps to deploy and onboard Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"hxwinw9bBwBVcfKmUP8y","title":"Step 1: Activate Cortex XDR","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-1-activate-cortex-xdr","siteSpaceId":"sitesp_QDc6d","description":"Learn how to activate your tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"QM7FLcihmm5aoV879xkf","title":"Cortex XDR supported regions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-1-activate-cortex-xdr/cortex-xdr-supported-regions","siteSpaceId":"sitesp_QDc6d","description":"Supported regions in which you want to host Cortex XDR and any associated services.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 1: Activate Cortex XDR"}]},{"id":"xvsMPcxtoI0Tg2onrv4K","title":"Enable access to required PANW resources","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-1-activate-cortex-xdr/enable-access-to-required-panw-resources","siteSpaceId":"sitesp_QDc6d","description":"Learn more about enabling network access to the Cortex XDR resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 1: Activate Cortex XDR"}]},{"id":"yyLTfsTl7Ccz8W8qzn4S","title":"Step 2: Pre-installation steps for Cortex XDR agents","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"8v5vS78yQpUnJWgu1mKQ","title":"Assign user roles and groups","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/assign-user-roles-and-groups","siteSpaceId":"sitesp_QDc6d","description":"Learn how to assign users to roles and user groups.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"}]},{"id":"HHCY85xskcoxOid0nZvX","title":"Set up authentication","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/set-up-authentication","siteSpaceId":"sitesp_QDc6d","description":"Authenticate Cortex XDR users using SAML 2.0 or Cortex Gateway.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"}]},{"id":"zGwkcaymMldsrKQ418yu","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_QDc6d","description":"Authenticate Cortex XDR users when using the Customer Support Portal.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"},{"label":"Set up authentication"}]},{"id":"99lR0EaadV7gMBl420qy","title":"Authenticate users using SSO","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_QDc6d","description":"Set up authentication in the Cortex XDR tenant using SSO.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"},{"label":"Set up authentication"}]},{"id":"tgXBPnfTLEaoVBnzzIHo","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"},{"label":"Set up authentication"}]},{"id":"zIdsp7Mutzd2FApW72Fp","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"},{"label":"Set up authentication"}]},{"id":"pzE9meysM1NHCeB00QmY","title":"Define endpoint groups","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/define-endpoint-groups","siteSpaceId":"sitesp_QDc6d","description":"Define an endpoint group and then apply policy rules and manage specific endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"}]},{"id":"xo9uUWaffmOKapCe61Gh","title":"Manage endpoint profiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/manage-endpoint-profiles","siteSpaceId":"sitesp_QDc6d","description":"Endpoint security profiles can be used immediately, or customized, to protect your endpoints from threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"}]},{"id":"qjp301gEFESz7QaFY0Yt","title":"Endpoint data collection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/endpoint-data-collection","siteSpaceId":"sitesp_QDc6d","description":"To aid in endpoint detection and alert investigation, the Cortex XDR agent collects endpoint information when an alert is triggered.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"}]},{"id":"kkvI3jxDGJZDWfwgi57n","title":"Configure global agent settings","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-2-pre-installation-steps-for-cortex-xdr-agents/configure-global-agent-settings","siteSpaceId":"sitesp_QDc6d","description":"Learn how to configure the Cortex XDR agent global settings that operate on your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 2: Pre-installation steps for Cortex XDR agents"}]},{"id":"P589IJq6ircyJXuuKvGq","title":"Step 3: Install Cortex XDR agents","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-3-install-cortex-xdr-agents","siteSpaceId":"sitesp_QDc6d","description":"Learn about the initial steps required to deploy Cortex XDR agent software to endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"o6V6n4ZIdOhQyfPASykG","title":"Plan your agent deployment","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-3-install-cortex-xdr-agents/plan-your-agent-deployment","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 3: Install Cortex XDR agents"}]},{"id":"auh1Iwo2zs5dV20EV7Dg","title":"Guidelines for keeping Cortex XDR agents and content updated","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-3-install-cortex-xdr-agents/guidelines-for-keeping-cortex-xdr-agents-and-content-updated","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to control Cortex XDR agent and content upgrades.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 3: Install Cortex XDR agents"}]},{"id":"1T0THZGcDoJ5eOjn5Ncm","title":"Create an agent installation package","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-3-install-cortex-xdr-agents/create-an-agent-installation-package","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create a Cortex XDR agent installation package to deploy to your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 3: Install Cortex XDR agents"}]},{"id":"1yHLVVX6kHqmYGMHHBPD","title":"Deploy agent installation packages","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-3-install-cortex-xdr-agents/deploy-agent-installation-packages","siteSpaceId":"sitesp_QDc6d","description":"Learn how to deploy an agent installation package on endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 3: Install Cortex XDR agents"}]},{"id":"oj2iPjNAfY8v0HtWPrvR","title":"Step 4: Configure and deploy Cortex XDR","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-4-configure-and-deploy-cortex-xdr","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"omF1Mnba4vONikwHYyxc","title":"Cortex XDR - Analytics","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-4-configure-and-deploy-cortex-xdr/cortex-xdr-analytics","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 4: Configure and deploy Cortex XDR"}]},{"id":"bwEnsVPF8r18WBZBHtFp","title":"Configure Cortex XDR network parameters","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-4-configure-and-deploy-cortex-xdr/cortex-xdr-analytics/configure-cortex-xdr-network-parameters","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 4: Configure and deploy Cortex XDR"},{"label":"Cortex XDR - Analytics"}]},{"id":"nyI0J8yYFJ9E2TjBsY6l","title":"Enable the Analytics Engine and Identity Analytics","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-4-configure-and-deploy-cortex-xdr/cortex-xdr-analytics/enable-the-analytics-engine-and-identity-analytics","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 4: Configure and deploy Cortex XDR"},{"label":"Cortex XDR - Analytics"}]},{"id":"lsPebsLRqFZtgBLqlBH3","title":"Set up Cloud Identity Engine","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-4-configure-and-deploy-cortex-xdr/set-up-cloud-identity-engine","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up Cloud Identity Engine to use with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 4: Configure and deploy Cortex XDR"}]},{"id":"xh0jFUSoxhLWVRWziaJH","title":"Step 5: Define data sources","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-5-define-data-sources","siteSpaceId":"sitesp_QDc6d","description":"Learn how to configure data ingestion ingest data from a variety of Palo Alto Networks and third-party sources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"w5CU4BwYfY71BgccuAxS","title":"Step 6: Perform health checks","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-6-perform-health-checks","siteSpaceId":"sitesp_QDc6d","description":"Learn which health checks to perform after deployment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"}]},{"id":"L2osMIah9DmawbHlWHJE","title":"Monitor agent operational status in Cortex XDR","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/deployment-steps/step-6-perform-health-checks/monitor-agent-operational-status-in-cortex-xdr","siteSpaceId":"sitesp_QDc6d","description":"View the operational status of any Cortex XDR agent that you manage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Deployment steps"},{"label":"Step 6: Perform health checks"}]},{"id":"UwvjOg4wwdCvs1cb957u","title":"Post-deployment steps","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"}]},{"id":"zA5u24fz4ASBeU3GxT9z","title":"Set up your environment","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"}]},{"id":"flmACnDgsSAGx5zArs7d","title":"Configure server settings","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/configure-server-settings","siteSpaceId":"sitesp_QDc6d","description":"Configure server settings such as keyboard shortcuts, timezone, and timestamp format.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"fHdL0INjM5SCaj46RP2z","title":"Configure security settings","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/configure-security-settings","siteSpaceId":"sitesp_QDc6d","description":"Configure security settings such as session expiration, user login expiration, and dashboard expiration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"zLpltssJ8z6Qtxa0N6Wc","title":"Log forwarding","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding","siteSpaceId":"sitesp_QDc6d","description":"Stay informed and updated about events in your system by forwarding alerts and reports to an external service, such as a syslog receiver, a Slack channel, or an email account.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"n7JbCl6ZYGWRGJ7osHBX","title":"Forward logs from Cortex XDR to external services","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/forward-logs-from-cortex-xdr-to-external-services","siteSpaceId":"sitesp_QDc6d","description":"Learn how to forward logs from Cortex XDR to external services such as email, Slack, or a syslog receiver.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"}]},{"id":"n883DCsCrgxo2Ofow42b","title":"Integrate a syslog receiver","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/forward-logs-from-cortex-xdr-to-external-services/integrate-a-syslog-receiver","siteSpaceId":"sitesp_QDc6d","description":"Define syslog settings and then configure notification forwarding to receive notifications about alerts and reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Forward logs from Cortex XDR to external services"}]},{"id":"8mfS06pbTEQkdL4t4oLc","title":"Integrate Slack for outbound notifications","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/forward-logs-from-cortex-xdr-to-external-services/integrate-slack-for-outbound-notifications","siteSpaceId":"sitesp_QDc6d","description":"Learn how to integrate Cortex XDR with your Slack workspace and stay updated on important alerts and events.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Forward logs from Cortex XDR to external services"}]},{"id":"09mn6vFAzYnZqBlMh00M","title":"Configure notification forwarding","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/forward-logs-from-cortex-xdr-to-external-services/configure-notification-forwarding","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create a forwarding configuration that specifies the log type you want to forward.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Forward logs from Cortex XDR to external services"}]},{"id":"StppWQgGZpDQKEeGrvJR","title":"Monitor administrative activity","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/forward-logs-from-cortex-xdr-to-external-services/monitor-administrative-activity","siteSpaceId":"sitesp_QDc6d","description":"View all Cortex XDR administrator-initiated actions taken on alerts, incidents, and live terminal sessions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Forward logs from Cortex XDR to external services"}]},{"id":"MYOwZxndYvEhNS74b3q6","title":"Log notification formats","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR provides you with different formats for its log notifications.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"}]},{"id":"duyAByWAyCdsuvuBM7RU","title":"Management audit log messages","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats/management-audit-log-messages","siteSpaceId":"sitesp_QDc6d","description":"View the types of Cortex XDR management audit log messages that are sent.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Log notification formats"}]},{"id":"UYUuDvkMzTGvNFdskQCV","title":"Alert notification format","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats/alert-notification-format","siteSpaceId":"sitesp_QDc6d","description":"Learn about the formats used to forward Cortex XDR agent, BIOC, IOC, analytics, correlation, and third-party alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Log notification formats"}]},{"id":"nVMW1Wwm00jk7Kx3W69Z","title":"Agent Audit log notification format","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats/agent-audit-log-notification-format","siteSpaceId":"sitesp_QDc6d","description":"An email account or a syslog receiver are the notification channels through which the Agent Audit log is communicated.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Log notification formats"}]},{"id":"G2jojkUB8GTu1un3QeKP","title":"Management Audit log notification format","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats/management-audit-log-notification-format","siteSpaceId":"sitesp_QDc6d","description":"An email account or a syslog receiver are the notification channels through which the Management Audit log is communicated.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Log notification formats"}]},{"id":"Vu9UYdGKnhMsv3Up6Nae","title":"Log format for IOC and BIOC alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats/log-format-for-ioc-and-bioc-alerts","siteSpaceId":"sitesp_QDc6d","description":"An email account or a syslog receiver are the notification channels through which IOC and BIOC alerts are communicated.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Log notification formats"}]},{"id":"Z9bqrtsf5O51XMuaRAl8","title":"Analytics log format","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats/analytics-log-format","siteSpaceId":"sitesp_QDc6d","description":"Learn about the syntax and different variables that are used in the analytics log format.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Log notification formats"}]},{"id":"kEIaofHIEZkXCyMUF2AU","title":"Log formats","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/log-forwarding/log-notification-formats/log-formats","siteSpaceId":"sitesp_QDc6d","description":"Learn about the different log formats that Cortex XDR can forward to an external server or email account.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Log forwarding"},{"label":"Log notification formats"}]},{"id":"Ei6LZuHVZ9VbyGbd0v39","title":"Automation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/automation-rules","siteSpaceId":"sitesp_QDc6d","description":"Use automation rules to define alert conditions that trigger an action that you specify within the rule.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"vZMXclgyGQnVRcy7isej","title":"Manage automation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/automation-rules/manage-automation-rules","siteSpaceId":"sitesp_QDc6d","description":"Learn how to manage automation rules for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Automation rules"}]},{"id":"0A6DkuHm6IFbnDEgLHo4","title":"Automation settings","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/automation-rules/automation-settings","siteSpaceId":"sitesp_QDc6d","description":"Threshold limits may be implemented for settings of automation rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Automation rules"}]},{"id":"AHbWOTqmPs2NgWPEwo43","title":"Automation rule actions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/automation-rules/automation-rule-actions","siteSpaceId":"sitesp_QDc6d","description":"Includes the list of actions to take when the alert condition of the automation rule is triggered for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Automation rules"}]},{"id":"jA9ytyvMR6CAM0sZH2Zd","title":"Automation Audit Log","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/set-up-your-environment/automation-rules/automation-audit-log","siteSpaceId":"sitesp_QDc6d","description":"Includes the list of fields included in the Automation Audit Log for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Automation rules"}]},{"id":"nFPZSN4MJ1AxFY4Lqnvv","title":"Manage user roles and access management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management","siteSpaceId":"sitesp_QDc6d","description":"Learn how to manage access for users, user roles, user groups, and Single Sign-On (SSO) for users on a specific Cortex XDR tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"}]},{"id":"HmsStsPA1ehnxO1cwp66","title":"Manage user roles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-user-roles","siteSpaceId":"sitesp_QDc6d","description":"Manage user roles that are assigned to Cortex XDR users or user groups in Cortex XDR Access Management.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"wTNmp1LA8KgRYBS5qfHg","title":"Manage user access","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-user-access","siteSpaceId":"sitesp_QDc6d","description":"Manage access permissions for Cortex XDR users.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"A9jnokxMslquZFWwbMxK","title":"User access reference information","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-user-access/user-access-reference-information","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage user access"}]},{"id":"uCfVCjNJ0jwlZRLF1eOO","title":"Manage user scope","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/manage-user-roles-and-access-management/manage-user-scope","siteSpaceId":"sitesp_QDc6d","description":"Learn about Scope-Based Access Control (SBAC) and how to assign users to specific tags of different types in your organization.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"xrniLmsHJa8taMhEOIC6","title":"XQL query management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/xql-query-management","siteSpaceId":"sitesp_QDc6d","description":"Administrators can set controls on running XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"}]},{"id":"Vl8Ojx0MLiaPNLL0ertu","title":"Dashboards and reports","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/onboard-and-configure-cortex-xdr/post-deployment-steps/dashboards-and-reports","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Onboard and configure Cortex XDR"},{"label":"Post-deployment steps"}]},{"id":"xSxXHnwdeq9R7pvILUgk","title":"Endpoint security","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security","siteSpaceId":"sitesp_QDc6d","description":"Learn about configuring and managing endpoint security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"e2mYBFpPoHuHGXKhQkri","title":"Endpoint protection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection","siteSpaceId":"sitesp_QDc6d","description":"This topic provides an overview of traditional endpoint protection versus the protection of endpoints using Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"}]},{"id":"y0gA40VPCHq9copqufAQ","title":"Malware protection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/malware-protection","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR prevents malware attacks and provides protection on endpoints based on the different operating systems.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"9qvknVvA4VNs0laWLUcZ","title":"Exploit protection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/exploit-protection","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR prevents exploit attempts and provides protection on endpoints based on the different operating systems.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"5Mv0vzmnZpivAir30bXy","title":"File analysis and protection flow","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/file-analysis-and-protection-flow","siteSpaceId":"sitesp_QDc6d","description":"The Cortex XDR agent utilizes advanced multi-method protection and prevention techniques to protect from both known and unknown malware and software exploits.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"LvXgczut8VVoupHvDOfN","title":"Endpoint protection capabilities","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/endpoint-protection-capabilities","siteSpaceId":"sitesp_QDc6d","description":"The endpoint protection capabilities vary depending on the platform (operating system) that is used on each of your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"2GP9OqSEi5Fm6PMqwpYy","title":"Endpoint protection modules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/endpoint-protection-modules","siteSpaceId":"sitesp_QDc6d","description":"Security modules are activated for your endpoints depending on the chosen security profile and the operating system on the endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"LH3Qlek7J5CObcNUKvJI","title":"Processes protected by exploit security policy","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/processes-protected-by-exploit-security-policy","siteSpaceId":"sitesp_QDc6d","description":"Application processes that run on your endpoint are protected by the exploit security policy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"y3o5hvGqFEnw4zYDO5ws","title":"WildFire analysis concepts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/wildfire-analysis-concepts","siteSpaceId":"sitesp_QDc6d","description":"Learn about the analysis concepts used by Wildfire.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"XuieCSavcmHi3AVAU1Bk","title":"About content updates","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/about-content-updates","siteSpaceId":"sitesp_QDc6d","description":"To increase security coverage and quickly resolve any issues in policy, Palo Alto Networks can seamlessly deliver software packages called content updates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"F8esJeg27xepkcI5xb8N","title":"Endpoint data collection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/endpoint-data-collection","siteSpaceId":"sitesp_QDc6d","description":"To aid in endpoint detection and alert investigation, the Cortex XDR agent collects endpoint information when an alert is triggered.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"ttWSsBAOZRx8QfU38aKX","title":"Guidelines for keeping Cortex XDR agents and content updated","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/endpoint-protection/guidelines-for-keeping-cortex-xdr-agents-and-content-updated","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to control Cortex XDR agent and content upgrades.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"qwYPNB1wAS8L8OsFrbqr","title":"Install and manage endpoints","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up profiles, policies and other settings for endpoint protection, how to install Cortex XDR agent on endpoints, and how to manage them after installation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"}]},{"id":"0PK4tXx7MSpOWSNVjvs3","title":"Set up endpoint protection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection","siteSpaceId":"sitesp_QDc6d","description":"Set up endpoint protection profiles and policies, exceptions, endpoint hardening, and other endpoint settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"HTkklwjFY5IVLahgdWU6","title":"Set up endpoint profiles and exception rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules","siteSpaceId":"sitesp_QDc6d","description":"Endpoint security profiles can be used immediately, or customized, to protect your endpoints from threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"j3ORTmlnbS1JT98whbWV","title":"Set up malware prevention profiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-malware-prevention-profiles","siteSpaceId":"sitesp_QDc6d","description":"Configure malware prevention profiles to control the actions taken by Cortex XDR agents when known malware, macros, and unknown files try to run.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"NiHqTIo8sPImHAt8h1MV","title":"Set up exploit prevention profiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exploit-prevention-profiles","siteSpaceId":"sitesp_QDc6d","description":"Exploit prevention profiles control the action that the Cortex XDR agent takes when attempts to exploit software vulnerabilities or flaws occur.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"hBtD75qu1WOwaw75C6xU","title":"Set up agent settings profiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-agent-settings-profiles","siteSpaceId":"sitesp_QDc6d","description":"Use agent settings profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"axhZkKtnWroLfRktHEHh","title":"Set up restrictions prevention profiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-restrictions-prevention-profiles","siteSpaceId":"sitesp_QDc6d","description":"Restrictions prevention profiles limit where executables can run on an endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"8AFVUq7XrSjwHqpX7b8q","title":"Set up exception profiles and rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules","siteSpaceId":"sitesp_QDc6d","description":"Exception profiles can be configured to override security policies for known processes, files, digital signers, URLs, BTP rules, telephone numbers, and other exceptions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"G5PvivxnkVXMmrc4tD2k","title":"Exception configuration","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/exception-configuration","siteSpaceId":"sitesp_QDc6d","description":"Learn how to configure exceptions from your baseline policy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"Lfdi3GRmso4ogsqjOWdQ","title":"Alert exclusions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/alert-exclusions","siteSpaceId":"sitesp_QDc6d","description":"Learn how to review and manage alert exclusions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"m3u9K3hOhujo8jt0eujV","title":"Add an alert exclusion rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/alert-exclusions/add-an-alert-exclusion-rule","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create a rule to exclude certain criteria from raising alerts in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Alert exclusions"}]},{"id":"vRts7aXN3elFRxkUNqBE","title":"Add an IOC or BIOC rule exception","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-an-ioc-or-bioc-rule-exception","siteSpaceId":"sitesp_QDc6d","description":"Learn how to add an IOC or BIOC rule exception.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"ORFLHwRx7TsDeWG96MMu","title":"Add a disable prevention rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-prevention-rule","siteSpaceId":"sitesp_QDc6d","description":"You can create granular exceptions to prevention actions defined for your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"YJOeBvlnlrpKRvqt19OZ","title":"Add a disable injection and prevention rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-injection-and-prevention-rule","siteSpaceId":"sitesp_QDc6d","description":"You can generate a temporary exception to bypass a process from prevention modules and injections.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"GRxCMeddaBXJPugckney","title":"Add a support exception rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-support-exception-rule","siteSpaceId":"sitesp_QDc6d","description":"Learn how to add a support exception rule.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"PkpgnH2eaZJQPf05ENQJ","title":"Add a legacy exception rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule","siteSpaceId":"sitesp_QDc6d","description":"Learn how to use Cortex XDR Legacy Exception rules to configure an exception to prevention and protection modules on endpoints for selected profiles.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"QQhTlz5qrFgIZErZRHfI","title":"Add a new exceptions security profile","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule/add-a-new-exceptions-security-profile","siteSpaceId":"sitesp_QDc6d","description":"Learn how to add a new exceptions security profile.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule"}]},{"id":"6n13MfyjlAGcI67BZg29","title":"Add a global endpoint policy exception","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule/add-a-global-endpoint-policy-exception","siteSpaceId":"sitesp_QDc6d","description":"Learn how to define and manage global endpoint policy exceptions in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule"}]},{"id":"d2KZjBk5leuzMqfWnU2W","title":"Define endpoint groups","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/define-endpoint-groups","siteSpaceId":"sitesp_QDc6d","description":"Define an endpoint group and then apply policy rules and manage specific endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"1gIHajwIrlxyCh672Zc5","title":"Configure global agent settings","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/configure-global-agent-settings","siteSpaceId":"sitesp_QDc6d","description":"Learn how to configure the Cortex XDR agent global settings that operate on your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"3noigbQA9XrywwVUTN4z","title":"Apply profiles to endpoints","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/apply-profiles-to-endpoints","siteSpaceId":"sitesp_QDc6d","description":"Learn how to apply security profiles to your endpoints, depending on the platform used.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"jeOlzIuZkqO1NhPkcq2j","title":"Create an agent installation package","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/create-an-agent-installation-package","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create a Cortex XDR agent installation package to deploy to your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"Hx0Sh5ObT2CpYgAWEFsM","title":"Manage an agent installation package","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/create-an-agent-installation-package/manage-an-agent-installation-package","siteSpaceId":"sitesp_QDc6d","description":"Learn how to make changes such as deleting an agent installation package or editing the package name.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Create an agent installation package"}]},{"id":"hP2WaCdhk7IWJVmUBksl","title":"Harden endpoint security","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security","siteSpaceId":"sitesp_QDc6d","description":"By hardening your endpoints with Cortex XDR agent, you can make these endpoints more secure and safer from attackers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"pn6OChudTU9Nuol7GMHx","title":"Device control","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security/device-control","siteSpaceId":"sitesp_QDc6d","description":"Protect your Windows and macOS-based endpoints from connecting to malicious USB-connected removable devices, to Bluetooth devices, and to print jobs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Harden endpoint security"}]},{"id":"ZJcwKs4ZyW3boDg4jCG6","title":"Host firewall","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security/host-firewall","siteSpaceId":"sitesp_QDc6d","description":"Control communications on your endpoints based on the network location of your device by using the Cortex XDR host firewall.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Harden endpoint security"}]},{"id":"4HPEnoMqceyegjtXliI8","title":"Host firewall for Windows","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security/host-firewall/host-firewall-for-windows","siteSpaceId":"sitesp_QDc6d","description":"Control communications on your endpoints based on the network location of your device by using the host firewall.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"BztkR4qioj91u3yGqRWb","title":"Host firewall for macOS","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security/host-firewall/host-firewall-for-macos","siteSpaceId":"sitesp_QDc6d","description":"Control communications on your endpoints based on the network location of your device by using the host firewall.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"asPB7L1663ps3wUDlvir","title":"Disk encryption","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security/disk-encryption","siteSpaceId":"sitesp_QDc6d","description":"For enhanced security, you can configure and apply disk encryption profiles to the disks of your Windows and Mac endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Harden endpoint security"}]},{"id":"KKMkB9N09mr6zk3Jqqju","title":"Host Inventory","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security/host-inventory","siteSpaceId":"sitesp_QDc6d","description":"Review the inventory of all your hosts (endpoints), and identify in the inventory any IT and security issues in your network.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Harden endpoint security"}]},{"id":"Mry5lIK58O0KqWQ7nc58","title":"Vulnerability Assessment","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/harden-endpoint-security/vulnerability-assessment","siteSpaceId":"sitesp_QDc6d","description":"Perform a vulnerability assessment of all endpoints in your network using Cortex XDR. This includes CVE, endpoint, and application analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Harden endpoint security"}]},{"id":"AJhw31XtqxZsC9klyJ4A","title":"Set a Cortex XDR agent Critical Environment version","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-a-cortex-xdr-agent-critical-environment-version","siteSpaceId":"sitesp_QDc6d","description":"Set the Cortex XDR agent as a Critical Environment (CE) version.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"UJz8CC6rWGaxSSgBKxqe","title":"Set an application proxy for Cortex XDR agents","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-an-application-proxy-for-cortex-xdr-agents","siteSpaceId":"sitesp_QDc6d","description":"Set an application-specific proxy for the Cortex XDR agent without affecting the communication of other applications on the endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"FqrUF8CAtl2I5DrbTcy8","title":"Pairing Prisma Cloud Compute with Cortex XDR","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/pairing-prisma-cloud-compute-with-cortex-xdr","siteSpaceId":"sitesp_QDc6d","description":"Learn how to pair Prisma Cloud Compute with Cortex XDR for use with the Cortex XDR Agent for Cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"pXjY8J5c5JKVnX9rEVAP","title":"Manage endpoint protection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"C2DHM9mIzgNxZOIUAfzH","title":"Manage endpoint tags","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags","siteSpaceId":"sitesp_QDc6d","description":"Segment your endpoints according to dynamic tags.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"OaB38An7eaHBXAB04NCK","title":"Set an alias for an endpoint","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/set-an-alias-for-an-endpoint","siteSpaceId":"sitesp_QDc6d","description":"Configure an alias to identify one or more endpoints by a name that is different from the endpoint hostname.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"wgvP52cKrNZjrD8tPGVq","title":"Manage endpoint prevention profiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-prevention-profiles","siteSpaceId":"sitesp_QDc6d","description":"You can manage the endpoint prevention profiles of your Cortex XDR agent endpoints in various ways, including editing, duplicating, and populating endpoint prevention policy rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"oX9qIGoEogyVly2vwIHl","title":"Upgrade Cortex XDR agents","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/upgrade-cortex-xdr-agents","siteSpaceId":"sitesp_QDc6d","description":"You can upgrade the Cortex XDR agent software by using the appropriate method for the endpoint operating system.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"XRLi0MvqeCDmhcQTizfw","title":"Restart agent","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/restart-agent","siteSpaceId":"sitesp_QDc6d","description":"Learn how to restart the agent on the endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"jh5nzi2sklU2qhOUhzSw","title":"Uninstall the Cortex XDR agent","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/uninstall-the-cortex-xdr-agent","siteSpaceId":"sitesp_QDc6d","description":"Uninstall Cortex XDR agent from one or more endpoints at any time using the Action Center, or one-by-one using the All Endpoints page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"Q3DYoF8oXTA9JTVE0kpK","title":"Delete Cortex XDR agents","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/delete-cortex-xdr-agents","siteSpaceId":"sitesp_QDc6d","description":"Delete endpoints from Cortex XDR tenant views.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"OQRm6XawbziIZZ8UL0z9","title":"Manage agent tokens","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-agent-tokens","siteSpaceId":"sitesp_QDc6d","description":"Manage tokens per agent to retrieve the password used to run functions at the agent.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"2uxDnh6tujU773l976mb","title":"Retrieve support file password","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/retrieve-support-file-password","siteSpaceId":"sitesp_QDc6d","description":"Learn how to retrieve the password to access files from the Tech Support File (TSF), which is generated in a zip format protected by an encrypted password.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"tr4zmZclDNVRNHPOjEom","title":"Move agents between managing servers","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/move-agents-between-managing-servers","siteSpaceId":"sitesp_QDc6d","description":"You can move Cortex XDR agents to other Cortex XDR managing servers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"a7ApdCedjhY7PdShenAK","title":"Clear agent database","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/clear-agent-database","siteSpaceId":"sitesp_QDc6d","description":"Learn how to clear the Cortex XDR agent database.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"rZkiGdDnnwVqJaKd5fvD","title":"Send push notifications to iOS","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/send-push-notifications-to-ios","siteSpaceId":"sitesp_QDc6d","description":"Learn how to send push notifications to an iOS endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"JnAWnvG3hpQF7YQ9qYKD","title":"Monitor agent operational status","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-operational-status","siteSpaceId":"sitesp_QDc6d","description":"You can view the operational status of any Cortex XDR agent that you manage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"uWpyz0Mc8FFQWmo6DtMx","title":"Monitor agent activity","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-activity","siteSpaceId":"sitesp_QDc6d","description":"You can monitor the activity of any Cortex XDR Broker VM that you manage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"lmeUKtUT87UAFLdCoN7T","title":"Monitor agent upgrade status","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-upgrade-status","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"sYgoeIZqFMri82lb39Ff","title":"Detect threats and analyze data","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"NbnuKhRCQV3NKcehTJBE","title":"Detection rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR uses rules to detect threats and raise alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"}]},{"id":"mstGDJ1epGGRYBggSj9J","title":"What's an IOC?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-an-ioc","siteSpaceId":"sitesp_QDc6d","description":"Indicators of compromise (IOCs) alert you about known malicious objects on your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"}]},{"id":"nfv28CKGvGk0gGJqQ6pG","title":"IOC rule details","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-an-ioc/ioc-rule-details","siteSpaceId":"sitesp_QDc6d","description":"Manage all indicators of compromise (IOCs) configured from or uploaded to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's an IOC?"}]},{"id":"F2e90qIAnompIAMtUyWy","title":"Create an IOC rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-an-ioc/create-an-ioc-rule","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console, you can upload or configure indicator of compromise (IOC) rules criteria.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's an IOC?"}]},{"id":"CEmXXQxLfuQrJqcSKPGA","title":"What's a BIOC?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-bioc","siteSpaceId":"sitesp_QDc6d","description":"Behavioral indicators of compromise (BIOCs) alert you to respond to potentially compromising behaviors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"}]},{"id":"GcMsQLBhGFPPsTsNwNG6","title":"BIOC rule details","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-bioc/bioc-rule-details","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console, you can define your own rules based on behavior with the behavioral indicator of compromise (BIOC) rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a BIOC?"}]},{"id":"0Wymk5jSPDaYYzcm5Srq","title":"Create a BIOC rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-bioc/create-a-bioc-rule","siteSpaceId":"sitesp_QDc6d","description":"You can configure rules for behavioral indicators of compromise (BIOCs) to trigger an alert on an identified threat.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a BIOC?"}]},{"id":"Wdz3GZRtsBvvGoYzxpA4","title":"Manage Global BIOC Rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-bioc/manage-global-bioc-rules","siteSpaceId":"sitesp_QDc6d","description":"Update and copy BIOC rules, and add rule exceptions in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a BIOC?"}]},{"id":"gO8O0MCDgYyYcUb7H9xa","title":"What's a correlation rule?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"}]},{"id":"WjsApjEPZDKwWc9gqWj1","title":"Correlation rule details","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/correlation-rule-details","siteSpaceId":"sitesp_QDc6d","description":"In the Correlation Rules page, you can view all of your enabled rules in a table format and the various fields displayed.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"Xf6h6bkos7Tb01SDhXrw","title":"Create a correlation rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/create-a-correlation-rule","siteSpaceId":"sitesp_QDc6d","description":"Create new correlation rules from either the Correlation Rules page or when building a query in XQL Search, or import a many correlation rules from a file.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"B3fonguBTYwn3bdW0vYb","title":"Field replacement syntax in correlation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/field-replacement-syntax-in-correlation-rules","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to use field replacement syntax when creating correlation rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"uEe00jwUwH22EbRneULo","title":"Manage correlation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/manage-correlation-rules","siteSpaceId":"sitesp_QDc6d","description":"View and manage your correlation rules","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"UjYVAhFUGSL0HLAwMCys","title":"Monitor correlation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/monitor-correlation-rules","siteSpaceId":"sitesp_QDc6d","description":"You can monitor your correlation executions with the correlations_auditing dataset.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"puKeiekmBgohkmC8YJMR","title":"Troubleshoot server errors in scheduled correlation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/troubleshoot-server-errors-in-scheduled-correlation-rules","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to troubleshoot server errors in scheduled correlation rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"},{"label":"What's a correlation rule?"}]},{"id":"fdsNdP0Y2NGVHuoe55kf","title":"Manage existing indicators","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/manage-existing-indicators","siteSpaceId":"sitesp_QDc6d","description":"Edit, export, copy, disable, or remove rules, and add rule exceptions for existing indicators in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Detection rules"}]},{"id":"snE3o5ZThBamsCR12zjM","title":"Analytics","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR uses an Analytics engine to examine logs and data from your sensors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"}]},{"id":"PtEiRVo4FbWCWGLVNt2F","title":"Analytics engine","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/analytics-engine","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"Wq9OJVPP0kxGtNhYAV1A","title":"Analytics sensors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/analytics-sensors","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"3e2d6KIuYJ6ebu4w6Efo","title":"Coverage of MITRE Attack tactics","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/coverage-of-mitre-attack-tactics","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"7CUWqEmieoqKnTvosrLJ","title":"Analytics detection time intervals","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/analytics-detection-time-intervals","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"ODnZfMXtvA9G36uDlP6P","title":"Analytics alerts and Analytics BIOCs","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/analytics-alerts-and-analytics-biocs","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"tokOUVZhu4ZBBzCcCE04","title":"View and manage Analytics rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/view-and-manage-analytics-rules","siteSpaceId":"sitesp_QDc6d","description":"View and manage all Analytics rules","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"4GUEANZdIeSfRhXxwyaW","title":"Identity Analytics","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/identity-analytics","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"d4kcVHI4NR96inoY9mi6","title":"Identity Threat Module","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/analytics/identity-threat-module","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Analytics"}]},{"id":"VE29mNDAIgj0HERkCwo2","title":"Forensic investigations","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations","siteSpaceId":"sitesp_QDc6d","description":"Learn about forensics, how to create forensic investigations, how to create and manage data collections, and how to assess other forensic related settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"}]},{"id":"A6MOXKAdsFoiR6jJvG4S","title":"Manage an investigation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/manage-an-investigation","siteSpaceId":"sitesp_QDc6d","description":"Manage an investigation by adding collections, managing alerts, adjusting the timeline, analyzing assets and artifacts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"}]},{"id":"GXyzvf410OKsviWwYZ71","title":"Create a new investigation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/manage-an-investigation/create-a-new-investigation","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create a forensics investigation. This includes adding a collection, exporting the data collection, managing alerts and key assets & artifacts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"E705MZm2psU400awxi9Z","title":"Edit an investigation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/manage-an-investigation/edit-an-investigation","siteSpaceId":"sitesp_QDc6d","description":"Edit an existing investigation from the Forensic Investigations page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"uEsMWgBcpH8D2Jo59yhi","title":"Close an investigation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/manage-an-investigation/close-an-investigation","siteSpaceId":"sitesp_QDc6d","description":"Close an existing investigation from the Forensic Investigations page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"7VmSVtxKRdMgHF0McrEm","title":"User permissions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/manage-an-investigation/user-permissions","siteSpaceId":"sitesp_QDc6d","description":"You can assign users to the investigation for them to view and manage the investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"ygP6KHRztb0JsryOF5uX","title":"Data collection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"}]},{"id":"CHUotppXZP2gNBZvrERk","title":"Hunting","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/hunting","siteSpaceId":"sitesp_QDc6d","description":"Search for specific data across a large number of hosts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"FJDuLXCzAT15UDx1AYXx","title":"Create a hunt","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/hunting/create-a-hunt","siteSpaceId":"sitesp_QDc6d","description":"Hunt collections enable you to search endpoints for suspicious activity to contribute to helping resolve the investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Hunting"}]},{"id":"l3tA64ZT9NWQWGk946Bu","title":"Hunt results","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/hunting/hunt-results","siteSpaceId":"sitesp_QDc6d","description":"The hunt results page consolidates information collected by the Cortex XDR agent enabling you to investigate and take action on your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Hunting"}]},{"id":"kTDqsXxuyugO61GM5N51","title":"Hunt status","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/hunting/hunt-status","siteSpaceId":"sitesp_QDc6d","description":"In the Actions table, you can scroll or use the filters to see the status of any search within a hunt across any of the targeted endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Hunting"}]},{"id":"mWEmN36GXy686J8kbiJQ","title":"Triage","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/triage","siteSpaceId":"sitesp_QDc6d","description":"Triage collection gathers a wide range of artifacts that can be used to help understand the event that occurred on an endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"xZVrMHABT0MeFCJWTPVq","title":"Create a triage","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/triage/create-a-triage","siteSpaceId":"sitesp_QDc6d","description":"Triage collections enable you to obtain additional information for certain activities that have occurred on the endpoints. This helps towards the forensics analytics of an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"iKSGawdxyFNMXfAQeQkf","title":"Upload an offline triage package","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/triage/upload-an-offline-triage-package","siteSpaceId":"sitesp_QDc6d","description":"Use the Upload Offline Triage to upload archives containing forensic data collected by the offline collector.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"SogxEXMXFE4eDd9FMOZZ","title":"Offline triage collection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/triage/offline-triage-collection","siteSpaceId":"sitesp_QDc6d","description":"Offline triage collection is supported for endpoints with no network connection or no Cortex XDR agent currently installed.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"TPIWmQ7aSIsDbIxQCsgt","title":"Triage results","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/triage/triage-results","siteSpaceId":"sitesp_QDc6d","description":"You can drill down from the triage collection to review the results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"y4C0d0p2sUqaa8sJ9998","title":"Triage status","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/data-collection/triage/triage-status","siteSpaceId":"sitesp_QDc6d","description":"From the Actions table, you can view the search status of all the artifacts for the triage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Data collection"},{"label":"Triage"}]},{"id":"0ollhczzsjM2GLtamtMA","title":"Analysis and documentation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/analysis-and-documentation","siteSpaceId":"sitesp_QDc6d","description":"Learn more about your investigation by reviewing the additional data for analysis and documentation purposes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"}]},{"id":"n94yeo2n1Dq1WZ80mVLd","title":"Review alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/analysis-and-documentation/review-alerts","siteSpaceId":"sitesp_QDc6d","description":"The alerts table displays all the collections within the investigation that has identified suspicious or malicious activity within the forensics data sets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"qxCNbfxNc3Vl3yUvFJEa","title":"Investigation timeline","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/analysis-and-documentation/investigation-timeline","siteSpaceId":"sitesp_QDc6d","description":"Investigation timeline shows the tagged forensic artifacts that were tagged. The tags display details of the forensic data collected from the endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"9IEhvJ1C7KvLHcL6tmk4","title":"Key assets & artifacts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/analysis-and-documentation/key-assets-and-artifacts","siteSpaceId":"sitesp_QDc6d","description":"Displays the forensic investigation based on the tagged data and aligns it to the corresponding category.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"YIQslJqvGOXNhtdQwojN","title":"Export","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/forensic-investigations/export","siteSpaceId":"sitesp_QDc6d","description":"Select the export option to export data collection for long-term retention or offline analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Forensic investigations"}]},{"id":"zaXhAIe6O43oFPo8i85F","title":"Asset management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"}]},{"id":"izNEMhmptI3e9a28BZTB","title":"Vulnerability Assessment","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/vulnerability-assessment","siteSpaceId":"sitesp_QDc6d","description":"Perform a vulnerability assessment of all endpoints in your network using Cortex XDR. This includes CVE, endpoint, and application analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"}]},{"id":"3t6Wng42JUbeRTXD2R7C","title":"Network configuration","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/network-configuration","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR Network Configuration provides a representation of your network assets by collecting and analyzing your network resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"}]},{"id":"cBEIjZQBxPbNf3xRwL40","title":"Configure your network parameters","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/network-configuration/configure-your-network-parameters","siteSpaceId":"sitesp_QDc6d","description":"Define the IP address ranges and domain names used by Cortex XDR to identify your network assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Network configuration"}]},{"id":"Z9vxokUfmAylPCbH4xxe","title":"Cloud Compliance","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/cloud-compliance","siteSpaceId":"sitesp_QDc6d","description":"Learn more about Cloud Compliance in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"}]},{"id":"EsSvUpe8BuTMx2hEAi2W","title":"Manage Asset Scores","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/manage-asset-scores","siteSpaceId":"sitesp_QDc6d","description":"Learn how to view and investigate User Scores and Host Scores using the Asset Scores page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"}]},{"id":"PRBr1dWe3RsBDVzTicQh","title":"Asset Inventory","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/asset-inventory","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console, you can manage your different network assets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"}]},{"id":"RohT0SaZ4xrWBrs4hOd8","title":"All Assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/asset-inventory/all-assets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to view all external assets from the various asset categories on the All Assets page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Asset Inventory"}]},{"id":"WSMRuHWKsi6zfYQ108fR","title":"Specific Assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/asset-inventory/specific-assets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to view specific external assets from a designated assets category in the Specific Assets page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Asset Inventory"}]},{"id":"cjdRsvIc59yj2PTrU1hz","title":"Asset Roles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/asset-roles","siteSpaceId":"sitesp_QDc6d","description":"View asset roles and the number of assets that are associated with each role. Learn how to manage asset roles for users and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"}]},{"id":"1gqPL8QuNOWcxMif0JNe","title":"Manage Asset Roles for Users","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/asset-roles/manage-asset-roles-for-users","siteSpaceId":"sitesp_QDc6d","description":"Learn how to edit the user lists assigned to asset roles.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Asset Roles"}]},{"id":"8wVnbmFFpF2cqaPsSeZd","title":"Honey user","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/asset-roles/manage-asset-roles-for-users/honey-user","siteSpaceId":"sitesp_QDc6d","description":"Honey users are decoy users designed to attract potential attackers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Asset Roles"},{"label":"Manage Asset Roles for Users"}]},{"id":"UUvjuSIEekk7buq3gPbi","title":"Manage Asset Roles for Endpoints","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/asset-roles/manage-asset-roles-for-endpoints","siteSpaceId":"sitesp_QDc6d","description":"Learn how to edit the host lists assigned to asset roles.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Asset Roles"}]},{"id":"XurQOLoQxzTAC9sGnf22","title":"Cloud Inventory Assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/cloud-inventory-assets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR provides a unified, normalized asset inventory for cloud assets to provide deeper visibility and context for incident investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"}]},{"id":"VaOwrZq2z5ZltO9tVbaL","title":"All Cloud Assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/cloud-inventory-assets/all-cloud-assets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to view all your cloud assets from the various cloud assets categories on the All Cloud Assets page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Cloud Inventory Assets"}]},{"id":"j8oYktEfDpEyMhZ445aq","title":"Specific Cloud Assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/cloud-inventory-assets/specific-cloud-assets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to view specific cloud assets from a designated cloud assets category in the Specific Cloud Asset pages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Cloud Inventory Assets"}]},{"id":"U7yy5E4Smhsgigwm1P1H","title":"Manage Your Cloud Inventory Assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/asset-management/cloud-inventory-assets/manage-your-cloud-inventory-assets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR provides a central location to view and investigate information relating to inventory assets in the cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Detect threats and analyze data"},{"label":"Asset management"},{"label":"Cloud Inventory Assets"}]},{"id":"Bxxd1TfY3MBmVafqa5KV","title":"Configure incidents and alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"MTRS66MjwNIVkWo641RH","title":"External integrations","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/external-integrations","siteSpaceId":"sitesp_QDc6d","description":"Gain additional verification on key artifacts by integrating Cortex XDR with other Palo Alto Networks and third-party security products.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"}]},{"id":"1VDyiLGW9MJXJx5w0uTw","title":"Prioritize incidents with starring and scoring","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/prioritize-incidents-with-starring-and-scoring","siteSpaceId":"sitesp_QDc6d","description":"Prioritize and filter your incidents by using incident starring and incident scoring.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"}]},{"id":"y5jINzrHgElf9VGQvAr7","title":"Incident starring","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/prioritize-incidents-with-starring-and-scoring/incident-starring","siteSpaceId":"sitesp_QDc6d","description":"Starring incidents can help you to prioritize and filter your incidents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"},{"label":"Prioritize incidents with starring and scoring"}]},{"id":"82uDKKEHCzHfLt1Btijp","title":"Incident scoring","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/prioritize-incidents-with-starring-and-scoring/incident-scoring","siteSpaceId":"sitesp_QDc6d","description":"Learn about the different incident scoring methods.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"},{"label":"Prioritize incidents with starring and scoring"}]},{"id":"NY1nwLXE2cWRaz63SHj0","title":"Set up incident scoring","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/prioritize-incidents-with-starring-and-scoring/incident-scoring/set-up-incident-scoring","siteSpaceId":"sitesp_QDc6d","description":"Set up incident scoring by enabling SmartScore and defining scoring rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"},{"label":"Prioritize incidents with starring and scoring"},{"label":"Incident scoring"}]},{"id":"D6qCbqXfu7fDOos44LpZ","title":"Automation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/automation-rules","siteSpaceId":"sitesp_QDc6d","description":"Automation rules enable you to create rules comprised of alert conditions that trigger an action.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"}]},{"id":"0OjPC5zdLPdW9LX4hGLo","title":"Automation settings","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/automation-rules/automation-settings","siteSpaceId":"sitesp_QDc6d","description":"Threshold limits may be implemented for settings of automation rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"},{"label":"Automation rules"}]},{"id":"pby27x2axfpOzAhYKOuT","title":"Automation rule actions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/automation-rules/automation-rule-actions","siteSpaceId":"sitesp_QDc6d","description":"Includes the list of actions to take when the alert condition of the automation rule is triggered for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"},{"label":"Automation rules"}]},{"id":"gX4WFv7EVbVGm2SJoa9o","title":"Automation audit log","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/configure-incidents-and-alerts/automation-rules/automation-audit-log","siteSpaceId":"sitesp_QDc6d","description":"Includes the list of fields included in the automation audit log for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Configure incidents and alerts"},{"label":"Automation rules"}]},{"id":"PtpboCJb3lWKZyc94ZeK","title":"Investigate and respond to incidents","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents","siteSpaceId":"sitesp_QDc6d","description":"Learn about the Cortex XDR investigation and response operations.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"v5oZ6Rcdf5tpEytPwebm","title":"Incident handling","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/incident-handling","siteSpaceId":"sitesp_QDc6d","description":"Learn about how incidents are created, the information contained in an incident, and how to prioritize and manage incidents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"nE9B8Zc4X3tBqOZOqiJC","title":"What are incidents?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/incident-handling/what-are-incidents","siteSpaceId":"sitesp_QDc6d","description":"Learn about how incidents are created, incident terminology, incident thresholds, and incident planning and response","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Incident handling"}]},{"id":"F3Z2drKMdbJLJdWN9PYQ","title":"Understanding the Incidents page","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/incident-handling/understanding-the-incidents-page","siteSpaceId":"sitesp_QDc6d","description":"Use the Incidents page to review incident details and take remedial action.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Incident handling"}]},{"id":"euG9hHibf52rs9Yn1aaj","title":"Incidents table view reference information","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/incident-handling/understanding-the-incidents-page/incidents-table-view-reference-information","siteSpaceId":"sitesp_QDc6d","description":"Describes the fields in the table view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Incident handling"},{"label":"Understanding the Incidents page"}]},{"id":"ipAR0xmPyzRNOObnoOOd","title":"Manage incidents","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/incident-handling/manage-incidents","siteSpaceId":"sitesp_QDc6d","description":"Lean how to investigate and manage your incidents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Incident handling"}]},{"id":"MYRhRPsgSQ9tpCjtzZRQ","title":"Resolution reasons for incidents and alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/incident-handling/manage-incidents/resolution-reasons-for-incidents-and-alerts","siteSpaceId":"sitesp_QDc6d","description":"Describes the resolution reasons for incidents and alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Incident handling"},{"label":"Manage incidents"}]},{"id":"kJ3PfnkyNJ1DYn4Rta4H","title":"Investigate artifacts and assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-artifacts-and-assets","siteSpaceId":"sitesp_QDc6d","description":"You can investigate specific artifacts and assets on dedicated views related to IP address, Network Assets, and File and Process Hash information.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"bgCyT9YQmtHtZc4ON6Sa","title":"Investigate an IP address","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-artifacts-and-assets/investigate-an-ip-address","siteSpaceId":"sitesp_QDc6d","description":"Investigate incidents, connections, and threat intelligence reports related to a specific IP address on the IP View.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate artifacts and assets"}]},{"id":"pdrCDilnfrUaBNZWB6ut","title":"Investigate an asset","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-artifacts-and-assets/investigate-an-asset","siteSpaceId":"sitesp_QDc6d","description":"Investigate host assets and view host insights on the Asset View.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate artifacts and assets"}]},{"id":"28XoDSMqF1x1a60Oixi6","title":"Investigate a host","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-artifacts-and-assets/investigate-a-host","siteSpaceId":"sitesp_QDc6d","description":"Investigate host assets associated with your incidents","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate artifacts and assets"}]},{"id":"FEezVvN3UzjY74e7A5FU","title":"Investigate a file and process hash","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-artifacts-and-assets/investigate-a-file-and-process-hash","siteSpaceId":"sitesp_QDc6d","description":"Investigate incidents, actions, and threat intelligence reports related to a specific file or process hash on the Hash View.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate artifacts and assets"}]},{"id":"9icmE3d1MrMbFM1AdIo1","title":"Investigate a user","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-artifacts-and-assets/investigate-a-user","siteSpaceId":"sitesp_QDc6d","description":"Investigate user assets associated with your incidents.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate artifacts and assets"}]},{"id":"WFds0fSGqlxMsm1jnVWg","title":"Investigate alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR generates alerts to bring your attention to security risks in your framework.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"MNO79mdGsAfH62Ln6bYd","title":"Overview of the Alerts page","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/overview-of-the-alerts-page","siteSpaceId":"sitesp_QDc6d","description":"The Alerts page consolidates all non-informational alerts from your detection sources, and helps you to analyze and triage the alerts on your system.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"}]},{"id":"fvRVr35nOD2dsm2lVY3k","title":"Triage and investigate alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts","siteSpaceId":"sitesp_QDc6d","description":"You can triage, investigate, and take actions on alerts from the Alerts page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"}]},{"id":"wbkZ9RyYPvmNaNif9jln","title":"Copy alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/copy-alerts","siteSpaceId":"sitesp_QDc6d","description":"You can copy an alert into memory.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"ONFaIecmHHs8qFsCY73t","title":"Analyze an alert","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/analyze-an-alert","siteSpaceId":"sitesp_QDc6d","description":"Learn more about analyzing alerts in the alert side panel and the causality view.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"JslIjbYUfn6PeTCZR95Y","title":"Create profile exceptions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/create-profile-exceptions","siteSpaceId":"sitesp_QDc6d","description":"You can create profile exceptions for agent alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"cFWe6bXg4zIHZlBf7TPa","title":"Add a file path to a malware profile allow list","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/add-a-file-path-to-a-malware-profile-allow-list","siteSpaceId":"sitesp_QDc6d","description":"You can add a file path to an existing malware profile.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"delnHyjGCg8pa7nQT1G0","title":"Create a featured alert field","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/create-a-featured-alert-field","siteSpaceId":"sitesp_QDc6d","description":"You can label specific alert attributes as featured alert fields.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"eluRt9j1ml08Ki1cIAmV","title":"View generating BIOC or IOC rule","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/view-generating-bioc-or-ioc-rule","siteSpaceId":"sitesp_QDc6d","description":"You can view the BIOC or IOC rules that generated alerts directly from the Alerts table.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"u9fSQc79yWXYGJTjHDNy","title":"Retrieve additional alert details","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/retrieve-additional-alert-details","siteSpaceId":"sitesp_QDc6d","description":"Access additional information relating to an alert, including related files and memory content analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"gR9i35DPXyMjNh5VkIw4","title":"Alert deduplication","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/alert-deduplication","siteSpaceId":"sitesp_QDc6d","description":"Learn about how Cortex XDR deduplicates alerts","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"rFLffeC8BjcwwFibNoPx","title":"Export alert details to a file","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/export-alert-details-to-a-file","siteSpaceId":"sitesp_QDc6d","description":"You can review alert details offline by exporting alerts to a TSV file.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"nvMDRmspemvkERPgkWNt","title":"Exclude an alert","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/exclude-an-alert","siteSpaceId":"sitesp_QDc6d","description":"You can exclude alerts that are not deemed to be a threat.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"M8EMdxB4gvlnxQfv6Wne","title":"Investigate contributing events","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/investigate-contributing-events","siteSpaceId":"sitesp_QDc6d","description":"You can investigate the events created by an alert.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"wIRw21TH0FYAhseSg0do","title":"Query incident and alert data","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/query-incident-and-alert-data","siteSpaceId":"sitesp_QDc6d","description":"You can run queries on incident and alert data with the incidents and alerts datasets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"8gGbTsc7MouzCqqrVq0p","title":"Manage automation rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/triage-and-investigate-alerts/manage-automation-rules","siteSpaceId":"sitesp_QDc6d","description":"Procedure of how to manage the automation rules of Cortex XDR as needed, which includes to edit, save as new, disable, delete or copy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Triage and investigate alerts"}]},{"id":"JgRjHC974SHAVyLzkeba","title":"Alert investigation views","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views","siteSpaceId":"sitesp_QDc6d","description":"From the Alerts page, you can pivot on an alert to open the alert investigation views.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"}]},{"id":"NzL54h6JGpI297HGBpKL","title":"Alert side panel","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views/alert-side-panel","siteSpaceId":"sitesp_QDc6d","description":"The alert side panel provides detailed information about alerts at a glance and in the context of the incident.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Alert investigation views"}]},{"id":"46gzsFtQ2M89hlVMIJ1v","title":"Causality view","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views/causality-view","siteSpaceId":"sitesp_QDc6d","description":"See the causality of an alert—the entire process execution chain that led up to the alert in the Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Alert investigation views"}]},{"id":"XMDTFSoK98TMZKrPW7JT","title":"Network causality view","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views/network-causality-view","siteSpaceId":"sitesp_QDc6d","description":"The network causality view shows a chain of individual network processes that together and in a particular sequence of operation triggered an alert.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Alert investigation views"}]},{"id":"N8ieGZ2spNG4FLdBcwOU","title":"Cloud causality view","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views/cloud-causality-view","siteSpaceId":"sitesp_QDc6d","description":"See the causality of a cloud-type alert—the entire process execution chain that led up to the alert in the Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Alert investigation views"}]},{"id":"WmxYd12l4lrQjSwPp3KI","title":"SaaS causality view","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views/saas-causality-view","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the SaaS causality view used to identify and investigate SaaS-specific data associated with SaaS-related alerts and SaaS audit logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Alert investigation views"}]},{"id":"01gnv5LMazkUQfwmj94i","title":"Analytics alert view","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views/analytics-alert-view","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console, you can view a detailed summary of the behavior that triggered analytics alerts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Alert investigation views"}]},{"id":"dozYjwq1I2IoO9FuaZsw","title":"Timeline","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-alerts/alert-investigation-views/timeline","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR tenant you can view the sequence (or timeline) of events and alerts that are involved in any particular threat.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate alerts"},{"label":"Alert investigation views"}]},{"id":"LXjocAqYgel0eFKxPw4o","title":"Investigate endpoints","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints","siteSpaceId":"sitesp_QDc6d","description":"You can investigate and take actions on your endpoints in the Action Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"t1z4VijdBk4CiyI7HP5s","title":"Overview of the Action Center","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/overview-of-the-action-center","siteSpaceId":"sitesp_QDc6d","description":"From the Action Center, you can track the progress of all investigation, response, and maintenance actions performed on your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"}]},{"id":"Y0fSCrlUKd4ubTXkZZWN","title":"Initiate and monitor endpoint actions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/overview-of-the-action-center/initiate-and-monitor-endpoint-actions","siteSpaceId":"sitesp_QDc6d","description":"Take these steps to initiate and monitor actions on your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"29zpyqSuVJRyJgHTZX0w","title":"Action Center reference information","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/overview-of-the-action-center/action-center-reference-information","siteSpaceId":"sitesp_QDc6d","description":"See descriptions of the fields in the Action Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"cqhTxFYF9PesoAtah2lh","title":"Manage endpoints","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/manage-endpoints","siteSpaceId":"sitesp_QDc6d","description":"You can view and take actions on endpoints on the All Endpoints page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"}]},{"id":"HS7FVEC9vTir9GcZLZOT","title":"Retrieve files from an endpoint","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/retrieve-files-from-an-endpoint","siteSpaceId":"sitesp_QDc6d","description":"You can retrieve files from one or more endpoints by initiating a files retrieval request.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"}]},{"id":"C6BrQY3hxG7iBASmhqsK","title":"Retrieve support logs from an endpoint","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/retrieve-support-logs-from-an-endpoint","siteSpaceId":"sitesp_QDc6d","description":"Retrieve support logs from an endpoint when additional forensic data is needed.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"}]},{"id":"GMAeBnPFVajxLJySH47x","title":"Retrieve support file password","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/retrieve-support-file-password","siteSpaceId":"sitesp_QDc6d","description":"Learn how to retrieve the password to access files from the Tech Support File (TSF), which is generated in a zip format protected by an encrypted password.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"}]},{"id":"qSwi5XibLeYGPvOBLXX1","title":"Scan an endpoint for malware","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-endpoints/scan-an-endpoint-for-malware","siteSpaceId":"sitesp_QDc6d","description":"The agent can scan your Windows and Mac endpoints and attached removable drives for dormant malware that is not actively attempting to run.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate endpoints"}]},{"id":"30vjD5u5gzD87cMusKJr","title":"Investigate files","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-files","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"UZxBcfPA8SlMkCKQ6fBY","title":"Manage file execution","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-files/manage-file-execution","siteSpaceId":"sitesp_QDc6d","description":"Set rules for the execution (or running) of particular files on your endpoints in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate files"}]},{"id":"gJpMWrQxJOeeyCsb7Aej","title":"Manage quarantined files","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-files/manage-quarantined-files","siteSpaceId":"sitesp_QDc6d","description":"You can review and manage all files that have been quarantined by the agent due to a security incident.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate files"}]},{"id":"gcozm10AVCzFZvqi1zUg","title":"Review WildFire analysis details","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-files/review-wildfire-analysis-details","siteSpaceId":"sitesp_QDc6d","description":"For each file, Cortex XDR receives a file verdict and the WildFire Analysis Report detailing additional information you can use to assess the nature of a file.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate files"}]},{"id":"tBpt2naAbqz7YnvPFXjK","title":"Import file hash exceptions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/investigate-files/import-file-hash-exceptions","siteSpaceId":"sitesp_QDc6d","description":"You can import file hash exceptions from the Endpoint Security Manager or from external feeds.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Investigate files"}]},{"id":"Geg19TpSMEqf5MTFgKzE","title":"Response actions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions","siteSpaceId":"sitesp_QDc6d","description":"As a result of an incident investigation, different response actions are possible.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"W2SZwxR3npjZVV8Jc7bp","title":"Initiate a Live Terminal session","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/initiate-a-live-terminal-session","siteSpaceId":"sitesp_QDc6d","description":"Initiate a Live Terminal session from the Cortex XDR management console to control the endpoint remotely.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"Ea7yjEh7LYTK5mGa4x0e","title":"Isolate an endpoint","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/isolate-an-endpoint","siteSpaceId":"sitesp_QDc6d","description":"In the event that an endpoint is compromised, you can immediately isolate it to reduce an attacker’s mobility.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"UqVFAjZnoO385oPxbVTR","title":"Pause endpoint protection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/pause-endpoint-protection","siteSpaceId":"sitesp_QDc6d","description":"Disable the Cortex XDR agent protection capabilities on an endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"HMlm0r9AommRBCCpX5aO","title":"Remediate changes from malicious activity","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/remediate-changes-from-malicious-activity","siteSpaceId":"sitesp_QDc6d","description":"You can obtain action remediation suggestions from Cortex XDR about malicious causality chains that have been detected.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"erRuphcvvND5elCtA86k","title":"Run scripts on an endpoint","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/run-scripts-on-an-endpoint","siteSpaceId":"sitesp_QDc6d","description":"Execute Python scripts from Cortex XDR directly on the endpoint to perform actions, retrieve data, and retrieve files.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"b0E659TfryP9e8ZmCxDg","title":"Search and destroy malicious files","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/search-and-destroy-malicious-files","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to effectively hunt down any identified malicious file that may exist on any of your endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"BqBhy8EoNpDXpSw3J1EL","title":"Manage external dynamic lists","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/manage-external-dynamic-lists","siteSpaceId":"sitesp_QDc6d","description":"Configure and manage your external dynamic lists in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"OKeibtQB85sWx744dZiE","title":"Collect a memory image","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/response-actions/collect-a-memory-image","siteSpaceId":"sitesp_QDc6d","description":"Collect a memory image from a Windows endpoint.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Response actions"}]},{"id":"XeJXqQsYrcGGViUYn2Vu","title":"Build XQL queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"no7p9sexQWcKxImjvjk5","title":"About the Query Builder","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_QDc6d","description":"The Query Builder facilitates threat detection, incident expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"}]},{"id":"Csix2XbTl3Oz0PBiYOvS","title":"How to build XQL queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"}]},{"id":"s7I0m3PFIuZK9JojR7A6","title":"Get started with XQL queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn more about some important information before getting started with XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"pI4r1VyCoRceV7Eorl02","title":"Useful XQL user interface features","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_QDc6d","description":"Learn about useful XQL query features in the user interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"m4wYEQVVKq4ImbPXcFsW","title":"XQL Query best practices","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_QDc6d","description":"Learn about best practices for streamlining XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"vIL6iM236sMZNKwTnRIL","title":"Expected results when querying fields","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_QDc6d","description":"Learn what to expect in the query results when querying fields.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"WTzPX6jzuPSyVJ8AA5SZ","title":"Create XQL query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create queries using the Cortex Query Language (XQL).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"otjQ4dH2sZIqNAqOK0xA","title":"Review XQL query results","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_QDc6d","description":"Learn more about reviewing the results returned from an XQL query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"1kh7X3pufhTXCl7pnlaj","title":"Translate to XQL","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_QDc6d","description":"Learn how to translate your Splunk queries to XQL queries in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"rbcdSi65RpANIWdJZGo5","title":"Graph query results","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to generate helpful visualizations of your XQL query results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"7Qq0Lxp3gzajxmUsqJC2","title":"XQL query entities","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language (XQL) entities available in the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"}]},{"id":"nfx4Rp2bw4ZPF1xzrBL2","title":"Create authentication query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-authentication-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate any authentication activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"iqlGHqOBYghzYZMLosbd","title":"Create event log query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-event-log-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate Windows and Linux event log attributes and investigate event logs across endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"xWZG6l4I1NEnqeXsEiDm","title":"Create file query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-file-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate the connections between file activity and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"ZEj5smMQTzcVyV5OmVt5","title":"Create image load query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-image-load-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about create a query to investigate the connections between image load activity, acting processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"njzpfzCQruYBZNRQ7h2G","title":"Create network connections query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-network-connections-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate the connections between firewall logs, endpoints, and network activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"AOTzFZydiLOA3gspa9z1","title":"Create network query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-network-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate the connections between network activity, acting processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"umcS5iEQ8q0P9CBoMrHU","title":"Create process query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-process-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate connections between processes, child processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"37nZgM3EovOIbQK9lS10","title":"Create registry query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/create-registry-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate connections between registry activity, processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"5BYnMi4o1ysfzhO6SZaE","title":"Query across all entities","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/xql-query-entities/query-across-all-entities","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console, you can search for endpoints and processes across all endpoint activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"dxXVubFTkAiTzZsPEPny","title":"Overview of the Query Center","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_QDc6d","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"}]},{"id":"OgaHgK1i3xjxrDISvVxE","title":"Edit and rerun queries in Query Center","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/overview-of-the-query-center/edit-and-rerun-queries-in-query-center","siteSpaceId":"sitesp_QDc6d","description":"Learn more about viewing the results of a query, modifying a query, and rerunning queries from Query Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"8aS17Gx4TaFkF6H2YDWE","title":"Query Center reference information","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/overview-of-the-query-center/edit-and-rerun-queries-in-query-center/query-center-reference-information","siteSpaceId":"sitesp_QDc6d","description":"Descriptions of the fields in the Query Center table.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"},{"label":"Edit and rerun queries in Query Center"}]},{"id":"WXl7c2noMqDhtL1hkRh1","title":"Manage scheduled queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"}]},{"id":"4Oc3gPXpdOO47QiASLii","title":"Scheduled Queries reference information","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_QDc6d","description":"Descriptions of the fields in the Scheduled Queries table.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"1Ff7IyxDI1kBuScurgVG","title":"Manage your personal query library","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR provides as part of the Query Library a personal library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Build XQL queries"}]},{"id":"MLVEFVKqTh7V2mJbwZZE","title":"Dashboards","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR dashboards help you to monitor system activity in your environment. You can use any of the predefined dashboards that are provided in Cortex XDR, or you can create your own custom dashboard","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"nzDUweXiBqLAyg6DGWAX","title":"About dashboards","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/about-dashboards","siteSpaceId":"sitesp_QDc6d","description":"Dashboards help you to monitor system activity in your environment. Select a dashboard from the drop-down menu, or take actions on your dashboards from the Dashboard Manager.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"}]},{"id":"YOjzdtiNuQNmiKSJcd2s","title":"Predefined dashboards","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/predefined-dashboards","siteSpaceId":"sitesp_QDc6d","description":"Predefined dashboards are set up to help you monitor different aspects of your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"}]},{"id":"5Br7bym11lrEJt36mrVQ","title":"Custom dashboards","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards","siteSpaceId":"sitesp_QDc6d","description":"Custom dashboards can support your day-to-day operations by providing options that are tailored to your unique workflow.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"}]},{"id":"NIdaJQMEp20iOMFFdjca","title":"Build a custom dashboard","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/build-a-custom-dashboard","siteSpaceId":"sitesp_QDc6d","description":"Build customized dashboards to display and filter the information that is most relevant to you.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Custom dashboards"}]},{"id":"pFW7HjkkWthG8jXRG1D4","title":"Manage your Widget Library","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/manage-your-widget-library","siteSpaceId":"sitesp_QDc6d","description":"Create, search, and view custom widgets in Cortex XDR, or use predefined widgets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Custom dashboards"}]},{"id":"2YymESSDU6vNjscYEuvT","title":"Create a text widget","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/create-a-text-widget","siteSpaceId":"sitesp_QDc6d","description":"Create a text-based widget to present information in a dashboard or report. Markdown is supported for formatting.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Custom dashboards"}]},{"id":"Cx8XcwSIHcsMMdjTpDIM","title":"Create custom XQL widgets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/create-custom-xql-widgets","siteSpaceId":"sitesp_QDc6d","description":"You can create custom XQL widgets based on a Cortex Query Language (XQL) query, and add parameters that you can configure as fixed filters or dashboard drilldowns.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Custom dashboards"}]},{"id":"wrZrKBZudiSBW2Q7rUvl","title":"Configure fixed dashboard filters","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/configure-fixed-dashboard-filters","siteSpaceId":"sitesp_QDc6d","description":"Configure fixed filters that enable dashboard users to alter the scope of the dashboard by selecting predefined and dynamic values.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Custom dashboards"}]},{"id":"nvfQzs1UUh5hxjYGtGGr","title":"Configure dashboard drilldowns","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/configure-dashboard-drilldowns","siteSpaceId":"sitesp_QDc6d","description":"Configure drilldowns on custom dashboards to provide users with interactive data insights when clicking on data points in a widget","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Custom dashboards"}]},{"id":"KVAgSRVBARHwnEKn293R","title":"Variables in drilldowns","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/configure-dashboard-drilldowns/variables-in-drilldowns","siteSpaceId":"sitesp_QDc6d","description":"Learn about the widget variable values that you can use in dashboard drilldowns.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Custom dashboards"},{"label":"Configure dashboard drilldowns"}]},{"id":"DvojswLkr6khBs0z70WD","title":"Reports","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/reports","siteSpaceId":"sitesp_QDc6d","description":"Create, edit, and customize reports in Cortex XDR. Schedule reports with Cron expressions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"}]},{"id":"9s8hBUehmlvmtVkErM5g","title":"Report templates","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/reports/report-templates","siteSpaceId":"sitesp_QDc6d","description":"View, import, export, create, and modify report templates","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Reports"}]},{"id":"waqf8lAI8t4VO6OMNXbm","title":"Run or schedule reports","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/reports/run-or-schedule-reports","siteSpaceId":"sitesp_QDc6d","description":"You can run reports that are based on dashboard templates, or you can create reports from scratch.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"},{"label":"Dashboards"},{"label":"Reports"}]},{"id":"TXGzqBXwhnYu8nhYMNEj","title":"Quick Launcher","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/quick-launcher","siteSpaceId":"sitesp_QDc6d","description":"The Quick Launcher provides a quick, in-context shortcut that you can use to search for information, perform common investigation tasks, or initiate actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"SDGFSQqKp56ffG21eU0m","title":"Research a known threat","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/research-a-known-threat","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to investigate any threat, also referred to as a lead, which has been detected.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Investigate and respond to incidents"}]},{"id":"ENKAzFyQripNyl2LF4nS","title":"Data management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"iZqs4cZOZ6mEgIzNkd6d","title":"Broker VM","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm","siteSpaceId":"sitesp_QDc6d","description":"Set up a Broker VM to establish a secure connection in which you can route your endpoints, and collect and forward logs and files for analysis.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"}]},{"id":"mu7JIcyuAcF97Jhytffs","title":"What is the Broker VM?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/what-is-the-broker-vm","siteSpaceId":"sitesp_QDc6d","description":"Learn about the Cortex XDR Broker virtual machine (VM) and why use it in your network configuration.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"fkNL3r14bCeZpXnygTKl","title":"Set up and configure Broker VM","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to set up and configure a Broker VM as a standalone broker or add the broker to a high availability (HA) cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"RErpcDqsz0ApsD9dUl1g","title":"Broker VM image installations","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Broker VM image types available that are compatible with your viirtual machine (VM).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"UXSw5pHS3kGUsCSsLqVa","title":"Set up Broker VM on Alibaba Cloud","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-alibaba-cloud","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up your Cortex XDR Broker virtual machine (VM) on Alibaba Cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"3s4jIMhYtBrrmfH2mBeg","title":"Set up Broker VM on Amazon Web Services","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-amazon-web-services","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up your Cortex XDR Broker virtual machine (VM) on AWS.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"Vqjbr6yVWZpW3EKLLW3J","title":"Set up Broker VM on Google Cloud Platform (GCP)","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-google-cloud-platform-gcp","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to set up your Cortex XDR Broker VM on Google Cloud Platform.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"Ve8DGXIeShojQse9jAYG","title":"Set up Broker VM on KVM using Ubuntu","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-kvm-using-ubuntu","siteSpaceId":"sitesp_QDc6d","description":"Learn set up your Cortex XDR Broker virtual machine (VM) on a KVM using Ubuntu.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"FiaZjEjdZ4ROvtFSempx","title":"Set up Broker VM on Microsoft Azure","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-azure","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up your Cortex XDR Broker virtual machine (VM) on Microsoft Azure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"E7zNShFOmdVuY1ej545q","title":"Set up Broker VM on Microsoft Hyper-V","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-hyper-v","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up your Cortex XDR Broker virtual machine (VM) on Microsoft Hyper-V.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"vEwStY0Vbg1P5IUc7Oh0","title":"Set up Broker VM on Nutanix Hypervisor","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-nutanix-hypervisor","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up your Cortex XDR Broker virtual machine (VM) on Nutanix Hypervisor.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"oY6GT99pGVm1It8ffO71","title":"Set up Broker VM on VMware ESXi using vSphere Client","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-vmware-esxi-using-vsphere-client","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to set up you Cortex XDR Broker VM on VMware ESXi.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"s4hVQbftUcd46EjeYCEN","title":"Broker VM data collector applets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the different Broker VM data collector applets available to configure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"H4mIntMRWqdZ0tErtIUQ","title":"Activate Apache Kafka Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-apache-kafka-collector","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating the Broker VM with an Apache Kafka Collector applet.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"TGhTFXWH3Mt6G8cB65tz","title":"Activate CSV Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-csv-collector","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating the Broker VM with a CSV Collector applet.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"sFACfDwnIyqT4nOTfJqE","title":"Activate Database Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-database-collector","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating a Broker VM with a Database Collector applet.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"py7rJpJ6RSbu4YNHAmeE","title":"Activate Files and Folders Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-files-and-folders-collector","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating a Broker VM with a Files and Folders Collector applet.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"hjKjnoZu1OcvxzJIPmZi","title":"Activate FTP Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-ftp-collector","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating a Broker VM with a FTP Collector applet.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"Gr9eZa2DCmyx9kkVVlOL","title":"Activate Local Agent Settings","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-local-agent-settings","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating a Local Agent Settings applet on a Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"iMCuDbPa3fDKy4zzL0um","title":"Activate NetFlow Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-netflow-collector","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating a Broker VM with a NetflFlow Collector applet.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"AgRa4lQb9ontaUSOgrws","title":"Activate Network Mapper","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-network-mapper","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating the Network Mapper to scan your network.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"RaOMFkPcxhKTyXD7Ibje","title":"Activate Syslog Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-syslog-collector","siteSpaceId":"sitesp_QDc6d","description":"Learn how to set up and activate the Syslog Collector applet on a Broker VM within your network.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"Xt9UApzXJQ2jAGv2WXdQ","title":"Activate Windows Event Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-windows-event-collector","siteSpaceId":"sitesp_QDc6d","description":"Set up your Windows Event Collector to connect with the Cortex XDR Broker VM and collect events.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"}]},{"id":"6MLKq0fzcHOipP3TzAin","title":"Activate Windows Event Collector on Windows Core","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-windows-event-collector/activate-windows-event-collector-on-windows-core","siteSpaceId":"sitesp_QDc6d","description":"Learn more about activating the Windrows Event Collector on Windows Core OS to connect with the Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"JoscvBQNXIXqZDijBAOp","title":"Renew WEC certificates","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets/activate-windows-event-collector/renew-wec-certificates","siteSpaceId":"sitesp_QDc6d","description":"Learn more about renewing your WEC certificates in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"2HSQOw9He7to1Nqob054","title":"Manage Broker VM","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm","siteSpaceId":"sitesp_QDc6d","description":"Learn more about managing your Broker VMs from the management console.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"LrtVddI2R5fhXh0XBEKv","title":"Edit Broker VM Configuration","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/edit-broker-vm-configuration","siteSpaceId":"sitesp_QDc6d","description":"Learn more about editing the configuration of a Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"h95SvCJheUSbnyzTMjFE","title":"Increase Broker VM storage allocated for data caching","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-caching","siteSpaceId":"sitesp_QDc6d","description":"Learn more about increasing the storage allocated for data caching in the Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"QvDp9owC8F8Ru6hpGLmM","title":"Monitor Broker VM using Prometheus","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/monitor-broker-vm-using-prometheus","siteSpaceId":"sitesp_QDc6d","description":"Learn more on monitoring the Broker VM using Prometheus.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"kgTwoOdZQt2YPpbIrF1f","title":"Collect Broker VM Logs","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/collect-broker-vm-logs","siteSpaceId":"sitesp_QDc6d","description":"Learn more about collecting logs from a Broker VM to review them as part of an investigation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"yMliCj4ALpXI5oUmNLFL","title":"Upgrade Broker VM","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/upgrade-broker-vm","siteSpaceId":"sitesp_QDc6d","description":"Learn more about upgrading the Broker VM from the Cortex XDR management console.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"cphoEVAJH9X9EXH90atw","title":"Update Broker VM applets independently","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/update-broker-vm-applets-independently","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"gDPQlIYnRG0LzBitMFAY","title":"Import Broker VM Configuration","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/import-broker-vm-configuration","siteSpaceId":"sitesp_QDc6d","description":"Learn more about importing one Broker VM configuration to another.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"BrPO9q51iSNJiztvWOh7","title":"Open Live Terminal","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/open-live-terminal","siteSpaceId":"sitesp_QDc6d","description":"Learn more about remotely connecting to a Cortex XDR Broker VM.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"7JUdkw5q0gkDnffQhOze","title":"Add Broker VM to cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/add-broker-vm-to-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn more about adding a Broker VM to a high availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"cxPWjTNVwrBgzPNsvGcB","title":"Switchover Primary Node in Cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/switchover-primary-node-in-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learning more about changing the role of the current Primary node in a HA cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"RtpmJcV41nZGmAdhpEQ0","title":"Remove from Cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/remove-from-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn more about removing a Broker VM node from a high availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"PYLYmpgXbBupSdArcBv4","title":"Broker VM High Availability Cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating Broker VMs in a High Availability cluster","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"4p0cONmOSxQoVYdJ3ND2","title":"Configure High Availability Cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/configure-high-availability-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn how to configure a High Availablity Cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"dFJLCtyN0SdLffq78hNm","title":"Manage Broker VM clusters","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters","siteSpaceId":"sitesp_QDc6d","description":"Learn more about managing your broker VM clusters from the Clusters tab of the Broker VMs page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"6nx2fzgg5IGRj7VjDzJt","title":"View cluster details","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/view-cluster-details","siteSpaceId":"sitesp_QDc6d","description":"Learn more about viewing the details of any particular cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"OxSjQZCP4x7Z64AY7hNM","title":"Edit cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/edit-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn how to edit a High Availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"AINLWfiL35y4PBRJVD6U","title":"Add applet to cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-applet-to-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn more about adding an applet to a High Availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"fYqERxxuTIoFdaTk7m5E","title":"Add Broker VM to cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-broker-vm-to-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn more about adding a Broker VM to a high availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"CJ9DjTQbn5jDrGgitgTJ","title":"Remove cluster","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/remove-cluster","siteSpaceId":"sitesp_QDc6d","description":"Learn more about removing a high availability cluster.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"pXRFed2pCyC8NPWfPc5T","title":"Manage Broker VM data collector applets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm-data-collector-applets","siteSpaceId":"sitesp_QDc6d","description":"Learn more about managing your Broker VM data collector applets from the Broker VMs page.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"6W4BcqCuCwJ4Q01xIyyH","title":"Broker VM notifications","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-notifications","siteSpaceId":"sitesp_QDc6d","description":"Learn about the notifications that are relevant to Cortex XDR Broker VMs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"8RrVS8hPrZKBdQMhuwZB","title":"Monitor Broker VM activity","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/monitor-broker-vm-activity","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the monitored Cortex XDR Broker VM activities.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"rOjHbehUMN8K6pQGh34u","title":"Troubleshoot Broker VM applet errors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/troubleshoot-broker-vm-applet-errors","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to verify the Broker VM applet application, connectivity, and processing errors and troubleshoot.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"jFGEhvdBP3NQqNT3vnBu","title":"XDR Collectors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors","siteSpaceId":"sitesp_QDc6d","description":"Learn how XDR Collectors can be used for on-premise data collection on Windows and Linux machines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"}]},{"id":"XulxVWgXVsxCUsD1mXM7","title":"XDR Collector audit logs","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/xdr-collector-audit-logs","siteSpaceId":"sitesp_QDc6d","description":"Learn more about XDR Collector audit logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"njLokAyN17G9DvcBtPwa","title":"XDR Collector machine requirements and supported operating systems","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/xdr-collector-machine-requirements-and-supported-operating-systems","siteSpaceId":"sitesp_QDc6d","description":"Learn about the supported operating systems and requirements for the collector machines used for the Cortex XDR Collectors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"PxYDKSTjbDbwCO6BA9so","title":"Resources required to enable access to XDR Collectors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/resources-required-to-enable-access-to-xdr-collectors","siteSpaceId":"sitesp_QDc6d","description":"Depending on your network environment settings, you should enable network access to the Cortex XDR Collectors resources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"HoYbks2JCqAGlGHD9IKE","title":"Manage XDR Collectors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors","siteSpaceId":"sitesp_QDc6d","description":"Manage Cortex XDR collectors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"3TEi2TeqMEAXAIfLypwA","title":"Configure the XDR Collector upgrade scheduler","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/configure-the-xdr-collector-upgrade-scheduler","siteSpaceId":"sitesp_QDc6d","description":"You can configure the Cortex XDR Collector upgrade scheduler and the number of parallel upgrades.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"BsKBfsIjZMiZyJNT6Jpv","title":"Create an XDR Collector installation package","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/create-an-xdr-collector-installation-package","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create an XDR Collector installation package for a Windows or Linux collector machine.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"fyQPhu3sNYyYHwGuHuT4","title":"Install the XDR Collector installation package for Windows","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows","siteSpaceId":"sitesp_QDc6d","description":"Learn about the Cortex XDR Collector installation options on Windows collector machines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"2N3fM664ehqlBupOaUdt","title":"Install the XDR Collector on Windows using the MSI","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-the-msi","siteSpaceId":"sitesp_QDc6d","description":"Learn how to install the Cortex XDR Collector on Windows using the MSI.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"q2dcDvDXJPP88evqETXP","title":"Install the XDR Collector on Windows using Msiexec","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-msiexec","siteSpaceId":"sitesp_QDc6d","description":"Learn how to install the Cortex XDR Collectors on Windows using the Msiexec.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"xy77BmeUF3eDHhi5lob1","title":"Install the XDR Collector installation package for Linux","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-linux","siteSpaceId":"sitesp_QDc6d","description":"Learn how to install the Cortex XDR Collector on Linux collector machines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"5ogzJH6BgahRlAbg0h3E","title":"XDR Collectors installation resource for Windows and Linux","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/xdr-collectors-installation-resource-for-windows-and-linux","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR Collectors installation resource for Windows and Linux.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"GGgqudrHa4MPbV0biux1","title":"Set an application proxy for XDR Collectors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/set-an-application-proxy-for-xdr-collectors","siteSpaceId":"sitesp_QDc6d","description":"You can set an application-specific proxy for a Cortex XDR Collector without affecting the communication of other applications on the collector machine.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"T1Wh4OXoBBGANuh0Nc3M","title":"Upgrade XDR Collectors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/upgrade-xdr-collectors","siteSpaceId":"sitesp_QDc6d","description":"You can upgrade the Cortex XDR Collector software by using the appropriate method for the collector machine operating system.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"zI2IATaHyZNaYlHAgLf9","title":"Uninstall the XDR Collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/uninstall-the-xdr-collector","siteSpaceId":"sitesp_QDc6d","description":"You can uninstall the Cortex XDR Collector from one or more Windows or Linux collector machines at any time.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"ydcOYHMjjh4Yx5zKKP5X","title":"Set an alias for an XDR Collector machine","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/manage-xdr-collectors/set-an-alias-for-an-xdr-collector-machine","siteSpaceId":"sitesp_QDc6d","description":"Configure an alias to identify one or more collector machines by a name that is different from the collector machine hostname.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"KBf9KoXBML15mhkEKXAZ","title":"Define XDR Collector machine groups","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/define-xdr-collector-machine-groups","siteSpaceId":"sitesp_QDc6d","description":"To easily apply policy rules and manage specific collector machines, you can define a collector machine group.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"60CUBOjEybzHDAMdssL4","title":"About Cortex XDR Collector content updates","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/about-cortex-xdr-collector-content-updates","siteSpaceId":"sitesp_QDc6d","description":"To quickly resolve any issues in policy, Palo Alto Networks can seamlessly deliver software packages called content updates.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"GQWXJKUxDcb3Tk2Zu59g","title":"XDR Collector profiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/xdr-collector-profiles","siteSpaceId":"sitesp_QDc6d","description":"Add an XDR collector profile to define the type of data to collect from a Linux or Windows platform.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"E4kG8H1oWQgQBk5SXhef","title":"Add an XDR Collector Profile for Windows","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/add-an-xdr-collector-profile-for-windows","siteSpaceId":"sitesp_QDc6d","description":"Add a Cortex XDR Collector profile, which defines the data that is collected from a Windows collector machine, and defines automatic XDR Collector upgrade settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"a5uUa3Vw1U7HhXengitM","title":"Ingest Logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/add-an-xdr-collector-profile-for-windows/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_QDc6d","description":"Learn how to configure Cortex XDR to receive Windows DHCP logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Add an XDR Collector Profile for Windows"}]},{"id":"uaWAGpFci3RCvcdXwykH","title":"Ingest Windows DNS debug logs using Elasticsearch Filebeat","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/add-an-xdr-collector-profile-for-windows/ingest-windows-dns-debug-logs-using-elasticsearch-filebeat","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into Windows DNS Debug logs using Elasticsearch Filebeat with an XDR Collectors profile.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Add an XDR Collector Profile for Windows"}]},{"id":"uf3YGD0zXXwfPLuzz9Nr","title":"Query Windows Event Log records","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/add-an-xdr-collector-profile-for-windows/query-windows-event-log-records","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"},{"label":"Add an XDR Collector Profile for Windows"}]},{"id":"9T4eG891fJbxUITHqnVp","title":"Add an XDR Collector profile for Linux","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/add-an-xdr-collector-profile-for-linux","siteSpaceId":"sitesp_QDc6d","description":"Add a Cortex XDR Collector profile, which defines the data that is collected from a Linux collector machine, and defines automatic XDR Collector upgrade settings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"KksvNgZ2WcLGSVZugJh5","title":"Apply profiles to collection machine policies","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/apply-profiles-to-collection-machine-policies","siteSpaceId":"sitesp_QDc6d","description":"Enable a Cortex XDR Collector profile by mapping it to a policy.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"cAOA2BGqntBiLgTcRxHm","title":"XDR Collector datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/xdr-collectors/xdr-collector-datasets","siteSpaceId":"sitesp_QDc6d","description":"After Cortex XDR begins receiving data from your XDR Collectors configuration, the app automatically creates an XQL dataset.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"XDR Collectors"}]},{"id":"Td8huREOOkrxIdYSvFZk","title":"Data Ingestion","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion","siteSpaceId":"sitesp_QDc6d","description":"Data can be ingested both from Palo Alto Networks products, and from third-party vendor products.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"}]},{"id":"0cPKFKd8DfqFBuGiFoOB","title":"Visibility of logs and alerts from external sources","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/visibility-of-logs-and-alerts-from-external-sources","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR provides visibility into your external logs. The availability of logs and alerts varies by the data source.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"SWl5PIte7skQoAs27F8l","title":"Visibility of Cortex XDR audit and authentication logs","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/visibility-of-cortex-xdr-audit-and-authentication-logs","siteSpaceId":"sitesp_QDc6d","description":"Monitor Cortex XDR authentication and audit logs for detecting attacks on Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"zDYHLKNHoTZUoORjqNei","title":"External data ingestion vendor support","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion-vendor-support","siteSpaceId":"sitesp_QDc6d","description":"To augment your Cortex XDR data, you can set up Cortex XDR to ingest data from a variety of external third-party sources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"S71Pwrrm3Yduupt3c4Yr","title":"Palo Alto Networks integrations","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR supports Palo Alto Networks data ingestion.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"awq7gQM0gg0JF9IitjhJ","title":"About Palo Alto Networks integrations","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/about-palo-alto-networks-integrations","siteSpaceId":"sitesp_QDc6d","description":"Stream data directly from other Palo Alto Networks products to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"zoJtga6jFnViziOlbpFg","title":"Ingest data from Next-Generation Firewall","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-data-from-next-generation-firewall","siteSpaceId":"sitesp_QDc6d","description":"Learn how to ingest detection data from Next-Generation Firewall and Panorama.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"QaIZnrkIfLM0stS9cqHl","title":"Ingest Next-Generation Firewall logs using the Syslog collector","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-data-from-next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector","siteSpaceId":"sitesp_QDc6d","description":"Use the Syslog collector to ingest NGFW logs in CEF format. This method is useful when your firewalls are located in a different region, or bandwidth issues are encountered due to large log size.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"},{"label":"Ingest data from Next-Generation Firewall"}]},{"id":"RznvMvUmquJ3rxLdhSM6","title":"Ingest data from Prisma Access","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-data-from-prisma-access","siteSpaceId":"sitesp_QDc6d","description":"Learn how to ingest detection data from Prisma Access.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"f8E3mLShUkhTNqu63FdT","title":"Ingest logs from Prisma Access Browser","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-logs-from-prisma-access-browser","siteSpaceId":"sitesp_QDc6d","description":"Ingest Prisma Browser logs into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"wYIdh8hcXNRHH3kAbaHv","title":"Ingest Alerts from Prisma Cloud Compute","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-alerts-from-prisma-cloud-compute","siteSpaceId":"sitesp_QDc6d","description":"Configure Data Collection Settings to receive alerts from Prisma Cloud Compute.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"vJ6E62yaLd2gCVgtGx8t","title":"Ingest Alerts from Prisma Cloud","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-alerts-from-prisma-cloud","siteSpaceId":"sitesp_QDc6d","description":"Configure Data Collection Settings in Cortex XDR to receive alerts from Prisma Cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"WH1iRBvvwf1XFx7wuDRK","title":"Ingest detection data from Strata Logging Service","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-detection-data-from-strata-logging-service","siteSpaceId":"sitesp_QDc6d","description":"Learn how to ingest detection data from Strata Logging Service.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"LF5067yJthqiQcMoOGNn","title":"Ingest Alerts and Assets from PAN IoT Security (Deprecated)","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-alerts-and-assets-from-pan-iot-security","siteSpaceId":"sitesp_QDc6d","description":"Ingest alerts and device data from IoT Security.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"Tt93N0umr6vggzVFj4B6","title":"Ingest alerts and assets from Device Security","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/ingest-alerts-and-assets-from-device-security","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"Veo3VgjPrVDkYmm7vMao","title":"Collecting URL and File log types","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/collecting-url-and-file-log-types","siteSpaceId":"sitesp_QDc6d","description":"Learn about the implications of turning off or on collection of URL and File logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"}]},{"id":"2w91U4jBbbLn8MjAZ2mK","title":"Detectors connected to URL and File log types","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/palo-alto-networks-integrations/collecting-url-and-file-log-types/detectors-connected-to-url-and-file-log-types","siteSpaceId":"sitesp_QDc6d","description":"A list of detectors connected to URL and File log types.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"Palo Alto Networks integrations"},{"label":"Collecting URL and File log types"}]},{"id":"UTkihviDKgoO8UKDJ08j","title":"External data ingestion","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR supports external data ingestion for a variety of service types and vendors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"d9OQyJlJ0P5pr03eGeGl","title":"External applications","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/external-applications","siteSpaceId":"sitesp_QDc6d","description":"Learn more about integrating Slack and a Syslog Receiver to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"}]},{"id":"n0vgBRrQrqdyUt4HvOK5","title":"Ingest network connection logs","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can ingest network connection logs from different third-party sources.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"}]},{"id":"YkPJVtOQ45rNkHQWMITd","title":"Ingest network flow logs from Amazon S3","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-network-flow-logs-from-amazon-s3","siteSpaceId":"sitesp_QDc6d","description":"Take advantage of Cortex XDR investigation capabilities and set up network flow log ingestion for your Amazon S3 logs using an AWS CloudFormation Script.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"m0ScmLUzxh5UKKjZUjIy","title":"Create an assumed role","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-network-flow-logs-from-amazon-s3/create-an-assumed-role","siteSpaceId":"sitesp_QDc6d","description":"Learn about creating an AWS Assumed Role for Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"},{"label":"Ingest network flow logs from Amazon S3"}]},{"id":"Rc4yB45ux0q6Y1nPJoNu","title":"Configure data collection from Amazon S3 manually","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-network-flow-logs-from-amazon-s3/configure-data-collection-from-amazon-s3-manually","siteSpaceId":"sitesp_QDc6d","description":"Set up network flow log ingestion for your Amazon S3 logs manually (without a script).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"},{"label":"Ingest network flow logs from Amazon S3"}]},{"id":"rPfYW0vit1DZxOEBvrLi","title":"Ingest Network Route 53 Logs from Amazon S3","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-network-route-53-logs-from-amazon-s3","siteSpaceId":"sitesp_QDc6d","description":"Take advantage of Cortex XDR investigation capabilities and set up network Route 53 ingestion for your Amazon S3 logs using an AWS CloudFormation Script.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"YUjUijTXxgqjaAZald0j","title":"Ingest logs from Check Point firewalls","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-check-point-firewalls","siteSpaceId":"sitesp_QDc6d","description":"To take advantage of Cortex XDR investigation and detection capabilities while using Check Point firewalls, forward your firewall logs to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"046Q8fW2fKwf623wJtQc","title":"Ingest logs from Cisco ASA firewalls and AnyConnect","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into logs from Cisco ASA firewalls and Cisco AnyConnect VPN.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"L36E2Auad50WBRIKNcVk","title":"Ingest logs from Corelight Zeek","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-corelight-zeek","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into logs from Corelight Zeek.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"Klr1dnWh70SvZ1XT2hrf","title":"Ingest logs from Fortinet Fortigate firewalls","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-fortinet-fortigate-firewalls","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into logs from Fortinet Fortigate firewalls.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"31Rhn0tMDXY1dOFFCgcH","title":"Ingest Logs and Data from a GCP Pub/Sub","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-and-data-from-a-gcp-pubsub","siteSpaceId":"sitesp_QDc6d","description":"If you use the Pub/Sub messaging service from Global Cloud Platform (GCP), you can send logs and data from GCP to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"N4WQYDlrYem3VEQPKNAQ","title":"Ingest Logs from Microsoft Azure Event Hub","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-microsoft-azure-event-hub","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs from Microsoft Azure Event Hub with an option to ingest audit logs to use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"AC4Bn9WBkUCPRipyxutP","title":"Ingest network flow logs from Microsoft Azure Network Watcher","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-network-flow-logs-from-microsoft-azure-network-watcher","siteSpaceId":"sitesp_QDc6d","description":"Ingest network security group (NSG) or Virtual network (VNet) flow logs from Microsoft Azure Network Watcher for use in Cortex XDR network stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"fnn8u8Vte9j6xs9VkWHC","title":"Ingest Logs and Data from Okta","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_QDc6d","description":"Ingest authentication logs and data from Okta for use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"EDkIZfrXd6lBNotO4GNv","title":"Ingest logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_QDc6d","description":"Learn how to configure Cortex XDR to receive Windows DHCP logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"vrrM5ISZImNKn5ZsdMtm","title":"Ingest logs from Zscaler Internet Access","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-zscaler-internet-access","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into logs from Zscaler Internet Access (ZIA).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"NyuLyKPlUWA3yoZOHTIn","title":"Ingest logs from Zscaler Private Access","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-network-connection-logs/ingest-logs-from-zscaler-private-access","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into logs from Zscaler Private Access (ZPA).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest network connection logs"}]},{"id":"INw3pRjgHc6wLreW8col","title":"Ingest authentication logs and data","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data","siteSpaceId":"sitesp_QDc6d","description":"Ingest authentication logs from external authentication services—such as Okta and Azure AD—into authentication stories with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"}]},{"id":"m0NkdDNjpXvaNB02tfB9","title":"Ingest audit logs from AWS Cloud Trail","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-audit-logs-from-aws-cloud-trail","siteSpaceId":"sitesp_QDc6d","description":"Take advantage of Cortex XDR investigation capabilities and set up audit log ingestion for your AWS CloudTrail logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"k2XrnjplWpsaQC7O4t74","title":"Ingest Logs and Data from a GCP Pub/Sub","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-logs-and-data-from-a-gcp-pubsub","siteSpaceId":"sitesp_QDc6d","description":"If you use the Pub/Sub messaging service from Global Cloud Platform (GCP), you can send logs and data from GCP to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"DIt5vpLqBTelvpYmBEMg","title":"Ingest Logs and Data from Google Workspace","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-logs-and-data-from-google-workspace","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs and data from Google Workspace for use in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"oU433V2UELK3pHc3WJwe","title":"Ingest Logs from Microsoft Azure Event Hub","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-logs-from-microsoft-azure-event-hub","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs from Microsoft Azure Event Hub with an option to ingest audit logs to use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"Cb1Saht2SQyoDgSq8gEb","title":"Ingest logs and data from Microsoft 365","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-logs-and-data-from-microsoft-365","siteSpaceId":"sitesp_QDc6d","description":"Learn more about collecting logs and data from Microsoft 365.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"XFc7qVGnxedPZxp5ugAa","title":"Ingest Logs from Microsoft Office 365","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-logs-from-microsoft-office-365","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs and data from Microsoft Office 365 Management Activity API and Microsoft Graph API for use in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"AfEL818tNgb9dEDMuikd","title":"Ingest Logs and Data from Okta","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_QDc6d","description":"Ingest authentication logs and data from Okta for use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"jt3BKjE8LMLuH3mHBMZA","title":"Ingest Logs and Data from OneLogin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-logs-and-data-from-onelogin","siteSpaceId":"sitesp_QDc6d","description":"Learn how to ingest different types of logs and data from OneLogin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"rZyFqLYt76zD5Noxlchy","title":"Ingest authentication logs from PingFederate","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-authentication-logs-from-pingfederate","siteSpaceId":"sitesp_QDc6d","description":"Ingest authentication logs and data from PingFederate for use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"SELhfBu2MARjm9aP4keC","title":"Ingest Authentication Logs and Data from PingOne","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-authentication-logs-and-data/ingest-authentication-logs-and-data-from-pingone","siteSpaceId":"sitesp_QDc6d","description":"Ingest authentication logs and data from PingOne for Enterprise for use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest authentication logs and data"}]},{"id":"B8b2EjORifwNenAKIEhh","title":"Ingest operation and system logs from cloud providers","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-operation-and-system-logs-from-cloud-providers","siteSpaceId":"sitesp_QDc6d","description":"Learn how to ingest operation and system logs from supported cloud providers into Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"}]},{"id":"Qz0lWIUs0TQJK0tP5pnw","title":"Ingest generic logs from Amazon S3","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-operation-and-system-logs-from-cloud-providers/ingest-generic-logs-from-amazon-s3","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest operation and system logs from cloud providers"}]},{"id":"HM1zR4iJHIhDkqRa3eFK","title":"Ingest logs from Amazon CloudWatch","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-operation-and-system-logs-from-cloud-providers/ingest-logs-from-amazon-cloudwatch","siteSpaceId":"sitesp_QDc6d","description":"Take advantage of Cortex XDR investigation capabilities and set up generic or EKS log ingestion for your Amazon CloudWatch logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest operation and system logs from cloud providers"}]},{"id":"QqliIgsGkwoeNQwdXLUb","title":"Ingest Logs and Data from a GCP Pub/Sub","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-operation-and-system-logs-from-cloud-providers/ingest-logs-and-data-from-a-gcp-pubsub","siteSpaceId":"sitesp_QDc6d","description":"If you use the Pub/Sub messaging service from Global Cloud Platform (GCP), you can send logs and data from GCP to Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest operation and system logs from cloud providers"}]},{"id":"4hcoazoSsO4HmdeX7B4V","title":"Ingest logs from Google Kubernetes Engine","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-operation-and-system-logs-from-cloud-providers/ingest-logs-from-google-kubernetes-engine","siteSpaceId":"sitesp_QDc6d","description":"Forward your Google Kubernetes Engine (GKE) logs directly to Cortex XDR using Elasticsearch Filebeat.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest operation and system logs from cloud providers"}]},{"id":"STqCHEDYjIUEv5tnm9eL","title":"Ingest Logs from Microsoft Azure Event Hub","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-operation-and-system-logs-from-cloud-providers/ingest-logs-from-microsoft-azure-event-hub","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs from Microsoft Azure Event Hub with an option to ingest audit logs to use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest operation and system logs from cloud providers"}]},{"id":"9br4mIYdk80TxGdnHyJu","title":"Ingest Logs and Data from Okta","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-operation-and-system-logs-from-cloud-providers/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_QDc6d","description":"Ingest authentication logs and data from Okta for use in Cortex XDR authentication stories.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest operation and system logs from cloud providers"}]},{"id":"D8CWQ6ddW9lDoiVv6Zmu","title":"Ingest endpoint data","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-endpoint-data","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to ingest endpoint data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"}]},{"id":"cSzDylLr3N5kiqxb0vuW","title":"Ingest cloud assets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-cloud-assets","siteSpaceId":"sitesp_QDc6d","description":"You can ingest cloud assets from different third-party sources using Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"}]},{"id":"hB094iCuDkedQvwdAJz0","title":"Ingest Cloud Assets from AWS","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-cloud-assets/ingest-cloud-assets-from-aws","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into cloud assets from AWS.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest cloud assets"}]},{"id":"Mf9i1GGPAi4FRwrlrLHQ","title":"Ingest Cloud Assets from Google Cloud Platform","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-cloud-assets/ingest-cloud-assets-from-google-cloud-platform","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into cloud assets from Google Cloud Platform.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest cloud assets"}]},{"id":"jjbs3JMXUiesVTFk0dOs","title":"Ingest Cloud Assets from Microsoft Azure","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/ingest-cloud-assets/ingest-cloud-assets-from-microsoft-azure","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into cloud assets from Microsoft Azure.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Ingest cloud assets"}]},{"id":"1jKsIkhbDC9hZyNVUTlF","title":"Additional log ingestion methods","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR supports custom log ingestion methods.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"}]},{"id":"IssZOynJdSjsMx8ChhfW","title":"Ingest logs from a Syslog receiver","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-from-a-syslog-receiver","siteSpaceId":"sitesp_QDc6d","description":"To extend visibility, Cortex XDR can receive Syslog from additional vendors that use CEF or LEEF formatted over Syslog (TLS not supported).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"uS4cntSrbI7pPAeRmlKX","title":"Ingest Apache Kafka events as datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-apache-kafka-events-as-datasets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can receive logs and data from Apache Kafka directly to your log repository for query and visualization purposes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"JaNeuLV7L0lKDDZPPxdm","title":"Ingest CSV files as datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-csv-files-as-datasets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can receive CSV log files from a shared Windows directory, where the CSV log files must conform to specific guidelines.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"sRU1mTqfLSFA8bCOArki","title":"Ingest database data as datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-database-data-as-datasets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can receive data from a client relational database directly to your log repository.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"5aLTi5iKmedEB3jl8m8F","title":"Ingest logs in a network share as datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-in-a-network-share-as-datasets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can receive logs from files and folders in a network share directly to your log repository for query and visualization purposes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"3FwEQufRrBO2wbZPxveg","title":"Ingest FTP files as datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-ftp-files-as-datasets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can receive logs from files and folders via FTP, FTPS, and SFTP directly to your log repository for query and visualization purposes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"DmAApC8GXKagLMUGRWoa","title":"Ingest NetFlow flow records as datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-netflow-flow-records-as-datasets","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can receive NetFlow flow records and IPFIX from a UDP port directly to your log repository for query and visualization purposes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"reeEqnxkagjzgfAhfqDz","title":"Set up an HTTP Log Collector to Receive Logs","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/set-up-an-http-log-collector-to-receive-logs","siteSpaceId":"sitesp_QDc6d","description":"You can set up Cortex XDR to receive logs from third-party sources, and automatically parse and process these logs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"FXBN4zdy8QmcQSGAyWYd","title":"Ingest logs from BeyondTrust Privilege Management Cloud","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-from-beyondtrust-privilege-management-cloud","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into logs from BeyondTrust Privilege Management Cloud.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"3UUZJy5lozZievlQ8Cad","title":"Ingest Logs and Data from Box","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-and-data-from-box","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs and data from Box enterprise accounts via the Box REST APIs.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"nPvfVK6ChikAEBviUTmG","title":"Ingest Logs and Data from Dropbox","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-and-data-from-dropbox","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs and data from Dropbox Business accounts via the Dropbox Business API.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"DElHiEMz2XAlG1zra9dY","title":"Ingest Logs from Elasticsearch Filebeat","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-from-elasticsearch-filebeat","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR can ingest logs from Elasticsearch Filebeat, a file system logger that logs file activity on your endpoints and servers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"n4ZhErMBMfebtjOyWglb","title":"Ingest logs from Forcepoint DLP","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-from-forcepoint-dlp","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into logs from Forcepoint DLP.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"UcuqZL6QzlU0cF8ZhZJM","title":"Ingest Logs from Proofpoint Targeted Attack Protection","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-from-proofpoint-targeted-attack-protection","siteSpaceId":"sitesp_QDc6d","description":"Ingest logs from Proofpoint Targeted Attack Protection (TAP).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"M45qo3OrWmgngxgs5Clw","title":"Ingest logs and data from Salesforce.com","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-logs-and-data-from-salesforce.com","siteSpaceId":"sitesp_QDc6d","description":"Use the Cortex XDR data collector to collect Audit Trail and Security Monitoring event logs from Salesforce.com.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"1q4pPwY06GbS4U7uQ0FG","title":"Ingest Data from ServiceNow CMDB","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-data-from-servicenow-cmdb","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into data from ServiceNow CMDB.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"IecEm91O8VHTsiAPpbPH","title":"Ingest Report Data from Workday","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-report-data-from-workday","siteSpaceId":"sitesp_QDc6d","description":"Extend Cortex XDR visibility into reports data from Workday.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"r8NWczREINCgG9meBUX1","title":"Ingest external alerts","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/external-data-ingestion/additional-log-ingestion-methods/ingest-external-alerts","siteSpaceId":"sitesp_QDc6d","description":"For a more complete and detailed picture of the activity involved in an incident, Cortex XDR can ingest alerts from any external source.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"},{"label":"External data ingestion"},{"label":"Additional log ingestion methods"}]},{"id":"3hLIT5KBwtRJuYwJFfP8","title":"Overview of data ingestion metrics","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/overview-of-data-ingestion-metrics","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the data ingestion health metrics in the metrics_source dataset and the metrics_view preset.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"j7mAAjnwkHS9ZBvzvF1g","title":"Creating correlation rules to monitor data ingestion health","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/creating-correlation-rules-to-monitor-data-ingestion-health","siteSpaceId":"sitesp_QDc6d","description":"See examples of correlation rules for monitoring data ingestion health.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"XexfXZrN2aJ1bbEFgHyV","title":"Measuring data freshness","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/measuring-data-freshness","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the data freshness metrics collected by Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"BdDAcGN6yAKbnHJPtoRx","title":"Verifying collector connectivity","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/data-ingestion/verifying-collector-connectivity","siteSpaceId":"sitesp_QDc6d","description":"Verify collector connectivity and troubleshoot collector errors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Data Ingestion"}]},{"id":"NCY31Uu2RenjaU42HyGw","title":"Dataset management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/dataset-management","siteSpaceId":"sitesp_QDc6d","description":"Learn more about managing your datasets and understanding your overall data storage, period based retention.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"}]},{"id":"CDONrO0j5wo72V8A0tq2","title":"What are datasets?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/dataset-management/what-are-datasets","siteSpaceId":"sitesp_QDc6d","description":"Learn how to import, delete, and interact with custom or third-party datasets in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"h6xGNEvlVHfgb87JnBm3","title":"Lookup datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/dataset-management/lookup-datasets","siteSpaceId":"sitesp_QDc6d","description":"Learn more about lookup datasets to correlate data from a data source with events in your environment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"moSlC8Isa4IlSg1AaOSe","title":"Import a lookup dataset","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/dataset-management/lookup-datasets/import-a-lookup-dataset","siteSpaceId":"sitesp_QDc6d","description":"Learn more about importing data from an external file to create or update a lookup dataset in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"8zbSdQQkQ12YYOpPqF6h","title":"Download JSON file of lookup dataset","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/dataset-management/lookup-datasets/download-json-file-of-lookup-dataset","siteSpaceId":"sitesp_QDc6d","description":"Learn more about downloading a lookup dataset as a JSON file.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"WJxT10Uqgq0T092ItLXW","title":"Set time to live for lookup datasets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/dataset-management/lookup-datasets/set-time-to-live-for-lookup-datasets","siteSpaceId":"sitesp_QDc6d","description":"Learn more about setting the time to live (TTL) for lookup datasets in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"PkgqCu29drWbIgiLG2Lk","title":"Monitor datasets and dataset views activity","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/dataset-management/monitor-datasets-and-dataset-views-activity","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the monitored Cortex XDR datasets and dataset views activities.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"xUXnGkSFHMrpYgZeCGus","title":"Parsing Rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules","siteSpaceId":"sitesp_QDc6d","description":"Learn more about Cortex XDR Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"}]},{"id":"Lis5GgVnrReI5h0SmNU1","title":"What are Parsing Rules?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/what-are-parsing-rules","siteSpaceId":"sitesp_QDc6d","description":"Learn more about what are Parsing Rules and what they are used for.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"siNOjpJIlTDGNWhk1Ld8","title":"Parsing Rules editor views","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-editor-views","siteSpaceId":"sitesp_QDc6d","description":"Learn about the Parsing Rules editor User Defined Rules, Default Rules, Both, and Simulate views.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"pQggsgQH9NcDRbuQ9uVF","title":"Parsing Rules file structure and syntax","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax","siteSpaceId":"sitesp_QDc6d","description":"The Parsing Rules file consists of multiple sections of three types, which also represent the custom syntax specific to Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"jCBJmjGYV05VhFUDFeo5","title":"INGEST","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest","siteSpaceId":"sitesp_QDc6d","description":"Understanding how to write an \\[INGEST\\] section in a Parsing Rules file and the syntax to use.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"LXQVhH4wewNOCoWaoUcN","title":"fields stage in INGEST","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/fields-stage-in-ingest","siteSpaceId":"sitesp_QDc6d","description":"Use 'fields' in Cortex XDR Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"ailMB2mAjMV9h9XxjrDC","title":"parse_cef","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_cef","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"o56i4V3BMJcXYINal3J0","title":"parse_cisco","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_cisco","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the parse_cisco() parsing rule function that parses a Cisco string to an object.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"O6BCRbmWN0oDnjGtBymx","title":"parse_json","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_json","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"},{"label":"INGEST"}]},{"id":"x8AA0WBEdeWcZcq03y13","title":"COLLECT","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/collect","siteSpaceId":"sitesp_QDc6d","description":"Understand how to write a \\[COLLECT\\] section in a Parsing Rules file, and the syntax to use.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"l2BgnmsEmCCkoHDodptM","title":"CONST","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/const","siteSpaceId":"sitesp_QDc6d","description":"Learn how to write a \\[CONST\\] section in a Parsing Rules file and the syntax to use.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"2mEp6yWJFMAXcPaAWxKs","title":"RULE","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/rule","siteSpaceId":"sitesp_QDc6d","description":"Understanding how to write a \\[RULE\\] section in a Parsing Rules file and the syntax to use.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"},{"label":"Parsing Rules file structure and syntax"}]},{"id":"ahURc3KKsNwSZqTNHL3f","title":"Create Parsing Rules","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/create-parsing-rules","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR includes an editor for creating 3rd party Parsing Rules.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"jstSYm2aWp5haAD196du","title":"Troubleshooting Parsing rules errors","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/troubleshooting-parsing-rules-errors","siteSpaceId":"sitesp_QDc6d","description":"Learn how to easily identify and resolve parsing errors.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"RQonfrvjTgpeuvB1P8df","title":"Parsing Rules Raw Dataset","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/parsing-rules/parsing-rules-raw-dataset","siteSpaceId":"sitesp_QDc6d","description":"Each vendor and product has its own raw dataset with its own default format that can be overridden in an INGEST section.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Parsing Rules"}]},{"id":"XXYt06mVmRV9rAa52iTI","title":"Manage Event Forwarding","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/manage-event-forwarding","siteSpaceId":"sitesp_QDc6d","description":"Save your ingested, parsed data in an external location by exporting your event logs to a temporary GCP storage bucket.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"}]},{"id":"v2OHqlaFMhF5bo6Tfaqq","title":"Endpoints Event Forwarding - included/excluded fields by event type","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/manage-event-forwarding/endpoints-event-forwarding-includedexcluded-fields-by-event-type","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the included/excluded fields by event type for Endpoint Event Forwarding in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Manage Event Forwarding"}]},{"id":"rBXQ0zjM94cKaoNwvHH4","title":"Manage compute units","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/manage-compute-units","siteSpaceId":"sitesp_QDc6d","description":"Learn more about managing and tracking your compute units usage for API and Cold Storage XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"}]},{"id":"sSkhjoyu0cOGxRDxHBDe","title":"Compute units usage","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/manage-compute-units/compute-units-usage","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to compute units (CU) works according to your license and available options after reaching your quota.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Data management"},{"label":"Manage compute units"}]},{"id":"Gndwh6mziIF9m5U7zOqc","title":"Cortex XDR XQL","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"DQd6qrJCUMqlzvv6OFOm","title":"Get started with XQL","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql","siteSpaceId":"sitesp_QDc6d","description":"XQL is the Palo Alto Networks Cortex Query Language used in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"}]},{"id":"RN8Yiu7cyMfpCT5lmu00","title":"XQL language features","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/xql-language-features","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language features to query for raw network and endpoint data.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"yQK445tZxotPTOVfliMe","title":"XQL Language Structure","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/xql-language-structure","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language structure when creating a query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"HZmlgjysCRfVLytoKam1","title":"Adding comments in queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/xql-language-structure/adding-comments-in-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn more about adding comments in Cortex Query Language queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"},{"label":"XQL Language Structure"}]},{"id":"xdsdpT9lDcfd43Fgp0SZ","title":"Supported operators","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/supported-operators","siteSpaceId":"sitesp_QDc6d","description":"Cortex Query Language supports specific comparison, boolean, and set operators in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"DE4KfsrDtMXqXsm4YOD9","title":"Datasets and presets","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/datasets-and-presets","siteSpaceId":"sitesp_QDc6d","description":"The Cortex Query Language supports built-in datasets, custom datasets, and presets.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"AiDPje0mjoSzXbSHT1bI","title":"About examples","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/about-examples","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language (XQL) examples provided.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"tbrBWhkaGBE2SFAMEBXz","title":"JSON functions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/json-functions","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how Cortex XDR treats JSON functions in the Cortex Query Language.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"OJf7rlBF3VfZtTBxIErl","title":"How to filter for empty values in the results table","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/how-to-filter-for-empty-values-in-the-results-table","siteSpaceId":"sitesp_QDc6d","description":"Learn how to filter for empty values in the results table in Cortex Query Language.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"6iLGydUn6fJI4IyuqDV5","title":"Understanding string manipulation in XQL","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/get-started-with-xql/understanding-string-manipulation-in-xql","siteSpaceId":"sitesp_QDc6d","description":"Learn more about string manipulation in Cortex Query Language (XQL) using double and triple quotes.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Get started with XQL"}]},{"id":"RG2xjIOG581nOp5SKr5L","title":"Build XQL queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"}]},{"id":"xiUQY9WhQFxD5T2RoO4v","title":"About the Query Builder","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_QDc6d","description":"The Query Builder facilitates threat detection, incident expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"X3V3XxP4NUVlP50vq1Ym","title":"How to build XQL queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"qzT5qk6xpRETLbmMc9NS","title":"Get started with XQL queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn more about some important information before getting started with XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"dUdCTZbZLjPSjAU0E3Y1","title":"Useful XQL user interface features","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_QDc6d","description":"Learn about useful XQL query features in the user interface.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"UfNuB6moY3cLhsvtqTDz","title":"XQL Query best practices","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_QDc6d","description":"Learn about best practices for streamlining XQL queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"aXKyEoQjkTQOMJ9Q8YMQ","title":"Expected results when querying fields","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_QDc6d","description":"Learn what to expect in the query results when querying fields.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"uN5qUb6rvUaljQIdryGl","title":"Create XQL query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_QDc6d","description":"Learn how to create queries using the Cortex Query Language (XQL).","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"tSfB34EKHAZm45tl2ZcO","title":"Review XQL query results","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_QDc6d","description":"Learn more about reviewing the results returned from an XQL query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"ihuuieex3BZdr49qPzlW","title":"Translate to XQL","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_QDc6d","description":"Learn how to translate your Splunk queries to XQL queries in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"2nTxAoW3chDrNJeGPRMh","title":"Graph query results","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR enables you to generate helpful visualizations of your XQL query results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"OOmGKtpPpTYnZNOMfNSS","title":"XQL query entities","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language (XQL) entities available in the Query Builder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"jVTxsNOO1SLDZ7MSPVXL","title":"Create authentication query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-authentication-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate any authentication activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"cE27hJDm3vUhYZ0QXWzJ","title":"Create event log query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-event-log-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate Windows and Linux event log attributes and investigate event logs across endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"XU6RjYOB3gGoL3uRFP3L","title":"Create file query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-file-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate the connections between file activity and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"gmjYBZpuqa4t0HMYSUUH","title":"Create image load query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-image-load-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about create a query to investigate the connections between image load activity, acting processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"kZTIZCLZdpv7LgxlTbkT","title":"Create network connections query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-network-connections-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate the connections between firewall logs, endpoints, and network activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"neCKsnVkrch10NNehhsz","title":"Create network query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-network-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate the connections between network activity, acting processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"qU4TlH7bnbjT9k5Ser0N","title":"Create process query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-process-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate connections between processes, child processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"zY1P61Bg0ZgEstnE1Hkv","title":"Create registry query","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/create-registry-query","siteSpaceId":"sitesp_QDc6d","description":"Learn more about creating a query to investigate connections between registry activity, processes, and endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"iFy8RRwpWk5zWgFpMGQz","title":"Query across all entities","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/xql-query-entities/query-across-all-entities","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console, you can search for endpoints and processes across all endpoint activity.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"G3VOugQdCmO726PPK7zK","title":"Overview of the Query Center","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_QDc6d","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"dEXE9mteHnhCTwjgHZfC","title":"Edit and rerun queries in Query Center","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/overview-of-the-query-center/edit-and-rerun-queries-in-query-center","siteSpaceId":"sitesp_QDc6d","description":"Learn more about viewing the results of a query, modifying a query, and rerunning queries from Query Center.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"lXS9nwwP0dk2I8ps5FFg","title":"Query Center reference information","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/overview-of-the-query-center/edit-and-rerun-queries-in-query-center/query-center-reference-information","siteSpaceId":"sitesp_QDc6d","description":"Descriptions of the fields in the Query Center table.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"},{"label":"Edit and rerun queries in Query Center"}]},{"id":"UTFY5zzDsctpDiuGUZUl","title":"Manage scheduled queries","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_QDc6d","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"k45BpfAXqC8TE3pyxz0p","title":"Scheduled Queries reference information","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_QDc6d","description":"Descriptions of the fields in the Scheduled Queries table.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"aS6PokfVchYiyHavhzwq","title":"Manage your personal query library","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_QDc6d","description":"Cortex XDR provides as part of the Query Library a personal library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Build XQL queries"}]},{"id":"TF5dRt8is9epkRDxV6AB","title":"Stages","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language supported stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"}]},{"id":"VKnT8UXuq6V6GZjcFIh2","title":"alter","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/alter","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language alter stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"ZPXwYr0rBaqx7MDDdAKg","title":"arrayexpand","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/arrayexpand","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arrayexpand stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"7Kx1wGy89o2mZh0OsyRE","title":"bin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/bin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language bin stage to group events by quantity or time span.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"Z7qnLGbb5TlXxWB7ZySm","title":"call","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/call","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language call stage to reference a predefined query from the Query Library.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"hCYpGirqhHtyviyt50eE","title":"comp","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/comp","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language comp stage that precedes functions calculating statistics.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"79NVVmIBUjE3uEierlSr","title":"config","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/config","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language config stage that configures the query behavior.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"vhtxqqRgWuAcYRm7DVLv","title":"case_sensitive","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/config/case_sensitive","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language case_sensitive config stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"},{"label":"config"}]},{"id":"POfmSFuj8AkzrAtvHyNK","title":"timeframe","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/config/timeframe","siteSpaceId":"sitesp_QDc6d","description":"Cortex Query Language timeframe configuration enables performing searches within a specific time frame from the query execution.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"},{"label":"config"}]},{"id":"mxrxCyO8NXkjoDPEhD67","title":"max_runtime_minutes","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/config/max_runtime_minutes","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language max_runtime_minutes config stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"},{"label":"config"}]},{"id":"yajixQOZ3UYH5C1CXE6S","title":"dedup","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/dedup","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language dedup stage that removes duplicate occurrences of field values.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"9IihLZfM2yW4bQd8cKN8","title":"fields","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/fields","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language fields stage that defines the fields returned in the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"i9euCMJAapBjLhEw4RHc","title":"filter","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/filter","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language filter stage that narrows down the displayed results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"JxMCtuuacRhkr4bcQBgt","title":"getrole","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/getrole","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language getrole stage that enriches events with specific roles associated with usernames or endpoints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"xoOBXUQYandrfKa2ODH7","title":"iploc","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/iploc","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language iploc stage that associates IPv4 addresses of fields to a list of predefined attributes related to the geolocation.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"c05rB7pMKVMduig51IJ7","title":"join","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/join","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language join stage that combines the results of two queries into a single result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"neUMrZiftF0tKky28jpO","title":"limit","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/limit","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language limit stage that sets the maximum number of records that can be returned in the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"1AtM59K88t0Q3qW2TIJ1","title":"replacenull","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/replacenull","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language replacenull stage that replaces null field values with a text string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"VfGl39l9PdwlAhlIMtHA","title":"sort","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/sort","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language sort stage that identifies the sort order for records returned in the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"8bQ3uKouRxslSwzQ3ROi","title":"Tag","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/tag","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language tag stage that adds a single tag or list of tags to the \\_tag system field.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"K9ypXXYpS6vQaAgcNmVP","title":"target","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/target","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language target stage that saves query results to a dataset or lookup dataset.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"fTRPYh2uTUngjan4PpXo","title":"top","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/top","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language top stage that returns the approximate count of top elements for a field and percentage of the count results.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"HuTMGsURgvl3RY4tNp4c","title":"transaction","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/transaction","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language transaction stage used to find transactions based on events that meet certain constraints.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"Ch3AF4RgDsuDz6WNYhZs","title":"union","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/union","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language union stage that combines two result sets into a single result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"zf4jfKuXXJ8IlKftG1T0","title":"view","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/view","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language view stage that configures the display of the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"9p3fqVEz5M4DS7HaQAMs","title":"windowcomp","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/stages/windowcomp","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language windowcomp stage that precedes functions calculating statistics.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Stages"}]},{"id":"8iDBHwmGeCWHTbf3Bi11","title":"Functions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions","siteSpaceId":"sitesp_QDc6d","description":"Learn more the functions that can be used with Cortex Query Language (XQL) stages in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"}]},{"id":"KM59RXd4XpU7LIslcj2t","title":"add","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/add","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language add() function that adds two integers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"I7kGA3cCVoaAP5lVh38k","title":"approx_count","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/approx_count","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language approx_count approximate aggregate comp function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"rZiPT8fGJd9PoNW37hBX","title":"approx_quantiles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/approx_quantiles","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language approx_quantiles approximate aggregate comp function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"mgzHu2xk0s3kpQKG21Qu","title":"approx_top","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/approx_top","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language approx_top approximate aggregate comp function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"BVMu3DpYvF6HifhVN4FP","title":"array_all","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/array_all","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language array_all() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"kZlgyygxSB3JmkjQWMkH","title":"array_any","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/array_any","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language array_any() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"LN8lafn7F3HPIfvI0Iwj","title":"arrayconcat","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arrayconcat","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arrayconcat() function that returns an array containing unique values found in the original array.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"rbQEgyx8gA8cBOWaQV01","title":"arraycreate","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arraycreate","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arraycreate() function that returns an array based on the given parameters defined for the array elements.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"iQHORs2eYIFvfwsTyMx6","title":"arraydistinct","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arraydistinct","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arraydistinct() function that returns an array containing unique values found in the original array.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"5riMiDaPQFQJaqAREi5d","title":"arrayfilter","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arrayfilter","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arrayfilter() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"AvnHRWLUmA4tyZdTcmRt","title":"arrayindex","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arrayindex","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arrayindex() function that returns the array element contained at the specified index.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"4WubuvpPFMe69thW1y3o","title":"arrayindexof","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arrayindexof","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arrayindexof() function that returns the index value of an array.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"Sd1ZYWeMKCNI6JPBZSHA","title":"array_length","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/array_length","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language array_length() function that returns the length of an array.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"tfHekOLj205B9Pz8tFBj","title":"arraymap","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arraymap","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arraymap() function that applies a callable function to every element of an array.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"rszCZKIl6f8GquuBVuAe","title":"arraymerge","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arraymerge","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arraymerge() function that returns an array created from a merge of the inner json-string arrays.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"W952SbwWCuRfWSezff6N","title":"arrayrange","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arrayrange","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arrayrange() function that returns a portion of an array based on specified array indices.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"Ol1z4pSoUyPGxiBgrzaF","title":"arraystring","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/arraystring","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language arraystring() function that returns a string from an array, where each array element is joined by a defined delimiter.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"YOKi0hIiNw6Zpaa4qoqe","title":"avg","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/avg","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language avg used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"OhUTkymvscsWEwPD3FZ8","title":"coalesce","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/coalesce","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language coalesce() function that returns the first value that is not null from a defined list of fields.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"6kUNjrC4yKw4WvgiRCFg","title":"concat","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/concat","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language concat() function joins multiple strings into a single string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"wRLzRGnOXhIsQ9aT8xbC","title":"convert_from_base_64","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/convert_from_base_64","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language convert_from_base_64 function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"mzxDyqi6ugh1L11jI2Id","title":"count","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/count","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language count function used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"PveXTZewqCN9duhkrlE8","title":"count_distinct","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/count_distinct","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language count_distinct aggregate comp function that counts the number of unique values found for a field in the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"X9Y7P5GSN7ml2GaIK4qy","title":"current_time","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/current_time","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language current_time() function that returns the current time as a timestamp.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"w8seiubQqhnbPEjhDvht","title":"date_floor","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/date_floor","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language date_floor() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"n8dmOKSfC1od39liMVvI","title":"divide","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/divide","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language divide() function that divides two integers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"f43Z2e8ogkAmJH0fdo6j","title":"earliest","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/earliest","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language earliest aggregate comp function that returns the earliest field value found with the matching criteria.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"o5J0mCeFE0bmBhwrPpFa","title":"extract_time","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/extract_time","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language extract_time() function that returns a specified portion of a timestamp.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"xiNJP4YKRmptEHEi3Z1a","title":"extract_url_host","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/extract_url_host","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language extract_url_host() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"f89mKboiAYo0ch033Xev","title":"extract_url_pub_suffix","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/extract_url_pub_suffix","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language extract_url_pub_suffix() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"pXBVH0GIDK6LxMJLWipy","title":"extract_url_registered_domain","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/extract_url_registered_domain","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language extract_url_registered_domain() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"8hbBZuyvtTBZiyq3nzAV","title":"first","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/first","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language first aggregate comp function that returns the first field value found in the dataset with the matching criteria.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"As1Lg2XxnPNwOwOpvMTb","title":"first_value","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/first_value","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language first_value() navigation function that is used with a windowcomp stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"9i0ZnAj0LOgxUKNiPldF","title":"floor","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/floor","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language floor() function that rounds a field that contains a number down to the nearest whole integer.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"sPGYdQ0vwKg3rE0uiovv","title":"format_string","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/format_string","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language format_string() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"d7csTQD0GLG3xaOPLiOB","title":"format_timestamp","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/format_timestamp","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language format_timestamp() function that returns a string after formatting a timestamp according to a specified string format.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"u1TkzDn69Of5ZdxRAZDg","title":"if","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/if","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language if() function that returns a result after evaluating a condition.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"dv3jq71tRaKBpID1edRw","title":"incidr","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/incidr","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language incidr() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"hSjG2l4XjY66lH8gvgol","title":"incidr6","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/incidr6","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language incidr6() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"mycZgBfyDXeQZlLvf48K","title":"incidrlist","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/incidrlist","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language incidrlist() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"seTiMB2UE78kXEmpidBM","title":"int_to_ip","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/int_to_ip","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language int_to_ip() function that safely converts a signed integer representation of an IPv4 address to a string equivalent.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"gguzk34HDUlH4En28ahV","title":"ip_to_int","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/ip_to_int","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language ip_to_int() function that safely converts a string representation of an IPv4 address to an integer equivalent.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"5lLscGuSwpHnFnG7SJo2","title":"is_ipv4","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/is_ipv4","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language is_ipv4() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"hkR4QH3lk2SC3Qjy4mJT","title":"is_known_private_ipv4","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/is_known_private_ipv4","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language is_known_private_ipv4() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"4x9KDZjig91twjSZNrgA","title":"is_ipv6","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/is_ipv6","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language is_ipv6() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"5yggG0gbl93ULxw8dZ25","title":"is_known_private_ipv6","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/is_known_private_ipv6","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language is_known_private_ipv6() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"7kZsbAe61F9M7ozzAUvD","title":"json_extract","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/json_extract","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language json_extract() function that accepts a string representing a JSON object, and returns a field value from that object.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"WMbzSjLlUzVmaoovSi2P","title":"json_extract_array","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/json_extract_array","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language json_extract_array() function that accepts a string representing a JSON array, and returns an XQL-native array.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"9gtonAUu42Nhj5KFZoXQ","title":"json_extract_scalar","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/json_extract_scalar","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language json_extract_scalar() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"oNxVBRnH31oqn8wwQIJo","title":"json_extract_scalar_array","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/json_extract_scalar_array","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language json_extract_scalar_array() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"pfatQFna9CeMCg4rLJgA","title":"lag","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/lag","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language lag() navigation function that is used with a windowcomp stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"P5RTSJr93NiGQbPe5hNP","title":"last","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/last","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language last aggregate comp function that returns the last field value found in the dataset with the matching criteria.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"rRx1obZI3DoMyotICj36","title":"last_value","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/last_value","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language last_value() navigation function that is used with a windowcomp stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"fCTzzKjZ4lbppBFQ3gO5","title":"latest","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/latest","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language latest aggregate comp function that returns the latest field value found with the matching criteria.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"Yq1FKJcF3mtP4mB6ZkJO","title":"len","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/len","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language len function that returns the number of characters contained in a string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"Jjsk26AkSZAQfDIgvX1c","title":"list","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/list","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language list aggregate comp function that returns an array for up to 100 values for a field in the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"PP5jaaIC3611C5HUivo9","title":"lowercase","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/lowercase","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language lowercase() function that converts a string field to all lowercase letters.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"XNLZjcWq215qzeOq7MKf","title":"ltrim, rtrim, trim","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/ltrim-rtrim-trim","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language ltrim(), rtrim(), and trim() functions that remove trim_characters from a string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"SzIAxX8KEVtn83IPzgfB","title":"max","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/max","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language max function used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"Yw515KdvKN7iFkefIR3W","title":"median","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/median","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language median function used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"xxhF7UMBqyWT1Loj2YQ6","title":"min","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/min","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language min function used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"XI1heInXyYSCrXd4Kqpr","title":"multiply","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/multiply","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language multiply() function that multiplies two integers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"8s8TrfGGfEQadHENVZcJ","title":"object_merge","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/object_merge","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language object_merge() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"pwGHinbcnpFNshFhDXiW","title":"object_create","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/object_create","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language object_create() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"SZ2PkCeCNiYiQ1fTAsVF","title":"parse_epoch","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/parse_epoch","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language parse_epoch() function that returns a Unix epoch TIMESTAMP object.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"slIw0ixwa0IyT5MJf40M","title":"parse_timestamp","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/parse_timestamp","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language parse_timestamp() function that returns a TIMESTAMP object.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"kxeb8VKIjjqkdKsRXZZH","title":"pow","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/pow","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language pow() function that returns the value of a number raised to the power of another number.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"j2MHZi2gqvZ6hpwUSRXF","title":"rank","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/rank","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language rank() numbering function that is used with a windowcomp stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"GmLO7JjgjhNjqOflzI6e","title":"regexcapture","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/regexcapture","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language regexcapture() function used in Parsing Rules to extract data from fields using regular expression named groups from a given string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"XPtemc9Yo0Jmw0yer2tW","title":"regextract","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/regextract","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language regextract() function that uses regular expressions to assemble an array of matching substrings from a string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"98Q9ODMYOkWQS1fNJxQp","title":"replace","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/replace","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language replace() function that performs a substring replacement.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"HOJnMfYefvAgduj9JVN2","title":"replex","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/replex","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language replex() function that uses a regular expression to identify and replace substrings.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"0SmM32IaEg8MLNxZno5A","title":"round","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/round","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language round() function that returns the input value rounded to the nearest integer.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"RnT219zxmUf8U74dD7s5","title":"row_number","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/row_number","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language row_number() numbering function that is used with a windowcomp stage.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"zgyp3aQoXNa5IQT6BphQ","title":"split","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/split","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language split() function that splits a string and returns an array of string parts.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"rdn6iNvsl06HEL3q3hUa","title":"stddev_population","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/stddev_population","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language stddev_population() function used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"Foi1AmuD61jZ59DdEJpO","title":"stddev_sample","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/stddev_sample","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language stddev_sample() function used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"jXKAKohDOh3ZN1wIbYMD","title":"string_count","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/string_count","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language string_count() function that returns the number of times a substring appears in a string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"M5WtEvNLIa0t6yc8kDBI","title":"subtract","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/subtract","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language subtract() function that subtracts two integers.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"vBdEZ3MeRkNz2BrqmzCP","title":"sum","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/sum","siteSpaceId":"sitesp_QDc6d","description":"Cortex Query Language sum function used with both comp and windowcomp stages.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"jkiPyPVGnny0jwPHiKgw","title":"time_frame_end","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/time_frame_end","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language time_frame_end() function that returns the end time of the time range specified for the query.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"FHGlY34rSC6kFWYY4LIB","title":"timestamp_diff","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/timestamp_diff","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language timestamp_diff() function that returns the difference between two timestamp objects.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"YCZmrVF7EF4J5UJ8RqNl","title":"timestamp_seconds","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/timestamp_seconds","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language timestamp_seconds() function.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"lZ75pGtMI2kVK7Vr3OyU","title":"to_boolean","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_boolean","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_boolean() function that converts a string to a boolean.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"XsKESVDaFIANRqbXZU3w","title":"to_epoch","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_epoch","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_epoch() function that converts a timestamp value for a field or function to the Unix epoch timestamp format.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"Jow7uL8P6v6khewiYFWg","title":"to_float","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_float","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_float() function that converts a string to a floating point number.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"jXMRiJKTDRsYtD8KPl0S","title":"to_integer","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_integer","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_integer() function that converts a string field to an integer.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"2FXBSWwMwroNLP5LOQja","title":"to_json_string","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_json_string","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_json_string() function that accepts all data types and returns its contents as a JSON formatted string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"YsEZyYLaLbwaXh86Jv7Y","title":"to_number","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_number","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_number() function that converts a string to a number.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"gk5b8FaBcexALX7eggz6","title":"to_string","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_string","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_string function that converts a number value to a string.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"YWUQ8xUFsTsvBYxCzOFC","title":"to_timestamp","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/to_timestamp","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language to_timestamp() function that converts an integer to a timestamp.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"I6f39FibnAC1WwvLR1nT","title":"uppercase","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/uppercase","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language uppercase() function that converts a string field to all uppercase letters.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"IxhZYLBdZq5aLqDSuyPp","title":"values","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/values","siteSpaceId":"sitesp_QDc6d","description":"Cortex Query Language comp values aggregate returns an array for all the values seen for the field in the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"z2OCEx11j6rGb3mHDywp","title":"var","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/cortex-xdr-xql/functions/var","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex Query Language var aggregate comp function that returns the variance value of a field in the result set.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Cortex XDR XQL"},{"label":"Functions"}]},{"id":"y99CaUGYAAHqL7toL1xk","title":"Multi-tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"mggA0WxYtngKNtgmqDlS","title":"What is Cortex XDR multi-tenant?","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/what-is-cortex-xdr-multi-tenant","siteSpaceId":"sitesp_QDc6d","description":"Learn about Cortex multi-tenant deployments that provide data segregation while enabling you to manage multiple tenants from a single console.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"}]},{"id":"fkBGLJrQrgl6PC42IRV9","title":"MSSP multi-tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/what-is-cortex-xdr-multi-tenant/mssp-multi-tenant","siteSpaceId":"sitesp_QDc6d","description":"MSSP multi-tenancy allows managed security service providers to ensure strict data segregation along with the flexibility to monitor alerts across tenants and dynamically allocate licenses.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"What is Cortex XDR multi-tenant?"}]},{"id":"aNOofUGrS7znoEjleJcb","title":"Enterprise multi-tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/what-is-cortex-xdr-multi-tenant/enterprise-multi-tenant","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"What is Cortex XDR multi-tenant?"}]},{"id":"9cc47f76f27348231fee7e8488b2b785a57a72e2","title":"Multi-tenant central licensing management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/multi-tenant-central-licensing-management","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"}]},{"id":"NSfFM62cwhvUsEx1kVG7","title":"Onboard Cortex multi-tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant","siteSpaceId":"sitesp_QDc6d","description":"Learn how to activate and manage tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"}]},{"id":"Peh0D1p98nzhjNJQAoHi","title":"Onboarding checklist for multi-tenant central licensing deployments","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments","siteSpaceId":"sitesp_QDc6d","description":"Onboard MSSP/Enterprise multi-tenant central licensing deployments.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Onboard Cortex multi-tenant"}]},{"id":"lilmKNmO5VT91nnUGAfA","title":"Step 1. Activate Cortex XDR (main account)","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-1.-activate-cortex-xdr-main-account","siteSpaceId":"sitesp_QDc6d","description":"Learn how to activate Cortex XDR in Cortex Gateway.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant central licensing deployments"}]},{"id":"JyBaxj1HzYW8q4tFrUmX","title":"Step 2. Create a child tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-2.-create-a-child-tenant","siteSpaceId":"sitesp_QDc6d","description":"Create child tenants in the Cortex Gateway.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant central licensing deployments"}]},{"id":"qTNMiozAQFqxUBXFdnDv","title":"Onboarding checklist for multi-tenant customer-owned license deployments","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments","siteSpaceId":"sitesp_QDc6d","description":"Onboard MSSP/Enterprise multi-tenant customer-owned license deployments.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Onboard Cortex multi-tenant"}]},{"id":"hgw4NkW4V4qiFfkTqJcd","title":"Step 1. Activate Cortex Cortex XDR (parent and child tenants)","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments/step-1.-activate-cortex-cortex-xdr-parent-and-child-tenants","siteSpaceId":"sitesp_QDc6d","description":"Learn how to activate Cortex XDR from Cortex Gateway.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant customer-owned license deployments"}]},{"id":"9Hl0JUVFTzUmT6KXK4LF","title":"Step 2. Define access configurations and role permissions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments/step-2.-define-access-configurations-and-role-permissions","siteSpaceId":"sitesp_QDc6d","description":"Define the correct access configuration and role permissions for multi-tenant customer-owned license deployment.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant customer-owned license deployments"}]},{"id":"YkYYC099Aq33KkGXIYR5","title":"Step 3. Pair a parent tenant with child tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-customer-owned-license-deployments/step-3.-pair-a-parent-tenant-with-child-tenant","siteSpaceId":"sitesp_QDc6d","description":"In multi-tenant customer-owned license deployments, you must manually pair the parent tenant with each child tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Onboard Cortex multi-tenant"},{"label":"Onboarding checklist for multi-tenant customer-owned license deployments"}]},{"id":"sjD9fMuodpEQcddQhrRZ","title":"Dynamic license allocation","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/dynamic-license-allocation","siteSpaceId":"sitesp_QDc6d","description":"In a multi-tenant central licensing management environment, you can dynamically edit child tenant allocations, add child tenants, and delete child tenants with the license pool automatically updated.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"}]},{"id":"a6RRjRqj4JJaCpm0ynVq","title":"Child tenant management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_QDc6d","description":"Track, manage, and investigate child tenant data from the parent tenant.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"}]},{"id":"Y4HfahGd77HJXY9v0gZX","title":"Manage a child tenant","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/child-tenant-management/manage-a-child-tenant","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console you can view and investigate child tenant data and initiate security actions.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Child tenant management"}]},{"id":"Xv5EvtzQP2NGo7PmmxeS","title":"Track your tenant management","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/child-tenant-management/track-your-tenant-management","siteSpaceId":"sitesp_QDc6d","description":"You can view the details of your tenants at any time.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Child tenant management"}]},{"id":"ozxoyNPhfqU2HVy1qx76","title":"Investigate child tenant data","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/child-tenant-management/investigate-child-tenant-data","siteSpaceId":"sitesp_QDc6d","description":"In multi-tenant environments, you can view, track, and investigate data across your Cortex XDR child tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Child tenant management"}]},{"id":"xbkZdUGCrmIdZI5oXKH0","title":"Create and allocate configurations","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/child-tenant-management/create-and-allocate-configurations","siteSpaceId":"sitesp_QDc6d","description":"From the Cortex XDR management console, you can create and allocate configurations for child tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Child tenant management"}]},{"id":"G3FLnQRRRCPqTsiOvjo0","title":"Create a security managed action","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/child-tenant-management/create-a-security-managed-action","siteSpaceId":"sitesp_QDc6d","description":"Create a security type action to perform on behalf of your child tenants.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"Child tenant management"}]},{"id":"ydBAEFigyzruOknIPZFI","title":"About managed threat hunting","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/about-managed-threat-hunting","siteSpaceId":"sitesp_QDc6d","description":"Understand how Managed Threat Hunting can help your organization.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"}]},{"id":"g9lWUUnAEXI9VcbKt5r2","title":"Set up Managed Threat Hunting","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/about-managed-threat-hunting/set-up-managed-threat-hunting","siteSpaceId":"sitesp_QDc6d","description":"Get started with the Managed Threat Hunting service, an add-on security service provided with Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"About managed threat hunting"}]},{"id":"ZazHDS86Y10J3NVUI7kg","title":"Investigate Managed Threat Hunting reports","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/about-managed-threat-hunting/investigate-managed-threat-hunting-reports","siteSpaceId":"sitesp_QDc6d","description":"Investigate your Managed Threat Hunting reports.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Multi-tenant"},{"label":"About managed threat hunting"}]},{"id":"Amo01JK6E2N0GQ0KFOa1","title":"Reference","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"}]},{"id":"JZCmSGAlxvcLLEgOwvEc","title":"RBAC permissions","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the RBAC permissions specifically about role permissions by component and the default Palo Alto Networks roles.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"}]},{"id":"XxEWFnClVyJU1V87gWy1","title":"Role permissions by components","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/role-permissions-by-components","siteSpaceId":"sitesp_QDc6d","description":"Learn how to manage role permissions in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"}]},{"id":"6qFx1n1dlJOs2G8HeaBH","title":"Default PANW roles","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the default Palo Alto Networks user roles included in Cortex XDR.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"}]},{"id":"sgOY3Jus7IFACRaIV1MA","title":"Account Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/account-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Account Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"Whd5WkDipv4DWt7rh0cE","title":"Deployment Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/deployment-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Deployment Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"aRkkgiVPipI5LTXpvDMM","title":"Instance Administrator","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/instance-administrator","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Instance Administrator.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"vXNC7nWnb5WjpnZaLQbo","title":"Investigation Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/investigation-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Investigation Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"3ibtdjUN0GFS9Hs3y6Nc","title":"Investigator","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/investigator","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Investigator.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"8CRZVeTnFaIj8NKjwYRX","title":"IT Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/it-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called IT Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"o1rynv41AbIFDbALHtW1","title":"Privileged Investigator","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/privileged-investigator","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Privileged Investigator.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"4ARC0o15pbySyZFTwtv6","title":"Privileged IT Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/privileged-it-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Privileged IT Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"4IX7Xdchc6gudkh45xKI","title":"Privileged Responder","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/privileged-responder","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Privileged Responder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"9pe4ry384l4dIU4ypei5","title":"Privileged Security Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/privileged-security-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the predefined user role called Privileged Security Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"Z7CKjqF6EeKBaaaBqr5D","title":"Responder","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/responder","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Responder.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"B0Kptp3gmEPuCHBQOyKA","title":"Scoped Endpoint Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/scoped-endpoint-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Scoped Endpoint Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"JpEY8PSU1eQwrklp5PZg","title":"Security Admin","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/security-admin","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Security Admin.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"5J4tVLh79Gt9qsl86aWm","title":"Viewer","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/rbac-permissions/default-panw-roles/viewer","siteSpaceId":"sitesp_QDc6d","description":"Learn more about the Cortex XDR predefined user role called Viewer.","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"RBAC permissions"},{"label":"Default PANW roles"}]},{"id":"EwQLHmQLOcmuHpzORysf","title":"Microsoft Windows security auditing setup","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"}]},{"id":"KK6nu53C8eFRTYHTXaqj","title":"Enable security auditing event IDs","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"ZRMPfC2kiGBSXLMCtHPe","title":"Enable security auditing event IDs with GPO","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/enable-security-auditing-event-ids-with-gpo","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"YmDG1fqLebioSc4fIaew","title":"Set up local machine security auditing without GPO","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/set-up-local-machine-security-auditing-without-gpo","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"2rrbvYviWgefoZz5IkmV","title":"Additional setup for Active Directory Certificate Services (ADCS) events","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/additional-setup-for-active-directory-certificate-services-adcs-events","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"YNvkl8o1AbbmoVeaiy45","title":"Enable auditing access to AD domain objects - 4662","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-security-auditing-event-ids/enable-auditing-access-to-ad-domain-objects-4662","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable security auditing event IDs"}]},{"id":"35Q6LGAbzCnY5zUSvcWF","title":"Enable additional event logs using Event Viewer","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-additional-event-logs-using-event-viewer","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"TqGUR45XTwwL3eREOdvb","title":"Enable LDAP server events logging (1644)","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"}]},{"id":"4qm02E9qJy54Xhcjr1Wm","title":"Enable LDAP server events logging using RegEdit","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/enable-ldap-server-events-logging-using-regedit","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"sAlK2bboNLgMrmarqYO4","title":"Enable LDAP server events logging using GPO","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/enable-ldap-server-events-logging-using-gpo","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"cWhpU7jygS4k7xtbJwEd","title":"Validate log collection for LDAP Server events","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/microsoft-windows-security-auditing-setup/enable-ldap-server-events-logging-1644/validate-log-collection-for-ldap-server-events","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"},{"label":"Microsoft Windows security auditing setup"},{"label":"Enable LDAP server events logging (1644)"}]},{"id":"8ruS18ArmGFqmwzOEPUR","title":"Cortex secure deployment practices","pathname":"/cortex-xdr-3.x/cortex-xdr-3.x-documentation/reference/cortex-secure-deployment-practices","siteSpaceId":"sitesp_QDc6d","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation","icon":"shield-halved"},{"label":"Cortex XDR 3.x Documentation"},{"label":"Reference"}]},{"id":"oR7tzyD2Eg5coIlIHRCJ","title":"Navigate the Cortex Cloud Runtime Security docs","pathname":"/cortex-cloud-runtime-security","siteSpaceId":"sitesp_Lgqaz","description":"Start here for a visual overview of the main Runtime Security documentation areas.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"DW94gapH37WqS2KKUhj2","title":"What is Cortex Cloud?","pathname":"/cortex-cloud-runtime-security/get-started/readme-1","siteSpaceId":"sitesp_Lgqaz","description":"Explore Cortex Cloud, unifying application security, cloud posture, runtime security, and SOC operations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"9xj9ptZacGGbUHRWLcF8","title":"Key features","pathname":"/cortex-cloud-runtime-security/get-started/readme-1/key-features","siteSpaceId":"sitesp_Lgqaz","description":"Discover Cortex Cloud features for visibility, risk assessment, compliance, attack path analysis, and remediation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"},{"label":"What is Cortex Cloud?"}]},{"id":"jkPLQdtfWWsWnh7VepZb","title":"What is Cortex Cloud Runtime Security?","pathname":"/cortex-cloud-runtime-security/get-started/what-is-cortex-cloud-runtime-security","siteSpaceId":"sitesp_Lgqaz","description":"Learn about Cortex Cloud and the key integrated capabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"avCxSSkW2qeBIkjZgAXv","title":"Agentic AI in Cortex Cloud","pathname":"/cortex-cloud-runtime-security/get-started/agentic-ai-in-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Use the Cortex Agentic Assistant to investigate cases, perform threat hunting, and create scripts. Embed and run LLM prompts in playbooks. View AI case summaries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"qGMmQDVFbYOR5m3chrBC","title":"Agentic Assistant use cases","pathname":"/cortex-cloud-runtime-security/get-started/agentic-ai-in-cortex-cloud/agentic-assistant-use-cases","siteSpaceId":"sitesp_Lgqaz","description":"Recommended prompts to automate your SOC using the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"},{"label":"Agentic AI in Cortex Cloud"}]},{"id":"C5t8R2t26vkwGXwyS6tq","title":"Agentic Assistant security","pathname":"/cortex-cloud-runtime-security/get-started/agentic-ai-in-cortex-cloud/agentic-assistant-security","siteSpaceId":"sitesp_Lgqaz","description":"Learn about how the Agentic Assistant is built using responsible AI principles.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"},{"label":"Agentic AI in Cortex Cloud"}]},{"id":"g7NxWLa4kMta6KOmFkYR","title":"Best practices for using Agentic AI in Cortex Cloud","pathname":"/cortex-cloud-runtime-security/get-started/agentic-ai-in-cortex-cloud/best-practices-for-using-agentic-ai-in-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"},{"label":"Agentic AI in Cortex Cloud"}]},{"id":"algI9icLfuil511DA2RL","title":"Supported web browsers","pathname":"/cortex-cloud-runtime-security/get-started/supported-web-browsers","siteSpaceId":"sitesp_Lgqaz","description":"Review supported web browsers and minimum versions for reliable Cortex Cloud access and performance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"fB6txlayxSYjxvbLdCjs","title":"Use the interface","pathname":"/cortex-cloud-runtime-security/get-started/use-the-interface","siteSpaceId":"sitesp_Lgqaz","description":"Learn to navigate Cortex Cloud’s Command Center, Asset Inventory, dashboards, and Cases for cloud security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"Mzb5Gq8mt6L8Po8yMv1G","title":"In-product support ticket creation","pathname":"/cortex-cloud-runtime-security/get-started/in-product-support-case-creation","siteSpaceId":"sitesp_Lgqaz","description":"Open a support ticket directly in Cortex Cloud and record your console to capture your issues and have the ticket handled efficiently.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"VlvK8vKikk5sYbuyveNy","title":"Understand your user persona","pathname":"/cortex-cloud-runtime-security/get-started/understand-your-user-persona","siteSpaceId":"sitesp_Lgqaz","description":"Understand Cortex Cloud’s cloud security engineer persona, responsibilities, and workflows for prioritizing and remediating risk.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"eoYPvnEts09y6hkIzTx9","title":"Understand license plans","pathname":"/cortex-cloud-runtime-security/get-started/understand-license-plans","siteSpaceId":"sitesp_Lgqaz","description":"Understand Cortex Cloud license plans, protected workload metering, add-ons, usage, and capacity overflow rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"HQPvplV7nBTKgXVwlXvE","title":"Data retention","pathname":"/cortex-cloud-runtime-security/get-started/understand-license-plans/data-retention","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the default retention periods for all Cortex Cloud licenses and the available retention add-ons.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"},{"label":"Understand license plans"}]},{"id":"Svx50S8Wa44soZaLFH1x","title":"Fair Usage policy for Cortex Cloud","pathname":"/cortex-cloud-runtime-security/get-started/fair-usage-policy-for-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Understand Cortex Cloud’s Fair Usage Policy for data ingestion, connected sources, and API usage.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Get started"}]},{"id":"3yCeSnt21niXspjFMnyP","title":"Learn how to onboard and configure Cortex Cloud Runtime Security","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/onboard-and-configure-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Learn about the deployment preparation and procedures to onboard and configure Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"}]},{"id":"RGsLTcVeuogGs32xG5kp","title":"Plan and prepare","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/plan-and-prepare","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about deployment considerations and onboarding steps.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"}]},{"id":"IcwxJh3QtprYJZYpXD1S","title":"Prepare for deployment","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/plan-and-prepare/prepare-for-deployment","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about deployment considerations and onboarding steps.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Plan and prepare"}]},{"id":"vWHC4VPReqft6ZrZ2p5H","title":"Deployment steps and checklist","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist","siteSpaceId":"sitesp_Lgqaz","description":"Review the steps to onboard and configure Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"}]},{"id":"DOVWzoAyVL6k38IBcfxX","title":"Activate Cortex Cloud","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to activate your tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"Zkj34fWy5ozbzpGq4Dwh","title":"Cortex Cloud supported regions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/cortex-cloud-supported-regions","siteSpaceId":"sitesp_Lgqaz","description":"Explore Cortex Cloud hosting regions and data residency locations across the Americas, EMEA, and Asia-Pacific.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"}]},{"id":"2WZvWhJRuy2c2Tn9O0m6","title":"Enable access to required PANW resources","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources","siteSpaceId":"sitesp_Lgqaz","description":"Configure firewall access to required Cortex Cloud resources, FQDNs, IP addresses, ports, and App-IDs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"}]},{"id":"hdZiuIn6DghuyfJxhcak","title":"Regional egress resources","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/regional-egress-resources","siteSpaceId":"sitesp_Lgqaz","description":"Allow regional Cortex Cloud egress traffic for tenant communication, EDR, Live Terminal, APIs, and Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"oSZzNMm9m2AAEGrPdmv6","title":"Engines IP addresses (outbound)","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/engines-ip-addresses-outbound","siteSpaceId":"sitesp_Lgqaz","description":"Find Cortex Cloud engine outbound IP addresses for allowing automation playbook and script access to internal resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"vJGzO280MIMwlqeKNq94","title":"Inbound source resources","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/inbound-source-resources","siteSpaceId":"sitesp_Lgqaz","description":"Allow Cortex Cloud inbound source IP addresses for Broker VM, syslog, infrastructure communication, and data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"wXqLKK1cIGatM5eE7J3a","title":"FedRAMP and the US Federal Government required resources","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/fedramp-and-the-us-federal-government-required-resources","siteSpaceId":"sitesp_Lgqaz","description":"Configure required Cortex Cloud resource access for FedRAMP and US federal government environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"OQ2NWiGSn5fBP28jTkoi","title":"Upgrade from Prisma Cloud to Cortex Cloud","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Upgrade from Prisma Cloud to Cortex Cloud and migrate supported configurations, content, and integrations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"vMSkZV2g9UlL4Zxmd99P","title":"About the Upgrade Helper","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/about-the-upgrade-helper","siteSpaceId":"sitesp_Lgqaz","description":"Understand the Cortex Cloud Upgrade Helper and its role in migrating Prisma Cloud configurations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"CWB21noKq1UKzFFrOxro","title":"Link Cortex Cloud to Prisma Cloud","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/link-cortex-cloud-to-prisma-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Link your Cortex Cloud tenant to Prisma Cloud before migrating configurations with Upgrade Helper.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"wms0kvD97DTmROitqIhf","title":"Copy content","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content","siteSpaceId":"sitesp_Lgqaz","description":"Copy supported Prisma Cloud content and configurations into Cortex Cloud during an Upgrade Helper migration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"XGqXmbscvxONzaShQ5JZ","title":"Copy Global configurations","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-global-configurations","siteSpaceId":"sitesp_Lgqaz","description":"Copy global Prisma Cloud configurations to Cortex Cloud during migration with Upgrade Helper.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"hd077QJeNvF5w3za2mrv","title":"Copy CSPM configurations","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cspm-configurations","siteSpaceId":"sitesp_Lgqaz","description":"Copy Prisma Cloud CSPM configurations into Cortex Cloud using Upgrade Helper.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"gdrCPQceNogAAHuN5sOp","title":"Copy CWP configurations","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cwp-configurations","siteSpaceId":"sitesp_Lgqaz","description":"Copy Prisma Cloud CWP configurations into Cortex Cloud using Upgrade Helper.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"GAYYNbYW8qiB6NZ2irQM","title":"Copy Cortex Cloud Application Security configurations","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cortex-cloud-application-security-configurations","siteSpaceId":"sitesp_Lgqaz","description":"Copy Cortex Cloud Application Security configurations from Prisma Cloud with Upgrade Helper.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"7z0W95Hd0u5avVrV01n1","title":"Migrate Cortex CLI","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/migrate-cortex-cli","siteSpaceId":"sitesp_Lgqaz","description":"Migrate Cortex CLI workflows and configurations from Prisma Cloud to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"B8wADlmhqKXrrvtusbRu","title":"Set up users, groups, and roles","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-users-and-roles","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to set up users and roles in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"iN0adW3AHk61QF3CSc1Y","title":"User group management","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-users-and-roles/user-group-management","siteSpaceId":"sitesp_Lgqaz","description":"Manage user groups in Cortex Cloud to organize users and assign access consistently.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Set up users, groups, and roles"}]},{"id":"d6QSPovj3HhVZGMhgPy1","title":"Assign user roles and groups","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-users-and-roles/assign-user-roles-and-groups","siteSpaceId":"sitesp_Lgqaz","description":"Assign roles and group memberships to users.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Set up users, groups, and roles"}]},{"id":"UBtZwpy2TToBwXt9tkLE","title":"Manage API keys","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/manage-api-keys","siteSpaceId":"sitesp_Lgqaz","description":"Create, manage, and revoke Cortex Cloud API keys for secure programmatic access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"jutEHWUjgBLFBxAR5T9j","title":"Set up authentication","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication","siteSpaceId":"sitesp_Lgqaz","description":"Authenticate Cortex Cloud users using SAML 2.0 or Customer Support Portal (CSP).","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"CjTKfgvUGdAhmKM8Efi4","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_Lgqaz","description":"Authenticate users through the Customer Support Portal.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"MdDsR6ypdkO0afOEeDjT","title":"Authenticate users using SSO","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_Lgqaz","description":"Configure SAML single sign-on for Cortex Cloud users.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"lSPXIKLg2wMadSw5jjMX","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_Lgqaz","description":"Configure Okta as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"txP7yM2yEtMuJkx4reFq","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_Lgqaz","description":"Configure Microsoft Entra ID as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"68b43dac462cb432c8ec90a7a1b02e6dfa2df781","title":"Cloud service provider (CSP) onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Learn about onboarding your cloud service provider to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"129821c66ce549e51fe637156f49c4630ac19ff3","title":"Amazon Web Services cloud onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Follow the AWS onboarding wizard, and Cortex Cloud creates a custom authentication template to be deployed in AWS.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"ed8816160827371da8b0783cc46f54afe8583be5","title":"AWS security capabilities and deployment planning","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"371a08848f696fa54e7c72c62bc7751d96d0afd7","title":"AWS resource inventory","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-resource-inventory","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"f58a86e3fd1fa4a1c4c055a7014ca8ae66df659d","title":"AWS security model and authentication","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-model-and-authentication","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"e0b6a66bc525ace1e589596f5c65c05b4d9ec0b2","title":"Cortex Cloud and AWS audit log collection architecture","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/cortex-cloud-and-aws-audit-log-collection-architecture","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"405bc748711f52db1728c9b03b8b75a4021186b2","title":"Onboard Amazon Web Services","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/onboard-amazon-web-services","siteSpaceId":"sitesp_Lgqaz","description":"Follow the AWS onboarding wizard, and Cortex Cloud creates a custom authentication template to be executed in AWS.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"5ac58cf3904f7ad284436a564fe9b38179156852","title":"Prerequisites for onboarding AWS","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/prerequisites-for-onboarding-aws","siteSpaceId":"sitesp_Lgqaz","description":"Before you begin onboarding AWS, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"a575187cc8aad2de0b8e34fe2b0f9c1772c17623","title":"How to onboard Amazon Web Services","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/how-to-onboard-amazon-web-services","siteSpaceId":"sitesp_Lgqaz","description":"Follow the AWS onboarding wizard and Cortex Cloud creates a custom authentication template to be deployed in AWS CloudFormation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"3df5e74f4c6631822ac3c1ce1889dee3562b390f","title":"Deploy the authentication template in AWS","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/deploy-the-authentication-template-in-aws","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to deploy the Terraform or CloudFormation authentication template in Amazon Web Services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"4pfrk9juD7TNkarCwK2A","title":"Post-deployment: Custom (BYOB) and Control Tower audit log collection","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/post-deployment-custom-byob-audit-log-collection","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"sbfi4alrD9uMeq0qcTZb","title":"Grant cross-account KMS key access for Control Tower BYOB log collection","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/grant-cross-account-kms-key-access-for-control-tower-byob-log-collection","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to configure cross-account AWS KMS key permissions for Cortex Control Tower BYOB log collection. Step-by-step guide to updating KMS key policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"23c59caa9d062c955cbe93b40054e1c5661816e9","title":"AWS post-deployment verification","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-post-deployment-verification","siteSpaceId":"sitesp_Lgqaz","description":"After you have completed the AWS onboarding wizard and you have deployed the authentication template in AWS (using CloudFormation or Terraform), verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"TsB8YXNRARz5PBUv0Cpw","title":"AWS provider permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/amazon-web-services-aws-provider-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Amazon Web Services (AWS) permissions for use during Cortex Cloud onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"88eae752592c9331721faaab945157a8c16a5ed4","title":"Microsoft Azure cloud onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Onboard Microsoft Azure cloud accounts to Cortex Cloud for security visibility and monitoring.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"284d84bb11b2057eef3bedc8c20c3cdb0db980f7","title":"Onboard Microsoft Azure","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/onboard-microsoft-azure","siteSpaceId":"sitesp_Lgqaz","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"c7268be0fd8cc84467ebac16c26fbb02230331c6","title":"Prerequisites for onboarding Azure","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/prerequisites-for-onboarding-azure","siteSpaceId":"sitesp_Lgqaz","description":"Before you begin onboarding Microsoft Azure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"fee245fc72b86f13b080128806538201600d6b65","title":"How to onboard Microsoft Azure","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/how-to-onboard-microsoft-azure","siteSpaceId":"sitesp_Lgqaz","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"95abd824f7363c13bc59369e2ec3bd525c324465","title":"Finalize Microsoft Azure onboarding by executing the authentication template","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/finalize-microsoft-azure-onboarding-by-executing-the-authentication-template","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to execute the authentication template file in Microsoft Azure for subscriptions, tenants, and management groups. We provide instructions both for applying the Terraform template's configura","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"OFxrOWCX8kggHOgFfJ4u","title":"Microsoft Azure offboarding overview","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview","siteSpaceId":"sitesp_Lgqaz","description":"This section contains the technical procedures required to safely decommission and offboard your Cortex Cloud resources in Microsoft Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"aLmXn1kDdQhS98psVMQg","title":"Offboard Terraform-based Azure deployments (all scopes)","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-terraform-based-azure-deployments-all-scopes","siteSpaceId":"sitesp_Lgqaz","description":"How to offboard all Terraform-based Microsoft Azure scopes from Cortex Cloud: A step-by-step technical guide to safely running Terraform destroy and cleaning up policy-deployed resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"f3gqQeByCNGlmqGcBKo7","title":"Offboard Azure subscription (ARM)","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-subscription-arm","siteSpaceId":"sitesp_Lgqaz","description":"How to offboard a Microsoft Azure subscription scope that was onboarded using ARM: A step-by-step technical guide to safely running the interactive offboarding script and cleaning up all resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"hUWbqMfiI3Dns5FsZ6to","title":"Offboard Azure management group or tenant scope (ARM)","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-management-group-or-tenant-scope-arm","siteSpaceId":"sitesp_Lgqaz","description":"How to offboard Microsoft Azure management group or tenant scopes from Cortex Cloud: A step-by-step technical guide to safely removing all Azure resources deployed by Cortex onboarding templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"X6aP9oxieHEHeFdh0mqB","title":"Offboard Azure tenant with Entra ID only","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-tenant-with-entra-id-only","siteSpaceId":"sitesp_Lgqaz","description":"How to offboard a Microsoft Azure tenant onboarded with the Entra ID only option from Cortex Cloud: A step-by-step technical guide to safely removing deployed resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"GHyCMSXIlKKK3lLTpkj6","title":"Microsoft Azure provider permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-provider-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Microsoft Azure provider permissions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"cd8865780ca788d72d799ab6f0f8e9fdb11a4a1d","title":"Google Cloud Platform cloud onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Onboard Google Cloud Platform projects to Cortex Cloud for cloud security monitoring and governance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"26a37ce1c2a0c24600b93c4d64d1b884de9228a2","title":"Onboard Google Cloud Platform","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/onboard-google-cloud-platform","siteSpaceId":"sitesp_Lgqaz","description":"Follow the GCP onboarding wizard, and Cortex creates a custom authentication template to be executed in GCP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"1f4ca11f0804086fbb610848ad670a49d328da1c","title":"Prerequisites for onboarding GCP","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp","siteSpaceId":"sitesp_Lgqaz","description":"Before you begin onboarding GCP, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"Bgje8gzxBz4Q32jkCWco","title":"Required APIs","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp/required-apis","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"},{"label":"Prerequisites for onboarding GCP"}]},{"id":"94a3e59ea5d1699820286caf8a5ed19961228a58","title":"How to onboard Google Cloud Platform","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/how-to-onboard-google-cloud-platform","siteSpaceId":"sitesp_Lgqaz","description":"Follow the GCP onboarding wizard, and Cortex Cloud creates a custom authentication template to be applied in GCP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"9a519ca0c4da7bd6bf7e82bd10a47c4ce8894919","title":"Deploy the Terraform authentication template in GCP","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/deploy-the-terraform-authentication-template-in-gcp","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to deploy the Terraform authentication template in Google Cloud Console.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"cace9b37daa87572b5f890f81c690f3a55c9b39c","title":"Connect Google Workspace with your GCP cloud instance","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/connect-google-workspace-with-your-gcp-cloud-instance","siteSpaceId":"sitesp_Lgqaz","description":"Connect Google Workspace with a Google Cloud Platform instance in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"48924177e6699e829db24be8b69e860ee69604ad","title":"Monitor GCP resources inside service perimeters","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/monitor-gcp-resources-inside-service-perimeters","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to grant authorization to Cortex Cloud to scan within your GCP service perimeter.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"daofhifDK5T0WK6gfWSE","title":"Google Cloud Platform (GCP) provider permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/google-cloud-platform-gcp-provider-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex Cloud onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"3be99858a65a496e2351985bcd82ad0edccc1f1b","title":"Oracle Cloud Infrastructure cloud onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Follow the Oracle Cloud Infrastructure onboarding wizard and Cortex Cloud creates a custom Terraform authentication template to be deployed in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"3e2ba8fbac12d8364b07f8a8c34e80367b866b86","title":"Onboard Oracle Cloud Infrastructure","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_Lgqaz","description":"Follow the OCI onboarding wizard, and Cortex creates a custom authentication template to be executed in OCI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"c178de873dc60c158a345554717e20a37cddbda1","title":"Prerequisites for onboarding OCI","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/prerequisites-for-onboarding-oci","siteSpaceId":"sitesp_Lgqaz","description":"Before you begin onboarding Oracle Cloud Infrastructure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"7e3e6b94ee5c9edf3203df0beeb064f23bcdbbfd","title":"How to onboard Oracle Cloud Infrastructure","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/how-to-onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_Lgqaz","description":"Follow the OCI onboarding wizard and Cortex Cloud creates a custom authentication template to be applied in OCI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"0d4d79ed43a57e55cbced1beb8233e251e5fe916","title":"Deploy the Terraform authentication template in OCI","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/deploy-the-terraform-authentication-template-in-oci","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to deploy the Terraform authentication template in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"0aojyQHepzqU83OSREfi","title":"Oracle Cloud Infrastructure (OCI) provider permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/oracle-cloud-infrastructure-oci-provider-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Oracle Cloud Infrastructure provider permissions for use during Cortex Cloud onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"4df29b345d2b1671cbc09257d815697a66787315","title":"Alibaba Cloud cloud onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Follow the Alibaba Cloud onboarding wizard and Cortex Cloud creates a custom Terraform authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"d6f26436ff9203f3889c2aba1f0b01702e5fcc59","title":"Alibaba security capabilities and deployment planning","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_Lgqaz","description":"Plan Alibaba Cloud onboarding by reviewing Cortex Cloud security capabilities and deployment requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"9702a44fb991a1e7de3482e66fd9c17ad9fa2846","title":"Alibaba Cloud resource inventory","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-resource-inventory","siteSpaceId":"sitesp_Lgqaz","description":"Understand how Cortex Cloud discovers and inventories Alibaba Cloud resources for security visibility.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"474f0c8fdbb30f9151a379f027528e7d0e54bd9b","title":"Alibaba Cloud security model and authentication","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-security-model-and-authentication","siteSpaceId":"sitesp_Lgqaz","description":"Review Alibaba Cloud security models and authentication requirements for Cortex Cloud onboarding.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"04119a53c50342998e36761b8ee25f955b3b15a0","title":"Onboard Alibaba Cloud","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/onboard-alibaba-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Follow the Alibaba Cloud onboarding wizard and Cortex Cloud creates a custom CloudFormation authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"740c89438380652fac090b4a60b02a75677bf316","title":"Prerequisites for onboarding Alibaba Cloud","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/prerequisites-for-onboarding-alibaba-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Before you begin onboarding Alibaba Cloud, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"30c6143fbc5e4ff009ac543ca4720c577ee20e9f","title":"How to onboard Alibaba Cloud","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/how-to-onboard-alibaba-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Onboard Alibaba Cloud accounts to Cortex Cloud for cloud security monitoring and governance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"6f0b5ed6c73a5f8fd61b1c81cfe08c608eb98865","title":"Alibaba Cloud post-deployment verification","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-post-deployment-verification","siteSpaceId":"sitesp_Lgqaz","description":"After you have completed the Alibaba Cloud onboarding wizard and you have deployed the authentication template in Alibaba Cloud, verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"HmCMW6cYDc6PW4S1hbSH","title":"Alibaba Cloud provider permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-provider-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Alibaba Cloud permissions for use during Cortex Cloud onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"UmlxKNkwOHiyB4LgrOiz","title":"Outpost onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Learn about outposts, which are a dedicated set of infrastructure resources that extends the reach of Cortex Cloud into your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"1B0ccI77R29ec9HQIDSv","title":"Outpost fundamentals and planning","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-fundamentals-and-planning","siteSpaceId":"sitesp_Lgqaz","description":"An outpost enables you to have security scans performed on infrastructure in a cloud account owned by you. Learn about outpost fundamentals and what to consider when planning your outpost.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"T9RtlvgSrrvdEt5ht9W5","title":"Outpost creation workflow","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-creation-workflow","siteSpaceId":"sitesp_Lgqaz","description":"Learn about the creation process for an outposts, which facilitate security scanning performed on infrastructure in a cloud account owned by you.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"ICYgjfffIX4q1MR35Y41","title":"Working with standard outposts","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts","siteSpaceId":"sitesp_Lgqaz","description":"Standard outposts are the recommended way to create dedicated set of infrastructure resources that extends the reach of Cortex Cloud into your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"cFOjz9DWM7THz3wVtRRP","title":"Create a standard outpost","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts/create-a-standard-outpost","siteSpaceId":"sitesp_Lgqaz","description":"Instructions for creating a standard outpost while onboarding your CSP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with standard outposts"}]},{"id":"lY42G8c7JgWFZSEe2kSi","title":"Working with Bringing your own Azure app (BYOA) outposts","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts","siteSpaceId":"sitesp_Lgqaz","description":"Using advanced settings while creating your outpost, you can deploy a Cortex Cloud Azure outpost using your own pre-created Entra ID app registration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"1pVYmOfOskE0rjL1FDr4","title":"Task 1: Meet the prerequisites for Azure BYOA outposts","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-1-meet-the-prerequisites-for-azure-byoa-outposts","siteSpaceId":"sitesp_Lgqaz","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page lists the prerequisites that must be met before customizing your outpost in this way.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"dBFf316USJh3iAiHdKxz","title":"Task 2: Create the app registration for the Azure BYOA outpost","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-2-create-the-app-registration-for-the-azure-byoa-outpost","siteSpaceId":"sitesp_Lgqaz","description":"You can customize your own outpost for Azure by bringing your own app (BYOA). This page describes the steps for creating the app registration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"LU22YpcmUiO2G2g7qGKp","title":"Task 3: Deploy the Azure BYOA outpost","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-3-deploy-the-azure-byoa-outpost","siteSpaceId":"sitesp_Lgqaz","description":"You can customize your own outpost by bringing your own app (BYOA). This page describes the steps for deploying the Azure BYOA outpost.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"wSTUvCfq1izy7qG6pRhX","title":"Task 4: Verify the BYOA outpost deployment","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-4-verify-the-byoa-outpost-deployment","siteSpaceId":"sitesp_Lgqaz","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page describes the steps for verifying your BYOA outpost deployment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"a1dcdTHJRlf26YhNPDdR","title":"The shell script for Azure app registration","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/the-shell-script-for-azure-app-registration","siteSpaceId":"sitesp_Lgqaz","description":"You can run this helper shell script to set up your resources and retrieve their IDs for use while creating your Azure BYOA outpost. This page provides technical, \"read-me style\" details about the scr","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"rKPeoLKujIs46e1BN2RE","title":"Outpost troubleshooting","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-troubleshooting","siteSpaceId":"sitesp_Lgqaz","description":"Check here for solutions to issues that might occur while configuring, deploying, and operating outposts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"UXpUeF8iIxSw27H9cEVN","title":"Outpost Cloud Service Provider (CSP) permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions","siteSpaceId":"sitesp_Lgqaz","description":"This page lists and explains the various roles and permissions needed for working with resources for outposts by CSP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"knqjO3FC2MX0hVxH0LhQ","title":"Amazon Web Services (AWS) outpost permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/amazon-web-services-aws-outpost-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Amazon Web Services (AWS) permissions for use during Cortex Cloud outpost onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"YalbAsPsJxUW5n1AkqGU","title":"Microsoft Azure outpost permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/microsoft-azure-outpost-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Microsoft Azure provider outpost permissions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"wkJMk0IJgNtUzbA6FYx4","title":"Google Cloud Platform (GCP) outpost permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/google-cloud-platform-gcp-outpost-permissions","siteSpaceId":"sitesp_Lgqaz","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex Cloud onboarding outposts to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"DtrIlul5bo3HyflHiDVA","title":"Introduction to Terraform for Cloud service provider (CSP) onboarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/introduction-to-terraform-for-cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to onboard Cloud Service Providers (CSPs) using Terraform. Discover step-by-step workflows for initial provisioning, updates, and Cloud Shell deployment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"d1278414949d67cabd6c4cec923e035ae58e8e83","title":"Manually connect a cloud instance","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/manually-connect-a-cloud-instance","siteSpaceId":"sitesp_Lgqaz","description":"Manually connect a cloud instance to Cortex Cloud when automated onboarding is unavailable.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"c2ae2b49aa201e39c6d57467bccb240361f1fbe5","title":"Manage cloud instances","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/manage-cloud-instances","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to manage, edit, and troubleshoot cloud instances in Cortex Cloud. Monitor connector health, view security capabilities, and investigate errors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"cdeb0d1aded78be45eb6c5acb0fbce23d128466f","title":"Pending cloud instances","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/pending-cloud-instances","siteSpaceId":"sitesp_Lgqaz","description":"Review and resolve pending cloud instances during Cortex Cloud onboarding.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"54c58ac2ba7b2b5f1e575b6afefc7db79f1cd756","title":"Edit your onboarded CSP configuration","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/edit-your-onboarded-csp-configuration","siteSpaceId":"sitesp_Lgqaz","description":"Edit the configuration of an onboarded cloud service provider in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"4608a128fd01650135786ab44d56a1b83b22fe66","title":"Update cloud permissions after Cortex Cloud release updates","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_Lgqaz","description":"Manage permission updates for your cloud instances following new feature releases or bug fixes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"7c7307eb46976432e9eb8dd4e4414b734de83279","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_Lgqaz","description":"You can troubleshoot errors on cloud instances by drilling down on an instance from the Data Sources & Integrations page.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"PeqcCDiSo46PJ3mqJrvG","title":"Cloud service provider permissions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/cloud-service-provider-permissions","siteSpaceId":"sitesp_Lgqaz","description":"Grant the correct cloud service provider permissions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"aVIFhux2ANOu2tgFvZOs","title":"Onboard the Kubernetes Connector","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/onboard-the-kubernetes-connector","siteSpaceId":"sitesp_Lgqaz","description":"Onboard the Cortex Kubernetes Connector to collect Kubernetes security data and enable protection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"CXGyGMYOx9ZYgCAGEul4","title":"What's new in Kubernetes Connector?","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/onboard-the-kubernetes-connector/whats-new-in-kubernetes-connector","siteSpaceId":"sitesp_Lgqaz","description":"Review new features, enhancements, and updates for the Cortex Kubernetes Connector.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Onboard the Kubernetes Connector"}]},{"id":"rnPzd1uKd4DX4hpHSFYh","title":"Supported Kubernetes distributions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/onboard-the-kubernetes-connector/supported-kubernetes-distributions","siteSpaceId":"sitesp_Lgqaz","description":"Check which Kubernetes distributions Cortex Kubernetes Connector supports before deployment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"Onboard the Kubernetes Connector"}]},{"id":"qzgxRVyJmpwcsFNd4CVn","title":"FedRAMP overview","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud supports FedRAMP requirements and US federal government environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"}]},{"id":"D5VKlJNqLo1Dffh7OlUO","title":"Cortex Cloud federal compliance","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview/cortex-cloud-federal-compliance","siteSpaceId":"sitesp_Lgqaz","description":"Review Cortex Cloud federal compliance capabilities and requirements for government deployments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"FedRAMP overview"}]},{"id":"clM7j1s7uFhqMMxbSLsA","title":"Onoarding & configuration","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview/onoarding-and-configuration","siteSpaceId":"sitesp_Lgqaz","description":"Configure Cortex Cloud onboarding and deployment settings for your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"FedRAMP overview"}]},{"id":"Fc3hjbv71CXqvBbpPduC","title":"Limitations & supported regions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview/limitations-and-supported-regions","siteSpaceId":"sitesp_Lgqaz","description":"Review supported regions and known limitations for Cortex Cloud deployment and onboarding.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Deployment steps and checklist"},{"label":"FedRAMP overview"}]},{"id":"FvtfQxFmiZ7xfE4egZcm","title":"Post-deployment steps","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps","siteSpaceId":"sitesp_Lgqaz","description":"Complete recommended Cortex Cloud configuration and validation tasks after deployment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"}]},{"id":"avgK4NgqVs2wb7AXpuE5","title":"Set up your environment","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about setting up the Cortex Cloud environment based on your preferences.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"}]},{"id":"r5LOuH4StgEycXJQ6sBN","title":"Configure server settings","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/configure-server-settings","siteSpaceId":"sitesp_Lgqaz","description":"Configure Cortex Cloud server settings to align tenant behavior with operational requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"Z5sV6og1wz8Pxr9m81r1","title":"Configure security settings","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/configure-security-settings","siteSpaceId":"sitesp_Lgqaz","description":"Configure Cortex Cloud security settings to protect your tenant and enforce security controls.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"MbxjzgR5PPsOuv94WIOm","title":"Data and log forwarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding","siteSpaceId":"sitesp_Lgqaz","description":"Configure data and log forwarding from Cortex Cloud to external services and destinations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"tC91ZZHTq3Rb6FbULvSs","title":"Forward logs and data from Cortex Cloud to external services","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services","siteSpaceId":"sitesp_Lgqaz","description":"Forward Cortex Cloud logs and data to external services for monitoring, analysis, and retention.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"}]},{"id":"GpkHcrNAb4hLs8yWIeEk","title":"Configure external applications for forwarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding","siteSpaceId":"sitesp_Lgqaz","description":"Configure external applications to receive Cortex Cloud logs, data, and notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"LnXQD6PvbNzisdSH5Fdi","title":"Forward notifications to Amazon SQS","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-sqs","siteSpaceId":"sitesp_Lgqaz","description":"Forward Cortex Cloud notifications to Amazon SQS for downstream processing and automation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"Wz6Zk5MTVU7HuWz94BuD","title":"Forward notifications to Amazon S3","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-s3","siteSpaceId":"sitesp_Lgqaz","description":"Forward Cortex Cloud notifications to Amazon S3 for storage, analysis, and retention.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"JL1B2MQ609fbd0qWUIDt","title":"Forward notifications to Splunk","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-splunk","siteSpaceId":"sitesp_Lgqaz","description":"Forward Cortex Cloud notifications to Splunk for centralized security monitoring and analysis.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"agTEgkicf2QVB5rLUFHW","title":"Forward notifications to webhook","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-webhook","siteSpaceId":"sitesp_Lgqaz","description":"Forward Cortex Cloud notifications to a webhook endpoint for external workflow automation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"0QGcKZxmiu8BWEmn0T3c","title":"Integrate a syslog receiver","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/integrate-a-syslog-receiver","siteSpaceId":"sitesp_Lgqaz","description":"Integrate a syslog receiver with Cortex Cloud to collect forwarded logs and events.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"i63CqmHyFoOj0qn3IelN","title":"Integrate Slack for outbound notifications","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/integrate-slack-for-outbound-notifications","siteSpaceId":"sitesp_Lgqaz","description":"Integrate Slack with Cortex Cloud to deliver outbound security notifications to channels.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"dB6GXZnzZefthqDllToT","title":"Configure notification forwarding","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-notification-forwarding","siteSpaceId":"sitesp_Lgqaz","description":"Configure Cortex Cloud notification forwarding for supported external destinations and services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"GQQMMYbb465JUzhJ4xyL","title":"Set up email notifications for tenant updates","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/set-up-email-notifications-for-tenant-updates","siteSpaceId":"sitesp_Lgqaz","description":"Set up email notifications for Cortex Cloud tenant updates and operational announcements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"FOe5FYKJkFaJ6lr1Xqud","title":"Monitor administrative activity","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/monitor-administrative-activity","siteSpaceId":"sitesp_Lgqaz","description":"Monitor Cortex Cloud administrative and investigative activity with management audit logs and notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"fJJ5SeWm5jNXcRTXxAXQ","title":"Data and log notification formats","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats","siteSpaceId":"sitesp_Lgqaz","description":"Understand Cortex Cloud data and log notification formats for external integrations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"}]},{"id":"8QIgUE3NimqSU6r0tBHf","title":"Management audit log messages","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-messages","siteSpaceId":"sitesp_Lgqaz","description":"Review management audit log messages generated by Cortex Cloud administrative activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"NZmAH61Il1KSMdRi5ikJ","title":"Issue notification format","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/issue-notification-format","siteSpaceId":"sitesp_Lgqaz","description":"Understand the Cortex Cloud issue notification format for external integrations and processing.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"wW5CVcqavKb4ijwgp3iu","title":"Agent Audit log notification format","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/agent-audit-log-notification-format","siteSpaceId":"sitesp_Lgqaz","description":"Review the Cortex Agent Audit log notification format for external event processing.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"tdUOcyLKbnbge6eyp7lx","title":"Management Audit log notification format","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-notification-format","siteSpaceId":"sitesp_Lgqaz","description":"Review the Cortex Cloud Management Audit log notification format for external event processing.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"Ie35NKwAaFfnuL2GnA7b","title":"Log format for IOC and BIOC issues","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/log-format-for-ioc-and-bioc-issues","siteSpaceId":"sitesp_Lgqaz","description":"Understand Cortex Cloud log formats for IOC and BIOC security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"26ZDcWuRq7NU4UpDI3AD","title":"Analytics log format","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/analytics-log-format","siteSpaceId":"sitesp_Lgqaz","description":"Understand the Cortex Cloud analytics log format for external integrations and analysis.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"goW0Sk1pmrp6Ey3jsHVm","title":"Cortex MCP server","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/cortex-mcp-server","siteSpaceId":"sitesp_Lgqaz","description":"The Cortex MCP server enables you to leverage Cortex's powerful capabilities directly through natural language.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"}]},{"id":"cmQmpVRUjqCHhagU0Wkr","title":"Install the Cortex MCP server","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/cortex-mcp-server/install-the-cortex-mcp-server","siteSpaceId":"sitesp_Lgqaz","description":"Install the Cortex MCP server to connect AI clients with Cortex Cloud capabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"juYkaueyDfoGD7QEfllm","title":"Configure the MCP client","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/cortex-mcp-server/configure-the-mcp-client","siteSpaceId":"sitesp_Lgqaz","description":"Configure an MCP client to connect securely with the Cortex MCP server.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"ODVtYy9pj2MO4fW0jOj2","title":"Use the Cortex MCP server","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/cortex-mcp-server/use-the-cortex-mcp-server","siteSpaceId":"sitesp_Lgqaz","description":"Use the Cortex MCP server to access Cortex Cloud capabilities from compatible AI clients.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"bxpBvwYIdOQHakAyRPYy","title":"Create custom Cortex MCP server tools","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/cortex-mcp-server/create-custom-cortex-mcp-server-tools","siteSpaceId":"sitesp_Lgqaz","description":"Create custom tools for the Cortex MCP server to extend AI client capabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"HvgGsKXNQA0BjUnd6PB9","title":"Manage user roles and access management","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to manage access for users, user roles, user groups, and Single Sign-On (SSO) for users on a specific Cortex Cloud tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"}]},{"id":"6IcxKRLbrnJojEOnhtAT","title":"Manage user roles","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-roles","siteSpaceId":"sitesp_Lgqaz","description":"Manage Cortex Cloud user roles and define permissions for tenant access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"eQywLm20zz1656OojRbm","title":"Manage user access","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-access","siteSpaceId":"sitesp_Lgqaz","description":"Manage Cortex Cloud user access by assigning roles and controlling tenant permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"Nk5wDZiW99BRvTbMrEZe","title":"User access reference information","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-access/user-access-reference-information","siteSpaceId":"sitesp_Lgqaz","description":"Reference Cortex Cloud user access concepts, permissions, roles, and scope controls.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage user access"}]},{"id":"0RC1Ni2e93yMEcan5eD7","title":"Manage user scope","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-scope","siteSpaceId":"sitesp_Lgqaz","description":"Manage user scope in Cortex Cloud to limit access to the appropriate data and resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"1Jy9fWHiHvj4oWDKEJPg","title":"Manage access to objects","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects","siteSpaceId":"sitesp_Lgqaz","description":"Control Cortex Cloud access to objects using role-based permissions and scope settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"HoDwUGtnaEYzAWTM3hTY","title":"Manage access to custom dashboards","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-custom-dashboards","siteSpaceId":"sitesp_Lgqaz","description":"Manage access to custom dashboards in Cortex Cloud using roles and permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"lhZMZYAYFMWiJd2ozwlA","title":"Manage access to report templates","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-report-templates","siteSpaceId":"sitesp_Lgqaz","description":"Manage access to Cortex Cloud report templates using roles and permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"JD6jFCXDdARxibrLQbgM","title":"Manage access to playbooks and scripts","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-playbooks-and-scripts","siteSpaceId":"sitesp_Lgqaz","description":"Manage access to Cortex Cloud playbooks and scripts using roles and permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"3o9jE60CoucxpTHWevFa","title":"Manage access to saved queries","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-saved-queries","siteSpaceId":"sitesp_Lgqaz","description":"Manage access to Cortex Cloud saved queries using roles and permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"AsNu65LSwUoslf3rySZV","title":"Configure the Cortex Agentic Assistant","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Cortex Agentic Assistant to support secure AI-assisted security operations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"}]},{"id":"n3npCjN80Wd6qFPZckZ5","title":"Agentic Assistant components and concepts","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agentic-assistant-components-and-concepts","siteSpaceId":"sitesp_Lgqaz","description":"Learn about the key components and concepts, such as agents and actions in the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"ejjZnEiG1Sg05Rk7w9qs","title":"Agentic Assistant Hub","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub","siteSpaceId":"sitesp_Lgqaz","description":"Learn about personal and system agents in in the Agentic Assistant Hub","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"6kA14dOYs79hsikCgJnm","title":"Manage actions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-actions","siteSpaceId":"sitesp_Lgqaz","description":"Manage Cortex Cloud actions that automate security tasks and operational workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"RTfXCGM708VjhP74NkpE","title":"Register actions","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/register-actions","siteSpaceId":"sitesp_Lgqaz","description":"Register actions in Cortex Cloud for use in automated workflows and agents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"hyfDIjCm9FjKBHcWwKlN","title":"Manage agents","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-agents","siteSpaceId":"sitesp_Lgqaz","description":"Manage Cortex Cloud agents that coordinate actions and automated security workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"rwIPWZZxhtQtOu8DcrLP","title":"Build agents","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/build-agents","siteSpaceId":"sitesp_Lgqaz","description":"Build Cortex Cloud agents to automate security operations with actions and tools.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"DK908gcHDWxf79ZRCq5X","title":"Manage knowledge sources (preview)","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-knowledge-sources-preview","siteSpaceId":"sitesp_Lgqaz","description":"Enhance AI agent capabilities by leveraging the Knowledge Center (preview) to provide agents with your business-specific source of truth and built-in Cortex (system) knowledge.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"Hr1cQXSYTsDsN1Ayl8Dx","title":"Expand agent capabilities with MCP integrations","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/expand-agent-capabilities-with-mcp-integrations","siteSpaceId":"sitesp_Lgqaz","description":"Expand Cortex Cloud agent capabilities with Model Context Protocol integrations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"LOXbJy9bTDuNnYNLMARg","title":"Agentic Assistant role-based access control","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agentic-assistant-role-based-access-control","siteSpaceId":"sitesp_Lgqaz","description":"Configure permissions to access Cortex Agentic Assistant features.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"tD4FJnfGqwvUV7TtX0Wy","title":"XQL query management","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/xql-query-management","siteSpaceId":"sitesp_Lgqaz","description":"Administrators can set controls on running XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"}]},{"id":"s8e5plrOtLcEq5G8m8dG","title":"Dashboards and reports","pathname":"/cortex-cloud-runtime-security/onboard-and-configure/post-deployment-steps/dashboards-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage Cortex Cloud dashboards and reports for security visibility and analysis.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Onboard and Configure"},{"label":"Post-deployment steps"}]},{"id":"bmxrpzbfkK1qqJJO85Gp","title":"Endpoint protection","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection","siteSpaceId":"sitesp_Lgqaz","description":"This topic provides an overview of traditional endpoint protection versus the protection of endpoints using Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"}]},{"id":"GLxoMwlRln1OtyDGySLG","title":"Malware protection","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/malware-protection","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud prevents malware attacks and provides protection on endpoints based on the different operating systems.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"TEJIkX2tXKsUCcpCRilo","title":"Exploit protection","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/exploit-protection","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud prevents exploit attempts and provides protection on endpoints based on the different operating systems.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"micMBdd1kc0VqrY9AiWZ","title":"File analysis and protection flow","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/file-analysis-and-protection-flow","siteSpaceId":"sitesp_Lgqaz","description":"The Cortex XDR agent utilizes advanced multi-method protection and prevention techniques to protect from both known and unknown malware and software exploits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"5L2RwCilhQ71aCyqs3j9","title":"Endpoint protection capabilities","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/endpoint-protection-capabilities","siteSpaceId":"sitesp_Lgqaz","description":"The endpoint protection capabilities vary depending on the platform (operating system) that is used on each of your endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"BjfEEUYTKE0hS5c4Ahj2","title":"Endpoint protection modules","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/endpoint-protection-modules","siteSpaceId":"sitesp_Lgqaz","description":"Security modules are activated for your endpoints depending on the chosen security profile and the operating system on the endpoint.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"utGXqi7s64xs6AIPHgFn","title":"Processes protected by exploit security policy","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/processes-protected-by-exploit-security-policy","siteSpaceId":"sitesp_Lgqaz","description":"Application processes that run on your endpoint are protected by the exploit security policy.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"lUJzdRRQMStNmGvAkmS7","title":"File Integrity Monitoring (FIM)","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/file-integrity-monitoring-fim","siteSpaceId":"sitesp_Lgqaz","description":"Learn about File Integrity Monitoring (FIM) capabilities in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"gfhrjEtoDI5cyrRdLj6O","title":"CaaS Workloads","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/caas-workloads","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"RaNjwTb4rCIGccvrRWzZ","title":"WildFire analysis concepts","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/wildfire-analysis-concepts","siteSpaceId":"sitesp_Lgqaz","description":"Learn about the analysis concepts used by Wildfire.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"nLq5V9hhZi9nwyAHRNUf","title":"Guidelines for keeping Cortex XDR agents and content updated","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/guidelines-for-keeping-cortex-xdr-agents-and-content-updated","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to control Cortex XDR agent and content upgrades.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"9wKHdv5zEwtLJd2Wth7l","title":"About content updates","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/about-content-updates","siteSpaceId":"sitesp_Lgqaz","description":"To increase security coverage and quickly resolve any issues in policy, Palo Alto Networks can seamlessly deliver software packages called content updates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"InO2pYr5dj5Tp0jvTj22","title":"Endpoint data collection","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-protection/endpoint-data-collection","siteSpaceId":"sitesp_Lgqaz","description":"To aid in endpoint detection and issue investigation, the Cortex XDR agent collects endpoint information when an issue is generated.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint protection"}]},{"id":"4G8qRazny0JKkq77kHrM","title":"Install and manage endpoints","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to set up profiles, policies and other settings for endpoint protection, how to install Cortex XDR agent on endpoints, and how to manage them after installation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"}]},{"id":"h5X0oeh0fxYFn8ZqDxg2","title":"Set up endpoint protection","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"70qFSHpFqOKLfYZ08TNX","title":"Set up endpoint profiles and exception rules","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"CYiFdlv4x5LmNb4yzndh","title":"Set up malware prevention profiles","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-malware-prevention-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"Pw8KATH4vdLNQRbN4HMo","title":"Set up exploit prevention profiles","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exploit-prevention-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"0yC84AeUHx3HXsTz8ik5","title":"Set up agent settings profiles","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-agent-settings-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"8j2ui5NigOs0C0PHVM0J","title":"Set up restrictions prevention profiles","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-restrictions-prevention-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"ktJDVFUlvhxNo1YMVVSW","title":"Set up exception profiles and rules","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"KaPCFCv4EKTVqkDeuUtn","title":"Exception configuration","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/exception-configuration","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"sKevtJ1bTomOkprpdxBU","title":"Issue exclusions","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"9WQgC6cKCJmT60sYeIRq","title":"Add an issue exclusion rule","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions/add-an-issue-exclusion-rule","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Issue exclusions"}]},{"id":"zNNklrOt7BqK6cQXoCXx","title":"Add an IOC or BIOC rule exception","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-an-ioc-or-bioc-rule-exception","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"6j4odABhGjwDpwynIZv2","title":"Add a disable prevention rule for endpoints","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-prevention-rule-for-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"Uo4aJ5zVN4sYs7LnPJse","title":"Add a disable injection and prevention rule","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-injection-and-prevention-rule","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"FNb6X4kE18WynDhZSLoL","title":"Add a support exception rule for endpoints","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-support-exception-rule-for-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"Pvj0N37FksygKyHjIxWt","title":"Add a legacy exception rule for endpoints","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"}]},{"id":"gUvICiTRUyBiaMkFkLCz","title":"Add a new exceptions security profile","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-new-exceptions-security-profile","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule for endpoints"}]},{"id":"OqH2BDExB1BPNApd7y7C","title":"Add a global endpoint policy exception","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-global-endpoint-policy-exception","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"},{"label":"Set up exception profiles and rules"},{"label":"Add a legacy exception rule for endpoints"}]},{"id":"VLqaH6funZxCAnEBLj35","title":"Set up Identity profiles","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-identity-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Set up endpoint profiles and exception rules"}]},{"id":"yV448C3u4hz2f0Rh4SSz","title":"Define endpoint groups","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/define-endpoint-groups","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"tTyl6b2do0iE4aUzrMJZ","title":"Configure global agent settings","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/configure-global-agent-settings","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"tSgGhg4UIGv6OlmgDD69","title":"Apply profiles to endpoints","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/apply-profiles-to-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"9NwKinkKx3fP517VSER0","title":"Create an agent installation package","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/create-an-agent-installation-package","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"}]},{"id":"apMruhTOvPiYkpXgP1cB","title":"Manage an agent installation package","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/create-an-agent-installation-package/manage-an-agent-installation-package","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Set up endpoint protection"},{"label":"Create an agent installation package"}]},{"id":"yMWFnGIFOlmaoALasxYK","title":"Harden endpoint security","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"cGOHjX967wXVgp0JQOXq","title":"Device control","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/device-control","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"abmYOARq0TG8P9QUwQkt","title":"Host firewall","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"iQ4m0duMpcBHRydhqiDR","title":"Host firewall for Windows","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-windows","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"guEvYMf5iXXh42qtJLwc","title":"Host firewall for macos","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-macos","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"},{"label":"Host firewall"}]},{"id":"BtBzSxleYVXGuAsqgVUy","title":"Disk encryption","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/disk-encryption","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"F7hl1tW9PpvDuRcUU6om","title":"Host Inventory","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-inventory","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"cJzUZXP5iq89rZ5CQKQe","title":"Set a Cortex XDR agent Critical Environment version","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/set-a-cortex-xdr-agent-critical-environment-version","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Harden endpoint security"}]},{"id":"7gvfE8J1YDeAMPftJ54t","title":"Manage endpoint protection","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"}]},{"id":"124Wy3W5ebs5NflE7nw3","title":"Move agents between managing servers","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/move-agents-between-managing-servers","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"twi42H4e6pqXlrg89klF","title":"Manage endpoint tags","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"bVNw8ZTYydKmmifQM35M","title":"Create an endpoint tag","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/create-an-endpoint-tag","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"RWP8epA0F8t8VLLpa4xR","title":"Remove an endpoint tag","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/remove-an-endpoint-tag","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"VOwnnPj7VOpRQBbF4b5R","title":"Track your endpoint tags","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/track-your-endpoint-tags","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"UXiNJlg9RorVEu11sjhP","title":"Permanently remove Endpoint tags from the system","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/permanently-remove-endpoint-tags-from-the-system","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"qiJQxClLmDDEJmwqr36l","title":"Set an alias for an endpoint","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/set-an-alias-for-an-endpoint","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"},{"label":"Manage endpoint tags"}]},{"id":"biDP4doj58QWvExEYn3U","title":"Manage endpoint prevention profiles","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-prevention-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"Fhsc3yKd61BQxox09luc","title":"Create a new prevention policy rule for serverless function","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/create-a-new-prevention-policy-rule-for-serverless-function","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"nheeOjg78BAKnoIZZVj2","title":"View information about your endpoint prevention profiles","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/view-information-about-your-endpoint-prevention-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"WEi9eiKVU65ZuJ573CxV","title":"Upgrade Cortex XDR agents","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/upgrade-cortex-xdr-agents","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"4f1iGs7N7tQGddzKcm3D","title":"Restart agent","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/restart-agent","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"ZmihXRG9ZoLrwuW5ucbU","title":"Uninstall the Cortex XDR agent","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/uninstall-the-cortex-xdr-agent","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"yg4eBgHIcZJ1b6wIz0S0","title":"Clear agent database","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/clear-agent-database","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"4fXj0C2ZIhKtd7oLuznY","title":"Delete Cortex XDR agents","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/delete-cortex-xdr-agents","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"uS6nNVVzT5Zq35hSgHGO","title":"Manage agent tokens","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-agent-tokens","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"FxZKkBF9LaTYG965I3js","title":"Retrieve support file password","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/retrieve-support-file-password","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"MDYr6pFvnvZInZwyh4Vm","title":"Send push notifications to iOS","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/send-push-notifications-to-ios","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"66SCJrKdHJf4pFigvq8Q","title":"Monitor agent operational status","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-operational-status","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"cGCrMFLaWkUtv6wfxylu","title":"Monitor agent activity","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-activity","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"VioEVS3s5TZ3J5uhas6x","title":"Monitor agent upgrade status","pathname":"/cortex-cloud-runtime-security/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-upgrade-status","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Install and manage endpoints"},{"label":"Manage endpoint protection"}]},{"id":"N7beTxRbopo6dLTLLQSb","title":"Endpoint DLP","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"}]},{"id":"MzG2tU4c5IyT0zm5BAp4","title":"Cortex Data Loss Prevention (DLP) module overview","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview","siteSpaceId":"sitesp_Lgqaz","description":"Learn about Cortex Data Loss Prevention (DLP) module, which provides a solution to prevent sensitive data exfiltration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"}]},{"id":"VPY8JmncE3fZAuYtv9DY","title":"Archive file classification","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview/archive-file-classification","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"},{"label":"Cortex Data Loss Prevention (DLP) module overview"}]},{"id":"QG0SFgjsPk4bNNtRgprx","title":"True-file type detection","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview/true-file-type-detection","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"},{"label":"Cortex Data Loss Prevention (DLP) module overview"}]},{"id":"zXQGHvj04ApUENKfIIp1","title":"Personas workflow for DLP","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/personas-workflow-for-dlp","siteSpaceId":"sitesp_Lgqaz","description":"The data security administrator and data security viewer are responsible for identifying DLP requirements for creating data-in-motion rules and investigating issues and cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"}]},{"id":"88mePKFbhx8r6DV2PTlB","title":"Best Practices","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/best-practices","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"}]},{"id":"WzCPaP0BmUZPwScoVmSn","title":"Configure DLP end-to-end","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/configure-dlp-end-to-end","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"}]},{"id":"uwpRc4A86xsk7Q5nEy0s","title":"DLP status in all endpoints","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/dlp-status-in-all-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"}]},{"id":"JLNH0HgVhMW8291Csxnh","title":"Cortex DLP threat detection and issues","pathname":"/cortex-cloud-runtime-security/endpoint-security/endpoint-dlp/cortex-dlp-threat-detection-and-issues","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Endpoint security"},{"label":"Endpoint DLP"}]},{"id":"28qrmBRYDIFQx8X8TtlO","title":"Extended Threat Intelligence","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence","siteSpaceId":"sitesp_Lgqaz","description":"Research threats, investigate indicators, and apply intelligence across Cortex Cloud Runtime Security workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"}]},{"id":"Gee1VQwi7hBmTDCcszZk","title":"XTI Threat Intel Library","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/xti-threat-intel-library","siteSpaceId":"sitesp_Lgqaz","description":"Research curated threat actors, malware families, vulnerabilities, and reports from Unit 42.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"2awxwnGijxBfuD0SzdCi","title":"XTI Indicators","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/xti-indicators","siteSpaceId":"sitesp_Lgqaz","description":"Investigate, manage, and enrich threat indicators, including domains, IP addresses, URLs, and file hashes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"89IRxHgPtdyw3IbuI2z5","title":"Threat intel context in cases and issues","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/threat-intel-context-in-cases-and-issues","siteSpaceId":"sitesp_Lgqaz","description":"Analyze indicator intelligence and Behavioral Threat Analysis (BTA) findings in cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"iYOiA0okzBv23YGUeSfa","title":"XTI indicator rules","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/xti-indicator-rules","siteSpaceId":"sitesp_Lgqaz","description":"Create rules that detect known threat indicators and generate issues from matching data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"yjrDKZQJMPiTCbggg3uf","title":"Threat intel investigation through XQL","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/threat-intel-investigation-through-xql","siteSpaceId":"sitesp_Lgqaz","description":"Query XTI indicators, threat objects, and their relationships using Cortex Query Language.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"5GZZx9GEx7QWeMBrkfCk","title":"Threat Intel Dashboard","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/threat-intel-dashboard","siteSpaceId":"sitesp_Lgqaz","description":"Visualize threat intelligence data to monitor distribution, ingestion health, and emerging trends.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"bBY74JLGlrdwN4HLZXVr","title":"Using XTI with Threat Intel Agent","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/using-xti-with-threat-intel-agent","siteSpaceId":"sitesp_Lgqaz","description":"Use the Threat Intel Agent to list, enrich, and update XTI indicators.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"t34kl55Tkrr9ksWpxvKr","title":"Using XTI in playbooks","pathname":"/cortex-cloud-runtime-security/threat-management/extended-threat-intelligence/using-xti-in-playbooks","siteSpaceId":"sitesp_Lgqaz","description":"Automate XTI indicator triage, enrichment, and response with supported playbook commands.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Extended Threat Intelligence"}]},{"id":"WxJlVqRfXCzP8cS1lOxx","title":"Detection rules","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules","siteSpaceId":"sitesp_Lgqaz","description":"Learn about IOC, BIOC, and correlation rules for detecting threats and generating issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"}]},{"id":"taIK4sqnlEzmM9UUXHCw","title":"What are detection rules?","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules","siteSpaceId":"sitesp_Lgqaz","description":"Understand detection rule types that identify threats and generate issues in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"}]},{"id":"QGPzB1OCWGBBqwbpZ38r","title":"What's an IOC?","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-an-ioc","siteSpaceId":"sitesp_Lgqaz","description":"Learn how IOC rules detect known malicious or suspicious artifacts in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"MRl6W051TMEwLh0oZK9R","title":"IOC rule details","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-an-ioc/ioc-rule-details","siteSpaceId":"sitesp_Lgqaz","description":"Review IOC rule fields, match status, and issue-generation details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's an IOC?"}]},{"id":"e8iJrbPWYl0XoQEX5VuO","title":"Create an IOC rule","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-an-ioc/create-an-ioc-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create an IOC rule to detect known malicious or suspicious artifacts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's an IOC?"}]},{"id":"GQvcPoWTKLW5WZyHiF3G","title":"What's a BIOC?","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc","siteSpaceId":"sitesp_Lgqaz","description":"Learn how BIOC rules detect suspicious behavior across endpoint and network activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"kDkiwQI5lu93Lvr7VA5b","title":"BIOC rule details","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/bioc-rule-details","siteSpaceId":"sitesp_Lgqaz","description":"Review BIOC rule fields, exceptions, and status for user-defined and global rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a BIOC?"}]},{"id":"bJwKYPDXWrRk7y0cc7cP","title":"Create a BIOC rule","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/create-a-bioc-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create a BIOC rule to detect suspicious behavior in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a BIOC?"}]},{"id":"YneygilWgA2WRqiWkBZS","title":"Manage Global BIOC Rules","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/manage-global-bioc-rules","siteSpaceId":"sitesp_Lgqaz","description":"View and manage Palo Alto Networks global BIOC rules in your tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a BIOC?"}]},{"id":"Qnv389LPsfkPfoQBWbx2","title":"What's a correlation rule?","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule","siteSpaceId":"sitesp_Lgqaz","description":"Learn how correlation rules use XQL to identify relationships across security events.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"zeTpHAqbGJduH1sAVtqE","title":"Correlation rule details","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/correlation-rule-details","siteSpaceId":"sitesp_Lgqaz","description":"Review correlation rule fields, schedules, errors, and XQL query settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"QlkdDojazt5wjVEo1dN1","title":"Create a correlation rule","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/create-a-correlation-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create a correlation rule using XQL to identify related security events.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"XqxxREGteBnuW6pE94TB","title":"Field replacement syntax in correlation rules","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/field-replacement-syntax-in-correlation-rules","siteSpaceId":"sitesp_Lgqaz","description":"Use field replacement syntax to insert event values into correlation rule results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"17nt6MXdGvQXeodOYp90","title":"Manage correlation rules","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/manage-correlation-rules","siteSpaceId":"sitesp_Lgqaz","description":"View, edit, enable, disable, import, export, and delete correlation rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"0YUIg8g8gf92L5gtP0x5","title":"Monitor correlation rules","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/monitor-correlation-rules","siteSpaceId":"sitesp_Lgqaz","description":"Monitor correlation rule executions, issues, and processing status.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"Z8gX8sZ7i30aooWNHCZY","title":"Troubleshoot server errors in scheduled correlation rules","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-correlation-rule/troubleshoot-server-errors-in-scheduled-correlation-rules","siteSpaceId":"sitesp_Lgqaz","description":"Resolve server errors that affect scheduled correlation rule execution.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"},{"label":"What's a correlation rule?"}]},{"id":"SII8NmKftJcIhlIjintm","title":"Manage IOC and BIOC rules","pathname":"/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/manage-ioc-and-bioc-rules","siteSpaceId":"sitesp_Lgqaz","description":"View, edit, enable, disable, and delete IOC and BIOC rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Detection rules"},{"label":"What are detection rules?"}]},{"id":"ujYtRIcUPtzRyYRhAGi9","title":"Analytics","pathname":"/cortex-cloud-runtime-security/threat-management/analytics","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Analytics detects anomalous activity and generates security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"}]},{"id":"s1ZUymD952Y62aAJjA5t","title":"Analytics overview","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/analytics-overview","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud uses an Analytics engine to examine logs and data from your sensors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"IRId4lX05t8Octp28aGl","title":"Analytics engine","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/analytics-engine","siteSpaceId":"sitesp_Lgqaz","description":"Learn how the Analytics engine builds behavior baselines and detects anomalies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"bfsACNZ9InFOCTEbnC48","title":"Analytics sensors","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/analytics-sensors","siteSpaceId":"sitesp_Lgqaz","description":"Review the sensors and data sources that provide Analytics detection data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"h1afl5z4uxwYUawuFBHn","title":"Coverage of MITRE Attack tactics","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/coverage-of-mitre-attack-tactics","siteSpaceId":"sitesp_Lgqaz","description":"Explore the MITRE ATT&CK tactics that Analytics can detect.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"DFJBwDl4m3E1O6fTlSTQ","title":"Review MITRE ATT&CK framework coverage","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/review-mitre-att-and-ck-framework-coverage","siteSpaceId":"sitesp_Lgqaz","description":"Review Cortex Cloud detection coverage across the MITRE ATT&CK framework.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"6WWjU9fYc4UCKo3SPB2Q","title":"Analytics detection time intervals","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/analytics-detection-time-intervals","siteSpaceId":"sitesp_Lgqaz","description":"Understand detector time intervals used to baseline and identify suspicious activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"68FD1CLRm6wqT7xKyHfV","title":"Analytics issues and Analytics BIOCs","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/analytics-issues-and-analytics-biocs","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Analytics issues and BIOCs identify anomalous and suspicious activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"miaqwPY0fcwYW2vpIMK7","title":"View and manage Analytics rules","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/view-and-manage-analytics-rules","siteSpaceId":"sitesp_Lgqaz","description":"View, filter, and manage XDR Analytics and Analytics BIOC rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"0MYvnTmnrbq97Vquy6UK","title":"Identity Analytics","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/identity-analytics","siteSpaceId":"sitesp_Lgqaz","description":"Investigate suspicious user activity with Identity Analytics profiles, issues, and BIOCs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"aDaWA6akgM0z4l0ISijY","title":"AI Detection & Response in Cortex Cloud","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Detect, investigate, and respond to AI-specific security threats in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"}]},{"id":"RJMaA6J6hcStOuOKQgcP","title":"Data sources and supported services","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/data-sources-and-supported-services","siteSpaceId":"sitesp_Lgqaz","description":"Review data sources and AI services supported by AI Detection & Response.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"}]},{"id":"zkJoM8TEry606rOHgSnG","title":"Collect prompt logs","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/collect-prompt-logs","siteSpaceId":"sitesp_Lgqaz","description":"Collect prompt logs to detect and investigate AI-related security threats.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"}]},{"id":"1K1XbYKreC2GUUbgH9GU","title":"Prompt log collection in AWS","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/collect-prompt-logs/prompt-log-collection-in-aws","siteSpaceId":"sitesp_Lgqaz","description":"Configure prompt log collection for supported AWS AI services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"},{"label":"Collect prompt logs"}]},{"id":"Y5mOj7mvMaRCmWQvY2UL","title":"Enable prompt log collection in Azure","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/collect-prompt-logs/enable-prompt-log-collection-in-azure","siteSpaceId":"sitesp_Lgqaz","description":"Enable prompt log collection from supported Azure AI services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"},{"label":"Collect prompt logs"}]},{"id":"k13Iq1SrLytagL3xUsmG","title":"Configure the Azure Event Hub collection in Cortex Cloud","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/collect-prompt-logs/enable-prompt-log-collection-in-azure/configure-the-azure-event-hub-collection-in-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Configure Azure Event Hub collection for AI Detection & Response prompt logs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"2WxlGHs4H0s0uoyF1Atw","title":"Set up prompt logging","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/collect-prompt-logs/enable-prompt-log-collection-in-azure/set-up-prompt-logging","siteSpaceId":"sitesp_Lgqaz","description":"Set up Azure AI service prompt logging for AI Detection & Response.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"PiNnYUd5AAWeNATBQcZT","title":"Log HTTP data","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/collect-prompt-logs/enable-prompt-log-collection-in-azure/log-http-data","siteSpaceId":"sitesp_Lgqaz","description":"Configure HTTP data logging for Azure prompt log collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"yb168w6no6TqrkmStOA0","title":"Configure diagnostic settings:","pathname":"/cortex-cloud-runtime-security/threat-management/analytics/ai-detection-and-response-in-cortex-cloud/collect-prompt-logs/enable-prompt-log-collection-in-azure/configure-diagnostic-settings","siteSpaceId":"sitesp_Lgqaz","description":"Configure Azure diagnostic settings to send prompt logs to Event Hub.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Analytics"},{"label":"AI Detection & Response in Cortex Cloud"},{"label":"Collect prompt logs"},{"label":"Enable prompt log collection in Azure"}]},{"id":"n5y1Yz8xhaQ7raCi6vsF","title":"Identity Threat Detection and Response (ITDR)","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr","siteSpaceId":"sitesp_Lgqaz","description":"Detect identity threats, manage posture, and enforce directory protections.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"}]},{"id":"tdNV7u8vbgIzFowpb2Or","title":"Get started with ITDR","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/get-started-with-itdr","siteSpaceId":"sitesp_Lgqaz","description":"Activate ITDR and configure Identity Profiles for Domain Controller protection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"vWo7aMiSZEwztcfXz89d","title":"Manage role based access control (RBAC) in ITDR","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/manage-role-based-access-control-rbac-in-itdr","siteSpaceId":"sitesp_Lgqaz","description":"Assign ITDR permissions for Conditional Access and Identity Security Runtime features.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"0sM3PRSJN4ezHCxlLvR5","title":"Monitor user risk exposure","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/monitor-user-risk-exposure","siteSpaceId":"sitesp_Lgqaz","description":"Use the Risk Management dashboard to assess identity threat exposure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"yjDI9wQcw3XTlTsPZplv","title":"Investigate user risk","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/investigate-user-risk","siteSpaceId":"sitesp_Lgqaz","description":"Investigate user identity activity, risk scores, and related security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"om2Fow1b1JzgpzXdDZ47","title":"Manage user asset roles","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/asset-roles","siteSpaceId":"sitesp_Lgqaz","description":"Classify users into asset roles and fine-tune role memberships.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"kvMDIxTsVDrCTl4uDWL1","title":"Improve Active Directory posture with AD-SPM","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/active-directory-security-posture-management","siteSpaceId":"sitesp_Lgqaz","description":"Detect Active Directory misconfigurations and remediate identity security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"seRSFNEK5JtUQDnTYnXh","title":"Enforce dynamic access control with CAP","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/conditional-access-policy","siteSpaceId":"sitesp_Lgqaz","description":"Create risk-based access rules that allow, block, or require MFA.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"x5c9qDdgnBDcLGEJPOn3","title":"Prevent malicious LDAP queries","pathname":"/cortex-cloud-runtime-security/threat-management/identity-threat-module-itdr/prevent-malicious-ldap-queries","siteSpaceId":"sitesp_Lgqaz","description":"Detect and block LDAP reconnaissance against Active Directory domain controllers.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Threat Management"},{"label":"Identity Threat Detection and Response (ITDR)"}]},{"id":"qrslQOo4aerO613MT2Pz","title":"Overview","pathname":"/cortex-cloud-runtime-security/web-and-api-security-waas/overview","siteSpaceId":"sitesp_Lgqaz","description":"Protect APIs and web applications through discovery, posture management, and threat detection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"}]},{"id":"LiG8yjMCGlZXPBbVd3tf","title":"Personas workflow","pathname":"/cortex-cloud-runtime-security/web-and-api-security-waas/personas-workflow","siteSpaceId":"sitesp_Lgqaz","description":"Cortex API security distributes responsibilities across SOC analysts, security practitioners, and workload owners.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"}]},{"id":"4CPtvRvMSOmR8c6ufOy9","title":"Secure your API landscape","pathname":"/cortex-cloud-runtime-security/web-and-api-security-waas/secure-your-api-landscape","siteSpaceId":"sitesp_Lgqaz","description":"Integrate API gateways to monitor API traffic, assess risks, and enforce security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"}]},{"id":"tCGLecBHlWmHhu1YvmEe","title":"Gain visibility and assess risk of API endpoints","pathname":"/cortex-cloud-runtime-security/web-and-api-security-waas/secure-your-api-landscape/gain-visibility-and-assess-risk-of-api-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"Discover API endpoints, assess risk, and investigate endpoint details across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"qeRydxPk06o0EooVA2WS","title":"Monitor and investigate API threats","pathname":"/cortex-cloud-runtime-security/web-and-api-security-waas/secure-your-api-landscape/monitor-and-investigate-api-threats","siteSpaceId":"sitesp_Lgqaz","description":"Detect, investigate, and respond to API threats with SOC analyst workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"ymvknVnKK75MXWyrNFsb","title":"Configure API security from end to end","pathname":"/cortex-cloud-runtime-security/web-and-api-security-waas/secure-your-api-landscape/configure-api-security-from-end-to-end","siteSpaceId":"sitesp_Lgqaz","description":"Secure your API landscape through third-party integrations and agent-based protection policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"5nEhwIgJtOYyWsQHDopg","title":"API specification inventory","pathname":"/cortex-cloud-runtime-security/web-and-api-security-waas/secure-your-api-landscape/api-specification-inventory","siteSpaceId":"sitesp_Lgqaz","description":"Import OpenAPI specifications, assess vulnerabilities, and validate live API traffic.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Web and API Security (WAAS)"},{"label":"Secure your API landscape"}]},{"id":"XrQLQMhEJBoadwU4acgy","title":"Asset management","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-management","siteSpaceId":"sitesp_Lgqaz","description":"View and manage assets across your environment from a unified inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"7s8lLOSNCDv3O2WvGy3M","title":"Asset inventory overview","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-inventory-overview","siteSpaceId":"sitesp_Lgqaz","description":"Learn about the core concepts, features, and lifecycle of assets within the Asset Inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"blBrEVkf6tD22l2zujtt","title":"All assets","pathname":"/cortex-cloud-runtime-security/asset-managment/all-assets","siteSpaceId":"sitesp_Lgqaz","description":"Learn about the All Assets page, under Asset Inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"dHU9vQQIyLhE7Sa55WVu","title":"All cloud assets","pathname":"/cortex-cloud-runtime-security/asset-managment/all-cloud-assets","siteSpaceId":"sitesp_Lgqaz","description":"Learn about the All Cloud Assets page to view and assess your cloud footprint.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"1nIYHzvajlV8r3tunl8B","title":"Discovery Engine","pathname":"/cortex-cloud-runtime-security/asset-managment/all-cloud-assets/discovery-engine","siteSpaceId":"sitesp_Lgqaz","description":"Discover cloud resources and keep the unified asset inventory current.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"All cloud assets"}]},{"id":"uqmNdLXpbA2QxGEeKJZR","title":"Asset hierarchy","pathname":"/cortex-cloud-runtime-security/asset-managment/all-cloud-assets/asset-hierarchy","siteSpaceId":"sitesp_Lgqaz","description":"Use cloud hierarchy paths to filter assets, groups, and scoped access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"All cloud assets"}]},{"id":"bQ3ZYfM6CLV62kyPdwIT","title":"Asset classes","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes","siteSpaceId":"sitesp_Lgqaz","description":"Accelerating remediation: Automated fix suggestions and manual remediation guidance enable developers to resolve code weaknesses directly in the source repository without context-switching to external","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"RfS1HbufQ3nJ9pOlxl3n","title":"AI assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/ai-assets","siteSpaceId":"sitesp_Lgqaz","description":"Review AI assets, relationships, data exposure, and security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"QPzcSBZ17rC9WYL8VNX7","title":"API assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/api-assets","siteSpaceId":"sitesp_Lgqaz","description":"Inspect API endpoints and specifications, including traffic, authentication, and risk details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"KIZA9NYcpfWPQUUnKjxR","title":"Application assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/application-assets","siteSpaceId":"sitesp_Lgqaz","description":"Manage business applications, connected assets, and security risk across the SDLC.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"QDooFWvk9c0zqudm1x5r","title":"Code and CI/CD assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/code-and-ci-cd-assets","siteSpaceId":"sitesp_Lgqaz","description":"Track code and CI/CD assets to secure your software supply chain.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"T4FzEo0bAgrTe7yEmzNR","title":"IaC resources assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/code-and-ci-cd-assets/iac-resources-assets","siteSpaceId":"sitesp_Lgqaz","description":"View Infrastructure-as-Code resources and their related configuration risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"f4fGHnFPjNSpMi4wxg0r","title":"Repository assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/code-and-ci-cd-assets/repository-assets","siteSpaceId":"sitesp_Lgqaz","description":"Track source repositories and their code security posture.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"qPwQ1JUM8m30z90krvgw","title":"VCS organization assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/code-and-ci-cd-assets/vcs-organization-assets","siteSpaceId":"sitesp_Lgqaz","description":"View version control organizations and their related repositories.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"axkcfZtaFjPAY9UJ4jz2","title":"CI/CD pipeline assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/code-and-ci-cd-assets/ci-cd-pipeline-assets","siteSpaceId":"sitesp_Lgqaz","description":"Track automated pipelines that build, test, and deploy software.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"PwpGNXMqY3n3F6ODikxc","title":"CI/CD instances assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/code-and-ci-cd-assets/ci-cd-instances-assets","siteSpaceId":"sitesp_Lgqaz","description":"View CI/CD platform instances that run your delivery pipelines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"WUeXJa9dLpCp20fl8sfx","title":"Software package assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/code-and-ci-cd-assets/software-package-assets","siteSpaceId":"sitesp_Lgqaz","description":"Track software packages, vulnerabilities, licenses, and operational risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"pgcGRiLBVLKkpHIYwSj2","title":"Compute assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/compute-assets","siteSpaceId":"sitesp_Lgqaz","description":"View compute resources across cloud, container, serverless, and endpoint environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"LSDs5TUnyyS9YtxqkTxp","title":"Container image assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/compute-assets/container-image-assets","siteSpaceId":"sitesp_Lgqaz","description":"Inspect immutable container images and their security findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"Mt2zVbL3xMOnoH3uCliZ","title":"Serverless functions assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/compute-assets/serverless-functions-assets","siteSpaceId":"sitesp_Lgqaz","description":"Monitor serverless functions for vulnerabilities, malware, secrets, and configuration risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"9VuF1ScowKucG8HvP8I0","title":"VM images assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/compute-assets/vm-images-assets","siteSpaceId":"sitesp_Lgqaz","description":"Track machine images used by your virtualized infrastructure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"rpjuQ4wsy3FXDbzJUWVw","title":"Data assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/data-assets","siteSpaceId":"sitesp_Lgqaz","description":"Discover and manage data assets across your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"guzON5lN3YF2Pqfyq48J","title":"Device assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/device-assets","siteSpaceId":"sitesp_Lgqaz","description":"View managed endpoint devices and their security status.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"1yK2L0LZa9XwGmmNzBk0","title":"External Surface assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/external-surface-assets","siteSpaceId":"sitesp_Lgqaz","description":"View internet-facing assets attributed to your organization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"VSttl1NbRNk8oXVg4wTp","title":"Website assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/external-surface-assets/website-assets","siteSpaceId":"sitesp_Lgqaz","description":"Inspect externally discovered websites and their technology and security details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"V93VTHFwamZgpR9BtrEq","title":"Service assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/external-surface-assets/service-assets","siteSpaceId":"sitesp_Lgqaz","description":"Track exposed internet services, classifications, and inferred vulnerabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"4x75sn64q0ZwK7QPnLA2","title":"Domain assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/external-surface-assets/domain-assets","siteSpaceId":"sitesp_Lgqaz","description":"View domains and subdomains attributed to your organization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"uSSJ45y7DjKs7Dj9aa3w","title":"Certificate assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/external-surface-assets/certificate-assets","siteSpaceId":"sitesp_Lgqaz","description":"Monitor certificates for expiration, cryptographic health, and configuration issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"wxiAcE8CppRLoSPRyV0s","title":"External Surface attribution evidence","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/external-surface-assets/external-surface-attribution-evidence","siteSpaceId":"sitesp_Lgqaz","description":"Review evidence supporting external asset attribution to your organization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"PEuDkYlBmvjA2dvDJi29","title":"Identity assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/identity-assets","siteSpaceId":"sitesp_Lgqaz","description":"View identity assets and their access relationships across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"Z1V2Sw4kRO34zkTEw6ka","title":"Network assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/network-assets","siteSpaceId":"sitesp_Lgqaz","description":"View network assets and their connectivity and exposure context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"HYDzmGvnOadYEPqw8AuH","title":"Security services assets","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-classes/security-services-assets","siteSpaceId":"sitesp_Lgqaz","description":"Track security services and their configurations across cloud environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset classes"}]},{"id":"jkMxntWwk1lNjswKzhFE","title":"Asset groups","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-groups","siteSpaceId":"sitesp_Lgqaz","description":"Group assets based on shared attributes to address them collectively, simplify filtering, and enable strict access control boundaries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"aG6E9LCDkOnMubbIcgGa","title":"Manage Risk Scores","pathname":"/cortex-cloud-runtime-security/asset-managment/manage-asset-scores","siteSpaceId":"sitesp_Lgqaz","description":"View and investigate User Scores and Host Scores using the Risk Scores page to identify high-risk assets and detect compromised accounts or malicious activities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"1tMaNLme4bsEljuzsNDi","title":"Asset configurations","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-configurations","siteSpaceId":"sitesp_Lgqaz","description":"Configure network context, application criteria, and asset roles.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"}]},{"id":"w3Faf0B9LN8pyClVZcgz","title":"Network configuration","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-configurations/network-configuration","siteSpaceId":"sitesp_Lgqaz","description":"Configure your internal network parameters, trusted networks, and external IP ranges to help Cortex Cloud identify and map your network assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset configurations"}]},{"id":"G41J3z9wk9g1iYPO27fz","title":"Application criteria","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-configurations/application-criteria","siteSpaceId":"sitesp_Lgqaz","description":"Create applications manually or maintain them automatically with dynamic criteria.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset configurations"}]},{"id":"WdCYsm8KJscJ2Pe8dkg3","title":"Asset Roles","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-configurations/asset-roles","siteSpaceId":"sitesp_Lgqaz","description":"View asset roles and the number of assets that are associated with each role. Learn how to manage asset roles for users and endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset configurations"}]},{"id":"YDps1IDTfc6X7S6xqOX4","title":"Manage Asset Roles for Endpoints","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-configurations/asset-roles/manage-asset-roles-for-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"Include or exclude endpoints from detected asset roles.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"NjHvJHQaIGzTooyLHRPF","title":"Manage Asset Roles for Users","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-configurations/asset-roles/manage-asset-roles-for-users","siteSpaceId":"sitesp_Lgqaz","description":"Include or exclude users from detected asset roles.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"PSmmBC837WeAqiYEZz5c","title":"Honey user","pathname":"/cortex-cloud-runtime-security/asset-managment/asset-configurations/asset-roles/manage-asset-roles-for-users/honey-user","siteSpaceId":"sitesp_Lgqaz","description":"Configure decoy user accounts that alert on suspicious access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Asset Managment"},{"label":"Asset configurations"},{"label":"Asset Roles"},{"label":"Manage Asset Roles for Users"}]},{"id":"o7RSkQvYzKvKbXGyHEmm","title":"Overview of cases","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases","siteSpaceId":"sitesp_Lgqaz","description":"Understand cases, their lifecycle, scope, impact, and ownership.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"GucLgeoqdXklBb0PqIoL","title":"What are cases?","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases/what-are-cases","siteSpaceId":"sitesp_Lgqaz","description":"Learn how cases group related security issues for investigation and response.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"k7ULLabsiJ4Jxk5hg0R5","title":"Resolving cases with AI","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases/resolving-cases-with-ai","siteSpaceId":"sitesp_Lgqaz","description":"Use AI assistance to investigate and resolve security cases faster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"U0DnTgVK3EG5vvn0SS9P","title":"Case lifecycle","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases/case-lifecycle","siteSpaceId":"sitesp_Lgqaz","description":"Understand the stages and status changes in a case lifecycle.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"TTTxuTEqGnnMX1s3xSuc","title":"Case thresholds","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases/case-thresholds","siteSpaceId":"sitesp_Lgqaz","description":"Configure thresholds that determine when Cortex Cloud creates or updates cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"xYznpnINEW7cFXu0570D","title":"Case scope and impact","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases/case-scope-and-impact","siteSpaceId":"sitesp_Lgqaz","description":"Understand how case scope and impact reflect affected entities and risk.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"p6exuOjJxs4Uca3NKTkt","title":"Case and issue domains","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases/case-and-issue-domains","siteSpaceId":"sitesp_Lgqaz","description":"Understand domains used to classify cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"wFSqMGnlJuKArIbWb1li","title":"Overview of case teams and roles","pathname":"/cortex-cloud-runtime-security/cases-and-issues/overview-of-cases/overview-of-case-teams-and-roles","siteSpaceId":"sitesp_Lgqaz","description":"Learn how teams and roles organize investigation access and responsibilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"vsUuuuQ5yolTdA3geELk","title":"Case concepts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/case-concepts","siteSpaceId":"sitesp_Lgqaz","description":"Learn the core concepts that define cases, issues, and investigation context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"y2CFR08p1syXhtkQxNZQ","title":"Issues, findings, and events","pathname":"/cortex-cloud-runtime-security/cases-and-issues/case-concepts/issues-findings-and-events","siteSpaceId":"sitesp_Lgqaz","description":"Understand how issues, findings, and events contribute to case investigations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"Nxj4v1wyTf6VTKnB3IAz","title":"Case grouping","pathname":"/cortex-cloud-runtime-security/cases-and-issues/case-concepts/case-grouping","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud groups related issues into cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"jXkzJ7ctheVFGpnJ2aTd","title":"Case scoring","pathname":"/cortex-cloud-runtime-security/cases-and-issues/case-concepts/case-scoring","siteSpaceId":"sitesp_Lgqaz","description":"Understand how case scores prioritize investigations by risk and severity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"QIhDsfosmRua1YgIV0iy","title":"What is Causality?","pathname":"/cortex-cloud-runtime-security/cases-and-issues/case-concepts/what-is-causality","siteSpaceId":"sitesp_Lgqaz","description":"Understand causality relationships that connect events, assets, and security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"xeEp98gMoE048npt5cw8","title":"Analyze and resolve cases","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to analyze and resolve cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"ptqWl3janw98NaNM3E7b","title":"Review all cases","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/review-all-cases","siteSpaceId":"sitesp_Lgqaz","description":"View, filter, and prioritize cases across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"KW6amYLGLLSw3wtBVcQo","title":"Start case analysis","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/start-case-analysis","siteSpaceId":"sitesp_Lgqaz","description":"Begin a case investigation and assess its initial context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"D8Xz0yIVUnVbHtC8JZvO","title":"Agentic Assistant- Case Investigation agent","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/start-case-analysis/agentic-assistant-case-investigation-agent","siteSpaceId":"sitesp_Lgqaz","description":"Use the Case Investigation agent to accelerate AI-assisted case analysis.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Start case analysis"}]},{"id":"kuE1g4ESChCzuxNNHKL0","title":"Establish case context","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/establish-case-context","siteSpaceId":"sitesp_Lgqaz","description":"Build investigation context from case details, risk, and related activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"WA543NxI5cmOtyZX9Dsk","title":"AI-generated case summaries","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/establish-case-context/ai-generated-case-summaries","siteSpaceId":"sitesp_Lgqaz","description":"Use AI-generated summaries to understand case details and priorities quickly.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"6CzUg3KnIUdx0dLHhNF3","title":"Assess case severity and score","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/establish-case-context/assess-case-severity-and-score","siteSpaceId":"sitesp_Lgqaz","description":"Review and adjust case severity and score during an investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"P6nrPX4RrObOA1b7wBM3","title":"Update case attributes","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/establish-case-context/update-case-attributes","siteSpaceId":"sitesp_Lgqaz","description":"Update case fields to keep investigation details accurate.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"w7Hg7KpeJuE72k0zfyU3","title":"Analyze case details","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details","siteSpaceId":"sitesp_Lgqaz","description":"Review case evidence, relationships, and activity to guide your investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"cQT1AtC4JfmdUXaLMZB5","title":"Grouping graph","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/grouping-graph","siteSpaceId":"sitesp_Lgqaz","description":"Explore relationships among issues grouped within a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"IxUV0QPGSxICxmN3Y72U","title":"Evidence","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/evidence","siteSpaceId":"sitesp_Lgqaz","description":"Review evidence that supports the case investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"tsLOuhO9HRVFKOuaSrXB","title":"Issue feed","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/issue-feed","siteSpaceId":"sitesp_Lgqaz","description":"Track issues and updates associated with a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"xTttoKWXK956qdI7ctxr","title":"Associated assets and artifacts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/associated-assets-and-artifacts","siteSpaceId":"sitesp_Lgqaz","description":"Review assets and artifacts associated with a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"LfmgzoGT2EV9h6W2w2ui","title":"MITRE ATT&CK tactics and techniques","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/mitre-att-and-ck-tactics-and-techniques","siteSpaceId":"sitesp_Lgqaz","description":"Map case activity to relevant MITRE ATT&CK tactics and techniques.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"EJJ7gm8qaKPQ3deDjFVL","title":"Compliance standards and controls","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/compliance-standards-and-controls","siteSpaceId":"sitesp_Lgqaz","description":"Review compliance standards and controls related to a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"5iWABLhba2h9goVFiM2T","title":"Case timeline","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/case-timeline","siteSpaceId":"sitesp_Lgqaz","description":"Review a chronological view of case activity and updates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"DX2G6CmKnUbsO14pJ2J5","title":"Detailed view","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/detailed-view","siteSpaceId":"sitesp_Lgqaz","description":"Open detailed case information for deeper analysis.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"tHrGVZTT5xxKTCredSI3","title":"Resolve the case","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/resolve-the-case","siteSpaceId":"sitesp_Lgqaz","description":"Complete case resolution and document the investigation outcome.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"r9cCBOgxv4WdlLSwn0SD","title":"Resolution Center","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/resolution-center","siteSpaceId":"sitesp_Lgqaz","description":"Use Resolution Center to manage and complete case resolution.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"50o4e3mMUY7o3bk3ZnU7","title":"Collaborative notes and comments","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/collaborative-notes-and-comments","siteSpaceId":"sitesp_Lgqaz","description":"Add notes and comments to collaborate during a case investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"QAg06oWbkAiIesu3O7gv","title":"How to resolve a case","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/resolve-a-case","siteSpaceId":"sitesp_Lgqaz","description":"Follow the steps to resolve a case and record its outcome.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"oQsRJL4Bu6ZUdvxH828a","title":"Resolution reasons for cases and issues","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/resolution-reasons-for-cases-and-issues","siteSpaceId":"sitesp_Lgqaz","description":"Select resolution reasons for cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"zWzSDUoaCsr0clEIcZjo","title":"Monitor and track resolution times","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/monitor-and-track-resolution-times","siteSpaceId":"sitesp_Lgqaz","description":"Monitor case resolution times against configured service-level objectives.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"NiZOXdCMr4HzmbYoTlir","title":"Additional case actions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/additional-case-actions","siteSpaceId":"sitesp_Lgqaz","description":"Perform additional actions to create, merge, assign, and manage cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"56lU20JE7ASMVUz4mE4g","title":"Create a case","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/create-a-case","siteSpaceId":"sitesp_Lgqaz","description":"Create a case to investigate related security activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"22Sq5onvVfhv5r3HwCbx","title":"Merge a case","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/merge-a-case","siteSpaceId":"sitesp_Lgqaz","description":"Merge related cases into a single investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"0bFI0HsiSGJBLXNyP9J2","title":"Assign a case team and restrict access","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access","siteSpaceId":"sitesp_Lgqaz","description":"Assign teams and control access to sensitive cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"yeMJPoxonhl2rOVN2oot","title":"Playbook examples","pathname":"/cortex-cloud-runtime-security/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access/playbook-examples","siteSpaceId":"sitesp_Lgqaz","description":"Explore playbook examples for case teams and access restrictions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"},{"label":"Assign a case team and restrict access"}]},{"id":"wytnO2GP7Rz74F9KaOlh","title":"Investigation and response","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response","siteSpaceId":"sitesp_Lgqaz","description":"Investigate threats and respond using cases, automation, and endpoint actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"SX6eGenaMfLzYUy8ck50","title":"Investigate issues","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud generates issues to bring your attention to security risks in your framework.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"lTpndM24WRnpyzB7yPXG","title":"Overview of the Issues page","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/overview-of-the-issues-page","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to review and manage security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"BLMhDsdwoabpGJhs9vYg","title":"Issue card","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-card","siteSpaceId":"sitesp_Lgqaz","description":"Understand the information and actions available on an issue card.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"wWmGQpAE7LsCUiGEF2pI","title":"Resolution actions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/resolution-actions","siteSpaceId":"sitesp_Lgqaz","description":"Resolve issues using available resolution actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"tifeaYG2uuD7vuDpyMNc","title":"Link or unlink issues from a case","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/link-or-unlink-issues-from-a-case","siteSpaceId":"sitesp_Lgqaz","description":"Manage issue associations within a case investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"D2MPD5VOqxt3TJhvsNZr","title":"Run an automation on an issue","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/run-an-automation-on-an-issue","siteSpaceId":"sitesp_Lgqaz","description":"Run an automation to investigate or remediate an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"dIfAZDnumIAuep5fusQZ","title":"Use the War Room in an investigation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_Lgqaz","description":"Use the War Room to coordinate and document an investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"0KUmzd2U7vkszCAuFnKI","title":"Use the Work Plan in an investigation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_Lgqaz","description":"Use a Work Plan to organize investigation tasks and progress.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"o2hoGCk4HezfxRezzpmz","title":"Issue syncing","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-syncing","siteSpaceId":"sitesp_Lgqaz","description":"Configure issue synchronization with external systems.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"lkhWt9WQ1enJYhD3Yygt","title":"Issue deduplication","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-deduplication","siteSpaceId":"sitesp_Lgqaz","description":"Understand how Cortex Cloud identifies and deduplicates similar issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"UkCxtEwa6c5NIv16b6LZ","title":"Causality view","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/causality-view","siteSpaceId":"sitesp_Lgqaz","description":"Explore the causal relationships behind a security issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"8M2Tzw0oeggNQoOtxXMG","title":"Cloud causality view","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/causality-view/cloud-causality-view","siteSpaceId":"sitesp_Lgqaz","description":"Investigate causal relationships for cloud security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"LMet2tkBK78KcaQkvnHS","title":"Cloud causality view for audit log issues","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/causality-view/cloud-causality-view-for-audit-log-issues","siteSpaceId":"sitesp_Lgqaz","description":"Investigate cloud attacks faster with entity context directly in the Cloud causality view.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"gJXTLmKaUtwx8i8e65ea","title":"SaaS causality view","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/causality-view/saas-causality-view","siteSpaceId":"sitesp_Lgqaz","description":"Investigate causal relationships for SaaS security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"kct6GslE5w5oGiqtUd83","title":"Network causality view","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/causality-view/network-causality-view","siteSpaceId":"sitesp_Lgqaz","description":"Investigate causal relationships for network security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"Xt6PzPm1ETkkTfJGSpAE","title":"Timeline","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/causality-view/timeline","siteSpaceId":"sitesp_Lgqaz","description":"Review the sequence of events that contributed to an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"iXB6aCIympt56jWELJoU","title":"Causality icons key","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/causality-view/causality-icons-key","siteSpaceId":"sitesp_Lgqaz","description":"Identify icons used in causality views.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Causality view"}]},{"id":"wfLAme6iYr24U2UG3yoT","title":"Issue investigation actions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions","siteSpaceId":"sitesp_Lgqaz","description":"Perform actions that enrich, update, and investigate issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"xqKAFsEBWQBmSwSCjKOg","title":"Copy issues","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/copy-issues","siteSpaceId":"sitesp_Lgqaz","description":"Copy issue details for analysis or sharing.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"07X3q5b83yB4BE3BnLfC","title":"Update issue fields","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/update-issue-fields","siteSpaceId":"sitesp_Lgqaz","description":"Update issue fields to maintain accurate investigation context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"EHQgWBpu2rch68GM0LeI","title":"Create profile exceptions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/create-profile-exceptions","siteSpaceId":"sitesp_Lgqaz","description":"Create profile exceptions for trusted or expected activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"7vXsv7VpmvyGkTJUG88B","title":"Investigate contributing events","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/investigate-contributing-events","siteSpaceId":"sitesp_Lgqaz","description":"Review events that contributed to an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"U2q3a7p078gaWJ2f4iUh","title":"Create a featured field","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/create-a-featured-field","siteSpaceId":"sitesp_Lgqaz","description":"Create a featured field to surface important issue details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"qJC0p7HNOWc4PPzd9eAR","title":"View generating BIOC or IOC rule","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/view-generating-bioc-or-ioc-rule","siteSpaceId":"sitesp_Lgqaz","description":"View the BIOC or IOC rule that generated an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"ZkN0WWwpujrnRDExoiFv","title":"Add a file path to a malware profile allow list","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/add-a-file-path-to-a-malware-profile-allow-list","siteSpaceId":"sitesp_Lgqaz","description":"Add trusted file paths to a malware profile allow list.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"fk7HNPweX8Lw5TEgOYe3","title":"Retrieve additional issue details","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/retrieve-additional-issue-details","siteSpaceId":"sitesp_Lgqaz","description":"Retrieve additional details to support issue investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"VfVrbU645Nm5o7GxqBWp","title":"Export issue details to a file","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/export-issue-details-to-a-file","siteSpaceId":"sitesp_Lgqaz","description":"Export issue details for external analysis or record keeping.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"kES86FkDKa9FTICjOtzN","title":"Exclude an issue","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/exclude-an-issue","siteSpaceId":"sitesp_Lgqaz","description":"Exclude an issue from future investigation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"A10DzYQrDdBsuFf7Pf4N","title":"Query case and issue data","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/query-case-and-issue-data","siteSpaceId":"sitesp_Lgqaz","description":"Query case and issue data for investigation and reporting.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"N9zUwnPNEeWt7BGXFduI","title":"Review findings","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/review-findings","siteSpaceId":"sitesp_Lgqaz","description":"Review findings for an asset to gain insights into an asset’s posture status.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"ecMCy5qyR2cMJLbzxLtE","title":"Findings card","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/review-findings/findings-card","siteSpaceId":"sitesp_Lgqaz","description":"Understand the information and actions available on a findings card.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Review findings"}]},{"id":"MtlmWjFQbWU3eWXpEGMW","title":"Investigate artifacts and assets","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets","siteSpaceId":"sitesp_Lgqaz","description":"You can investigate specific artifacts and assets on dedicated views related to IP address, Network Assets, and File and Process Hash information.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"kGd3qh9F6gfhM2D4Y3z1","title":"Investigate an IP address","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-an-ip-address","siteSpaceId":"sitesp_Lgqaz","description":"Investigate IP address activity and related security context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"qzxooPVAWGQATU7ECX15","title":"Investigate an asset","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-an-asset","siteSpaceId":"sitesp_Lgqaz","description":"Investigate an asset and its related security activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"R38PT5tgaUaB3KI6gxOU","title":"Investigate a file and process hash","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-a-file-and-process-hash","siteSpaceId":"sitesp_Lgqaz","description":"Investigate file and process hashes for malicious activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"n9cOrFCqVcuhdiJI0MZS","title":"Investigate a user","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-a-user","siteSpaceId":"sitesp_Lgqaz","description":"Investigate user activity and related security context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"jYNlETb8AAr66mKkQwxx","title":"Investigate endpoints","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"Investigate endpoints and take response actions when needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"e5exHqh8LOgr945IBzTG","title":"Overview of the Action Center","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints/overview-of-the-action-center","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to initiate and monitor endpoint response actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"t8t9DExtdxKM5FzEBszE","title":"Initiate and monitor endpoint actions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints/overview-of-the-action-center/initiate-and-monitor-endpoint-actions","siteSpaceId":"sitesp_Lgqaz","description":"Initiate endpoint actions and monitor their progress.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"577UrxpT9h1nRPOxW8oZ","title":"Action Center reference information","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints/overview-of-the-action-center/action-center-reference-information","siteSpaceId":"sitesp_Lgqaz","description":"Review available Action Center fields, statuses, and actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate endpoints"},{"label":"Overview of the Action Center"}]},{"id":"mHhIu14C9MgBWq1o5bvc","title":"Manage endpoints","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints/manage-endpoints","siteSpaceId":"sitesp_Lgqaz","description":"View and manage endpoints in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"Q0GO8ChzUTA9BF57rbch","title":"Retrieve files from an endpoint","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints/retrieve-files-from-an-endpoint","siteSpaceId":"sitesp_Lgqaz","description":"Retrieve files from an endpoint for investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"TLfZP54HyoOOnUnIyVfn","title":"Retrieve support logs from an endpoint","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints/retrieve-support-logs-from-an-endpoint","siteSpaceId":"sitesp_Lgqaz","description":"Collect endpoint support logs for troubleshooting.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"slX3bZYWg0upNh7kKS98","title":"Scan an endpoint for malware","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-endpoints/scan-an-endpoint-for-malware","siteSpaceId":"sitesp_Lgqaz","description":"Run a malware scan on an endpoint.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate endpoints"}]},{"id":"7jhpIsoY4trfhpNvNVcJ","title":"Investigate files","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-files","siteSpaceId":"sitesp_Lgqaz","description":"Investigate files and manage execution or quarantine actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"5uCQoCs1glSSMrEgeJXm","title":"Manage file execution","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-files/manage-file-execution","siteSpaceId":"sitesp_Lgqaz","description":"Manage file execution decisions during an investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"UzBNhCtoBgAvqRQZXODx","title":"Manage quarantined files","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-files/manage-quarantined-files","siteSpaceId":"sitesp_Lgqaz","description":"Review and manage files placed in quarantine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"0z52huWUSUYKp9LZeyn1","title":"Review WildFire analysis details","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-files/review-wildfire-analysis-details","siteSpaceId":"sitesp_Lgqaz","description":"Review WildFire analysis results for a file.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"ZdLzEkJRGflpPi1xV23o","title":"Import file hash exceptions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/investigate-files/import-file-hash-exceptions","siteSpaceId":"sitesp_Lgqaz","description":"Import file hash exceptions into Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate files"}]},{"id":"hA2NrSJOJmRJwR4UhuXV","title":"Cortex Assistant","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/cortex-assistant","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Assistant is designed to streamline processes by simplifying case triaging, investigation, and remediation. It enables you to seamlessly uncover new insights on hashes, hosts, and more. You can","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"O7KsoSsMDRNRKrg0ELUi","title":"Cortex Assistant layout","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/cortex-assistant/cortex-assistant-layout","siteSpaceId":"sitesp_Lgqaz","description":"Understand the Cortex Assistant interface and available controls.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Cortex Assistant"}]},{"id":"B1kgnx0Gt2PqGeOCLUXT","title":"Cortex Assistant capabilities","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/cortex-assistant/cortex-assistant-capabilities","siteSpaceId":"sitesp_Lgqaz","description":"Explore the tasks Cortex Assistant can help you complete.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Cortex Assistant"}]},{"id":"y4P926IAmCmx2vQWcv2N","title":"Automation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation","siteSpaceId":"sitesp_Lgqaz","description":"Automate investigation and response workflows in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"QZvxgshbupX2a1RnvJ1P","title":"Quick Actions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/quick-actions","siteSpaceId":"sitesp_Lgqaz","description":"Run quick actions to automate common investigation tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"JxFZSOQXaTdV2rAhR63x","title":"Automation Exclusion Center","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/automation-exclusion-center","siteSpaceId":"sitesp_Lgqaz","description":"Manage exclusions that prevent automation from running.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"yCBSD2VFLfSb9ElzGnVn","title":"Manage automation exclusion policies","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/manage-automation-exclusion-policies","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage policies that exclude automated actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"D3ar0XtuxFSjGChyMW5A","title":"Playbooks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks","siteSpaceId":"sitesp_Lgqaz","description":"Build and manage playbooks for automated workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"Td6Ymcu36hGQ2NR8z2wd","title":"Playbooks overview","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/playbooks-overview","siteSpaceId":"sitesp_Lgqaz","description":"Learn how playbooks automate investigation and response processes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"b7fjqQZFm2DoikMS5Yae","title":"Access to playbooks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/access-to-playbooks","siteSpaceId":"sitesp_Lgqaz","description":"Manage access to playbooks and their content.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"rN8T0WY2bPpBAJlk06Gx","title":"Playbook development checklist","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_Lgqaz","description":"Follow a checklist when planning and building playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"5ugwJ6fqTolrHEiLBbfh","title":"Plan your playbook","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/plan-your-playbook","siteSpaceId":"sitesp_Lgqaz","description":"Plan the purpose, inputs, and flow of your playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"OS6IXehgPtT511rnESUy","title":"Manage playbooks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/manage-playbooks","siteSpaceId":"sitesp_Lgqaz","description":"Create, organize, and maintain playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"1VRbVlFs7P4znxwKPVjC","title":"Build your playbook","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook","siteSpaceId":"sitesp_Lgqaz","description":"Build a playbook by configuring tasks, logic, and settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"FiutmtieYumJheUholxw","title":"Choose from existing playbooks or create your own","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_Lgqaz","description":"Select a template or create a playbook from scratch.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"M7Nh4qvRcA239xvNu4gG","title":"Configure playbook settings","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/configure-playbook-settings","siteSpaceId":"sitesp_Lgqaz","description":"Configure playbook settings, inputs, and execution behavior.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"tu5AUTamDVCLzgxYSgRR","title":"Add objects from the Task Library","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library","siteSpaceId":"sitesp_Lgqaz","description":"Add reusable tasks from the Task Library to a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"RDq8m0CQsQfPvUhsMEpK","title":"Add commands and scripts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-commands-and-scripts","siteSpaceId":"sitesp_Lgqaz","description":"Add command and script tasks to a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"1PO81cl1kxAdfYT9xNEq","title":"Add sub-playbooks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-sub-playbooks","siteSpaceId":"sitesp_Lgqaz","description":"Add sub-playbooks to reuse automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"sbvOk6TFfCBi3m9T9InY","title":"Add AI Prompt tasks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-ai-prompt-tasks","siteSpaceId":"sitesp_Lgqaz","description":"Add AI Prompt tasks to automate AI-assisted workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"b8aKYJo2561zC8CnMmCt","title":"Add manual tasks and blank tasks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks","siteSpaceId":"sitesp_Lgqaz","description":"Add manual and blank tasks to a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"IhTImtuNyhPwRlDKB49B","title":"Create a standard task","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-standard-task","siteSpaceId":"sitesp_Lgqaz","description":"Define a Standard task in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"aA2EiIzfDJGpFVM2k9En","title":"Create a conditional task","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-conditional-task","siteSpaceId":"sitesp_Lgqaz","description":"Create a Conditional task in a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"rbQvuCFzXghVuMLvDcwu","title":"Create a communication task","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-communication-task","siteSpaceId":"sitesp_Lgqaz","description":"Communication tasks let you send surveys and collect issue data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"nhHuFAQrQ2lElVCiUGfy","title":"Create a section header","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/create-a-section-header","siteSpaceId":"sitesp_Lgqaz","description":"Add section headers to organize playbook tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"y8MpL2gacayozvigwZDh","title":"Configure script error handling in a playbook","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_Lgqaz","description":"Configure how a playbook handles script execution errors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"rGg4B0LFtggS74KfmJGn","title":"Customize your playbook","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook","siteSpaceId":"sitesp_Lgqaz","description":"Customize playbook behavior, data handling, and task flow.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"iGMK7s1tKaVMmnHO1NUD","title":"Configure a sub-playbook loop","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_Lgqaz","description":"Configure loops that run a sub-playbook for each item.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"NGNqrkCpbAMNzzklUtgi","title":"Filter and Transform data","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_Lgqaz","description":"Filter and transform data within a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"tRtuPe7Kxabwbw2KTCtc","title":"Create custom filter and transformers","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/create-custom-filter-and-transformers","siteSpaceId":"sitesp_Lgqaz","description":"Create custom filters and transformers for playbook data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"zrQKo9hUHipXMmG3Ej5F","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_Lgqaz","description":"Understand filter categories and built-in filters.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"qYw9uX2BqOnoxEHkx279","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_Lgqaz","description":"Understand transformer categories and built-in transformers.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"1iA9IcpeLJXET4LV6Y1w","title":"Extend context","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/extend-context","siteSpaceId":"sitesp_Lgqaz","description":"Extend playbook context with additional investigation data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"qH7zwJ0QGa7RanTdAJcb","title":"Extract Indicators","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_Lgqaz","description":"Extract indicators from data during a playbook run.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"MIJeRlvdpnxnvqG9oPFK","title":"Update issue fields with playbook tasks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/update-issue-fields-with-playbook-tasks","siteSpaceId":"sitesp_Lgqaz","description":"Update issue fields using tasks in a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"MdoqnIoGbP3xyKjobBbR","title":"Test your playbook","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/test-your-playbook","siteSpaceId":"sitesp_Lgqaz","description":"Set breakpoints, conditional breakpoints, skips, and input or output overrides in the playbook debugger.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"VZTOKsGpaNmYxxo7vwWK","title":"Troubleshoot playbook performance","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/test-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_Lgqaz","description":"Diagnose and improve playbook execution performance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Test your playbook"}]},{"id":"lvMLaeOM98SgUjLpQrP9","title":"Manage playbook content","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/manage-playbook-content","siteSpaceId":"sitesp_Lgqaz","description":"Manage the tasks, scripts, and settings in a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"5cUJMsG9oPPstm4uLBir","title":"Best practices for playbooks","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/playbooks/best-practices-for-playbooks","siteSpaceId":"sitesp_Lgqaz","description":"Apply recommended practices when designing and maintaining playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"xkI6irpQZPU0mdWov5OT","title":"AI Prompts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/ai-prompts","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage AI prompts for automated workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"mWYz4DFyZ6MZqYg2TxA8","title":"AI prompts role-based access control","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/ai-prompts/ai-prompts-role-based-access-control","siteSpaceId":"sitesp_Lgqaz","description":"Manage AI prompt permissions with role-based access control.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"CAznoC2TNEq0k6MPyV12","title":"Use existing prompts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/ai-prompts/use-existing-prompts","siteSpaceId":"sitesp_Lgqaz","description":"Find, duplicate, and edit prompts from the Prompts Library.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"EOnzpdtfQsyMFPFh8RDm","title":"Create a prompt","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/ai-prompts/create-a-prompt","siteSpaceId":"sitesp_Lgqaz","description":"Create or edit prompts, configure settings, and use them in agents or playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"WD1DjCTk29f568iaL30I","title":"Write effective prompts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/ai-prompts/write-effective-prompts","siteSpaceId":"sitesp_Lgqaz","description":"Tips for creating effective AI prompts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"ii8elv2Fvd6cYMqHxTGk","title":"Create an automation rule","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/create-an-automation-rule","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to create an automation rule for an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"C5Up9TxAvAEYocXEcQeO","title":"Scripts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/scripts","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage scripts for automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"2Hq5uGpPvDQeEUmD3VEQ","title":"Use existing scripts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/scripts/use-existing-scripts","siteSpaceId":"sitesp_Lgqaz","description":"Use existing scripts in playbooks and automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"hAtYRehq8lFW3LlJsomf","title":"Create a script","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/scripts/create-a-script","siteSpaceId":"sitesp_Lgqaz","description":"Create a custom script for automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"RW1cPnQCZ30RXT5Tgf83","title":"Accelerate script development using the Automation Engineer agent","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/scripts/accelerate-script-development-using-the-automation-engineer-agent","siteSpaceId":"sitesp_Lgqaz","description":"Use Automation Engineer to accelerate script development.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"1FklDBwQW91ijY3AUasR","title":"Change the Docker image in a script","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/scripts/change-the-docker-image-in-a-script","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Docker image used by a script.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"qesHADl4hfGmVPZj8tCz","title":"Connect an engine to an image registry","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/scripts/change-the-docker-image-in-a-script/connect-an-engine-to-an-image-registry","siteSpaceId":"sitesp_Lgqaz","description":"Connect an engine to an image registry for script execution.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"},{"label":"Change the Docker image in a script"}]},{"id":"nrTNFRIciYkYVFFVlUkU","title":"Context data","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data","siteSpaceId":"sitesp_Lgqaz","description":"Use context data to assist with the investigation and remediation process.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"bDHzG1SOcfM4PLnuMfG5","title":"Issue context data","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data/issue-context-data","siteSpaceId":"sitesp_Lgqaz","description":"Understand context data stored for an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"3N64JfQo7EirEsgOMcAu","title":"Case context data","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data/case-context-data","siteSpaceId":"sitesp_Lgqaz","description":"Understand context data stored for a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"QQ4Rhli3RCivPxl95nBo","title":"Search context data","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data/search-context-data","siteSpaceId":"sitesp_Lgqaz","description":"Search context data across investigations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"DWToDtxgRRArWFKl4MQB","title":"Add context data to an issue","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data/add-context-data-to-an-issue","siteSpaceId":"sitesp_Lgqaz","description":"Add context data to an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"EQU3mMJM6cQMUHd0DkpZ","title":"Add context data to a case","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data/add-context-data-to-a-case","siteSpaceId":"sitesp_Lgqaz","description":"Add context data to a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"93KC4dwLeadVmtNj55fj","title":"Delete context data from a case","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data/delete-context-data-from-a-case","siteSpaceId":"sitesp_Lgqaz","description":"Delete context data from a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"MztUvZjWlAV4toWUhOsr","title":"Use context data in a playbook","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/context-data/use-context-data-in-a-playbook","siteSpaceId":"sitesp_Lgqaz","description":"Use context data in playbook tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"VAcMzKhy4TMsKhvvj4Oh","title":"Lists","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/lists","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage lists for automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"oixTBcJNcAs7Y6zt7ri9","title":"Create a list","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/lists/create-a-list","siteSpaceId":"sitesp_Lgqaz","description":"Create a list for use in automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"neelxm4NE5RIolISliMS","title":"List commands","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/lists/list-commands","siteSpaceId":"sitesp_Lgqaz","description":"Use commands to manage and query lists.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"SRI62FforWNjzpwfQyEq","title":"Use cases: JSON lists","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/lists/use-cases-json-lists","siteSpaceId":"sitesp_Lgqaz","description":"Use JSON lists to store structured data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"bimtVANznOzsAisLNZc2","title":"Transform a list into an array","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_Lgqaz","description":"Transform a list into an array for automation tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"HwSyw8A4y2QU4RLn98i0","title":"Integrations","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/integrations","siteSpaceId":"sitesp_Lgqaz","description":"Configure integrations for automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"scJBboeI3HH8GO0iKq1S","title":"Add an integration instance","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/integrations/add-an-integration-instance","siteSpaceId":"sitesp_Lgqaz","description":"Add and configure an integration instance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"sRJqnmnM1KP81ym1soCe","title":"Use integration commands in the CLI","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/integrations/use-integration-commands-in-the-cli","siteSpaceId":"sitesp_Lgqaz","description":"Run integration commands from the CLI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"LxsGFaQ6daZHx8oLlFKz","title":"Troubleshoot integations","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/integrations/troubleshoot-integations","siteSpaceId":"sitesp_Lgqaz","description":"Troubleshoot integration configuration and execution issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"bkuBWHMgeU8a0h7L0E7Y","title":"Manage credentials","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/integrations/manage-credentials","siteSpaceId":"sitesp_Lgqaz","description":"Manage credentials used by integration instances.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"QRKFpCbjYz7cJhW3XDeP","title":"Engines","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines","siteSpaceId":"sitesp_Lgqaz","description":"Install, manage, configure, and troubleshoot engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"H1gbDe6NwYtwhggVpZ3u","title":"What is an engine?","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/what-is-an-engine","siteSpaceId":"sitesp_Lgqaz","description":"Learn how engines execute automation tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"iqfVBKcDWOtP6cC83TEZ","title":"Engine requirements","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/engine-requirements","siteSpaceId":"sitesp_Lgqaz","description":"Hardware, OS, and required URLs for engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"eOxmxgHfuiZWAKSnK28V","title":"Install an engine","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine","siteSpaceId":"sitesp_Lgqaz","description":"Install, deploy and configure Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"wJ2UpnDjDMBKvPmpjL7f","title":"Docker","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker","siteSpaceId":"sitesp_Lgqaz","description":"Install, configure, secure, and troubleshoot Docker for Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"fYQvreexzhd2M4xBFmm3","title":"Install Docker","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_Lgqaz","description":"Install Docker and verify engine user permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"5wVRB52rfFGYP1mypIEH","title":"Install Docker distribution for Red Hat","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/install-docker-distribution-for-red-hat","siteSpaceId":"sitesp_Lgqaz","description":"Configure Docker and SELinux on Red Hat engine servers.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"YPUP11OnqGUpcT6jy9Yc","title":"Docker image security","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_Lgqaz","description":"Secure, harden, and troubleshoot Docker images and containers.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"y7BJBLgSDI48tgwluVV8","title":"Docker FAQs","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"HtqqM8SP0ib5SrYBaNsh","title":"Troubleshoot Docker Issues","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"rSaD40yojWWk7TYLlFml","title":"Configure Docker pull rate limit","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"TAFsADCWrV6hIilEx2m6","title":"Change the Docker Installation folder","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"VWeLxvN6HBek8MkY8OeS","title":"Docker hardening guide","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"ySWV2RLdD5B92Oj6odnb","title":"Docker network hardening","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"wvJvtfZCILIioy3vlzRs","title":"Configure Docker images","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-docker-images","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"OIKH7woKCpP8tppRmr5z","title":"Run Docker with non-root internal users","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"Ckkfw2hgnRjtRlrxSVma","title":"Configure the memory limit support without swap capabilities","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limit-support-without-swap-capabilities","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"8PvJyJm2yYZmkVVVihX2","title":"Configure the memory limitation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"fjBXxNVW6UpaQGn4Tqja","title":"Configure the CPU, PIDs, and open the file descriptors limit","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-cpu-pids-and-open-the-file-descriptors-limit","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"0DteenuhbJUQ9cyMdTpS","title":"Check Docker hardening configurations","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/check-docker-hardening-configurations","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"xPcxHuK7r0EWQX4CobN9","title":"Podman","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman","siteSpaceId":"sitesp_Lgqaz","description":"Install, configure, and troubleshoot Podman for Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"abfJX4GPRnvWqkDZFTKV","title":"Change the Container storage","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/change-the-container-storage","siteSpaceId":"sitesp_Lgqaz","description":"Configure Podman container storage for an engine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"D8rA0za4Tys2NmkOSAIq","title":"Install Podman","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_Lgqaz","description":"Install and configure Podman for Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"Hep7UMORiZLmz7ptR9C6","title":"Migrate from Docker to Podman","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_Lgqaz","description":"Migrate an existing engine from Docker to Podman.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"2oSjJcuLobd2hTjerQwh","title":"Troubleshoot Podman","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_Lgqaz","description":"Resolve common Podman issues on Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"2v7zcudHfBzx8a5qveAq","title":"Manage engines","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/manage-engines","siteSpaceId":"sitesp_Lgqaz","description":"Manage engines and load balancing groups.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"eJ5LumDzlrUuPis3ORJw","title":"Upgrade an engine","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/upgrade-an-engine","siteSpaceId":"sitesp_Lgqaz","description":"Upgrade an engine on Cortex Cloud or directly on the remote machine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"WbMUnkTZeJI2686omysm","title":"Remove an engine","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/remove-an-engine","siteSpaceId":"sitesp_Lgqaz","description":"Remove an engine by running the relevant command, depending on your operating system.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"MMYO1D7lxo7L8siuxobf","title":"Configure engines","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/configure-engines","siteSpaceId":"sitesp_Lgqaz","description":"Configure Cortex Cloud engines by editing the d1.conf file or modifying the configuration in the UI (for shell installations).","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"5xgVTHVJFbm2kTDauwYH","title":"Configure the engine to use a web proxy","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"cf1usKpNPwhiTTBgwoVg","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"CTrHASxYTCNeGRczOIvi","title":"Use NGINX as a reverse proxy","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/configure-engines/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"GDtTf6Uulvcqg6yQZdR8","title":"Configure an engine to use custom certificates","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"qDukCfvY2QWWz7fJ6Lam","title":"Use an engine in an integration","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_Lgqaz","description":"Use an engine or a load-balancing group of engines to fetch issues and run commands for an integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"ep0Pf2K3BcAv3sH0nqrH","title":"Run a script using an engine","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_Lgqaz","description":"Run a script on an engine or load-balancing group to distribute the workload and improve performance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"LJ3JmubXVWpyCjMRNYZW","title":"Troubleshoot engines","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/troubleshoot-engines","siteSpaceId":"sitesp_Lgqaz","description":"Troubleshoot engines by accessing logs and viewing errors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"x91aJ6NTnyCgjQXheJWm","title":"Troubleshoot integrations running on engines","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/automation/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"bLqysuXxK2qIAbCIubIq","title":"Response actions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions","siteSpaceId":"sitesp_Lgqaz","description":"During the case investigation, various response actions are available.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"R00dvzUqPDiAGGUKP5BW","title":"Initiate a Live Terminal session","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions/initiate-a-live-terminal-session","siteSpaceId":"sitesp_Lgqaz","description":"Start a Live Terminal session on an endpoint.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"lNyXXJocy7JQEDKAW5ns","title":"Isolate an endpoint","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions/isolate-an-endpoint","siteSpaceId":"sitesp_Lgqaz","description":"Isolate an endpoint from the network.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"C4N06TKlvuayLTe7z6aj","title":"Pause endpoint protection","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions/pause-endpoint-protection","siteSpaceId":"sitesp_Lgqaz","description":"Pause endpoint protection when investigation requires it.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"3jET67b0PJMVAnmxhdWF","title":"Remediate changes from malicious activity","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions/remediate-changes-from-malicious-activity","siteSpaceId":"sitesp_Lgqaz","description":"Remediate changes caused by malicious activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"I4bjk6bOJJAYcIVviFC2","title":"Search and destroy malicious files","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions/search-and-destroy-malicious-files","siteSpaceId":"sitesp_Lgqaz","description":"Search for and remove malicious files from endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"mW2WLmjzouKVYtbVcRzs","title":"Manage external dynamic lists","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions/manage-external-dynamic-lists","siteSpaceId":"sitesp_Lgqaz","description":"Manage external dynamic lists used for enforcement.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"jV38lnxDwahvD1sRMQlr","title":"Collect a memory image","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/response-actions/collect-a-memory-image","siteSpaceId":"sitesp_Lgqaz","description":"Collect a memory image from an endpoint.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Response actions"}]},{"id":"z29UrqvBqld5RpRGBw2k","title":"Forensics","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics","siteSpaceId":"sitesp_Lgqaz","description":"Conduct forensic investigations and collect evidence from endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"Fl6QUvd2O2a6BxL74QxS","title":"Forensic investigations","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations","siteSpaceId":"sitesp_Lgqaz","description":"Conduct forensic investigations across endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"}]},{"id":"ZbvvP3asjUOwtvktFzb3","title":"Manage an investigation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/manage-an-investigation","siteSpaceId":"sitesp_Lgqaz","description":"Create, manage, and review forensic investigations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"poRKr7RjvXmncI5MwnAV","title":"Create a new investigation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/manage-an-investigation/create-a-new-investigation","siteSpaceId":"sitesp_Lgqaz","description":"Create a forensic investigation, assign access, and start a data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"Fn4aH9ctnca8BR0Min1n","title":"Edit an investigation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/manage-an-investigation/edit-an-investigation","siteSpaceId":"sitesp_Lgqaz","description":"Update an active investigation's details and user access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"xHSAMnP8WtugzWdQrgG8","title":"Close an investigation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/manage-an-investigation/close-an-investigation","siteSpaceId":"sitesp_Lgqaz","description":"Close an investigation and manage its 24-hour grace period.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"Eiw1mxw64aV9Zl5mq3Eq","title":"User permissions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/manage-an-investigation/user-permissions","siteSpaceId":"sitesp_Lgqaz","description":"You can assign users to the investigation for them to view and manage the investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Manage an investigation"}]},{"id":"YP3SI3uz48B6cEZPMAPn","title":"Data collection","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/data-collection","siteSpaceId":"sitesp_Lgqaz","description":"Collect endpoint data for forensic investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"AIs6A4j4xZLKJm25h1Jv","title":"Hunting","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/data-collection/hunting","siteSpaceId":"sitesp_Lgqaz","description":"Collect data to support threat hunting.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"FhiOAX8yaRseb8kLXDik","title":"Triage","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/data-collection/triage","siteSpaceId":"sitesp_Lgqaz","description":"Collect data for endpoint triage.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"R2STLI5plJkoPd8Wblpd","title":"Configure collection","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/data-collection/configure-collection","siteSpaceId":"sitesp_Lgqaz","description":"Configure forensic data collection settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Data collection"}]},{"id":"xgqeEdp98wyzd4n50sr1","title":"Analysis and documentation","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/analysis-and-documentation","siteSpaceId":"sitesp_Lgqaz","description":"Analyze forensic results and document investigation findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"e3OUUjPBeHU1QJ8i6FwK","title":"Review alerts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/analysis-and-documentation/review-alerts","siteSpaceId":"sitesp_Lgqaz","description":"Review alerts generated during a forensic investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"aPDXwjPVDur2ecjSdfwO","title":"Investigation timeline","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/analysis-and-documentation/investigation-timeline","siteSpaceId":"sitesp_Lgqaz","description":"Review the timeline of forensic investigation activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"ybcbGU8btXxroD3aJlOZ","title":"Key assets & artifacts","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/analysis-and-documentation/key-assets-and-artifacts","siteSpaceId":"sitesp_Lgqaz","description":"Review key assets and artifacts in an investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"},{"label":"Analysis and documentation"}]},{"id":"kPR1PYOSapet1b1rjR2e","title":"Export","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/forensics/forensic-investigations/export","siteSpaceId":"sitesp_Lgqaz","description":"Export forensic investigation data and results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Forensics"},{"label":"Forensic investigations"}]},{"id":"8ZB8I6pw5iNPBufBBvsr","title":"Build XQL queries","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"uPwphxp6klVxmmjx7Vyk","title":"About the Query Builder","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_Lgqaz","description":"The Query Builder facilitates threat detection, case expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"aqYXrFUUjgchjIX1OHRf","title":"How to build XQL queries","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"RKsDLkwsGPuNYW1d2wSu","title":"Get started with XQL queries","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_Lgqaz","description":"Get started creating and running XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"VHTPIdXWIG1KVISukKAo","title":"Useful XQL user interface features","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_Lgqaz","description":"Use XQL editor features to build queries efficiently.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"rOzbxntGqq8TOfTvf2Jg","title":"XQL Query best practices","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_Lgqaz","description":"Apply best practices when writing XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"BZujAEU3lm5m3fszj3as","title":"Expected results when querying fields","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_Lgqaz","description":"Understand expected results when querying fields with XQL.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"t9inhrz7CKywlElDGGon","title":"Create XQL query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_Lgqaz","description":"Create an XQL query to analyze your data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"kbNtGSfef2LNR05ym0vv","title":"Review XQL query results","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_Lgqaz","description":"Review and interpret XQL query results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"VikdegMIJPjRoSi8YJhf","title":"Translate to XQL","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_Lgqaz","description":"Translate queries into XQL syntax.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"Dnn9dAj10bFoMjg6lvEa","title":"Graph query results","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_Lgqaz","description":"Visualize XQL query results in a graph.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"SrQYkwxSPJrsd6jwJ3Cx","title":"XQL query entities","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the entities in the Legacy Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"WFAk0Mm7NlargEjKilGV","title":"Create authentication query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-authentication-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for authentication data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"Tkbp1yc53gUk0B1u6mj0","title":"Create event log query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-event-log-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for event log data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"DQjupLdw0VmFl8vt2YUj","title":"Create file query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-file-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for file data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"3I5vN31haRHjmFsopcVb","title":"Create image load query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-image-load-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for image load data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"nAD9jlkTIivQeV4vhxU1","title":"Create network connections query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-network-connections-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for network connection data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"5yi2rJZIXoSWy1XXSyYQ","title":"Create network query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-network-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for network data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"3MJzUXfZWlFNGH8exy1X","title":"Create process query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-process-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for process data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"tWaNem58HWuJ9IRMNZCC","title":"Create registry query","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/create-registry-query","siteSpaceId":"sitesp_Lgqaz","description":"Create XQL queries for registry data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"yqwUtPglb2FD11cVLU99","title":"Query across all entities","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/query-across-all-entities","siteSpaceId":"sitesp_Lgqaz","description":"Query data across all entity types.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"DmJoQdaVRLivYArxSbzK","title":"Overview of the Query Center","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_Lgqaz","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"0GFb9x2vAiXD8hE8QO8v","title":"Edit and run queries in Query Center","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_Lgqaz","description":"Edit and run queries in Query Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"ow2VBnBdBYYFnoSJHrsL","title":"Query Center reference information","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/overview-of-the-query-center/query-center-reference-information","siteSpaceId":"sitesp_Lgqaz","description":"Review Query Center fields and capabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"loCqazZ08x0Ht6cfoDIx","title":"Manage scheduled queries","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"gY4FLTSEOkY6piMdFB17","title":"Scheduled Queries reference information","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_Lgqaz","description":"Review Scheduled Queries fields and capabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"vJv9FbCjuMB0BS4M2X9U","title":"Manage your personal query library","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud provides as part of the Query Library a personal library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"2hZtZ8DsEXDX46DKJwxr","title":"XQL macros","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/xql-macros","siteSpaceId":"sitesp_Lgqaz","description":"Use XQL macros to reuse query logic.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"yPTJpM01XuZ79YKB2oZi","title":"Manage your macros","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_Lgqaz","description":"Create, edit, and manage your XQL macros.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"rm3glbqmwIo6gGUD92h3","title":"Quick Launcher","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/quick-launcher","siteSpaceId":"sitesp_Lgqaz","description":"The Quick Launcher provides a quick, in-context shortcut that you can use to search for information, perform common investigation tasks, or initiate actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"gMsAiB6hWiYRDKq8beFy","title":"Research a known threat","pathname":"/cortex-cloud-runtime-security/cases-and-issues/investigation-and-response/research-a-known-threat","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud enables you to investigate any threat, also referred to as a lead, which has been detected.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"BQhRAjmWq33XQMMTG83F","title":"Customize cases and issues","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues","siteSpaceId":"sitesp_Lgqaz","description":"Customize your cases and issues for specific requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"Ht8MdD6KaLYGhPNNzPud","title":"Set up case scoring","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/set-up-case-scoring","siteSpaceId":"sitesp_Lgqaz","description":"Configure how Cortex Cloud calculates case scores.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"Uxx4qzCngN8nBrWrAQIm","title":"Create a starring configuration","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-a-starring-configuration","siteSpaceId":"sitesp_Lgqaz","description":"Create configurations that highlight important cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"ixDQatRrlpMay65l12wK","title":"Create SLAs for case and issue resolution","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-slas-for-issue-resolution","siteSpaceId":"sitesp_Lgqaz","description":"Create SLA rules to set and track issue-resolution timers and time goals.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"BT34PFI9DnH2d2xTL28N","title":"Create additional case timers and SLAs","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas","siteSpaceId":"sitesp_Lgqaz","description":"Create case timers and service-level agreements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"}]},{"id":"J2cJOeOwgrpHrAVktnbz","title":"Update case timer and SLA fields","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas/update-case-timer-and-sla-fields","siteSpaceId":"sitesp_Lgqaz","description":"Update fields used by case timers and service-level agreements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"},{"label":"Create additional case timers and SLAs"}]},{"id":"DpUE7UOrN8pACx8FSTEq","title":"Create issue exceptions","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-issue-exceptions","siteSpaceId":"sitesp_Lgqaz","description":"Create time-bound exceptions that pause issue SLA timers during approved remediation delays.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"9SgXXnk1hNmWmjVoum1U","title":"Configure the issue exception approval workflow","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/configure-the-issue-exception-approval-workflow","siteSpaceId":"sitesp_Lgqaz","description":"Manage approvers and approval requirements for issue exception rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"YrtTRglznhJSx1ZMaXlx","title":"Create issue exception rules","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/create-issue-exception-rules","siteSpaceId":"sitesp_Lgqaz","description":"Create approval-based rules that temporarily pause SLA timers for selected issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"ll4I1plPJwptCFD4IJwW","title":"Create an exception rule from an issue","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/create-an-exception-rule-from-an-issue","siteSpaceId":"sitesp_Lgqaz","description":"Create an exception rule from an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"ujwPRG99oZSSN7eh5Z6D","title":"View issue Exception Rules","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/view-issue-exception-rules","siteSpaceId":"sitesp_Lgqaz","description":"View exception rules configured for issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"DlfknYU9ZSHCSi3pNpwL","title":"Disable issue exception rules","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/disable-issue-exception-rules","siteSpaceId":"sitesp_Lgqaz","description":"Disable issue exception rules when they are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"YuSe4nGNYpi9WXYqoVQ9","title":"View excepted issues","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/view-excepted-issues","siteSpaceId":"sitesp_Lgqaz","description":"View issues excluded by exception rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"pZr7FwSyaPAnUvTkSFGe","title":"Optimize case grouping in correlations","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/optimize-case-grouping-in-correlations","siteSpaceId":"sitesp_Lgqaz","description":"Optimize case grouping for correlation-based detections.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"GUM5IpCcA8fGEBCO3pEc","title":"Create a sync profile","pathname":"/cortex-cloud-runtime-security/cases-and-issues/customize-cases-and-issues/create-a-sync-profile","siteSpaceId":"sitesp_Lgqaz","description":"Create a sync profile for cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"BPQOba4sBpfNRDFsic6E","title":"Agentic Assistant chat","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat","siteSpaceId":"sitesp_Lgqaz","description":"Chat with the Cortex Agentic Assistant using natural language prompts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"}]},{"id":"BYXJmysqRI0KfN0jmxTf","title":"Get started with Agentic Assistant chat","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/get-started-with-agentic-assistant-chat","siteSpaceId":"sitesp_Lgqaz","description":"Enable Agentic Assistant and access the chat interface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"KxVLbUgUfV5pBsHKoxKw","title":"Choose an Agentic Assistant agent","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/choose-an-agentic-assistant-agent","siteSpaceId":"sitesp_Lgqaz","description":"Choose a system or custom agent for your chat.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"YxjGxWdSdwoE0tQVrWWf","title":"Chat with an Agentic Assistant agent","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/chat-with-an-agentic-assistant-agent","siteSpaceId":"sitesp_Lgqaz","description":"Tips for chatting with the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"Nu5KUflyZETce2xkfLlb","title":"Chat with the Agentic Assistant from Slack","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/chat-with-the-agentic-assistant-from-slack","siteSpaceId":"sitesp_Lgqaz","description":"Enable chatting with an Agentic Assistant agent from Slack.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"VqGN9dbRlzfmLCYTxfAS","title":"Streamline troubleshooting and support with the Help Center agent","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"gjrL1AAfZQOT7gTAfPc9","title":"Help Center agent actions","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent/help-center-agent-actions","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"},{"label":"Streamline troubleshooting and support with the Help Center agent"}]},{"id":"pE4RLVLuQJ4losBDtSnD","title":"Create and run XQL queries with Agentic Assistant chat","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/create-and-run-xql-queries-with-agentic-assistant-chat","siteSpaceId":"sitesp_Lgqaz","description":"Use natural language in Cortex Agentic Assistant Chat to automatically generate and execute Cortex Query Language (XQL) queries in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"tzQEVNJbq0GHgjWp4EZ0","title":"Use natural language to query and visualize your data","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/use-natural-language-to-query-and-visualize-your-data","siteSpaceId":"sitesp_Lgqaz","description":"Prompt Cortex Agentic Assistant agents to create graphs and charts from its findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"YBaj7KhAZPmMCAAEvAg2","title":"Manage chat history","pathname":"/cortex-cloud-runtime-security/agentic-assistant-chat/agentic-assistant-chat/manage-chat-history","siteSpaceId":"sitesp_Lgqaz","description":"Manage and navigate your past chats with the Cortex Agentic Assistant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Agentic Assistant chat"},{"label":"Agentic Assistant chat"}]},{"id":"d6D1po68IQT29G6I0BIs","title":"Monitor dashboards and reports","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Monitor security data and share insights with dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"}]},{"id":"XcHyRcUiJG7lVOsLEWAN","title":"Overview of dashboards and reports","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Learn the key concepts, interfaces, types, and widgets for dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"yjxSB3V7TLJMimMzpeP9","title":"Dashboard interface basics","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-interface-basics","siteSpaceId":"sitesp_Lgqaz","description":"Navigate dashboard layouts, controls, and common actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"MjPriP61qb1kk6Sv7Z3A","title":"Dashboard types","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-types","siteSpaceId":"sitesp_Lgqaz","description":"Understand available dashboard types and their use cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"E2uoHu6mgAhD6SLExGjR","title":"Report basics","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/report-basics","siteSpaceId":"sitesp_Lgqaz","description":"Learn how reports present dashboard data for distribution and review.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"cayM3fSqcj9r9DNEhXrr","title":"Widget Library","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/widget-library","siteSpaceId":"sitesp_Lgqaz","description":"Browse available widgets for visualizing security data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"asMNtxIQhyCn694s38nP","title":"Access and visibility for dashboards and reports","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Control access, visibility, and sharing for dashboards, reports, and widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"zYnRnN7XOdPOkdtJ9ChA","title":"Visibility settings","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/visibility-settings","siteSpaceId":"sitesp_Lgqaz","description":"Configure who can view dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"bg1nGZ8w6XQSrVtNaumR","title":"Access to widgets","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-to-widgets","siteSpaceId":"sitesp_Lgqaz","description":"Control access to widgets used in dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"j7sCKLNcbAe03AZZ9Z7b","title":"Sharing icons","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/sharing-icons","siteSpaceId":"sitesp_Lgqaz","description":"Understand sharing icons and their visibility indicators.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"yELnCLYxuSZr8D40BJ2Z","title":"Access and sharing cheat sheet","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-and-sharing-cheat-sheet","siteSpaceId":"sitesp_Lgqaz","description":"Reference dashboard and report access and sharing options.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"yWIKbJD2W05AuIN1ylB7","title":"Manage dashboards and reports","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Manage dashboard and report content, ownership, sharing, and notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"lqxhabkn9BVxvBYvAzLK","title":"Dashboard Manager","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/dashboard-manager","siteSpaceId":"sitesp_Lgqaz","description":"Use Dashboard Manager to organize and manage dashboards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"n9iR0cfm0WGJ98rzHGEd","title":"Reports","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/reports","siteSpaceId":"sitesp_Lgqaz","description":"View, manage, and distribute report templates and generated reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"zzgIKPBqyBEy7hFWQyoY","title":"Duplicate dashboards and reports","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/duplicate-dashboards-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Duplicate dashboards and reports to reuse existing configurations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"NKsCd9v4AZ37625MasNL","title":"Share custom dashboards and report templates","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/share-custom-dashboards-and-report-templates","siteSpaceId":"sitesp_Lgqaz","description":"Share custom dashboards and report templates with other users.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"rznQH3cfQJErFQdZaCSu","title":"Change ownership to dashboards and report templates","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/change-ownership-to-dashboards-and-report-templates","siteSpaceId":"sitesp_Lgqaz","description":"Transfer ownership of dashboards and report templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"8lRyDlr8DJ4PedFJw0nE","title":"Import and export dashboards and report templates","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/import-and-export-dashboards-and-report-templates","siteSpaceId":"sitesp_Lgqaz","description":"Import and export dashboards and report templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"yISyW7UhpaZmCyF4P1qk","title":"Configure the notification rule for a failed report","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/configure-the-notification-rule-for-a-failed-report","siteSpaceId":"sitesp_Lgqaz","description":"Configure notifications for failed report generation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"ZAyHk1wvkL7E0WUSZ0sN","title":"Deleted content","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/deleted-content","siteSpaceId":"sitesp_Lgqaz","description":"Restore or permanently remove deleted dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"6P3YvsJ82K3Gciyuoy4Z","title":"Create dashboards","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/create-dashboards","siteSpaceId":"sitesp_Lgqaz","description":"Create dashboards that visualize security data and operational insights.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"JyUrlB8souB2v5ZmH3JW","title":"Create a dashboard","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/create-dashboards/create-a-dashboard","siteSpaceId":"sitesp_Lgqaz","description":"Create and configure a dashboard for your security data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Create dashboards"}]},{"id":"JNIERob4lfQiK92Gi9Dx","title":"Create reports","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/create-reports","siteSpaceId":"sitesp_Lgqaz","description":"Create report templates to share dashboard insights.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"JnUK0HK0kwgeDzn8Eg2s","title":"Create a report template from scratch","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/create-reports/create-a-report-template-from-scratch","siteSpaceId":"sitesp_Lgqaz","description":"Create a custom report template from scratch.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Create reports"}]},{"id":"CKwuKBdixNmDzgjVFPKk","title":"Advanced configuration","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration","siteSpaceId":"sitesp_Lgqaz","description":"Configure custom widgets, filters, and drilldowns for dashboards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"7jMtvua87KBwAgA3gaMB","title":"Create custom widgets","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets","siteSpaceId":"sitesp_Lgqaz","description":"Create custom widgets to display tailored dashboard data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"RCoVD9G8Ty16Uq3ph21w","title":"Create widgets using AI","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-widgets-using-ai","siteSpaceId":"sitesp_Lgqaz","description":"Use AI to create custom dashboard widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"Q8HaTqIJbnsKpBjEuY2V","title":"Create XQL widgets","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-xql-widgets","siteSpaceId":"sitesp_Lgqaz","description":"Create widgets that visualize results from XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"dXDsNTp6RUUTpkvH8TPb","title":"Add parameters to a custom XQL widget","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/add-parameters-to-a-custom-xql-widget","siteSpaceId":"sitesp_Lgqaz","description":"Add parameters that let viewers filter custom XQL widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"lve6LwZ4PU4qKPrjIRBZ","title":"Create script-based widgets","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-script-based-widgets","siteSpaceId":"sitesp_Lgqaz","description":"Create widgets that use scripts to retrieve and display data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"CwJo1mcrqQNb21TgElpy","title":"Configure global filters","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/configure-global-filters","siteSpaceId":"sitesp_Lgqaz","description":"Configure dashboard-wide filters that update multiple widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"iakYwRoJRYBDT4L2t9YB","title":"Configure drilldowns","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/configure-drilldowns","siteSpaceId":"sitesp_Lgqaz","description":"Configure drilldowns that open detailed data from dashboard widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"glLaNcfVCYlwpXh85HBx","title":"Dashboard reference","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference","siteSpaceId":"sitesp_Lgqaz","description":"Reference dashboard features, system dashboards, and Command Center views.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"sdrVF5h5cIK6hHIViIwX","title":"Command Center reference","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/command-center-reference","siteSpaceId":"sitesp_Lgqaz","description":"Reference Command Center dashboards and their available data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"Es9ddUhvcKAnGqy2oTq8","title":"Cortex Agentic Assistant dashboard","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-agentic-assistant-dashboard","siteSpaceId":"sitesp_Lgqaz","description":"Monitor Cortex Agentic Assistant activity and usage with its dashboard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"BUHJBYYHWSxfl27vgk3j","title":"Cortex Cloud Command Center","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-cloud-command-center","siteSpaceId":"sitesp_Lgqaz","description":"Monitor key security operations and posture metrics in Command Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"0En5hs5ARApSZHofUWtK","title":"System dashboards","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/system-dashboards","siteSpaceId":"sitesp_Lgqaz","description":"View built-in dashboards for consumption and cloud security operations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"4XAeaImjFZsp5dzm95zc","title":"Cortex Cloud Consumption","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cortex-cloud-consumption","siteSpaceId":"sitesp_Lgqaz","description":"Monitor Cortex Cloud consumption and usage metrics.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"qnouLDUC9H7LJq9YMOK7","title":"Cloud Security Operations","pathname":"/cortex-cloud-runtime-security/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cloud-security-operations","siteSpaceId":"sitesp_Lgqaz","description":"Monitor cloud security operations, risks, and remediation progress.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"BWOF8IishMNgoc0iDFid","title":"Learn about the Discovery Engine","pathname":"/cortex-cloud-runtime-security/discovery-engine/discovery-engine","siteSpaceId":"sitesp_Lgqaz","description":"Discover cloud assets and keep the Unified Asset Inventory current.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Discovery Engine"}]},{"id":"kDMgYoPzKaQB1qa1kuPT","title":"What is Cortex Cloud AI Security?","pathname":"/cortex-cloud-runtime-security/cortex-cloud-ai-security/what-is-cortex-cloud-ai-security","siteSpaceId":"sitesp_Lgqaz","description":"A basic overview of the Cortex Cloud AI Security overview page, assets inventory, risks, and benefits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"PwGS2WUw6WWshBFir3Of","title":"Supported services in Cortex Cloud AI Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-ai-security/supported-services-in-cortex-cloud-ai-security","siteSpaceId":"sitesp_Lgqaz","description":"A list of platforms and services that are compatible with Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"cpYmtqtOBx4QgZY2VrK1","title":"Cortex Cloud AI Security concepts","pathname":"/cortex-cloud-runtime-security/cortex-cloud-ai-security/cortex-cloud-ai-security-concepts","siteSpaceId":"sitesp_Lgqaz","description":"Basic concepts of Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"XSDIlZLiR56q8Qw6Z8ek","title":"Cortex Cloud AI Security use cases","pathname":"/cortex-cloud-runtime-security/cortex-cloud-ai-security/cortex-cloud-ai-security-use-cases","siteSpaceId":"sitesp_Lgqaz","description":"Learn about use cases that are relevant for Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"4QW2ai9AHb378Qu29iVG","title":"How to perform advanced AI Security investigations using XQL","pathname":"/cortex-cloud-runtime-security/cortex-cloud-ai-security/how-to-perform-advanced-ai-security-investigations-using-xql","siteSpaceId":"sitesp_Lgqaz","description":"Working with datasets in Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"uWIcSkaaJj9dl9o1emYu","title":"About Cortex Cloud Application Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-application-security/about-cortex-cloud-application-security","siteSpaceId":"sitesp_Lgqaz","description":"Explore application security use cases, components, and licensing requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Application Security"}]},{"id":"GS3HRUmuYwhbFlZJJNPB","title":"Code-to Cloud","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"}]},{"id":"CR0QbXpbWJKoWJWAedtw","title":"How the C2C engine works","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/how-the-c2c-engine-works","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"M4xMIhyiHeQOsR1CcCT9","title":"Identify and investigate gap","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/identify-and-investigate-gap","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"h52q6UMI2DZHpuBP0NKb","title":"Remediation workflows","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/execute-remediation-workflows","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"tQvDPObAtDRarms2Yetu","title":"The Coverage dashboard","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/the-coverage-dashboard","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"OsyJmDpLGK7NAXxKLKe0","title":"C2C in Unified Asset Inventory","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"4kRrjxkpXsUMX3DCRaPu","title":"Reference A: Lineage filtering matrix","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory/reference-a-lineage-filtering-matrix","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"C2C in Unified Asset Inventory"}]},{"id":"Xfpvr2AeuIvmpk8TWZ2U","title":"Reference B: Essential filtering rules","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory/reference-b-essential-filtering-rules","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"C2C in Unified Asset Inventory"}]},{"id":"shmh8nF5vPIyNv93UcHc","title":"Reference C: Technical background","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory/reference-c-technical-background","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"C2C in Unified Asset Inventory"}]},{"id":"lsRnCYURammTw2XFweYa","title":"C2C tab (asset level)","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/c2c-tab-asset-level","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"3R6KEVOYfpb3Qp7BsMox","title":"C2C tab (app level)","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/c2c-tab-app-level","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"smRZfUVBTT6aDcmNDRoo","title":"Agentix for C2C","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/agentix-for-c2c","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"meLWys2KkErm3rsPYSTW","title":"Investigate issues with C2C","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/investigate-issues-with-c2c","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"pbcvwFs0zAdl3ksRIogD","title":"C2C in ASPM Command Center","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/c2c-in-aspm-command-center","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"ay5kJTdZzMTU23jSU7RD","title":"Enforce policies with C2C","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/enforce-policies-with-c2c","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"rjmXheiM12hqeOVkV2im","title":"Troubleshooting","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/troubleshooting","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"COOBr7jljcKVw4heEypz","title":"FAQs","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/faqs","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"1sqaKumCQ0nuxSgvcNDI","title":"References","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/references","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"GVXcUQsYQS8vz0Jaq7v7","title":"Reference A: Supported integrations and asset stages","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/references/reference-a-supported-integrations-and-asset-stages","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"kWJ5KVHVdeQyHXHtdjNj","title":"Reference B: Coverage % calculation and configuration toggles","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/references/reference-b-coverage-calculation-and-configuration-toggles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"XwcHSZ3Sg26lzB4In0Gd","title":"Reference C: Dashboard filters by view","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/references/reference-c-dashboard-filters-by-view","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"5pkKHDxggb0VhFPaiiS1","title":"Reference D: Recommended actions by view and stage","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/references/reference-d-recommended-actions-by-view-and-stage","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"tP5MMqdks8mgjFFoyi56","title":"Reference E: Code-to-Cloud Coverage public API","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/references/reference-e-code-to-cloud-coverage-public-api","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"5S3pDLcB3FGkRICLQN6J","title":"Page Reference F: Call-to-action routing by asset type1","pathname":"/cortex-cloud-runtime-security/code-to-cloud/code-to-cloud/references/page-reference-f-call-to-action-routing-by-asset-type1","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"mZvpZkRBtKrkRkHrPffD","title":"Learn about Cloud ASM","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/cloud-asm-concepts","siteSpaceId":"sitesp_Lgqaz","description":"Learn about Cloud ASM, including scanning and network mapping.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"}]},{"id":"p5kADZFe6EJXiLwLGucF","title":"What is Cloud ASM?","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/cloud-asm-concepts/what-is-cloud-asm","siteSpaceId":"sitesp_Lgqaz","description":"Cloud ASM provides visibility into all the assets in your cloud infrastructure that are exposed to the internet.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"},{"label":"Learn about Cloud ASM"}]},{"id":"Bbri0ItqUrE0UCpdsHvF","title":"Scanning","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/cloud-asm-concepts/scanning","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud provides targeted scanning of customer networks from an attributed scanning infrastructure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"},{"label":"Learn about Cloud ASM"}]},{"id":"2klIgjVcHoJgIzPLuY0e","title":"Network mapping","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/cloud-asm-concepts/network-mapping","siteSpaceId":"sitesp_Lgqaz","description":"Through a network mapping process, Cortex Cloud discovers and attributes assets to organizations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"},{"label":"Learn about Cloud ASM"}]},{"id":"XlPh47MWE1RQPs1QskOX","title":"Enable Cloud ASM","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/enable-cloud-asm","siteSpaceId":"sitesp_Lgqaz","description":"Enable Cloud ASM data discovery to discover all your unmanaged cloud services and cloud services exposed to the internet.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"}]},{"id":"ewOOXLC0Dk5HxdtDXuB9","title":"Attack surface management detections","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/attack-surface-management-detections","siteSpaceId":"sitesp_Lgqaz","description":"Learn about Attack Surface Management detections, including rules and externally inferred CVEs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"}]},{"id":"nLuDHiN2zhZvP8xcdCpd","title":"Attack surface rules","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/attack-surface-management-detections/attack-surface-rules","siteSpaceId":"sitesp_Lgqaz","description":"Attack surface rules are used to identify risks in your attack surface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"},{"label":"Attack surface management detections"}]},{"id":"G0P8FaoHIhU4ibeKB2eb","title":"Externally inferred CVEs","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/attack-surface-management-detections/externally-inferred-cves","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"},{"label":"Attack surface management detections"}]},{"id":"y0ji8qxHRASC9C5rr4Gs","title":"Attack surface assets","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/attack-surface-assets","siteSpaceId":"sitesp_Lgqaz","description":"The assets discovered in an attack surface management scan are called attack surface assets or external surface assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"}]},{"id":"GKmFnFIYju07vDVEao3g","title":"Review your unmanaged cloud services","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/review-your-unmanaged-cloud-services","siteSpaceId":"sitesp_Lgqaz","description":"Review your unmanaged cloud services in your Attack Surface inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"}]},{"id":"jGuGiHagncaAxZGtJo1d","title":"Review unmanaged cloud issues","pathname":"/cortex-cloud-runtime-security/cloud-attack-surface-management/review-unmanaged-cloud-issues","siteSpaceId":"sitesp_Lgqaz","description":"View your unmanaged cloud issues, including service details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cloud attack surface management"}]},{"id":"mDVzfQp4mqna5G7cnwSB","title":"About network exposure detection","pathname":"/cortex-cloud-runtime-security/network-exposure-detection/network-exposure-detection","siteSpaceId":"sitesp_Lgqaz","description":"Identify, prioritize, and remediate internet, outbound, and lateral network exposure risks in public cloud environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"fVcZ1OcykhJvVkNJIU86","title":"What is Cloud Network Analyzer?","pathname":"/cortex-cloud-runtime-security/network-exposure-detection/what-is-cloud-network-analyzer","siteSpaceId":"sitesp_Lgqaz","description":"Understand how CNA identifies internet, outbound, and lateral exposure across cloud accounts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"S9hin3XWcKXz9LxCw5gO","title":"Internet exposure detection","pathname":"/cortex-cloud-runtime-security/network-exposure-detection/internet-exposure-detection","siteSpaceId":"sitesp_Lgqaz","description":"Learn how CNA detects publicly reachable cloud assets and validates exposure through external network scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"XojB7w31EZa96pOLpj45","title":"Outbound exposure detection","pathname":"/cortex-cloud-runtime-security/network-exposure-detection/outbound-exposure-detection","siteSpaceId":"sitesp_Lgqaz","description":"Learn about detecting workloads with unrestricted outbound internet access based on security configurations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"yULQsrfD96aBWnKXwKlf","title":"East-west exposure detection","pathname":"/cortex-cloud-runtime-security/network-exposure-detection/east-west-exposure-detection","siteSpaceId":"sitesp_Lgqaz","description":"Learn about workloads with unrestricted lateral access and the controls causing that exposure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"JU5utWFzc0oRCbjzvOE7","title":"Investigate an internet exposure","pathname":"/cortex-cloud-runtime-security/network-exposure-detection/investigate-an-internet-exposure","siteSpaceId":"sitesp_Lgqaz","description":"Investigate internet-exposed assets through Issues and Graph Search.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"WEaTWlSi9ojwbKwqS9zO","title":"Configure trusted IPs","pathname":"/cortex-cloud-runtime-security/network-exposure-detection/configure-trusted-ips","siteSpaceId":"sitesp_Lgqaz","description":"Configure trusted public IP ranges excluded from CNA internet exposure evaluations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Network exposure detection"}]},{"id":"ExaIdtYLjlJfJwG55FFs","title":"About Cortex Cloud Data Classification","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/cortex-cloud-data-classification","siteSpaceId":"sitesp_Lgqaz","description":"Discover how Cortex Cloud identifies and classifies sensitive data across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"gOUwexRgoatDRhnTbRIE","title":"How to create and validate a custom data pattern","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern","siteSpaceId":"sitesp_Lgqaz","description":"Create and validate custom patterns for identifying sensitive data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"5qvVpcVeQNbrPcNebvBn","title":"Custom data patterns: Guardrails and syntax guide","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern/custom-data-patterns-guardrails-and-syntax-guide","siteSpaceId":"sitesp_Lgqaz","description":"Review syntax requirements and guardrails for custom data patterns.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"},{"label":"How to create and validate a custom data pattern"}]},{"id":"SXcqAKw2G4g7MyjdGbjR","title":"How to disable and enable data patterns in Data Classification","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/how-to-disable-and-enable-data-patterns-in-data-classification","siteSpaceId":"sitesp_Lgqaz","description":"Enable or disable data patterns used to classify sensitive data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"q9tciguXE4ToYMs4kM30","title":"How to create and validate a custom data profile","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-profile","siteSpaceId":"sitesp_Lgqaz","description":"Create and validate custom profiles that combine data patterns.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"nrTc2SUw6rcW52hdalE8","title":"How to disable and enable data profiles in Cortex Cloud Data Classification","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/how-to-disable-and-enable-data-profiles-in-cortex-cloud-data-classification","siteSpaceId":"sitesp_Lgqaz","description":"Enable or disable data profiles used for data classification.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"i6lYg7TFyHp250YOku3G","title":"How to report a false positive in Cortex Cloud Data Classification","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/how-to-report-a-false-positive-in-cortex-cloud-data-classification","siteSpaceId":"sitesp_Lgqaz","description":"Report false positive data classifications to improve detection accuracy.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"2oYPxtPsWICp1khfoAnb","title":"Topic classification","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-classification/topic-classification","siteSpaceId":"sitesp_Lgqaz","description":"Classify data by topic to improve visibility and data protection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"6s2aBXrjmTbfmprUUZyr","title":"What is Cortex Data Security?","pathname":"/cortex-cloud-runtime-security/cortex-data-security/what-is-cortex-cloud-data-security","siteSpaceId":"sitesp_Lgqaz","description":"Learn about Cortex Data Security capabilities and benefits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Data Security"}]},{"id":"pBGVUWFyjcjTUzeaBYWh","title":"What is Cortex Cloud Identity Security?","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/what-is-cortex-cloud-identity-security","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud Identity Security can help you address the security challenges of managing identity in cloud environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"Kc7nunbClfN7rVnsfmZu","title":"Review and improve your Identity Security posture","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/review-and-improve-your-identity-security-posture","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to review and improve your Identity Security posture with the provided use case examples.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"ZBOIWaru6ZOP6yzni5lU","title":"How does Effective Permission Calculation work?","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/how-does-effective-permission-calculation-work","siteSpaceId":"sitesp_Lgqaz","description":"An explanation of how Effective Permission Calculation works in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"PSnez3yzoLg5IMblKHmL","title":"Cortex Cloud Identity Security functionality","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/cortex-cloud-identity-security-functionality","siteSpaceId":"sitesp_Lgqaz","description":"About the functionalities of Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"Y3bo9yEsEr8pgfjJc3ac","title":"Configure Cortex Cloud Identity Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/configure-cortex-cloud-identity-security","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"ufTfkekJD8ORqvOxDAlw","title":"Unified Human Identities","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/unified-human-identities","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"HJ6snUiBFmofKk8qvFxM","title":"Achieve the principle of least privilege access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/achieve-the-principle-of-least-privilege-access","siteSpaceId":"sitesp_Lgqaz","description":"Use Cortex Cloud Identity Security to achieve the principle of least privilege access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"jVS56qHg3Ijpq22YiAdd","title":"Explore permissions using the simple and advanced access tables","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/explore-permissions-using-the-simple-and-advanced-access-tables","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to explore permissions in Cortex Cloud Identity Security using the Simple and Advanced access tables.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"SrR75DkiNDKQe3XkdX3f","title":"Create a custom detection rule in Cortex Cloud Identity Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/create-a-custom-detection-rule-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to create a custom detection rule in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"Zw5bnplpXPs2pCpD5vYt","title":"Perform advanced Identity Security investigations using XQL","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/perform-advanced-identity-security-investigations-using-xql","siteSpaceId":"sitesp_Lgqaz","description":"Working with datasets in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"vBCs97yV5GV7zTOYSTWD","title":"Ingest logs and data from Okta","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about Ingesting logs and data from Okta for use in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"zDKRQRYoJLgxjFJpVfe9","title":"Enable inactive human identity logs on Azure in Cortex Cloud Identity Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/enable-inactive-human-identity-logs-on-azure-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_Lgqaz","description":"Configuration information for enabling inactive human identity logs on Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"EusDHXPlwKxqPs4hfkRA","title":"Manage RBAC and SBAC in Cortex Cloud Identity Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-identity-security/manage-rbac-and-sbac-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_Lgqaz","description":"Working with RBAC and SBAC in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"pdAydw8aun4kgTf7PEWO","title":"SaaS Security","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security","siteSpaceId":"sitesp_Lgqaz","description":"SaaS Security delivers continuous visibility and control across SaaS identities, connected apps, and AI agents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"}]},{"id":"4DSjPWl5EAHdrBpi2cVG","title":"Setup SaaS Security","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/setup-saas-security","siteSpaceId":"sitesp_Lgqaz","description":"Get started with SaaS Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"t5yBHJ4D6Wa0Fl6PYqpX","title":"Onboard a Supported SaaS Application","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application","siteSpaceId":"sitesp_Lgqaz","description":"Onboard a supported SaaS application to track and monitor misconfigurations and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"BTSMkQJTMIJ73gnBAVra","title":"Onboard Aha.io","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-aha.io","siteSpaceId":"sitesp_Lgqaz","description":"Onboard Aha.io to track misconfigurations and monitor application compliance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"AFUcbtxdvz3nGx0AZYje","title":"Onboard Asana","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-asana","siteSpaceId":"sitesp_Lgqaz","description":"Connect an Asana instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"vF4E493FVOT87IucdQQ8","title":"Onboard Atlassian","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-atlassian","siteSpaceId":"sitesp_Lgqaz","description":"Connect an Atlassian instance to detect posture and compliance risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"MPK5T0w2KpneeJspG7eb","title":"Onboard Automox","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-automox","siteSpaceId":"sitesp_Lgqaz","description":"Connect an Automox  instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"8or6RUs06H6C5yGdDdeu","title":"Onboard Businessmap","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-businessmap","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Businessmap instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"TlvFYKQUaVAkysiHFmjj","title":"Onboard Celonis","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-celonis","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Celonis instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"EeQKHOOpLSzPKwmIrfuQ","title":"Onboard Cisco Duo","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-cisco-duo","siteSpaceId":"sitesp_Lgqaz","description":"Connect Cisco Duo instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"cCGRClj7HLxFWJCOyTpO","title":"Onboard Cisco Meraki","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-cisco-meraki","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Cisco Meraki instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"c9C6x92VOLp8tOVJMIbM","title":"Onboard ClickUp","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-clickup","siteSpaceId":"sitesp_Lgqaz","description":"Connect a ClickUp instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"JNNEMJ15jZHkRaZJ8DRC","title":"Onboard Contentful","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-contentful","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Contentful instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"IWMT7spKh2QaE52CULkJ","title":"Onboard Couchbase","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-couchbase","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Couchbase instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"CF4L4pZpHu4Ds6V6T3RY","title":"Onboard Coveo","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-coveo","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Coveo instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"C07KxOwYQzRi2E90KO8x","title":"Onboard Databricks","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-databricks","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Databricks instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"oP7mn1KBm0hy1QtD3kaU","title":"Onboard Datadog","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-datadog","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Datadog instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"rOuuzxa8GLOcMEBmIa1L","title":"Onboard Gainsight PX","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-gainsight-px","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Gainsight PX instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"p5KogsKcNcsm6JsGn3NS","title":"Onboard Grammarly","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-grammarly","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Grammarly instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"hPvsE0oPY4Y55POVIXEB","title":"Onboard Harness","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-harness","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Harness instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"7VoSHeHHNAext70DrbRs","title":"Onboard Intercom","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-intercom","siteSpaceId":"sitesp_Lgqaz","description":"Connect an Intercom instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"sD1fw9mSkJiRbBmed8Gv","title":"Onboard Jamf Pro","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-jamf-pro","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Jamf Pro instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"ueGHv27NzBVfT2lFvE34","title":"Onboard JumpCloud","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-jumpcloud","siteSpaceId":"sitesp_Lgqaz","description":"Connect a JumpCloud instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"UssAWKXqtX9xRiy5T1on","title":"Onboard Kustomer","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-kustomer","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Kustomer instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"yEUm44og3l7XFric9Dy1","title":"Onboard Microsoft Entra ID","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-microsoft-entra-id","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Microsoft Entra ID instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"BCT5HJdHkT8RZuOe7ww9","title":"Onboard Monday.com","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-monday.com","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Monday.com instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"0DLgFQzyvQZv35WBu2KT","title":"Onboard MongoDB Atlas","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-mongodb-atlas","siteSpaceId":"sitesp_Lgqaz","description":"Connect a MongoDB Atlas instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"ZJ061KiFQ4a0nGUNNG1Z","title":"Onboard MuleSoft","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-mulesoft","siteSpaceId":"sitesp_Lgqaz","description":"Connect a MuleSoft instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"eFP1qP6sRR4kdiVSKXK6","title":"Onboard Mural","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-mural","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Mural instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"gbNz6FdiSqrWVKnjD8gm","title":"Onboard Office 365","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-office-365","siteSpaceId":"sitesp_Lgqaz","description":"Connect an Office 365 instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"MWmvEdvZ5CP7Pj0yheTy","title":"Onboard Okta","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-okta","siteSpaceId":"sitesp_Lgqaz","description":"Connect an Okta instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"0VE4UIy9MryPfxCh6432","title":"Onboard PagerDuty","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-pagerduty","siteSpaceId":"sitesp_Lgqaz","description":"Connect a PagerDuty instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"cq303GbAea1M2M70Wabe","title":"Onboard Redis Labs","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-redis-labs","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Redis Labs instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"WrR3xw9dluq87w9SFUTx","title":"Onboard Salesforce","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-salesforce","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Salesforce instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"EnKcxMxdz6rA1B3wKPWk","title":"Onboard SAP Ariba","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-sap-ariba","siteSpaceId":"sitesp_Lgqaz","description":"Connect a SAP Ariba instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"sV102M8hHevICPMOv6nQ","title":"Onboard Sentry","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-sentry","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Sentry instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"0HkR781THalKyy7JN9at","title":"Onboard ServiceNow","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-servicenow","siteSpaceId":"sitesp_Lgqaz","description":"Connect a ServiceNow instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"Joo4XsMaQaWnXupDIwcx","title":"Onboard Shopify","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-shopify","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Shopify instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"xljW8EwfpgpzdtYxJcsx","title":"Onboard Slack Enterprise","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-slack-enterprise","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Slack instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"hsWTmOMxcjfdVU5jWaYM","title":"Onboard Sumo Logic","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-sumo-logic","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Sumo Logic instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"9b9gSMQYmCypSvOvZlTu","title":"Onboard Workday","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-workday","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Workday instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"cSwS6aCKu7rVSP2YNR1n","title":"Onboard Wrike","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-wrike","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Wrike instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"zKqYmPKOxDxttWJ2UPk7","title":"Onboard YouTrack","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/onboard-a-supported-saas-application/onboard-youtrack","siteSpaceId":"sitesp_Lgqaz","description":"Connect a YouTrack instance to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"VtqYjyn7u4wFR1tP7cEX","title":"SaaS Security Overview","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-security-overview","siteSpaceId":"sitesp_Lgqaz","description":"This dashboard aggregates and presents security data from all four core SaaS Security pillars including: SSPM (Posture), SaaS Identity Security, SaaS Data Security, and SaaS Agent Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"CAJMXON2pbty7yCaQ6jr","title":"SaaS Security Checks","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-security-checks","siteSpaceId":"sitesp_Lgqaz","description":"The dashboard captures key metrics to help you remediate SaaS assets at risk","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"2ZWKPIEYxErpM8J5yUYW","title":"Provider Instances Security Check","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/provider-instances-security-check","siteSpaceId":"sitesp_Lgqaz","description":"This page consolidates application security posture data across all onboarded instances","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"aNIHShTnhWx3jgkD1qio","title":"Detection Rules","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/detection-rules","siteSpaceId":"sitesp_Lgqaz","description":"View Cloud Security Posture Rules","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"b1d0h8ET49l1QiulRvlJ","title":"Remediation Actions","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/remediation-actions","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about actions available to remediate Issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"hxoCeanF6rg3CyASHn8n","title":"Create and monitor tickets","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/create-and-monitor-tickets","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about creating a synced ticket to remediate an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"TaWUlAsuiyQg9jj7iXLi","title":"SaaS AI Agent Security","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security","siteSpaceId":"sitesp_Lgqaz","description":"SaaS AI Agent Security helps you secure AI agents deployed across enterprise SaaS environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"}]},{"id":"tQGgs6gIi1zSVMskFx4e","title":"Setup SaaS Security for AISPM","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/setup-saas-security-for-aispm","siteSpaceId":"sitesp_Lgqaz","description":"Get started with SaaS Agent Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"NH9XFUT5gq7suLNlkJP5","title":"Onboard SaaS AI Agents","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to onboard specific AI Agents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"hUQKlccB0CWn1gaV8P7J","title":"Onboard Atlassian Rovo","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-atlassian-rovo","siteSpaceId":"sitesp_Lgqaz","description":"Connect Atlassian Rovo to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"X3Tp0eZNQPsPaghkLGWi","title":"Onboard Box AI Agents","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-box-ai-agents","siteSpaceId":"sitesp_Lgqaz","description":"Connect Box AI Agents to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"fwGGnOTBYzBIfldAC3xx","title":"Onboard ChatGPT Enterprise","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-chatgpt-enterprise","siteSpaceId":"sitesp_Lgqaz","description":"Connect Box AI Agents to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"UhyOKcEcrU4bVcxEAc6k","title":"Onboard Cursor Enterprise","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-cursor-enterprise","siteSpaceId":"sitesp_Lgqaz","description":"Connect Cursor Enterprise to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"JcyoCQWrB6gAuKUIF88A","title":"Onboard Gemini Enterprise","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-gemini-enterprise","siteSpaceId":"sitesp_Lgqaz","description":"Connect Gemini Enterprise to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"RiCbBOSlPVl2YJaH9Rgp","title":"Onboard M365 Copilot","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-m365-copilot","siteSpaceId":"sitesp_Lgqaz","description":"Connect M365 Copilot to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"cwNcGTBIrsyikF1QmcIJ","title":"Onboard Microsoft Copilot Studio","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-microsoft-copilot-studio","siteSpaceId":"sitesp_Lgqaz","description":"Connect Microsoft Copilot Studio to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"5WDsq6PiopSRa3BjcZEl","title":"Onboard Service Now","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-service-now","siteSpaceId":"sitesp_Lgqaz","description":"Connect Service Now to SaaS Agent Security to gain total visibility and control over your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"mtPphbCfHYAK99XX1Os6","title":"Manage SaaS AI Agents","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"JCbBoc65bhW5DL0ONPXq","title":"View AI Agents","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-ai-agents","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"BSEDxXr8FO5Ao9i4j0Ly","title":"View Datasets","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-datasets","siteSpaceId":"sitesp_Lgqaz","description":"The Datasets view provides a detailed look at the Inference Datasets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"yaRWCxiI2TepUK2H6TIB","title":"View Agent Tools","pathname":"/cortex-cloud-runtime-security/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-agent-tools","siteSpaceId":"sitesp_Lgqaz","description":"SaaS Agent Tools go beyond traditional scans that  focus on an inventory of previously vendor vetted, underlying tools.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Saas Security"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"npbM2HlizEzDcFEeKaRu","title":"Vulnerability management in Cortex Cloud","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-management-in-cortex-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Vulnerability management helps you identify, assess, prioritize, and remediate security vulnerabilities across your entire IT infrastructure, including endpoints, code, and cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"Gv2V8hDZqQrzNfSpj0WG","title":"Cortex Cloud vulnerability concepts","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-management-in-cortex-cloud/cortex-cloud-vulnerability-concepts","siteSpaceId":"sitesp_Lgqaz","description":"Familiarize yourself with Cortex Cloud vulnerability concepts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability management in Cortex Cloud"}]},{"id":"t8RAIR04KfMcmoB71ifJ","title":"Vulnerability Management dashboard","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-management-in-cortex-cloud/vulnerability-management-dashboard","siteSpaceId":"sitesp_Lgqaz","description":"Visualize your most pressing risks, changes to risk over time, and remediation progress on the Vulnerability Management dashboard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability management in Cortex Cloud"}]},{"id":"0SiJjHT1spUFm7SfpWKN","title":"Cortex Vulnerability Risk Score","pathname":"/cortex-cloud-runtime-security/vunerability-management/cortex-vulnerability-risk-score","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud calculates and displays CVRS to prioritize vulnerability remediation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"lWAciv5sOlKPup5XEgWA","title":"Vulnerability policies","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-policies","siteSpaceId":"sitesp_Lgqaz","description":"A vulnerability policy defines the action you want to take for a specific set of vulnerability findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"aQHSGWNIeEVGnDp0RZSd","title":"Create a vulnerability policy","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-policies/create-a-vulnerability-policy","siteSpaceId":"sitesp_Lgqaz","description":"Create vulnerability policies that create issues or prevent findings based on defined conditions and scope.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"tFSWtQaHwBwZeKkijyhb","title":"Update the Ignored CVEs, Asset Groups, and Assets policy","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-policies/update-the-ignored-cves-asset-groups-and-assets-policy","siteSpaceId":"sitesp_Lgqaz","description":"Update the ignored CVEs, asset groups, and assets policy to prevent matching vulnerability findings from creating issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"ZJLy3sMUuBuh8guogZJO","title":"Modify a vulnerability policy","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-policies/modify-a-vulnerability-policy","siteSpaceId":"sitesp_Lgqaz","description":"Update issue-creation and prevention policies through the policy wizard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"CWO9w2JJ8PyuAQ0BDL9b","title":"Configure a block grace period","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-policies/configure-a-block-grace-period","siteSpaceId":"sitesp_Lgqaz","description":"Configure remediation grace periods that delay Kubernetes deployment blocks or build failures after vulnerability disclosure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"sND3GGXjfcAE8zLTS9WF","title":"Enable or disable a vulnerability policy","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-policies/enable-or-disable-a-vulnerability-policy","siteSpaceId":"sitesp_Lgqaz","description":"Enable or disable issue-creation and prevention policies to control actions for matching findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"8EkfRMdjahUYmMcSMS3W","title":"Investigate and remediate vulnerabilities","pathname":"/cortex-cloud-runtime-security/vunerability-management/investigate-and-remediate-vulnerabilities","siteSpaceId":"sitesp_Lgqaz","description":"Investigate, prioritize, and remediate vulnerabilities through issues, findings, and vulnerable assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"6y3H5tI5XNeCBZuWtUDb","title":"Vulnerability Intelligence","pathname":"/cortex-cloud-runtime-security/vunerability-management/vulnerability-intelligence","siteSpaceId":"sitesp_Lgqaz","description":"Vulnerability Intelligence is an in-product, real-time feed that provides vulnerability data and threat intelligence from a variety of certified upstream sources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"uI1aaLZxZtBbS0CVr16l","title":"Emerging Vulnerabilities","pathname":"/cortex-cloud-runtime-security/vunerability-management/emerging-vulnerabilities","siteSpaceId":"sitesp_Lgqaz","description":"The Emerging Vulnerabilities page is a a centralized hub for security teams to research, assess, and respond to global, emergent threats and zero-day exploits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"Z7ZXW4DwQOdA0RMSV1at","title":"Recast CVSS scores and CVSS severities","pathname":"/cortex-cloud-runtime-security/vunerability-management/recast-cvss-scores-and-cvss-severities","siteSpaceId":"sitesp_Lgqaz","description":"Customize CVSS scores and CVSS severities in the platform to align your risk management approach with your organizational context and priorities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"8luGnFgGKaXfGDSpvf5L","title":"Registry scanning","pathname":"/cortex-cloud-runtime-security/registry-scanning/registry-scanning","siteSpaceId":"sitesp_Lgqaz","description":"Learn about Registry scanning capability in Cortex Cloud","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"}]},{"id":"LaCODSAMq24kEcD5SxiR","title":"Supported container registry integrations","pathname":"/cortex-cloud-runtime-security/registry-scanning/registry-scanning/supported-container-registry-integrations","siteSpaceId":"sitesp_Lgqaz","description":"Learn about supported container registry integrations in Cortex Cloud","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"},{"label":"Registry scanning"}]},{"id":"gqBQy8euHunava3MYSj0","title":"How Container Registry Scanning Works","pathname":"/cortex-cloud-runtime-security/registry-scanning/registry-scanning/how-container-registry-scanning-works","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud discovers, scans, and evaluates container images in onboarded registries to identify and continuously monitor security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"},{"label":"Registry scanning"}]},{"id":"A0Ijw5H5JXv2jLDWSx31","title":"Scan re-evaluation process","pathname":"/cortex-cloud-runtime-security/registry-scanning/registry-scanning/scan-re-evaluation-process","siteSpaceId":"sitesp_Lgqaz","description":"Understand how Cortex Cloud re-evaluates container registry scan results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"},{"label":"Registry scanning"}]},{"id":"8VFw1tkbh2rnYAXSoQUb","title":"Configure registry scanning for cloud accounts","pathname":"/cortex-cloud-runtime-security/registry-scanning/configure-registry-scanning-for-cloud-accounts","siteSpaceId":"sitesp_Lgqaz","description":"Configure Cortex Cloud to scan container registries in connected cloud accounts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"}]},{"id":"9uv8uS4ee1obPVbKYkyQ","title":"Modify the container registry scanning scope","pathname":"/cortex-cloud-runtime-security/registry-scanning/configure-registry-scanning-for-cloud-accounts/modify-the-container-registry-scanning-scope","siteSpaceId":"sitesp_Lgqaz","description":"Modify the Cortex Cloud container registry scanning scope for cloud accounts and registries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"},{"label":"Configure registry scanning for cloud accounts"}]},{"id":"YsBhWSI2rGIAwixlZD8l","title":"Configure registry scanning for third party integrations","pathname":"/cortex-cloud-runtime-security/registry-scanning/configure-registry-scanning-for-third-party-integrations","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to configure Cortex Cloud to scan container registries in third-party integrations","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"}]},{"id":"yYjfmSx3iRz0y2Gl8xyG","title":"Manage registry scanning with APIs","pathname":"/cortex-cloud-runtime-security/registry-scanning/manage-registry-scanning-with-apis","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to onboard and manage registry scanning programatically with APIs for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Registry Scanning"}]},{"id":"oZWrgpmlrT81a6rmEtWz","title":"About Rules and Policies","pathname":"/cortex-cloud-runtime-security/rules-and-policies/about-rules-and-policies","siteSpaceId":"sitesp_Lgqaz","description":"Discover how Cortex Cloud detects security risks across your infrastructure, workloads, and container images, and how policies automate the response.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"o45QfHu7CC6mGQwgGBpz","title":"Cloud security rules and policies","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies","siteSpaceId":"sitesp_Lgqaz","description":"Learn how cloud security rules and policies detect threats and misconfigurations across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"4PO64uvn6PIpzRRgsxmD","title":"Cloud security rules","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/cloud-security-rules","siteSpaceId":"sitesp_Lgqaz","description":"Learn about out-of-the-box and custom cloud security rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"VvgWQ5u8sf7GMg4YLeyq","title":"Cloud security policies","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/cloud-security-policies","siteSpaceId":"sitesp_Lgqaz","description":"Learn about cloud security policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"AO4jGw108YARpmmYq4Od","title":"Create and manage cloud security rules","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage custom cloud security rules for detecting cloud security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"71Y0TdSi2NlCAEJB8RDR","title":"Create a graph rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-graph-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create custom graph detection rules that identify risky relationships and attack paths.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"ZcjEhUV3KJnDWmBldPKF","title":"Create a configuration rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-configuration-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create configuration rules that identify cloud resource misconfigurations and policy violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"BFOCvI5jlKdZdSRMyoKQ","title":"Create a data rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-data-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create data rules to detect data risks, malware, and classification issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"ZaampmIHmUnTtMRnVGY3","title":"Create an identity rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-identity-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create identity rules to detect excessive or unused cloud permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"FlQDLaKfnORRABRfqu3S","title":"Create a network exposure rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-network-exposure-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create network exposure rules to detect risky inbound, outbound, and east-west access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"FsYsu9H9UgxsS4vrFdLh","title":"Create an AI rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-ai-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create AI rules to detect risks and misconfigurations across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"JRIj3gwO84JKtAB15jqj","title":"Create an attack path (legacy) rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-attack-path-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create attack path rules that identify breach paths to high-value cloud assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"ylI2OJXnOQ48Um7RINNb","title":"View cloud security rule status","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/view-cloud-security-rule-status","siteSpaceId":"sitesp_Lgqaz","description":"View, filter, and sort the status of cloud security rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"7ADO8RcWqTxg4ZPM1XDh","title":"Edit a cloud security rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/edit-a-cloud-security-rule","siteSpaceId":"sitesp_Lgqaz","description":"Edit cloud security rules and understand how changes affect related issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"0usRrxmndGrYp31qEtBk","title":"Enable or disable a rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/enable-or-disable-a-rule","siteSpaceId":"sitesp_Lgqaz","description":"Enable or disable cloud security rules to control when they evaluate assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"fqwrVIMPto9uM0FDoTjo","title":"Use an existing rule to create a new one","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/use-an-existing-rule-to-create-a-new-one","siteSpaceId":"sitesp_Lgqaz","description":"Duplicate an existing cloud security rule and customize it for your needs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"HXSMyiefjoKumgWm1Mc7","title":"Delete a custom cloud security rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/delete-a-custom-cloud-security-rule","siteSpaceId":"sitesp_Lgqaz","description":"Delete custom cloud security rules that are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"Ct8zgqRmSYSikxhEJghZ","title":"Create and manage cloud security policies","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage cloud security policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"0j4pBpdpuC1vyvgFs1BP","title":"Create a cloud security policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/create-a-cloud-security-policy","siteSpaceId":"sitesp_Lgqaz","description":"Create a cloud security policy that applies security rules to selected cloud assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"GKnIL7c6ABYrRJXgJtOb","title":"Edit a cloud security policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/edit-a-cloud-security-policy","siteSpaceId":"sitesp_Lgqaz","description":"Edit cloud security policies to update their details, rules, and scopes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"kjuiI3aa1PQauszxsH1r","title":"Enable or disable a policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/enable-or-disable-a-policy","siteSpaceId":"sitesp_Lgqaz","description":"Enable or disable custom and default cloud security policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"P9JbqrEvL1N92pVsfnGN","title":"Use an existing policy to create a new one","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/use-an-existing-policy-to-create-a-new-one","siteSpaceId":"sitesp_Lgqaz","description":"Clone an existing cloud security policy and tailor it to your needs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"Q0U6eqk7LpXsGHC1D1x1","title":"Delete a custom cloud security policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/delete-a-custom-cloud-security-policy","siteSpaceId":"sitesp_Lgqaz","description":"Remove custom cloud security policies that are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"u0vBLIDrw04HQgWcA8Bz","title":"Cloud Workload Policies and Rules","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules","siteSpaceId":"sitesp_Lgqaz","description":"Learn how cloud workload policies and rules protect your workloads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"UCOoGczS1sw7V58qHXiw","title":"How policies and rules work together","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/how-policies-and-rules-work-together","siteSpaceId":"sitesp_Lgqaz","description":"Understand how policies apply cloud workload rules to your workloads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"}]},{"id":"FHRB3mWQ4MvHASUbQx0L","title":"Cloud workload policies","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage policies that apply protection rules to cloud workloads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"}]},{"id":"ccCnnSFnkWylygXbaLCv","title":"Types of cloud workload policies","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies","siteSpaceId":"sitesp_Lgqaz","description":"Learn about cloud workload policy types and their use cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"CJFPbFHBKClKNGBPtwIa","title":"Trusted image cloud workload policies","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies/types-of-cloud-workload-policies","siteSpaceId":"sitesp_Lgqaz","description":"Use trusted image policies to control which container images can run.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"},{"label":"Types of cloud workload policies"}]},{"id":"cBwA7Q3F4tVqU79hpyHj","title":"Cloud Workload Policies page","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page","siteSpaceId":"sitesp_Lgqaz","description":"Use the Cloud Workload Policies page to view and manage policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"ZKAxWSS32rUEwoV1qlnS","title":"Enable or disable a cloud workload policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/enable-or-disable-a-cloud-workload-policy","siteSpaceId":"sitesp_Lgqaz","description":"Enable or disable a cloud workload policy to control its enforcement.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"MSIFmjrr4dTktI5g5faP","title":"Create a cloud workload policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/create-a-cloud-workload-policy","siteSpaceId":"sitesp_Lgqaz","description":"Create a cloud workload policy to apply rules to selected workloads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"KzRRxvuPDc51VVehU90i","title":"Use an existing policy to create a new cloud workload policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/use-an-existing-policy-to-create-a-new-cloud-workload-policy","siteSpaceId":"sitesp_Lgqaz","description":"Duplicate an existing policy and customize it for new workload requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"19B0X2sXZEnChw3eqVem","title":"Edit a cloud workload policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/edit-a-cloud-workload-policy","siteSpaceId":"sitesp_Lgqaz","description":"Edit a cloud workload policy to update its rules and scope.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"fSQjPC4beXN2UmSOV8X9","title":"Delete a cloud workload policy","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/delete-a-cloud-workload-policy","siteSpaceId":"sitesp_Lgqaz","description":"Delete cloud workload policies that are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"uuvlar8Ie8TzwYkXwQDQ","title":"Cloud workload preventive action","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-preventive-action","siteSpaceId":"sitesp_Lgqaz","description":"Understand preventive actions that block noncompliant cloud workloads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload policies"}]},{"id":"bM5Qpu7VxfhxVo6sVHfT","title":"Cloud workload rules","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage rules that detect and prevent cloud workload risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"}]},{"id":"msfVf1BHvPuxtjg5GaGU","title":"Default (pre-defined) rules","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/default-pre-defined-rules","siteSpaceId":"sitesp_Lgqaz","description":"Learn about built-in cloud workload rules and their detection coverage.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"}]},{"id":"Rv0nZBmazqQJXAQuM8Ac","title":"Custom (user-defined) rules","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/custom-user-defined-rules","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage custom rules for cloud workload detection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"}]},{"id":"xJtbDTkMkmSEEV9tiPSB","title":"Cloud Workload Rules page","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page","siteSpaceId":"sitesp_Lgqaz","description":"Use the Cloud Workload Rules page to view and manage rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"}]},{"id":"TwTvHkbefBwLCkq8BJiO","title":"Create a new custom detection rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create a custom detection rule for cloud workload security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"}]},{"id":"cXBoTp0NMJmIzOIP20rg","title":"Configure Agentless disk scan rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule/configure-agentless-disk-scan-rule","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"},{"label":"Create a new custom detection rule"}]},{"id":"avFcGRodTgeO1dhaL2hH","title":"Configure Kubernetes connector rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule/configure-kubernetes-connector-rule","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"},{"label":"Create a new custom detection rule"}]},{"id":"IAVgtA6q6AnYPo63HiXb","title":"Configure XDR agent rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule/configure-xdr-agent-rule","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"},{"label":"Create a new custom detection rule"}]},{"id":"jO9XJd0RZitDGwtCBbNX","title":"Use an existing rule to create a new custom detection rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/use-an-existing-rule-to-create-a-new-custom-detection-rule","siteSpaceId":"sitesp_Lgqaz","description":"Duplicate an existing rule and customize it for new detection needs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"}]},{"id":"mCOIV6I8KnE5VjyOmEqY","title":"Edit a custom detection rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/edit-a-custom-detection-rule","siteSpaceId":"sitesp_Lgqaz","description":"Edit a custom detection rule to update its detection logic and scope.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"}]},{"id":"CNJhsQ0OKkMM1rUoymbP","title":"Delete a custom detection rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/delete-a-custom-detection-rule","siteSpaceId":"sitesp_Lgqaz","description":"Delete custom detection rules that are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud Workload Policies and Rules"},{"label":"Cloud workload rules"}]},{"id":"NdOWNM7er9DTIItwnnSq","title":"Base image rules","pathname":"/cortex-cloud-runtime-security/rules-and-policies/base-images-rule","siteSpaceId":"sitesp_Lgqaz","description":"Learn about how base image rules identify and manage approved container images.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"wx1XigBwzm2qAj9AX9xj","title":"Create a base image rule","pathname":"/cortex-cloud-runtime-security/rules-and-policies/base-images-rule/create-a-base-images-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create a base image rule to define trusted container image criteria.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Base image rules"}]},{"id":"SkTAeuCHxyFXmdJVsFYh","title":"Find the base image for an asset","pathname":"/cortex-cloud-runtime-security/rules-and-policies/base-images-rule/prerequisites","siteSpaceId":"sitesp_Lgqaz","description":"Find an asset’s base image to investigate its image lineage and risk.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Base image rules"}]},{"id":"EMCcppAg5q7gszdkkgI6","title":"Monitor and track compliance adherence","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence","siteSpaceId":"sitesp_Lgqaz","description":"Evaluate and track asset compliance against industry standards and organizational policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"}]},{"id":"xbpZwFG5eTIgM8okOmez","title":"Choose compliance standards from the compliance catalog","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog","siteSpaceId":"sitesp_Lgqaz","description":"Select built-in or custom compliance standards and controls from the compliance catalogs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"c41eZjKniXqXho5CZ5ER","title":"Standards catalog","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/standards-catalog","siteSpaceId":"sitesp_Lgqaz","description":"Browse available compliance standards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"GxPva8BsRGpbaREhozuZ","title":"Use a built-in or custom standard","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-standard","siteSpaceId":"sitesp_Lgqaz","description":"Use built-in standards or create and edit custom standards for your organization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"i5ya58MI3RZHirU5WBrC","title":"Use a built-in or custom control","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-control","siteSpaceId":"sitesp_Lgqaz","description":"Add built-in controls or create and manage custom controls for custom standards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"z4cuL7nWgqFXD2DpcYhs","title":"Create a new custom detection rule","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_Lgqaz","description":"Create custom detection rules to enforce compliance requirements and security best practices.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"dQkWa2YkzOMVkz1LJeU1","title":"Use an assessment profile to run compliance checks on your assets","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets","siteSpaceId":"sitesp_Lgqaz","description":"Create assessment profiles to evaluate selected asset groups against compliance standards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"9Y41b2lqVdOIvWnL6SVC","title":"View and manage compliance assessments and reports","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Review assessment results and generate or schedule downloadable compliance reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"uBl4WhkwaEoCoSSs5ZWV","title":"Review compliance assessments","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/assessments","siteSpaceId":"sitesp_Lgqaz","description":"View assessment results and drill into control, rule, and asset compliance details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"DbZrUG4iJT1bQ4tnfw28","title":"Review compliance reports","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/reports","siteSpaceId":"sitesp_Lgqaz","description":"View, export, and manage historical compliance assessment reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"5qm09DH2cnWvQqbegWtq","title":"Compliance Overview Dashboard","pathname":"/cortex-cloud-runtime-security/compliance/monitor-and-track-compliance-adherence/compliance-overview-dashboard","siteSpaceId":"sitesp_Lgqaz","description":"Monitor organization-wide compliance scores, standards, failed controls, and asset group performance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"xtwZZWxVNFR8EK42Rove","title":"Broker VM","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm","siteSpaceId":"sitesp_Lgqaz","description":"Deploy and manage Broker VM for secure data collection and connectivity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"}]},{"id":"xqdJ10v2PEpeR3dYltlT","title":"What is the Broker VM?","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/what-is-the-broker-vm","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Broker VM securely connects Cortex Cloud to your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"fOLqV1gwmzB69CNtbEX9","title":"Set up and configure Broker VM","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm","siteSpaceId":"sitesp_Lgqaz","description":"Set up and configure Broker VM for data collection and integrations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"QJJ618mwjVHycrLqqcaa","title":"Broker VM image installations","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations","siteSpaceId":"sitesp_Lgqaz","description":"Install Broker VM images on supported cloud and virtualization platforms.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"MYt4JHy16tO04LR4Ex3z","title":"Set up Broker VM on Alibaba Cloud","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-alibaba-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on Alibaba Cloud using a supported image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"6v1PufTVM7vUgdij16bT","title":"Set up Broker VM on Amazon Web Services","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-amazon-web-services","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on Amazon Web Services using a supported image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"FNuiBMm5kZ4wH42LRqMK","title":"Set up Broker VM on Google Cloud Platform (GCP)","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-google-cloud-platform-gcp","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on Google Cloud Platform using a supported image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"onswmRJD2kHPf2OfZ9C1","title":"Set up Broker VM on KVM using Ubuntu","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-kvm-using-ubuntu","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on KVM hosts running Ubuntu.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"hHCGsHpghsLkIdy6vXwx","title":"Set up Broker VM on Microsoft Azure","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-azure","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on Microsoft Azure using a supported image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"EtrIS6yFcCqVawiCs0Qm","title":"Set up Broker VM on Microsoft Hyper-V","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-hyper-v","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on Microsoft Hyper-V using a supported image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"hmwiYuPZo7RqQ1CiUegj","title":"Set up Broker VM on Nutanix Hypervisor","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-nutanix-hypervisor","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on Nutanix Hypervisor using a supported image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"zjdrXnGrmSwW6gSdIYVY","title":"Set up Broker VM on VMware ESXi using vSphere Client","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-vmware-esxi-using-vsphere-client","siteSpaceId":"sitesp_Lgqaz","description":"Deploy Broker VM on VMware ESXi using the vSphere Client.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"2WKuGi6yJMlQXB6qbelf","title":"Broker VM data collector applets","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets","siteSpaceId":"sitesp_Lgqaz","description":"Learn about data collector applets that run on Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"XFtP5iOlfljXWmXz8fl2","title":"Manage Broker VM","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm","siteSpaceId":"sitesp_Lgqaz","description":"Manage Broker VM configuration, maintenance, monitoring, and clustering.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"LhGAyJg6FBIBWjJ9nuWA","title":"Edit Broker VM Configuration","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/edit-broker-vm-configuration","siteSpaceId":"sitesp_Lgqaz","description":"Update Broker VM configuration settings for your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"QJjKB5NtWrn5PC2WmevT","title":"Increase Broker VM storage allocated for data caching","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-caching","siteSpaceId":"sitesp_Lgqaz","description":"Increase Broker VM storage available for cached data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"nxhtEtiXp7fpWFBSIUYR","title":"Monitor Broker VM using Prometheus","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/monitor-broker-vm-using-prometheus","siteSpaceId":"sitesp_Lgqaz","description":"Monitor Broker VM metrics with Prometheus.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"1ViCr97FHaFX6mNBQq5g","title":"Collect Broker VM Logs","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/collect-broker-vm-logs","siteSpaceId":"sitesp_Lgqaz","description":"Collect Broker VM logs for troubleshooting and support.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"VMnNRZpSpHKSjXYn3gW8","title":"Upgrade Broker VM","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/upgrade-broker-vm","siteSpaceId":"sitesp_Lgqaz","description":"Upgrade Broker VM to the latest supported version.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"tL1lC2XeHSPBsl4b1FPg","title":"Update Broker VM applets independently","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/update-broker-vm-applets-independently","siteSpaceId":"sitesp_Lgqaz","description":"Update Broker VM data collector applets independently of the VM image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"J0t3tDPNgPt9B2J6BB7e","title":"Import Broker VM Configuration","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/import-broker-vm-configuration","siteSpaceId":"sitesp_Lgqaz","description":"Import an existing configuration into Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"IhI9NVFdqwpc1T75xEMV","title":"Open Live Terminal","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/open-live-terminal","siteSpaceId":"sitesp_Lgqaz","description":"Open a Live Terminal session on Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"MudGWAxo1shCdMSRMu9a","title":"Add Broker VM to cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/add-broker-vm-to-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Add a Broker VM node to a high availability cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"dHK2itH5CbJbN8XYJadc","title":"Switchover Primary Node in Cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/switchover-primary-node-in-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Switch the primary node in a Broker VM high availability cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"0VTnWwegRKE4239Xx5rj","title":"Remove from Cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm/remove-from-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Remove a Broker VM node from its high availability cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"X9UzB8Nr8Zo43OJOKouP","title":"Manage Broker VM data collector applets","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/manage-broker-vm-data-collector-applets","siteSpaceId":"sitesp_Lgqaz","description":"Manage data collector applets installed on Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"FW1F552oviNopICCRuOg","title":"Broker VM High Availability Cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Use Broker VM high availability clusters for resilient data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"Cpa6RtPz5YM1tVNvA4R2","title":"Configure High Availability Cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster/configure-high-availability-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Configure a high availability cluster for Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"supVa1EPxT9eOCnIKa1U","title":"Manage Broker VM clusters","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters","siteSpaceId":"sitesp_Lgqaz","description":"Manage Broker VM high availability clusters and their members.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"ivW3saSRPUnVLK5SZreE","title":"View cluster details","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/view-cluster-details","siteSpaceId":"sitesp_Lgqaz","description":"View status, configuration, and members for a Broker VM cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"0wnVeiwGeCR0G0ZEijHH","title":"Edit cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/edit-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Edit the configuration of a Broker VM cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"FTOqEKQLE6beChFr7JKm","title":"Add applet to cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-applet-to-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Add a data collector applet to a Broker VM cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"shd6eAWYEfSp96poqysi","title":"Add Broker VM to cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-broker-vm-to-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Add a Broker VM node to a high availability cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"K9GrIFgbUU400RsnsioF","title":"Remove cluster","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/remove-cluster","siteSpaceId":"sitesp_Lgqaz","description":"Remove a Broker VM high availability cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"dFi7SvqiQDch9MlQAqHF","title":"Broker VM notifications","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/broker-vm-notifications","siteSpaceId":"sitesp_Lgqaz","description":"Configure and review Broker VM notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"NCHyv7OVKG5eaaPqurqP","title":"Monitor Broker VM activity","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/monitor-broker-vm-activity","siteSpaceId":"sitesp_Lgqaz","description":"Monitor Broker VM activity and operational status.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"U5amOVmzziWldESw7lkN","title":"Troubleshoot Broker VM applet errors","pathname":"/cortex-cloud-runtime-security/data-management/broker-vm/troubleshoot-broker-vm-applet-errors","siteSpaceId":"sitesp_Lgqaz","description":"Troubleshoot errors reported by Broker VM data collector applets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Broker VM"}]},{"id":"gdwDe699OxA4PrvCmb4Z","title":"Dataset management","pathname":"/cortex-cloud-runtime-security/data-management/dataset-management","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about managing your datasets and understanding your overall data storage, period-based retention.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"}]},{"id":"8mXcCzP8gzoB1qbx2oD2","title":"What are datasets?","pathname":"/cortex-cloud-runtime-security/data-management/dataset-management/what-are-datasets","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to import, delete, and interact with custom or third-party datasets in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Dataset management"}]},{"id":"687cdJWcjp9nnwJIwBAk","title":"Lookup datasets","pathname":"/cortex-cloud-runtime-security/data-management/dataset-management/lookup-datasets","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about lookup datasets to correlate data from a data source with events in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Dataset management"}]},{"id":"E0i1YPOv4sOvJiDoxkpP","title":"Import a lookup dataset","pathname":"/cortex-cloud-runtime-security/data-management/dataset-management/lookup-datasets/import-a-lookup-dataset","siteSpaceId":"sitesp_Lgqaz","description":"Import a lookup dataset for correlating data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"60Xx9WSTDsl7ZfQ6TvEa","title":"Download JSON file of lookup dataset","pathname":"/cortex-cloud-runtime-security/data-management/dataset-management/lookup-datasets/download-json-file-of-lookup-dataset","siteSpaceId":"sitesp_Lgqaz","description":"Download lookup dataset contents as a JSON file.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"NdFpmNhzEnm0YpN291BS","title":"Set time to live for lookup datasets","pathname":"/cortex-cloud-runtime-security/data-management/dataset-management/lookup-datasets/set-time-to-live-for-lookup-datasets","siteSpaceId":"sitesp_Lgqaz","description":"Set how long lookup dataset entries remain available.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"pguMawyTMvpb82ksjpBz","title":"Monitor datasets and dataset views activity","pathname":"/cortex-cloud-runtime-security/data-management/dataset-management/monitor-datasets-and-dataset-views-activity","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the monitored Cortex Cloud datasets and dataset views activities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Dataset management"}]},{"id":"rdQKShdwjJrIle5k7zwc","title":"Manage Event Forwarding","pathname":"/cortex-cloud-runtime-security/data-management/manage-event-forwarding","siteSpaceId":"sitesp_Lgqaz","description":"Save your ingested, parsed data in an external location by exporting your event logs to a temporary GCP storage bucket.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"}]},{"id":"XsNnwgC8NmLgTwDWuW7u","title":"Upload to a temporary GCP storage bucket","pathname":"/cortex-cloud-runtime-security/data-management/manage-event-forwarding/upload-to-a-temporary-gcp-storage-bucket","siteSpaceId":"sitesp_Lgqaz","description":"Save your ingested, parsed data in an external location by exporting your event logs to a temporary GCP storage bucket.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Manage Event Forwarding"}]},{"id":"V2WalTuckWqTt5anLrjz","title":"Endpoints Event Forwarding - included/excluded fields by event type","pathname":"/cortex-cloud-runtime-security/data-management/manage-event-forwarding/endpoints-event-forwarding-includedexcluded-fields-by-event-type","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the included/excluded fields by event type for Endpoint Event Forwarding in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Manage Event Forwarding"}]},{"id":"Tqs22KOvDcuHvwyPJ0kj","title":"Manage compute units","pathname":"/cortex-cloud-runtime-security/data-management/manage-compute-units","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about managing and tracking your compute units usage for API and Cold Storage XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"}]},{"id":"nBeM4B8QiUb1eHqvcupa","title":"Compute units usage","pathname":"/cortex-cloud-runtime-security/data-management/manage-compute-units/compute-units-usage","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to compute units CU) works according to your license and available options after reaching your quota.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Data Management"},{"label":"Manage compute units"}]},{"id":"wOniHiBIbs2rECi3k24K","title":"What are Cortex Cloud data sources and connectors?","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/what-are-cortex-cloud-data-sources","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about Cortex Cloud data sources and connectors with a unified approach to integrations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"BGLoapxMYVbY91EGO5D1","title":"What is the data source and connector catalog?","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/complete-data-source-catalog","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the complete data source and connector catalog available in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"UNpfb6NUvFQleaZiYmVr","title":"Vendor-specific data sources and connectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources","siteSpaceId":"sitesp_Lgqaz","description":"Browse vendor-specific data sources and connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"WiP3vbfvn1yJwYgG924g","title":"AbuseIPDB","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/abuseipdb","siteSpaceId":"sitesp_Lgqaz","description":"Configure the AbuseIPDB connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jQHz3Wq11rGB5sHIc9q8","title":"AbuseIPDB","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/abuseipdb/abuseipdb","siteSpaceId":"sitesp_Lgqaz","description":"Use AbuseIPDB data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AbuseIPDB"}]},{"id":"jf6j50K8PCtYAWMJMLS2","title":"AIOps","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/aiops","siteSpaceId":"sitesp_Lgqaz","description":"Configure the AIOps connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"czaF2VXtA2gZeTdaFIwn","title":"AIOps","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/aiops/aiops","siteSpaceId":"sitesp_Lgqaz","description":"Use AIOps data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AIOps"}]},{"id":"J1sYZHwOrGkaShC4pqHE","title":"Amazon","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Amazon data sources and connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0b3QAt9GfG94p6tSoA0Z","title":"Amazon S3","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3","siteSpaceId":"sitesp_Lgqaz","description":"Use Amazon S3 data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"1xO7xrcwmRYnY2N3sX1Z","title":"Ingest audit logs from AWS CloudTrail","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3/ingest-audit-logs-from-aws-cloudtrail","siteSpaceId":"sitesp_Lgqaz","description":"Collect audit logs from AWS CloudTrail in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"CVv3yNFQvIJxeb3HzyBI","title":"Ingest network flow logs from Amazon S3","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3/ingest-network-flow-logs-from-amazon-s3","siteSpaceId":"sitesp_Lgqaz","description":"Collect network flow logs from Amazon S3 in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"eBReiCv9fyWeKo8zw053","title":"Ingest generic logs from Amazon S3","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3/ingest-generic-logs-from-amazon-s3","siteSpaceId":"sitesp_Lgqaz","description":"Collect generic logs from Amazon S3 in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"Tvvw6RLunWpMhRhX8ptU","title":"Ingest network Route 53 logs from Amazon S3","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3/ingest-network-route-53-logs-from-amazon-s3","siteSpaceId":"sitesp_Lgqaz","description":"Collect network Route 53 logs from Amazon S3 in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"vxORRRxLZAe7k4M2II3a","title":"Create an assumed role","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3/create-an-assumed-role","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about creating an assumed role in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"KFiZDUTkHMxeXdWInw8S","title":"Create a Workload Federated Identity role","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3/create-a-workload-federated-identity-role","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about creating a Workload Federated Identity role in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"IltvHC5WOxjLBde6WcUD","title":"Configure data collection from Amazon S3 manually","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-s3/configure-data-collection-from-amazon-s3-manually","siteSpaceId":"sitesp_Lgqaz","description":"Collect data from Amazon S3 manually in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"},{"label":"Amazon S3"}]},{"id":"YxHTkSQ3JaeN4h1rtRcE","title":"Amazon Web Services","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-web-services","siteSpaceId":"sitesp_Lgqaz","description":"Use Amazon Web Services in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"LJly3TAMw6f3hNNrunBs","title":"AWS Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/aws-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Use AWS Automation and Collection in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"nvNRiNkf0a13bg5bq7YA","title":"Anomali","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anomali","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Anomali connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OUovhJ62N5EFi5zAOaTs","title":"Anomali","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anomali/anomali","siteSpaceId":"sitesp_Lgqaz","description":"Use Anomali data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anomali"}]},{"id":"7gbYrHOnbeuKFTllt6jw","title":"Anthropic","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anthropic","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Anthropic connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bKGwMRwu7as7AfD8kF32","title":"Claude","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anthropic/claude","siteSpaceId":"sitesp_Lgqaz","description":"Use Claude with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anthropic"}]},{"id":"KzB8FvaVz3XmZIzJFJLB","title":"API Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/api-security","siteSpaceId":"sitesp_Lgqaz","description":"Use API data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2zLsTZn3jWiimBBdQ3f2","title":"Ingest data for API security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/api-security/ingest-data-for-api-security","siteSpaceId":"sitesp_Lgqaz","description":"Collect API Security data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"}]},{"id":"o2SqSNIR63Imt6ZvuOOj","title":"Ingest AWS API Gateway","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-aws-api-gateway","siteSpaceId":"sitesp_Lgqaz","description":"Collect AWS API Gateway data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"YopVsXRztmSV5gwU4U2B","title":"Ingest Azure APIM","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-azure-apim","siteSpaceId":"sitesp_Lgqaz","description":"Collect Azure APIM data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"FMsvVUaQ6lbrqD7JPI9K","title":"Ingest Apigee Proxy","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-apigee-proxy","siteSpaceId":"sitesp_Lgqaz","description":"Collect Apigee Proxy data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"EmaFcTfdLjZLtHneVqfY","title":"Ingest Kong","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-kong","siteSpaceId":"sitesp_Lgqaz","description":"Collect Kong data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"fwfDrEG4QCc0g8y0G6TG","title":"Ingest F5","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/api-security/ingest-data-for-api-security/ingest-f5","siteSpaceId":"sitesp_Lgqaz","description":"Collect F5 data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"API Security"},{"label":"Ingest data for API security"}]},{"id":"YM2KTdhiDhlOglAozk5x","title":"Atlassian","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/atlassian","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Atlassian connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"tQ6fj4z345NUwE2p56Rq","title":"Atlassian","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/atlassian/atlassian","siteSpaceId":"sitesp_Lgqaz","description":"Use Atlassian data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"EDVJEjMM1L90MOtEosHP","title":"Atlassian Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/atlassian/atlassian-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Use Atlassian Automation and Collection data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"mcpASf17FeksjxFOpUHH","title":"BeyondTrust","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/beyondtrust","siteSpaceId":"sitesp_Lgqaz","description":"Configure the BeyondTrust data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"D6AovczMYE7mLmwvlT1C","title":"BeyondTrust Privilege Management Cloud","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/beyondtrust/beyondtrust-privilege-management-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Use BeyondTrust Privilege Management Cloud data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BeyondTrust"}]},{"id":"0MMkpDblLH1hTGcmwrza","title":"Ingest logs from BeyondTrust Privilege Management Cloud","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/beyondtrust/beyondtrust-privilege-management-cloud/ingest-logs-from-beyondtrust-privilege-management-cloud","siteSpaceId":"sitesp_Lgqaz","description":"Collect BeyondTrust Privilege Management Cloud data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BeyondTrust"},{"label":"BeyondTrust Privilege Management Cloud"}]},{"id":"u7HTEWgmqho8yzVFPfpd","title":"Box","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/box","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Box data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yEpmp29XvCsaQMuUe8Nj","title":"Ingest logs and data from Box","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/box/ingest-logs-and-data-from-box","siteSpaceId":"sitesp_Lgqaz","description":"Collect Box data from Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"XCUZWEvpNJFTnu9NkhGC","title":"Check Point","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/check-point","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Check Point data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"eb9JVIrDOpt9bfXqFgAn","title":"Check Point FW1/VPN1","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/check-point/check-point-fw1-vpn1","siteSpaceId":"sitesp_Lgqaz","description":"Use Check Point FW1/VPN1 data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Check Point"}]},{"id":"EILzRz69Qv1aW5GbykTt","title":"Cisco","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cisco","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Cisco data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"vzH8HOt1mVTouW9ZlVKz","title":"Cisco ASA firewalls and AnyConnect","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cisco/cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_Lgqaz","description":"Use Cisco ASA firewalls and AnyConnect data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"GkNwXOp1t30kotUUIW1k","title":"Corelight","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/corelight","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Corelight data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"kdsa0YlH0CCsJJM6ikry","title":"Corelight Zeek","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/corelight/corelight-zeek","siteSpaceId":"sitesp_Lgqaz","description":"Use Corelight Zeek data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Corelight"}]},{"id":"q5XWiMOKyINfvI29YuMl","title":"Cribl","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cribl","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Cribl connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YWQByIDh3p1usCPNjbka","title":"Cribl connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cribl/cribl-connector","siteSpaceId":"sitesp_Lgqaz","description":"Use Cribl connector data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"}]},{"id":"WV3zlqfWqfARe5ChlyPi","title":"CyberArk","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cyberark","siteSpaceId":"sitesp_Lgqaz","description":"Configure the CyberArk connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ZxPwdc5KVCQBJYFGsi7o","title":"CyberArk","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cyberark/cyberark","siteSpaceId":"sitesp_Lgqaz","description":"Use CyberArk data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CyberArk"}]},{"id":"BnWRYiOBxCcQVT8XcsU0","title":"Databricks","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/databricks","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Databricks data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hmjiEC0WTIoKBNOt2HTt","title":"How to onboard Databricks","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/databricks/databricks","siteSpaceId":"sitesp_Lgqaz","description":"Collect Databricks data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"NEsHdDCNdWazojEeqgyt","title":"Databricks","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/databricks/databricks-1","siteSpaceId":"sitesp_Lgqaz","description":"Use Databricks data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"HQNc7V5lKp9RsNPHmLoo","title":"Docker","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Docker data sources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8B2vZK4azC8CPOKECbxH","title":"Connect Docker Hub registry","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-hub-registry","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Docker Hub registry to Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"}]},{"id":"WNOIH26MJExZ75QAgBCv","title":"Manage a Docker Hub connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-hub-registry/manage-a-docker-hub-connector","siteSpaceId":"sitesp_Lgqaz","description":"Manage the Docker Hub registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"},{"label":"Connect Docker Hub registry"}]},{"id":"lAdvOPvSWKAdmvDt0fwc","title":"Connect Docker V2 compliant container registry","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-v2-compliant-container-registry","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Docker V2-compliant registry to Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"}]},{"id":"bXroKvGsXEl13eTEMAA9","title":"Manage a Docker V2 connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-v2-compliant-container-registry/manage-a-docker-v2-connector","siteSpaceId":"sitesp_Lgqaz","description":"Manage the Docker V2-compliant registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"},{"label":"Connect Docker V2 compliant container registry"}]},{"id":"Y89SeKTHBJDEvvBuvjO0","title":"Dropbox","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/dropbox","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Dropbox data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1gXCDdlx4YyWCpbUe1nK","title":"Ingest logs and data from Dropbox","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/dropbox/ingest-logs-and-data-from-dropbox","siteSpaceId":"sitesp_Lgqaz","description":"Collect dropbox data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Dropbox"}]},{"id":"8oIDdSiSntRcxxAmiPL7","title":"Elastic","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Elastic data sources and connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JB43HFZ0Ke1XDAk5P14Q","title":"Elasticsearch Filebeat","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic/elasticsearch-filebeat","siteSpaceId":"sitesp_Lgqaz","description":"Use Elasticsearch Filebeat data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"AEJw7JsFJdzl5wZyxeMJ","title":"Ingest logs from Elasticsearch Filebeat","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic/elasticsearch-filebeat/ingest-logs-from-elasticsearch-filebeat","siteSpaceId":"sitesp_Lgqaz","description":"Collect Elasticsearch Filebeat data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"},{"label":"Elasticsearch Filebeat"}]},{"id":"kpMdGZeImmaDhpgjrfbK","title":"Windows DHCP via Elasticsearch Filebeat","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic/windows-dhcp-via-elasticsearch-filebeat","siteSpaceId":"sitesp_Lgqaz","description":"Use Windows DHCP data using Elasticsearch Filebeat with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"fQpusT9rGMCMQGdWkKRZ","title":"Ingest logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic/windows-dhcp-via-elasticsearch-filebeat/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_Lgqaz","description":"Collect Windows DHCP data using Elasticsearch Filebeat with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"},{"label":"Windows DHCP via Elasticsearch Filebeat"}]},{"id":"EXoa45FnbbWpzqToxnz3","title":"ElasticSearch","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic/elasticsearch","siteSpaceId":"sitesp_Lgqaz","description":"Use ElasticSearch data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"rfyt7RKXwuT14V95wsjb","title":"Forcepoint","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/forcepoint","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Forcepoint data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Q89cKDgOAyXujv1sd0Gt","title":"Forcepoint DLP","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/forcepoint/forcepoint-dlp","siteSpaceId":"sitesp_Lgqaz","description":"Use Forcepoint DLP data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Forcepoint"}]},{"id":"olw9oo7S722J671muqO6","title":"Fortinet","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/fortinet","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Fortinet data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WimF7iiOCnNEMfAzqUo3","title":"Fortinet Fortigate","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/fortinet/fortinet-fortigate","siteSpaceId":"sitesp_Lgqaz","description":"Collect Fortinet Fortigate data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"ahLGy0efP8au9lziqzdn","title":"Freshworks","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/freshworks","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Freshworks connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"oKHZuIFoXol0CZzOkfzA","title":"Freshworks","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/freshworks/freshworks","siteSpaceId":"sitesp_Lgqaz","description":"Use Freshworks data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Freshworks"}]},{"id":"7fqVdVaFmq62q8WXxJwc","title":"Generic","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/generic","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Generic connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Gn56drUcva5ixXbJ1XDw","title":"Generic MCP","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/generic/generic-mcp","siteSpaceId":"sitesp_Lgqaz","description":"Use Generic MCP data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"fPS9jwoKHF57ZmyzSVSE","title":"Generic SQL","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/generic/generic-sql","siteSpaceId":"sitesp_Lgqaz","description":"Use Generic SQL data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"syw72KQOGt3nGtCcRJa7","title":"GitHub","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/github","siteSpaceId":"sitesp_Lgqaz","description":"Configure the GitHub connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ZrteVV31v2NvacRpbHe8","title":"GitHub","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/github/github","siteSpaceId":"sitesp_Lgqaz","description":"Use GitHub data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitHub"}]},{"id":"aiudCx45FrpVAIkGgGbm","title":"GitLab","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gitlab","siteSpaceId":"sitesp_Lgqaz","description":"Configure the GitLab data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"txyeCASmC0GS6ZUD0Rak","title":"Connect GitLab container registry","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gitlab/connect-gitlab-container-registry","siteSpaceId":"sitesp_Lgqaz","description":"Connect a GitLab container registry to Cortex Cloud for image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"}]},{"id":"GHdMAteZ0m8S9JTf3dIq","title":"Manage a GitLab Container Registry connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gitlab/connect-gitlab-container-registry/manage-a-gitlab-container-registry-connector","siteSpaceId":"sitesp_Lgqaz","description":"Manage the GitLab Container Registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"},{"label":"Connect GitLab container registry"}]},{"id":"C2ZDgyfOVS7bgcNfAPSP","title":"Google","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Google data sources and connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bCVCgeT7bihcHynYLHiU","title":"Google Cloud Platform","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-cloud-platform","siteSpaceId":"sitesp_Lgqaz","description":"Use Google Cloud Platform data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"fhdOVoabPxCz8Bq4T4mI","title":"Ingest logs and data from a GCP Pub/Sub","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-cloud-platform/ingest-logs-and-data-from-a-gcp-pub-sub","siteSpaceId":"sitesp_Lgqaz","description":"Collect GCP Pub/Sub data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Cloud Platform"}]},{"id":"HUosilvAGam4Y9ahLwHL","title":"Google Kubernetes Engine","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-kubernetes-engine","siteSpaceId":"sitesp_Lgqaz","description":"Use Google Kubernetes Engine data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"ZhzLIAhJjIxrqAmBlfTA","title":"Ingest logs from Google Kubernetes Engine","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-kubernetes-engine/ingest-logs-from-google-kubernetes-engine","siteSpaceId":"sitesp_Lgqaz","description":"Collect Google Kubernetes Engine data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Kubernetes Engine"}]},{"id":"DvXLtfzxYMOKRT9PmYmL","title":"Google Workspace","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-workspace","siteSpaceId":"sitesp_Lgqaz","description":"Use Google Workspace data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"JGLsXih7VcC78Ga90M8G","title":"Ingest logs and data from Google Workspace","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-workspace/ingest-logs-and-data-from-google-workspace","siteSpaceId":"sitesp_Lgqaz","description":"Collect Google Workspace data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"fXEWVi6RUhieZy4OGaDw","title":"Google Workspace connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-workspace/google-workspace-connector","siteSpaceId":"sitesp_Lgqaz","description":"Use Google Workspace with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"HV9rULxMNg7B1jY3AkOH","title":"Google Workspace Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-workspace/google-workspace-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Use Google Workspace Automation and Collection data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"oiT1QGkmjWgzmtn0yeue","title":"Harbor","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harbor","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Harbor data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wOogWMgfAzStk9zqEfjq","title":"Connect Harbor registry","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harbor/connect-harbor-registry","siteSpaceId":"sitesp_Lgqaz","description":"Connect a Harbor registry to Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harbor"}]},{"id":"F2xQuzCTKjA7cNyW3swB","title":"Manage a Harbor connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harbor/connect-harbor-registry/manage-a-harbor-connector","siteSpaceId":"sitesp_Lgqaz","description":"Manage the Harbor registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harbor"},{"label":"Connect Harbor registry"}]},{"id":"8P6PTLzgWc0tOq5Bkcz6","title":"HTTP log collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/http-log-collector","siteSpaceId":"sitesp_Lgqaz","description":"Configure the HTTP log collector data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ifZWPrjRs1yhiKQrSzVK","title":"Set up an HTTP log collector to receive logs","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/http-log-collector/set-up-an-http-log-collector-to-receive-logs","siteSpaceId":"sitesp_Lgqaz","description":"Collect HTTP log data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HTTP log collector"}]},{"id":"FtPJxJLpayzTZ4lNkGFv","title":"IBM","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ibm","siteSpaceId":"sitesp_Lgqaz","description":"Configure the IBM connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"NW9n1TMiQy9xWahqgC1G","title":"IBM QRadar","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ibm/ibm-qradar","siteSpaceId":"sitesp_Lgqaz","description":"Use IBM QRadar data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"kqjNc4lja6i3KTI5OB5P","title":"iZOOlogic","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/izoologic","siteSpaceId":"sitesp_Lgqaz","description":"Configure the iZOOlogic connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"irRoTksPH6MNfJp65Sf8","title":"iZOOlogic","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/izoologic/izoologic","siteSpaceId":"sitesp_Lgqaz","description":"Use iZOOlogic data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"iZOOlogic"}]},{"id":"Qb9EbjJntjxEDIgrtkmu","title":"JFrog","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jfrog","siteSpaceId":"sitesp_Lgqaz","description":"Configure the JFrog data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wfgf61lYR8jEY6z4aVzb","title":"Connect JFrog container registry","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jfrog/connect-jfrog-container-registry","siteSpaceId":"sitesp_Lgqaz","description":"Connect a JFrog container registry to Cortex Cloud for image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JFrog"}]},{"id":"BSGaxe8PeOV4216szgbt","title":"Manage a JFrog connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jfrog/connect-jfrog-container-registry/manage-a-jfrog-connector","siteSpaceId":"sitesp_Lgqaz","description":"Manage the JFrog container registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JFrog"},{"label":"Connect JFrog container registry"}]},{"id":"NeolTiomteLCp8i7mEJ7","title":"Koi","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/koi","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Koi connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AATvjmBJOir2Nn1j8WTF","title":"Koi","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/koi/koi","siteSpaceId":"sitesp_Lgqaz","description":"Use Koi data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Koi"}]},{"id":"qGq7HbmOMOmUZkE3g9Ku","title":"Kubernetes","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Kubernetes data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"u5CMmji1JRqPOMVwh7v8","title":"Onboard the Kubernetes connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes/onboard-the-kubernetes-connector","siteSpaceId":"sitesp_Lgqaz","description":"Use Kubernetes data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"AM1tDtV6taMkr4w7zwjR","title":"What's new in Kubernetes connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes/whats-new-in-kubernetes-connector","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the changes, additions, known issues, and fixes for each version of the Kubernetes connector.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"3xec3vVKQK6U5FBrf8wW","title":"Supported Kubernetes distributions","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes/supported-kubernetes-distributions","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the supported Kubernetes platform versions for the Kubernetes connector.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"wSCWcFhGy6fsQjXFhqwS","title":"Mail Utilities","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mail-utilities","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Mail Utilities connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"QFhnvgsvh8PDHLRD8QLl","title":"Mail Utilities","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mail-utilities/mail-utilities","siteSpaceId":"sitesp_Lgqaz","description":"Use Mail Utilities data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mail Utilities"}]},{"id":"thstQJrNl3kkgDRRpQxT","title":"Microsoft","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Microsoft data sources and connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"t918ASNWUDwk0QC8ZWpr","title":"Azure Event Hub","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/azure-event-hub","siteSpaceId":"sitesp_Lgqaz","description":"Use Azure Event Hub data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"BdaZilFXYUDGYu81Aaug","title":"Ingest logs from Microsoft Azure Event Hub","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/azure-event-hub/ingest-logs-from-microsoft-azure-event-hub","siteSpaceId":"sitesp_Lgqaz","description":"Collect Microsoft Azure Event Hub data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Azure Event Hub"}]},{"id":"XAoIIKRBfgkJghFSHn6Y","title":"Microsoft Azure","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-azure","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Azure data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"vGPDsWMkyY9bC7v1mEFo","title":"Microsoft Entra ID","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-entra-id","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Entra ID data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"i8mratzsASffyoaTfosJ","title":"Microsoft365 (legacy)","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft365-legacy","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft365 data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"TKHSid8lJQ8RFLFxp7XK","title":"Migrate to new Microsoft 365 connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft365-legacy/migrate-to-new-microsoft-365-connector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft365 (legacy)"}]},{"id":"zs8FDgWMqVBCIKGeNiGU","title":"Microsoft 365 (new)","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-new","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft 365 data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"3mwy9KEqXFUDSbiAi9Nk","title":"Create a Microsoft Entra ID","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-new/create-a-microsoft-entra-id","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft 365 (new)"}]},{"id":"zTANJcaGmvRBnv6tRiPj","title":"Microsoft Office 365","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-office-365","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Office 365 data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"EQmZpXEriHBKUJz5pNVd","title":"Ingest logs from Microsoft Office 365","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-office-365/ingest-logs-from-microsoft-office-365","siteSpaceId":"sitesp_Lgqaz","description":"Collect Microsoft Office 365 data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"cCQzlEk1h30f07ReP4OP","title":"Microsoft Office 365 (email)","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-office-365-email","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Office 365 (email) data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"Hc7VxgDNDHWerME3xxY3","title":"Ingest logs and data from Microsoft 365","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-office-365-email/ingest-logs-and-data-from-microsoft-365","siteSpaceId":"sitesp_Lgqaz","description":"Collect Microsoft 365 data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365 (email)"}]},{"id":"8zJU4JpXtlQTbziqqE2v","title":"Microsoft 365 (Posture)","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-posture","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft 365 (Posture) data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"ThabA4WzfCVrAhINdtIQ","title":"How to onboard Microsoft 365","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-posture/how-to-onboard-microsoft-365","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about adding Microsoft 365 as a third-party data source in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft 365 (Posture)"}]},{"id":"Lmac9mkpb6FaYYTCUPqZ","title":"Microsoft Teams","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-teams","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Teams data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"l4SVtYdEFDLBJJYtoAQb","title":"Microsoft Active Directory","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-active-directory","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Active Directory data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"8eaRsKjcPXtMH9KaOXAe","title":"Microsoft Graph","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-graph","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Graph data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"h1BQ2QUMJNVIA4y2OqPM","title":"Microsoft Identity","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-identity","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Identity data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"LKZvw4mh8gRnqMIr3EiZ","title":"Microsoft Security Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-security-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Use Microsoft Security Automation and Collection data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"eNg9rTC969RZhjjsT14g","title":"M365 Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/m365-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Use M365 Automation and Collection data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"OMNuAaZC7PEkaQnaahFg","title":"Monday","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/monday","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Monday connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fHH6nekSFjZ1J2O7XGI9","title":"Monday","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/monday/monday","siteSpaceId":"sitesp_Lgqaz","description":"Use Monday data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Monday"}]},{"id":"ey60VCYaF5vD3vZReCvI","title":"MongoDB","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mongodb","siteSpaceId":"sitesp_Lgqaz","description":"Configure the MongoDB connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Ni3IN2fgpUHoBjRId6ok","title":"MongoDB Atlas","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mongodb/mongodb-atlas","siteSpaceId":"sitesp_Lgqaz","description":"Use MongoDB Atlas data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"oQ0EKRKSSBYV7uuMQ0v2","title":"Okta","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/okta","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Okta data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gAAon9NV6QxFrrXsfZdI","title":"Ingest logs and data from Okta","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/okta/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_Lgqaz","description":"Configure Okta log and data collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"fIzm6JgwPMaWod46Nri2","title":"Okta Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/okta/okta-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Configure Okta automation and collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"hces2JR576Gjn4HGsdNx","title":"OneLogin","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/onelogin","siteSpaceId":"sitesp_Lgqaz","description":"Configure the OneLogin data source for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"QRUHyba810zZqi0Lbg2O","title":"Ingest logs and data from OneLogin","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/onelogin/ingest-logs-and-data-from-onelogin","siteSpaceId":"sitesp_Lgqaz","description":"Configure OneLogin log and directory data collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OneLogin"}]},{"id":"PEZmVplREPWwTqrMqfCn","title":"Oracle","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/oracle","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Oracle data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HWnYZ19Zagsv5yZ4deFl","title":"Oracle Cloud Infrastructure","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/oracle/oracle-cloud-infrastructure","siteSpaceId":"sitesp_Lgqaz","description":"Configure Oracle Cloud Infrastructure data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"jsUpGcNIvrj4UwCKXpD1","title":"PagerDuty","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/pagerduty","siteSpaceId":"sitesp_Lgqaz","description":"Configure the PagerDuty connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"h6fmAHSf3zgvumALyD9z","title":"PagerDuty Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/pagerduty/pagerduty-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Configure PagerDuty automation and collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PagerDuty"}]},{"id":"ALZu3hXwc5wZQtLG4pti","title":"Ping Identity","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ping-identity","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Ping Identity data sources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BCRPcF5i9mYTBKCrgNXG","title":"PingFederate","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ping-identity/pingfederate","siteSpaceId":"sitesp_Lgqaz","description":"Configure PingFederate authentication log collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"fgQD0EADZ1RMqZsf9on9","title":"PingOne","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ping-identity/pingone","siteSpaceId":"sitesp_Lgqaz","description":"Configure PingOne data sources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"FqVNkrS5ZfwSRjnsiiC2","title":"Ingest authentication logs and data from PingOne","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ping-identity/pingone/ingest-authentication-logs-and-data-from-pingone","siteSpaceId":"sitesp_Lgqaz","description":"Ingest PingOne authentication logs and data into Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"},{"label":"PingOne"}]},{"id":"7QTmcDLY32LIcUrgWuPI","title":"Salesforce","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/salesforce","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Salesforce data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gQi6dzM5YxrprIpo5zyQ","title":"Ingest logs and data from Salesforce","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/salesforce/ingest-logs-and-data-from-salesforce","siteSpaceId":"sitesp_Lgqaz","description":"Ingest Salesforce logs and data into Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"a6Y72Ut0Bg6XrTDkECvh","title":"Salesforce connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/salesforce/ingest-and-run-salesforce-automation-and-remediation","siteSpaceId":"sitesp_Lgqaz","description":"Use Salesforce data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"eYPqcMcfHyxM1IATkRle","title":"ServiceNow","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/servicenow","siteSpaceId":"sitesp_Lgqaz","description":"Configure the ServiceNow data sources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"qAGBpD1ngP8kMTsliMre","title":"ServiceNow Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/servicenow/servicenow-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Configure ServiceNow automation and collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"tn85uTkNw0QkmCQqCeTn","title":"ServiceNow","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/servicenow/servicenow","siteSpaceId":"sitesp_Lgqaz","description":"Use ServiceNow data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"1DUM7xuzzQI44ise0ils","title":"Slack","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/slack","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Slack connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"H2TzfPP5F6Fhl4Mu0KP3","title":"Slack Automation and Collection","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/slack/slack-automation-and-collection","siteSpaceId":"sitesp_Lgqaz","description":"Configure Slack automation, notifications, and audit log collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"Hw1FDKTShU2nt4WQwyVf","title":"Slack Enterprise","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/slack/slack-enterprise","siteSpaceId":"sitesp_Lgqaz","description":"Configure Slack Enterprise identity and SaaS posture monitoring for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"5sxJ6gyJNC5CnGuMSB85","title":"SMB","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/smb","siteSpaceId":"sitesp_Lgqaz","description":"Configure the SMB connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aXFNGnGXOTpXCq5djPhj","title":"SMB","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/smb/smb","siteSpaceId":"sitesp_Lgqaz","description":"Use SMB data for Cortex Cloud file and directory management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SMB"}]},{"id":"drULFMyv7xdWQFcFVqxz","title":"Snowflake","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/snowflake","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Snowflake data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lWCuNsNL9cBtHwv5jIo5","title":"How to onboard Snowflake","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/snowflake/how-to-onboard-snowflake","siteSpaceId":"sitesp_Lgqaz","description":"Onboard Snowflake as a data source in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Snowflake"}]},{"id":"FWjUmJxNMoNzSFSHLGd9","title":"Sonatype Nexus registry","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sonatype-nexus-registry","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Sonatype Nexus connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"tVlM6FUw1EPGKWdpeaDe","title":"Connect Sonatype Nexus registry","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sonatype-nexus-registry/connect-sonatype-nexus-registry","siteSpaceId":"sitesp_Lgqaz","description":"Use Sonatype Nexus registry data in Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sonatype Nexus registry"}]},{"id":"H0wDnEV4gJB8XT2WT9WJ","title":"Manage a Sonatype connector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sonatype-nexus-registry/connect-sonatype-nexus-registry/manage-a-sonatype-connector","siteSpaceId":"sitesp_Lgqaz","description":"Manage the Sonatype registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sonatype Nexus registry"},{"label":"Connect Sonatype Nexus registry"}]},{"id":"2W7euuxOBdzaRw00mAIe","title":"Workday","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/workday","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Workday data source in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"tFOQT9NukJYonJTTfvRr","title":"Ingest report data from Workday","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/workday/ingest-report-data-from-workday","siteSpaceId":"sitesp_Lgqaz","description":"Ingest Workday report data into Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"D0qFZhLIfmte7mjs6Zrw","title":"Zendesk","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zendesk","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Zendesk connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Q9sdkuJGMveSSyiInq35","title":"Zendesk","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zendesk/zendesk","siteSpaceId":"sitesp_Lgqaz","description":"Use Zendesk data in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zendesk"}]},{"id":"BWSTvEXessO4Ic7Hzz5C","title":"Zscaler","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zscaler","siteSpaceId":"sitesp_Lgqaz","description":"Configure the Zscaler data sources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MIVWwb0KokaziWTCSKMX","title":"Zscaler Internet Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zscaler/zscaler-internet-access","siteSpaceId":"sitesp_Lgqaz","description":"Configure Zscaler Internet Access (ZIA) log collection in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"fv5a2bejp6htWpH9nbx4","title":"Zscaler Private Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zscaler/zscaler-private-access","siteSpaceId":"sitesp_Lgqaz","description":"Configure Zscaler Private Access (ZPA) log collection in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"XUfgZ4DfGUPNPBUwxQSv","title":"Zscaler","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zscaler/zscaler","siteSpaceId":"sitesp_Lgqaz","description":"Use Zscaler data in Cortex Cloud for ZIA log collection and security management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"3cxstmdVdbntdYiyAbz7","title":"Connectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/connectors","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"ytkGgi1f5gcmLnwt4STu","title":"Standard data sources","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/standard-data-sources","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"MwZmNWqemjyJofno71nb","title":"Cloud service provider (CSP) onboarding","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about onboarding cloud data sources to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"M8sAtOu3G1iu6wcdbsDS","title":"Generic on-premise data collectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"IsBb30dvTEoJSbEfeYGg","title":"Broker VM data collector applets","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"JoMQ8A0MYDpeJPVmRrtR","title":"Activate Apache Kafka Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-apache-kafka-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"cHPAXTbVBeiMXt2zzLix","title":"Activate CSV Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-csv-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"50yD3XDPgPfr3926Pq2y","title":"Activate Database Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-database-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"iMNi8RmFrjwBiQB7aTtS","title":"Activate DSPM Database","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-database","siteSpaceId":"sitesp_Lgqaz","description":"Configure the DSPM Database applet for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"s0Hvz7n9Rp1ZmOHnQEtQ","title":"Activate DSPM Fileshare","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-fileshare","siteSpaceId":"sitesp_Lgqaz","description":"Configure the DSPM Fileshare applet for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"DArzxj9U0RelxJFV85P4","title":"Activate Files and Folders Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-files-and-folders-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"VLGMt3mev4iiPKTNXcEM","title":"Activate FTP Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-ftp-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"9ov5j7iiBG55U3Zkiyqi","title":"Activate Local Agent Settings","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-local-agent-settings","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"uFcNXvJHZik1q9boU5oe","title":"Activate NetFlow Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-netflow-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"8w5fReLVp4J7Dcilqxq7","title":"Activate Network Mapper","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-network-mapper","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"YSUfpSlnvSNpfFa2cKvm","title":"Activate Registry Scanner","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-registry-scanner","siteSpaceId":"sitesp_Lgqaz","description":"Configure Registry Scanner applet for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"VNvu5F5ZxW9lkR9Mf1Qa","title":"Syslog Collector applet","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"pPBxDA75JtbnTEXNMQal","title":"Activate Syslog Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/activate-syslog-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"5nz8FY41rVKjEoxC3HFE","title":"Ingest logs from a Syslog receiver","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/ingest-logs-from-a-syslog-receiver","siteSpaceId":"sitesp_Lgqaz","description":"To extend visibility, Cortex Cloud can receive Syslog from additional vendors that use CEF or LEEF formatted over Syslog (TLS not supported).","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"9NeiCxsZGI10W962Md6e","title":"Check Point FW1 VPN1","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/check-point-fw1-vpn1","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"VzajGr3CZBrRognOzXfv","title":"Ingest logs from Check Point firewalls","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/check-point-fw1-vpn1/ingest-logs-from-check-point-firewalls","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Check Point FW1 VPN1"}]},{"id":"fXVN3ZgpRgUGXbAjlWW8","title":"Cisco ASA firewalls and AnyConnect","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"fqZiavZRJsUp98n7wViM","title":"Ingest logs from Cisco ASA firewalls and AnyConnect","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/cisco-asa-firewalls-and-anyconnect/ingest-logs-from-cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Cisco ASA firewalls and AnyConnect"}]},{"id":"6SVeqbMGd8BgS9hoGUbK","title":"Corelight Zeek","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/corelight-zeek","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"5ZVl10PtLtLBqQT6oK1E","title":"Ingest logs from Corelight Zeek","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/corelight-zeek/ingest-logs-from-corelight-zeek","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Corelight Zeek"}]},{"id":"6B4MMz6kpfNcfOjiCyuB","title":"Forcepoint DLP","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/forcepoint-dlp","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"KNK0JS9Ivw46HAhEuuWe","title":"Ingest logs from Forcepoint DLP","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/forcepoint-dlp/ingest-logs-from-forcepoint-dlp","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Forcepoint DLP"}]},{"id":"2xaSX6aRmmn7YUv7UvI0","title":"Fortinet Fortigate","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/fortinet-fortigate","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"NKFUpdrKWpGhMPRjT9aW","title":"Ingest logs from Fortinet Fortigate firewalls","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/fortinet-fortigate/ingest-logs-from-fortinet-fortigate-firewalls","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Fortinet Fortigate"}]},{"id":"HZEbJXIJOrM8tAzc7NJq","title":"Next Generation Firewall","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/next-generation-firewall","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"yd4kzSEgwOKDnsyndcvL","title":"Ingest Next-Generation Firewall logs using the Syslog Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Next Generation Firewall"}]},{"id":"4wTx0Qe42TFXC8ILeobn","title":"PingFederate","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/pingfederate","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"KHtXR9ZPbdP5g3VesGkK","title":"Ingest authentication logs from PingFederate","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/pingfederate/ingest-authentication-logs-from-pingfederate","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"PingFederate"}]},{"id":"wPJamXHExHMH6RU8GtZx","title":"Zscaler Internet Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-internet-access","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"L5kVTwGmNdcqAHjrE6xx","title":"Ingest logs from Zscaler Internet Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-internet-access/ingest-logs-from-zscaler-internet-access","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Zscaler Internet Access"}]},{"id":"x4ndWmvRXHmi2bsDMUnb","title":"Zscaler Private Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-private-access","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"}]},{"id":"QWFxLT1hTxJkd4WLZiKi","title":"Ingest logs from Zscaler Private Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/zscaler-private-access/ingest-logs-from-zscaler-private-access","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Syslog Collector applet"},{"label":"Zscaler Private Access"}]},{"id":"9eC7q0MGtbF4GebyL01O","title":"Activate Transporter","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-transporter","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"0NwoCHxSPftQos5SUjqf","title":"Activate Windows Event Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"SrCkR0EL3D360b8Jg6af","title":"Activate Windows Event Collector on Windows Core","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector/activate-windows-event-collector-on-windows-core","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"DOM4Bw7YbJPFF4Yu3BYc","title":"Renew WEC certificates","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-windows-event-collector/renew-wec-certificates","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"},{"label":"Activate Windows Event Collector"}]},{"id":"AhbiCcNb88UvvnqW3AW1","title":"XDR Collectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"7jl98Y2jReTxHdzgl60b","title":"XDR Collector audit logs","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-audit-logs","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"Nb79HGacn94ZWh3vgfdd","title":"XDR Collector machine requirements and supported operating systems","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-machine-requirements-and-supported-operating-systems","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"DPhksaLRhYtmYrVHEpJg","title":"Resources required to enable access to XDR collectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/resources-required-to-enable-access-to-xdr-collectors","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"iNTwwjIdEfwR24NtX8hu","title":"Manage XDR Collectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"BNfuM39VND3oIIHn7d93","title":"XDR Collectors installation resource for Windows and Linux","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/xdr-collectors-installation-resource-for-windows-and-linux","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"gb9jiXK9Vv88Yo7GEEx2","title":"Create an XDR Collector installation package","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/create-an-xdr-collector-installation-package","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"djAibqHesfRkQZqILHHJ","title":"Install the XDR Collector installation package for Windows","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"fmYmMz2EGQgois8w7gt4","title":"Install the XDR collector on Windows using the MSI","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-the-msi","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"rhniRaPTudmeBsZx8bDf","title":"Install the XDR Collector on Windows using Msiexec","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-windows/install-the-xdr-collector-on-windows-using-msiexec","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"},{"label":"Install the XDR Collector installation package for Windows"}]},{"id":"MyUG0bwDogwQU0RaaFTX","title":"Install the XDR Collector installation package for Linux","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/install-the-xdr-collector-installation-package-for-linux","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"4Whluk4ZfYgF915G7mhO","title":"Configure XDR Collector upgrade scheduler","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/configure-xdr-collector-upgrade-scheduler","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"wqEjPNOIFrUyxw20GOv0","title":"Set an application proxy for XDR Collectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/set-an-application-proxy-for-xdr-collectors","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"BF5S9oONz1tupVq4n4wv","title":"Set an alias for an XDR Collector machine","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/set-an-alias-for-an-xdr-collector-machine","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"QcgIfO1sNDiSHKlU7A7H","title":"Upgrade XDR Collectors","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/upgrade-xdr-collectors","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"reMeq71boO6peE2C5uFi","title":"Uninstall the XDR Collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/uninstall-the-xdr-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"aeeigqc1Y0YYhu8qsDef","title":"Define XDR Collector machine groups","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/define-xdr-collector-machine-groups","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"fq3nWoF5iBoQdMtShSJq","title":"About Cortex Cloud Collector content updates","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/manage-xdr-collectors/about-cortex-cloud-collector-content-updates","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"Manage XDR Collectors"}]},{"id":"q8KUFELXcfSoPVgxzkh3","title":"XDR Collector profiles","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"4acOt3Vr7TeBIs4JsSpa","title":"Add an XDR Collector profile for Windows","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"xOKqQlZGRHN3urphsn9w","title":"How to configure XDR Collector profiles","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/how-to-configure-xdr-collector-profiles","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"VNWUIE1VXRnl20z8mZzp","title":"Additional XDR Collector profile management options","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/additional-xdr-collector-profile-management-options","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"v3OzvHTYnZ1XRnxEDZVF","title":"Query Windows Event Log records","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-windows/query-windows-event-log-records","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"},{"label":"Add an XDR Collector profile for Windows"}]},{"id":"PZdM0dUFl9OJvQOhHkVL","title":"Ingest logs from Windows DHCP using Elasticsearch Filebeat","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/ingest-logs-from-windows-dhcp-using-elasticsearch-filebeat","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"suFJLaKjGzlIvmKR3dAU","title":"Ingest Windows DNS debug logs using Elasticsearch Filebeat","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/ingest-windows-dns-debug-logs-using-elasticsearch-filebeat","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"Nd5bqZNT8lcsS76Ta1bU","title":"Add an XDR Collector profile for Linux","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-profiles/add-an-xdr-collector-profile-for-linux","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"},{"label":"XDR Collector profiles"}]},{"id":"uns4eCoPfXc1bhjoAo5m","title":"Apply profiles to collection machine policies","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/apply-profiles-to-collection-machine-policies","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"umrlDLkXPhTWM3IWV7Km","title":"XDR Collector datasets","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/xdr-collectors/xdr-collector-datasets","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"XDR Collectors"}]},{"id":"tibE31f2wmho92fYbzkP","title":"Palo Alto Networks integrations","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud supports data ingestion from other Palo Alto Networks products.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"dMvR0DSLT0LqpGH4n8bG","title":"About Palo Alto Networks integrations","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/about-palo-alto-networks-integrations","siteSpaceId":"sitesp_Lgqaz","description":"Stream data directly from other Palo Alto Networks products to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"up4jOVTSI2XpDT2b6ZeI","title":"Cloud Next-Generation Firewall","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/cloud-next-generation-firewall","siteSpaceId":"sitesp_Lgqaz","description":"Learn more ingesting firewall data from your Next-Generation Firewall (NGFW) and Panorama devices in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"lU6VvvtOK6THddkKF27L","title":"Ingest data from Cloud Next-Generation Firewall","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/cloud-next-generation-firewall/ingest-data-from-cloud-next-generation-firewall","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Cloud Next-Generation Firewall"}]},{"id":"cnYFvS7EPudSUXDseoE1","title":"Next-Generation Firewall","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"k6m6bhPPRWjrgRUcIV56","title":"Ingest data from Next-Generation Firewall","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall/ingest-data-from-next-generation-firewall","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"VIdBGHPHYR1hZQpKxNXG","title":"Ingest Next-Generation Firewall logs using the Syslog collector","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"fy2hjI39PgDFSJTERayW","title":"Panorama","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall/panorama","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"7Yga9zlcPKs0SZyp5NEh","title":"Prisma Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/prisma-access","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"cgDWCRYRVjIsEgNrOO3U","title":"Ingest data from Prisma Access","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/prisma-access/ingest-data-from-prisma-access","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to ingest detection data from Prisma Access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"kvHB1wf9vTnhN9g9bnno","title":"Palo Alto Networks Prisma","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/prisma-access/palo-alto-networks-prisma","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"CBBokM6OtSq7yD0419zS","title":"Ingest logs from Prisma Access Browser","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/ingest-logs-from-prisma-access-browser","siteSpaceId":"sitesp_Lgqaz","description":"Ingest Prisma Browser logs into Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"B2LuNpDSaCtlMp4AuiIz","title":"Ingest detection data from Strata Logging Service","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/ingest-detection-data-from-strata-logging-service","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to ingest detection data from Strata Logging Service.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"pUa4vQm8Zba0hhkZjswb","title":"IoT Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/iot-security","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"iyQ3eQLOGb5HW1MagCzu","title":"Ingest alerts and assets from IoT Security (Deprecated)","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/iot-security/ingest-alerts-and-assets-from-iot-security","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"cye05lDW7y2NpTHUWBvK","title":"Ingest alerts and assets from Device Security","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/iot-security/ingest-alerts-and-assets-from-device-security","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"Tw4MTQHxN5TqdYJ1kdzR","title":"Cortex Internals","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/cortex-internals","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"zCVWOa048uF9NpK4ME6X","title":"Enterprise DLP","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/enterprise-dlp","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"nJERB0S8fSlvn4JSUSPg","title":"Palo Alto Networks Cortex","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/palo-alto-networks-cortex","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"RM1LtuqnIFPW57vf0Y6a","title":"SaaS Security (Aperture)","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/saas-security-aperture","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"f1tM3CvAEz4dm2Cd1A4X","title":"WildFire Cloud","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/wildfire-cloud","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"FtWxN58WO328ziO9XCub","title":"Collecting URL and File log types","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/collecting-url-and-file-log-types","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"PC5BelKBfLxgcrXFU5Ut","title":"Detectors connected to URL and File log types","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/collecting-url-and-file-log-types/detectors-connected-to-url-and-file-log-types","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Collecting URL and File log types"}]},{"id":"7LEZ78mNa8tCniMuP8ka","title":"Cloud Posture and Runtime Security data sources","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/cloud-posture-and-runtime-security-data-sources","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the Cloud Posture and Runtime Security data sources in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"9AwBdekbrNWhBSCPjHu5","title":"Administration and troubleshooting","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the administration and troubleshooting of the different data collector integrations in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"PsFIwsZUzDSXI97vm3jN","title":"Manage instances","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"gZPXICvZVCYiqZ1u0K2x","title":"Add a new data source or instance","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/add-a-new-data-source-or-instance","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"IfVGr3ClyiFAxTnItrq7","title":"How to configure the scanning settings for supported services","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/how-to-configure-the-scanning-settings-for-supported-services","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"HvS0gvfah6ZoIXVbfbkC","title":"Manage cloud instances","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/manage-cloud-instances","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"fDCegwfPXnNEUUEn3pRz","title":"Update cloud permissions after Cortex release updates","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"WpzMUCn6Tw8onIDlIK6M","title":"Pending cloud instances","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/pending-cloud-instances","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"WWa0ZtrPuTO0eAONxfZ9","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"Bwdx5FfhGrZHqb6CCqHv","title":"Manage Kubernetes Connector instances","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/manage-kubernetes-connector-instances","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"5958UcaqxqYyLGkRd7fG","title":"Integrations","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"FCIFZSAdlNzAONfIwAOg","title":"Add an integration instance","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations/add-an-integration-instance","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"RyjiEvKdvurKamm11fTl","title":"Configure integration permissions","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations/configure-integration-permissions","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"33yoYI5VzpUhIG3TFjCd","title":"Troubleshoot Integrations","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations/troubleshoot-integrations","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"36yTqkcppIF0pMLgjjah","title":"Verify collector connectivity","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/verify-collector-connectivity","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"xiiLuQF4oCKf0lkWBza2","title":"Overview of data ingestion metrics","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/overview-of-data-ingestion-metrics","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"ItTmXn92jXXXtiQur9NG","title":"Creating correlation rules to monitor data ingestion health","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/overview-of-data-ingestion-metrics/creating-correlation-rules-to-monitor-data-ingestion-health","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Overview of data ingestion metrics"}]},{"id":"u116pCxBQA44yZ2KVtYC","title":"Measuring data freshness","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/overview-of-data-ingestion-metrics/measuring-data-freshness","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Overview of data ingestion metrics"}]},{"id":"XRJ5U7HVHGGAj3QGQNNW","title":"About health issues","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"sylemZXlatPZEbtIvOui","title":"Investigate and resolve health issues","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues/investigate-and-resolve-health-issues","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"7XAnSoIosT4dw44Oqzpu","title":"Monitor data ingestion health (BETA)","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues/monitor-data-ingestion-health","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"tjxCM1JFdLBpIIKISCaJ","title":"Monitor Correlation rules","pathname":"/cortex-cloud-runtime-security/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues/monitor-correlation-rules","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"Q7MfI06GAkCBAak2SVxH","title":"What is the Cortex Marketplace","pathname":"/cortex-cloud-runtime-security/marketplace/cortex-marketplace","siteSpaceId":"sitesp_Lgqaz","description":"Search Cortex Marketplace and find content. Search by use cases, integrations, and categories.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Marketplace"}]},{"id":"fxOR0qrOrgiXNChbqeZM","title":"Content Pack Support Types","pathname":"/cortex-cloud-runtime-security/marketplace/content-pack-support-types","siteSpaceId":"sitesp_Lgqaz","description":"Types of content packs support - Cortex supported, Partner-Supported, Developer-Supported, Community-Supported.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Marketplace"}]},{"id":"HeLsoqqcuf1ze1SRh90g","title":"Cortex Cloud content","pathname":"/cortex-cloud-runtime-security/marketplace/cortex-cloud-content","siteSpaceId":"sitesp_Lgqaz","description":"The type of content in Cortex Cloud","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Marketplace"}]},{"id":"uNzNkFnGGBI92OoOxBVs","title":"Manage content packs","pathname":"/cortex-cloud-runtime-security/marketplace/manage-content-packs","siteSpaceId":"sitesp_Lgqaz","description":"Install, delete, update, and revert content packs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Marketplace"}]},{"id":"O36C6AKCfBQSSQNyOEVv","title":"Marketplace FAQs","pathname":"/cortex-cloud-runtime-security/marketplace/marketplace-faqs","siteSpaceId":"sitesp_Lgqaz","description":"Frequently Asked Questions about Cortex Cloud Marketplace Content","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Marketplace"}]},{"id":"QmG1qxdz66vALuX8wG0a","title":"Content changes when upgrading Cortex Cloud versions","pathname":"/cortex-cloud-runtime-security/marketplace/content-changes-when-upgrading-cortex-cloud-versions","siteSpaceId":"sitesp_Lgqaz","description":"Content updates when upgrading Cortex Cloud versions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Marketplace"}]},{"id":"sCiTPqru7fDEAxB1Z2MS","title":"Learn about Serverless function posture security","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-security","siteSpaceId":"sitesp_Lgqaz","description":"Understand how Cortex Cloud scans and assesses serverless function security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"}]},{"id":"zvFmmY5EVeEK9XXCkvd5","title":"Onboard cloud providers for serverless functions","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/onboard-cloud-providers-for-serverless-functions","siteSpaceId":"sitesp_Lgqaz","description":"Onboard cloud providers to discover and assess serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"}]},{"id":"iRFntfdbRD2sDB6noEbh","title":"Serverless function posture rules","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-rules","siteSpaceId":"sitesp_Lgqaz","description":"Use posture rules to identify serverless function security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"}]},{"id":"o8wyWpbX92woVViW7aah","title":"Manage serverless function rules","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-rules/manage-serverless-function-rules","siteSpaceId":"sitesp_Lgqaz","description":"View, filter, enable, and manage serverless function posture rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"},{"label":"Serverless function posture rules"}]},{"id":"sk9bOjGUqguTXvgoESfD","title":"Create serverless function rules","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-rules/create-serverless-function-rules","siteSpaceId":"sitesp_Lgqaz","description":"Create custom rules to identify security risks in serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"},{"label":"Serverless function posture rules"}]},{"id":"v6MZUzxTe14QrTyeqVOx","title":"Create an attack path rule for serverless functions","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-rules/create-an-attack-path-rule-for-serverless-functions","siteSpaceId":"sitesp_Lgqaz","description":"Create attack path rules that identify risky routes to serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"},{"label":"Serverless function posture rules"}]},{"id":"YjznGJGcLK4rPogfLJv9","title":"Create a configuration rule for serverless functions","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-rules/create-a-configuration-rule-for-serverless-functions","siteSpaceId":"sitesp_Lgqaz","description":"Create configuration rules that identify serverless function misconfigurations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"},{"label":"Serverless function posture rules"}]},{"id":"mbxGjqu1Vk1z2P2ZpBYO","title":"Create a network exposure rule for serverless functions","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-rules/create-a-network-exposure-rule-for-serverless-functions","siteSpaceId":"sitesp_Lgqaz","description":"Create network exposure rules that identify publicly exposed serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"},{"label":"Serverless function posture rules"}]},{"id":"MFibLkZD3nOnwXRjrCmo","title":"Serverless function posture policies","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-policies","siteSpaceId":"sitesp_Lgqaz","description":"Create and manage serverless function policies to detect threats and drive remediation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"}]},{"id":"1piLC3CD6kCq5usoEXG3","title":"Manage serverless function policies","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-policies/manage-serverless-function-policies","siteSpaceId":"sitesp_Lgqaz","description":"View, edit, enable, and manage serverless function posture policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"},{"label":"Serverless function posture policies"}]},{"id":"Q52biPiwHf7rod6UQMJd","title":"Create serverless function policies","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-posture-policies/create-serverless-function-policies","siteSpaceId":"sitesp_Lgqaz","description":"Create policies that apply posture rules to selected serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"},{"label":"Serverless function posture policies"}]},{"id":"G6vYAicKLAuiazHaM6gw","title":"Serverless function usage","pathname":"/cortex-cloud-runtime-security/serverless-function-posture-security/serverless-function-usage","siteSpaceId":"sitesp_Lgqaz","description":"Monitor serverless function usage and related security posture data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless Function Posture Security"}]},{"id":"JxYUkR17U6JWOaEZDKHx","title":"Overview","pathname":"/cortex-cloud-runtime-security/serverless-function-runtime-security/overview","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud protects serverless functions at runtime.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless function runtime security"}]},{"id":"AW4qP2w7ApbEveqZh9rK","title":"Set up serverless function protection","pathname":"/cortex-cloud-runtime-security/serverless-function-runtime-security/set-up-serverless-function-protection","siteSpaceId":"sitesp_Lgqaz","description":"Configure runtime protection for your serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless function runtime security"}]},{"id":"1ISkGwXqBkuy62afzQKy","title":"Serverless runtime issues","pathname":"/cortex-cloud-runtime-security/serverless-function-runtime-security/serverless-runtime-issues","siteSpaceId":"sitesp_Lgqaz","description":"Investigate runtime security issues detected in serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Serverless function runtime security"}]},{"id":"N5HqNvlV7jQEJ12sctq3","title":"About Cortex CLI","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli","siteSpaceId":"sitesp_Lgqaz","description":"The Cortex CLI is a unified command-line tool integrating Cloud Workload Protection, API Security, and Code Security scans into a single executable.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"AVWrJO8E8xUnM9xs2z65","title":"Connect Cortex CLI","pathname":"/cortex-cloud-runtime-security/cortex-cli/connect-cortex-cli","siteSpaceId":"sitesp_Lgqaz","description":"Install Cortex CLI, configure authentication, and review module requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"SwAwF7E8iEuQye7XpYEp","title":"Installation workflows","pathname":"/cortex-cloud-runtime-security/cortex-cli/connect-cortex-cli/installation-workflows","siteSpaceId":"sitesp_Lgqaz","description":"Install Cortex CLI using a package manager, manual download, or the Cortex Cloud interface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"DhcROa3msSEZzDKewYKa","title":"Manage the CLI after installation","pathname":"/cortex-cloud-runtime-security/cortex-cli/connect-cortex-cli/manage-the-cli-after-installation","siteSpaceId":"sitesp_Lgqaz","description":"Upgrade, pin, uninstall, or update Cortex CLI through automated downloads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"nJKQ3gYvKUqhgtt3LcCK","title":"Authenticate credentials","pathname":"/cortex-cloud-runtime-security/cortex-cli/connect-cortex-cli/authenticate-credentials","siteSpaceId":"sitesp_Lgqaz","description":"Configure Cortex CLI credentials using a file, environment variables, or command-line flags.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"dFCtmBp1RCx0vKj8Qd84","title":"Self-service API keys for CLI scans","pathname":"/cortex-cloud-runtime-security/cortex-cli/connect-cortex-cli/self-service-api-keys-for-cli-scans","siteSpaceId":"sitesp_Lgqaz","description":"Create role-restricted API keys for Cortex CLI and IDE scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"YbeIw2nnTVbJcwsns6oY","title":"Cortex CLI usage","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-usage","siteSpaceId":"sitesp_Lgqaz","description":"Run Cortex CLI scans with global flags and module-specific options.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"Yh7O8cbAzTqat78If6Gi","title":"Exit codes and error handling","pathname":"/cortex-cloud-runtime-security/cortex-cli/exit-codes-and-error-handling","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"Tlz1bzWHTVJyxIlgvkMi","title":"Cortex CLI common command line reference guide","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-common-command-line-reference-guide","siteSpaceId":"sitesp_Lgqaz","description":"Reference common and global flags for Cortex CLI scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"FYn7ISP2ZuA6VJR20aln","title":"Cortex CLI for Code Security","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security","siteSpaceId":"sitesp_Lgqaz","description":"Run Code Security scans for secrets, IaC, and third-party dependencies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"pAy9yetq4aY43rigsP3E","title":"Cortex CLI usage for Cortex Cloud Application Security","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security/cortex-cli-usage-for-cortex-cloud-application-security","siteSpaceId":"sitesp_Lgqaz","description":"Run Cortex Cloud Application Security scans and configure scan output.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"1Hp7bnuoizkBJKKBdu7z","title":"Cortex CLI Cortex Cloud Application Security command line reference","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security/cortex-cli-cortex-cloud-application-security-command-line-reference","siteSpaceId":"sitesp_Lgqaz","description":"Reference commands and flags for Cortex Cloud Application Security scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"xWL2Kw4JRsuHbIqLEMip","title":"Custom Cortex checks and signature verification","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security/cortex-cli-cortex-cloud-application-security-command-line-reference/custom-cortex-checks-and-signature-verification","siteSpaceId":"sitesp_Lgqaz","description":"Load custom Cortex checks and optionally verify their signatures.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI Cortex Cloud Application Security command line reference"}]},{"id":"KCN4SSLXjh7yXb0UTjsz","title":"Cortex CLI pre-commit hooks","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-commit-hooks","siteSpaceId":"sitesp_Lgqaz","description":"Integrate Application Security secrets scanner as pre-commit hooks into your workflows to scan for errors on your machine before local commits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"qoMJyXn9Z6b30iXZeP0v","title":"Pre-commit hook usage","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-commit-hooks/pre-commit-hook-usage","siteSpaceId":"sitesp_Lgqaz","description":"Configure pre-commit hooks for local secrets scans and suppression.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI pre-commit hooks"}]},{"id":"edZP2IJnUTtobSBogHxn","title":"Cortex CLI pre-receive hooks","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-receive-hooks","siteSpaceId":"sitesp_Lgqaz","description":"Integrate the Application Security secrets scanner as a pre-receive hook into your workflows to scan for errors before code is accepted into your repository.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"dnCYweI17YvQgE6tsHa9","title":"Pre-receive hook usage","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-receive-hooks/pre-receive-hook-usage","siteSpaceId":"sitesp_Lgqaz","description":"Configure pre-receive hooks for server-side secrets scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI pre-receive hooks"}]},{"id":"W7dtC2QkwiySP3ZTXWhc","title":"Cortex CLI for Cloud Workload Protection","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-cloud-workload-protection","siteSpaceId":"sitesp_Lgqaz","description":"Scan container images and export SBOMs with Cloud Workload Protection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"fEcnhLqBOCpm478GvW0J","title":"Cloud Workload Protection command line reference","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-cloud-workload-protection/cloud-workload-protection-command-line-reference","siteSpaceId":"sitesp_Lgqaz","description":"Reference Cloud Workload Protection commands and flags for image scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Cloud Workload Protection"}]},{"id":"U3xNWWXFs0Xmgi1JTHv7","title":"Cortex CLI for API Security","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-api-security","siteSpaceId":"sitesp_Lgqaz","description":"Scan APIs for vulnerabilities and misconfigurations using Cortex CLI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"7P5hAU1EAdQXAVXTKwoD","title":"Cortex CLI API Security command line reference guide","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-api-security/cortex-cli-api-security-command-line-reference-guide","siteSpaceId":"sitesp_Lgqaz","description":"Reference commands and flags for Cortex CLI API Security scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for API Security"}]},{"id":"qCrqriQWhEOApVoRh0CQ","title":"API Security scan report schema","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-api-security/api-security-scan-report-schema","siteSpaceId":"sitesp_Lgqaz","description":"Reference schema for API Security scan reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for API Security"}]},{"id":"Tb2TffREauGPVqSs93fe","title":"API Security scan output example","pathname":"/cortex-cloud-runtime-security/cortex-cli/cortex-cli-for-api-security/api-security-scan-output-example","siteSpaceId":"sitesp_Lgqaz","description":"Example API Security scan report output.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for API Security"}]},{"id":"zbCYaidUTL3aJjMVliFi","title":"Get started with XQL","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql","siteSpaceId":"sitesp_Lgqaz","description":"XQL is the Palo Alto Networks Cortex Query Language used in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"}]},{"id":"UOINjOS5p0Ro3Lnh7hcY","title":"XQL language features","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/xql-language-features","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the Cortex Query Language features to query for raw network and endpoint data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"dhENJNohRAvLGeifwyUX","title":"XQL Language Structure","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/xql-language-structure","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the Cortex Query Language structure when creating a query.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"M2ZNJ9aeiAUB9cozShkV","title":"Supported operators","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/supported-operators","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Query Language supports specific comparison, boolean, and set operators in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"orDvxyhf3sZZEWT3nri4","title":"Datasets and presets","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/datasets-and-presets","siteSpaceId":"sitesp_Lgqaz","description":"The Cortex Query Language supports built-in datasets, custom datasets, and presets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"zuOs6ukLB1SPAFjEuqdv","title":"About examples","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/about-examples","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the Cortex Query Language (XQL) examples provided.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"VTgLsq4sddAftG2nCPL9","title":"JSON functions","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/json-functions","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how Cortex Cloud treats JSON functions in the Cortex Query Language.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"D6r5xQ9jceo1crONb69q","title":"How to filter for empty values in the results table","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/how-to-filter-for-empty-values-in-the-results-table","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to filter for empty values in the results table in Cortex Query Language.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"DKyA72u5KpVbZasvZV6m","title":"Understanding string manipulation in XQL","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/get-started-with-xql/understanding-string-manipulation-in-xql","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about string manipulation in Cortex Query Language (XQL) using double and triple quotes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"CYGeoFvxElViGuuPrHHm","title":"Build XQL queries","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"}]},{"id":"PeAbNpfmYOGfdKYUwORR","title":"About the Query Builder","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_Lgqaz","description":"The Query Builder facilitates threat detection, case expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"a88VlFDCSTTjnDR8QvBc","title":"How to build XQL queries","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"qzOzyXCFi6nkXV48m5cl","title":"XQL query entities","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/xql-query-entities","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the Cortex Query Language (XQL) entities available in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"QN9OAeYYtqhB9fKnzVfa","title":"Overview of the Query Center","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_Lgqaz","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"C7gtvcUqmmUrcIETmVjw","title":"Manage scheduled queries","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"u2KdFEfxTASj0ZbDkU7J","title":"Manage your query library","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/manage-your-query-library","siteSpaceId":"sitesp_Lgqaz","description":"Cortex Cloud provides a Query Library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"xJjE9H62RHcQePTTArvR","title":"XQL macros","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/xql-macros","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"jglH1xkAQr6DPpxOtnkj","title":"Manage your macros","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_Lgqaz","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"R9GMRx8eO6RN7F3I1wcX","title":"Cortex XQL syntax, parameters, and examples","pathname":"/cortex-cloud-runtime-security/cortex-cloud-xql/cortex-xql-syntax-parameters-and-examples","siteSpaceId":"sitesp_Lgqaz","description":"Comprehensive syntax rules and structural requirements for XQL queries","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Cortex Cloud XQL"}]},{"id":"iLvyRCFgPZNYyzXE6N3o","title":"What is Graph Search?","pathname":"/cortex-cloud-runtime-security/graph-search/what-is-graph-search","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to use Graph Search to search assets, findings, and their contextual data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"FdcYwuJWx3eSKJ6MnOL8","title":"Get started with Graph Search queries","pathname":"/cortex-cloud-runtime-security/graph-search/get-started-with-graph-search-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about how to get started before building a Graph Search query.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"1nL7sZa30P7zR9tSpJCC","title":"How to build Graph Search queries?","pathname":"/cortex-cloud-runtime-security/graph-search/how-to-build-graph-search-queries","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about building Graph Search queries using the built-in query interface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"aaIwklPjTZRKaDwLHghT","title":"Understand Graph Search query results","pathname":"/cortex-cloud-runtime-security/graph-search/understand-graph-search-query-results","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the Graph Search query results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"43fJlzLk6EQzWtnFJNfr","title":"Create Graph Search query","pathname":"/cortex-cloud-runtime-security/graph-search/create-graph-search-query","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to create Graph Search queries in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"K78eY8bUK69LqPrUqXDm","title":"Graph Search examples","pathname":"/cortex-cloud-runtime-security/graph-search/graph-search-examples","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to build Graph Search queries by working through a few examples.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"FtpBGvffkpthWGFYGbCi","title":"Manage the Graph Search Query Library","pathname":"/cortex-cloud-runtime-security/graph-search/manage-the-graph-search-query-library","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about the Cortex Cloud Graph Search Query Library to manage your queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"qEGwMWdwUkDYaRIXPwy2","title":"Edit and run queries in Query Center","pathname":"/cortex-cloud-runtime-security/graph-search/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about viewing the results of a query, modifying a query, and rerunning queries from Query Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"N4nd9q32LsODuQhQODHM","title":"Query Center reference information","pathname":"/cortex-cloud-runtime-security/graph-search/edit-and-run-queries-in-query-center/query-center-reference-information","siteSpaceId":"sitesp_Lgqaz","description":"Descriptions of the fields in the Query Center table.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"},{"label":"Edit and run queries in Query Center"}]},{"id":"D1SxCDDHV0XECfkcZfop","title":"Supported assets and findings","pathname":"/cortex-cloud-runtime-security/graph-search/supported-assets-and-findings","siteSpaceId":"sitesp_Lgqaz","description":"Review the assets and finding categories supported by Graph Search.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"m1oJrf3vKtOuV1xnV3RX","title":"FAQ on Graph Search","pathname":"/cortex-cloud-runtime-security/graph-search/faq-on-graph-search","siteSpaceId":"sitesp_Lgqaz","description":"Answer some frequently asked questions relating to Graph Search.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"4R7NGtup5Trljvy8jrlI","title":"Create detection rules based on graph search","pathname":"/cortex-cloud-runtime-security/graph-search/create-detection-rules-based-on-graph-search","siteSpaceId":"sitesp_Lgqaz","description":"Create Graph Engine detection rules from Graph Search queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Graph Search"}]},{"id":"PfkIotcolEyrJ4hbZExJ","title":"Release and documentation updates","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/release-and-documentation-updates","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"6UMmhJEreAF1dxdB8IZM","title":"Endpoint and Cortex XDR agent management","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"EZZJ8NKz1CLGXOrxENnV","title":"Cortex XDR agent upgrade and rollout control","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-upgrade-and-rollout-control","siteSpaceId":"sitesp_Lgqaz","description":"Control Cortex XDR agent upgrades and rollout rates in Cortex Cloud, including automatic updates, schedules, and failure handling.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"hSeP6e5hKFkgKXfZzmSb","title":"Endpoint isolation and live terminal","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/endpoint-isolation-and-live-terminal","siteSpaceId":"sitesp_Lgqaz","description":"Isolate endpoints and investigate them with Live Terminal in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"NX0DDNWRtRHH4E0AGyEj","title":"Cortex XDR agent supported platforms","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-supported-platforms","siteSpaceId":"sitesp_Lgqaz","description":"Review Windows, macOS, Linux, mobile, and ChromeOS platforms supported by the Cortex XDR agent in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"eBtCjogZQXbwU7YuNv3l","title":"Cortex XDR agent migration","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-migration","siteSpaceId":"sitesp_Lgqaz","description":"Plan a phased migration to the Cortex XDR agent in Cortex Cloud, including compatibility checks, rollout, validation, and rollback.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"DTDffz8q5F5iNHL4q0eV","title":"Cortex XDR agent offline protection","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-offline-protection","siteSpaceId":"sitesp_Lgqaz","description":"Learn how the Cortex XDR agent protects offline endpoints and which functions resume after reconnection to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"8O8UXIQ88Qdw3lc3QHS8","title":"Cortex XDR agent temporarily disable protection","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-temporarily-disable-protection","siteSpaceId":"sitesp_Lgqaz","description":"Temporarily disable Cortex XDR agent protections in Cortex Cloud for troubleshooting, using exceptions, policy changes, or Cytool.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"GcqWHHTwOIoO9bUryOU4","title":"Cortex XDR agent Linux operation modes","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-linux-operation-modes","siteSpaceId":"sitesp_Lgqaz","description":"Compare Cortex XDR agent Kernel Mode and User Space (eBPF) operation modes for Linux endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"IgM47sWUFjQIhjgAwok0","title":"Cortex XDR agent reboot requirements","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-reboot-requirements","siteSpaceId":"sitesp_Lgqaz","description":"Learn when Cortex XDR agent installation, upgrades, or uninstallation require an endpoint reboot, including Device Control and Secure Boot requirements in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"2vR6JHLh8LLoEWgJ7QfE","title":"Cortex XDR agent detection techniques","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-detection-techniques","siteSpaceId":"sitesp_Lgqaz","description":"Learn how the Cortex XDR agent in Cortex Cloud detects and prevents malware, exploits, ransomware, fileless attacks, and credential theft.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"W73oUAQHz6Hfc3A5VOqh","title":"Cortex XDR agent resource usage","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/endpoint-and-cortex-xdr-agent-management/cortex-xdr-agent-resource-usage","siteSpaceId":"sitesp_Lgqaz","description":"Understand Cortex XDR agent resource usage, minimum system requirements, performance factors, and troubleshooting steps for Windows, macOS, and Linux in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Endpoint and Cortex XDR agent management"}]},{"id":"ltKbNZ4tcfFgdEVrUVYP","title":"Data and platform administration","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/data-and-platform-administration","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"bzST75tdcVLzZaV3mJpm","title":"Audit logs","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/data-and-platform-administration/audit-logs","siteSpaceId":"sitesp_Lgqaz","description":"Learn how audit logs in Cortex Cloud track administrative and investigative activity, retain records, and forward notifications to external services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"yLB0m98sGpO6HFxrUMNe","title":"Data ingestion health","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/data-and-platform-administration/data-ingestion-health","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud monitors data ingestion health, detects gaps and delays, measures data freshness, and creates custom alerts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"sNz93ZIXLAHmrECwYXZK","title":"Data retention","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/data-and-platform-administration/data-retention","siteSpaceId":"sitesp_Lgqaz","description":"Learn about data retention periods, storage tiers, lifecycle options, and ways to manage retention costs in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"xf5qD1ypsziLVR5GB8vi","title":"Access control and authentication","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/data-and-platform-administration/access-control-and-authentication","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud manages role-based and scope-based access, SAML single sign-on, session controls, and tenant isolation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"SYNgUlWidriluTw7eJaJ","title":"Dashboards and reports","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/data-and-platform-administration/dashboards-and-reports","siteSpaceId":"sitesp_Lgqaz","description":"Learn how to use Cortex Cloud dashboards, scheduled reports, compliance content, and MITRE ATT&CK coverage to monitor security operations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"mpJaz7AepZPU1SQkXnTA","title":"Detection engineering and threat intelligence","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"3k4R3QOP8P79PuLXh9ug","title":"Custom detection rules","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence/custom-detection-rules","siteSpaceId":"sitesp_Lgqaz","description":"Create and validate custom BIOC, correlation, and IOC detection rules in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Detection engineering and threat intelligence"}]},{"id":"rSUSetvbzw2OvLKWot4e","title":"Identity analytics and ITDR","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence/identity-analytics-and-itdr","siteSpaceId":"sitesp_Lgqaz","description":"Detect identity threats and assess user risk with Identity Analytics and ITDR in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Detection engineering and threat intelligence"}]},{"id":"Wm0TeXkqNVnjxpnQSZcI","title":"MITRE ATT&CK mapping","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence/mitre-att-and-ck-mapping","siteSpaceId":"sitesp_Lgqaz","description":"Map detections to MITRE ATT&CK and identify coverage gaps in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Detection engineering and threat intelligence"}]},{"id":"IvsIsLKp7aqLEiUEVWc7","title":"False positive management","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence/false-positive-management","siteSpaceId":"sitesp_Lgqaz","description":"Reduce false positives with behavioral baselining, case grouping, and exceptions in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Detection engineering and threat intelligence"}]},{"id":"QA6w8Q6yuazwBi0MYxIR","title":"Investigation and case management","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/investigation-and-case-management","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"n0RuPqdnpCjZ0dy9I66M","title":"Case lifecycle and grouping","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/investigation-and-case-management/case-lifecycle-and-grouping","siteSpaceId":"sitesp_Lgqaz","description":"Learn how Cortex Cloud groups related issues into cases and manages their lifecycle.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Investigation and case management"}]},{"id":"WEeUObRvo56W2Bh06lrY","title":"Security operations and response","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/security-operations-and-response","siteSpaceId":"sitesp_Lgqaz","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"et4IXgb8stXlss0xL5Xy","title":"Host firewall overview","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/security-operations-and-response/host-firewall-overview","siteSpaceId":"sitesp_Lgqaz","description":"Configure and enforce endpoint host firewall rules from Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Security operations and response"}]},{"id":"ydcrsAKV0qB8kDTs8ijV","title":"Ransomware protection and response","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/security-operations-and-response/ransomware-protection-and-response","siteSpaceId":"sitesp_Lgqaz","description":"Prevent, investigate, and recover from ransomware attacks in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Security operations and response"}]},{"id":"3pUHH0cRV4URe2LXtFVA","title":"Remediation actions","pathname":"/cortex-cloud-runtime-security/insights-and-tips-cortex-cloud/security-operations-and-response/remediation-actions","siteSpaceId":"sitesp_Lgqaz","description":"Contain threats and recover endpoints with manual or automated remediation in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Security operations and response"}]},{"id":"eF2Neczp55vwYQMGgLpr","title":"Learn how to a migrate a new Broker VM image","pathname":"/cortex-cloud-runtime-security/migration-process-for-new-broker-vm-image/migrating-to-a-new-broker-vm-image","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about migrating to the latest broker VM image in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Migration process for New Broker VM Image"}]},{"id":"HXOPJvm6aUmP3fMJOuFd","title":"Standalone Broker VM","pathname":"/cortex-cloud-runtime-security/migration-process-for-new-broker-vm-image/standalone-broker-vm","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about migrating a standalone broker VM image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Migration process for New Broker VM Image"}]},{"id":"xtTpYXfyGI4S8ozkRIAK","title":"Broker VM high availability cluster node","pathname":"/cortex-cloud-runtime-security/migration-process-for-new-broker-vm-image/broker-vm-high-availability-cluster-node","siteSpaceId":"sitesp_Lgqaz","description":"Learn more about migrating a broker VM High Availability (HA) cluster node.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Runtime Security","icon":"cloud"},{"label":"Migration process for New Broker VM Image"}]},{"id":"8V0FrxE6FcsEG3XkZnDm","title":"Navigate the Cortex Cloud Posture Management docs","pathname":"/cortex-cloud-posture-management","siteSpaceId":"sitesp_5zLVr","description":"Start here for a visual overview of the main Cortex Cloud Posture Management documentation areas.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"6Z1eli5mHw5cQkJQY0gl","title":"What is Cortex Cloud?","pathname":"/cortex-cloud-posture-management/get-started/what-is-cortex-cloud","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud unifies cloud security from code to SOC.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"1OxDepiPghe7H48I7f6G","title":"Key features","pathname":"/cortex-cloud-posture-management/get-started/what-is-cortex-cloud/key-features","siteSpaceId":"sitesp_5zLVr","description":"Explore Cortex Cloud capabilities for visibility, risk management, compliance, and automation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"},{"label":"What is Cortex Cloud?"}]},{"id":"SLYl241SCCYd7asJngV8","title":"What is Cortex Cloud Posture Management?","pathname":"/cortex-cloud-posture-management/get-started/what-is-cortex-cloud-posture-management","siteSpaceId":"sitesp_5zLVr","description":"Learn about Cortex Cloud Posture Management and the key integrated capabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"ScCEkTYhrEhM9rOmbrxs","title":"Agentic AI in Cortex Cloud","pathname":"/cortex-cloud-posture-management/get-started/agentic-ai-in-cortex-cloud","siteSpaceId":"sitesp_5zLVr","description":"Use the Cortex Agentic Assistant to investigate cases, perform threat hunting, and create scripts. Embed and run LLM prompts in playbooks. View AI case summaries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"PxpBnElUsLb9JZfg9eXe","title":"Agentic Assistant use cases","pathname":"/cortex-cloud-posture-management/get-started/agentic-ai-in-cortex-cloud/agentic-assistant-use-cases","siteSpaceId":"sitesp_5zLVr","description":"Recommended prompts to automate your SOC using the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"},{"label":"Agentic AI in Cortex Cloud"}]},{"id":"B6GIv1N0ccLyHGlKEWAW","title":"Agentic Assistant security","pathname":"/cortex-cloud-posture-management/get-started/agentic-ai-in-cortex-cloud/agentic-assistant-security","siteSpaceId":"sitesp_5zLVr","description":"Learn about how the Agentic Assistant is built using responsible AI principles.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"},{"label":"Agentic AI in Cortex Cloud"}]},{"id":"vM8LLQM3gUfdnemAC1tM","title":"Best practices for using Agentic AI in Cortex Cloud","pathname":"/cortex-cloud-posture-management/get-started/agentic-ai-in-cortex-cloud/best-practices-for-using-agentic-ai-in-cortex-cloud","siteSpaceId":"sitesp_5zLVr","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"},{"label":"Agentic AI in Cortex Cloud"}]},{"id":"VgGbFUKqliLZtXcLRmxe","title":"Supported web browsers","pathname":"/cortex-cloud-posture-management/get-started/supported-web-browsers","siteSpaceId":"sitesp_5zLVr","description":"Review supported browser versions and performance requirements for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"c4FxoB989SeZmGRdOovp","title":"Use the interface","pathname":"/cortex-cloud-posture-management/get-started/use-the-interface","siteSpaceId":"sitesp_5zLVr","description":"Navigate the Cortex Cloud interface, Command Center, assets, and cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"43kge6WKD0rNK4CSsKrK","title":"In-product support ticket creation","pathname":"/cortex-cloud-posture-management/get-started/in-product-support-case-creation","siteSpaceId":"sitesp_5zLVr","description":"Open a support ticket directly in Cortex Cloud and record your console to capture your issues and have the ticket handled efficiently.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"oCxxTexL8ZKQfo1JN9vc","title":"Understand your user persona","pathname":"/cortex-cloud-posture-management/get-started/understand-your-user-persona","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud supports cloud security engineers and architects.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"oa4bKL6hKI5m2E88Lc6f","title":"Fair Usage policy for Cortex Cloud","pathname":"/cortex-cloud-posture-management/get-started/fair-usage-policy-for-cortex-cloud","siteSpaceId":"sitesp_5zLVr","description":"Understand fair usage expectations for data ingestion, data sources, and APIs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"ga2oagE6CBmK8twRYzt1","title":"Understand license plans","pathname":"/cortex-cloud-posture-management/get-started/understand-license-plans","siteSpaceId":"sitesp_5zLVr","description":"Understand Cortex Cloud licenses, protected workloads, add-ons, and usage rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"}]},{"id":"0eAfRQNPnliyDlexp9J9","title":"Data retention","pathname":"/cortex-cloud-posture-management/get-started/understand-license-plans/data-retention","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the default retention periods for all Cortex Cloud licenses and the available retention add-ons.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Get started"},{"label":"Understand license plans"}]},{"id":"jyZPRSVKh7aQrNlKnsnn","title":"Learn how to onboard and configure Cortex Cloud","pathname":"/cortex-cloud-posture-management/onboard-and-configure/onboard-and-configure-cortex-cloud","siteSpaceId":"sitesp_5zLVr","description":"Learn about the deployment preparation and procedures to onboard and configure Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"}]},{"id":"G73WetXhztwp25aN9Dbb","title":"Plan and prepare","pathname":"/cortex-cloud-posture-management/onboard-and-configure/plan-and-prepare","siteSpaceId":"sitesp_5zLVr","description":"Learn more about deployment considerations and onboarding steps.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"}]},{"id":"o1A4gNWdubHwVt2xtRZu","title":"Prepare for deployment","pathname":"/cortex-cloud-posture-management/onboard-and-configure/plan-and-prepare/prepare-for-deployment","siteSpaceId":"sitesp_5zLVr","description":"Learn more about deployment considerations and onboarding steps.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Plan and prepare"}]},{"id":"Zdw0A0ma8839rIAcWTcl","title":"Deployment steps and checklist","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist","siteSpaceId":"sitesp_5zLVr","description":"Review the steps to onboard and configure Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"}]},{"id":"8PqvbkZcAFj2oR1pJXzp","title":"Activate Cortex Cloud","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud","siteSpaceId":"sitesp_5zLVr","description":"Learn how to activate your tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"qjWQuGQzrsYfAipmC9dy","title":"Cortex Cloud supported regions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/cortex-cloud-supported-regions","siteSpaceId":"sitesp_5zLVr","description":"Review the regions where Cortex Cloud is available.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"}]},{"id":"zb4BzrMeGu2SZTnwCDqg","title":"Enable access to required PANW resources","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources","siteSpaceId":"sitesp_5zLVr","description":"Allow required access to Palo Alto Networks resources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"}]},{"id":"nF9xGfomv6AWeJx1rg17","title":"Regional egress resources","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/regional-egress-resources","siteSpaceId":"sitesp_5zLVr","description":"Review regional resources used for Cortex Cloud outbound connectivity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"28nGoKtmyygKYRrsz3IX","title":"Engines IP addresses (outbound)","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/engines-ip-addresses-outbound","siteSpaceId":"sitesp_5zLVr","description":"Find outbound IP addresses required by Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"UjmDHWZtS2fEl8AqFVLS","title":"Inbound source resources","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/inbound-source-resources","siteSpaceId":"sitesp_5zLVr","description":"Review inbound source resources required for Cortex Cloud access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"MTXbFt7f3rgE8NitfcW0","title":"FedRAMP and the US Federal Government required resources","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources/fedramp-and-the-us-federal-government-required-resources","siteSpaceId":"sitesp_5zLVr","description":"Review required resources for FedRAMP and US Federal Government deployments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Activate Cortex Cloud"},{"label":"Enable access to required PANW resources"}]},{"id":"5GFiso7PBT1vTWKDqNYo","title":"Upgrade from Prisma Cloud to Cortex Cloud","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud","siteSpaceId":"sitesp_5zLVr","description":"Link tenants, copy configurations, and migrate CLI workflows to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"OdQy18B5nQpdJRWwhyXa","title":"About the Upgrade Helper","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/about-the-upgrade-helper","siteSpaceId":"sitesp_5zLVr","description":"Learn how the Upgrade Helper supports your migration to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"9UrHFnyUYUMsubWrts7j","title":"Link Cortex Cloud to Prisma Cloud","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/link-cortex-cloud-to-prisma-cloud","siteSpaceId":"sitesp_5zLVr","description":"Link your Cortex Cloud and Prisma Cloud tenants before migrating.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"VLX8aib1s7YFg7Wlk8m3","title":"Copy content","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content","siteSpaceId":"sitesp_5zLVr","description":"Copy supported Prisma Cloud configurations to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"teSdXa0oZo07zGOeW9RY","title":"Copy Global configurations","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-global-configurations","siteSpaceId":"sitesp_5zLVr","description":"Copy supported global configurations from Prisma Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"CtcFv3C8FevqILha3pTr","title":"Copy CSPM configurations","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cspm-configurations","siteSpaceId":"sitesp_5zLVr","description":"Copy supported CSPM configurations from Prisma Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"C71N4AtFVIeqkFKMDzqn","title":"Copy CWP configurations","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cwp-configurations","siteSpaceId":"sitesp_5zLVr","description":"Copy supported CWP configurations from Prisma Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"AInp9cLchzTKOYNYPB79","title":"Copy Cortex Cloud Application Security configurations","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/copy-content/copy-cortex-cloud-application-security-configurations","siteSpaceId":"sitesp_5zLVr","description":"Copy supported Application Security configurations to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"},{"label":"Copy content"}]},{"id":"vtE2DgvsjZlof9EFymOC","title":"Migrate Cortex CLI","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/upgrade-from-prisma-cloud-to-cortex-cloud/migrate-cortex-cli","siteSpaceId":"sitesp_5zLVr","description":"Migrate Cortex CLI workflows from Prisma Cloud to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Upgrade from Prisma Cloud to Cortex Cloud"}]},{"id":"YXuP7F2pMWuvR2YCeTZY","title":"Set up users, groups, and roles","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-users-and-roles","siteSpaceId":"sitesp_5zLVr","description":"Learn how to set up users and roles in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"hUJG0bcktVGL4SeDLapR","title":"User group management","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-users-and-roles/user-group-management","siteSpaceId":"sitesp_5zLVr","description":"Create and manage user groups, roles, and scopes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Set up users, groups, and roles"}]},{"id":"V82cHPDYhjJODrW3qGn5","title":"Assign user roles and groups","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-users-and-roles/assign-user-roles-and-groups","siteSpaceId":"sitesp_5zLVr","description":"Assign roles and group memberships to users.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Set up users, groups, and roles"}]},{"id":"IaBg8GjpHdAisMiulxuK","title":"Manage API keys","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/manage-api-keys","siteSpaceId":"sitesp_5zLVr","description":"Create, manage, and revoke API keys for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"ZqurUvCUwTENt382pQNp","title":"Set up authentication","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication","siteSpaceId":"sitesp_5zLVr","description":"Authenticate Cortex Cloud users using SAML 2.0 or Customer Support Portal (CSP).","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"eq18In1PwJFhn22flFHC","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_5zLVr","description":"Authenticate users through the Customer Support Portal.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"FbB70OeFOk6g5LYbx9fA","title":"Authenticate users using SSO","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_5zLVr","description":"Configure SAML single sign-on for Cortex Cloud users.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"pyDaL7s4OWeAilmb3dTF","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_5zLVr","description":"Configure Okta as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"LQ8fQEb3iBlMzr2wHvTA","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_5zLVr","description":"Configure Microsoft Entra ID as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Set up authentication"}]},{"id":"WgIt1cM8aTwODm9hs5sg","title":"Cloud service provider (CSP) onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Learn about onboarding your cloud service provider to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"wj4Mj29EJjwsVkH7Wbg1","title":"Amazon Web Services cloud onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Follow the AWS onboarding wizard, and Cortex Cloud creates a custom authentication template to be deployed in AWS.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"mmFRHj7VFihyP89hTZqq","title":"AWS security capabilities and deployment planning","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_5zLVr","description":"Plan AWS onboarding based on supported security capabilities and deployment options.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"6YL6ukNcStqwk6G53yj1","title":"AWS resource inventory","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-resource-inventory","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud inventories AWS resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"JRcIAXN0PEzGw3o6n56T","title":"AWS security model and authentication","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-model-and-authentication","siteSpaceId":"sitesp_5zLVr","description":"Understand the AWS security model and authentication requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"SXGk2byl4YP3f13f5CHY","title":"Cortex Cloud and AWS audit log collection architecture","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/cortex-cloud-and-aws-audit-log-collection-architecture","siteSpaceId":"sitesp_5zLVr","description":"Understand how Cortex Cloud collects AWS audit logs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"jeRO1ml1sgS9zcSn5EvE","title":"Onboard Amazon Web Services","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/onboard-amazon-web-services","siteSpaceId":"sitesp_5zLVr","description":"Follow the AWS onboarding wizard, and Cortex Cloud creates a custom authentication template to be executed in AWS.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"tdEWVY8n0i2OnuSGvtuG","title":"Prerequisites for onboarding AWS","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/prerequisites-for-onboarding-aws","siteSpaceId":"sitesp_5zLVr","description":"Before you begin onboarding AWS, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"SKMgd7vpvbOUDffjixFO","title":"How to onboard Amazon Web Services","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/how-to-onboard-amazon-web-services","siteSpaceId":"sitesp_5zLVr","description":"Follow the AWS onboarding wizard and Cortex Cloud creates a custom authentication template to be deployed in AWS CloudFormation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"Rifdo5cvRbP7UC87zutA","title":"Deploy the authentication template in AWS","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/deploy-the-authentication-template-in-aws","siteSpaceId":"sitesp_5zLVr","description":"Learn how to deploy the Terraform or CloudFormation authentication template in Amazon Web Services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"xHQZgqyGyfugyYyrfIIH","title":"Post-deployment: Custom (BYOB) and Control Tower audit log collection","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/post-deployment-custom-byob-audit-log-collection","siteSpaceId":"sitesp_5zLVr","description":"Configure custom and Control Tower audit log collection after AWS onboarding.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"yNEQUgn5ld7LfYVGaSiD","title":"Grant cross-account KMS key access for Control Tower BYOB log collection","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/grant-cross-account-kms-key-access-for-control-tower-byob-log-collection","siteSpaceId":"sitesp_5zLVr","description":"Learn how to configure cross-account AWS KMS key permissions for Cortex Control Tower BYOB log collection. Step-by-step guide to updating KMS key policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"5YlfOd7aKiN3bmEaXE5f","title":"AWS post-deployment verification","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/aws-post-deployment-verification","siteSpaceId":"sitesp_5zLVr","description":"After you have completed the AWS onboarding wizard and you have deployed the authentication template in AWS (using CloudFormation or Terraform), verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"fKv0I5f54E4zYoHzNsVU","title":"Amazon Web Services (AWS) provider permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/amazon-web-services-cloud-onboarding/amazon-web-services-aws-provider-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Amazon Web Services (AWS) permissions for use during Cortex Cloud onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"p3yMpcGA63OWsoS5J0Ao","title":"Microsoft Azure cloud onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Onboard Microsoft Azure to monitor your cloud resources with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"vjXg8f8A6Uux4HdnNgGn","title":"Onboard Microsoft Azure","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/onboard-microsoft-azure","siteSpaceId":"sitesp_5zLVr","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"cE0QaE4eOokJoPyRnNmy","title":"Prerequisites for onboarding Azure","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/prerequisites-for-onboarding-azure","siteSpaceId":"sitesp_5zLVr","description":"Before you begin onboarding Microsoft Azure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"pwNrpd5iRr0tDz8PF6EB","title":"How to onboard Microsoft Azure","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/how-to-onboard-microsoft-azure","siteSpaceId":"sitesp_5zLVr","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"7jRTZvF3Kd9qksXhZFU9","title":"Finalize Microsoft Azure onboarding by executing the authentication template","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/finalize-microsoft-azure-onboarding-by-executing-the-authentication-template","siteSpaceId":"sitesp_5zLVr","description":"Learn how to execute the authentication template file in Microsoft Azure for subscriptions, tenants, and management groups. We provide instructions both for applying the Terraform template's configura","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"CrUAMl1WKM8hBImBdtoD","title":"Microsoft Azure offboarding overview","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview","siteSpaceId":"sitesp_5zLVr","description":"This section contains the technical procedures required to safely decommission and offboard your Cortex Cloud resources in Microsoft Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"rfzv743ol5onFLi78km5","title":"Offboard Terraform-based Azure deployments (all scopes)","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-terraform-based-azure-deployments-all-scopes","siteSpaceId":"sitesp_5zLVr","description":"How to offboard all Terraform-based Microsoft Azure scopes from Cortex Cloud: A step-by-step technical guide to safely running Terraform destroy and cleaning up policy-deployed resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"NM6hHwHLA69C8ygho5xB","title":"Offboard Azure subscription (ARM)","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-subscription-arm","siteSpaceId":"sitesp_5zLVr","description":"How to offboard a Microsoft Azure subscription scope that was onboarded using ARM: A step-by-step technical guide to safely running the interactive offboarding script and cleaning up all resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"paOnCy6jXQvOIRhtjmRC","title":"Offboard Azure management group or tenant scope (ARM)","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-management-group-or-tenant-scope-arm","siteSpaceId":"sitesp_5zLVr","description":"How to offboard Microsoft Azure management group or tenant scopes from Cortex Cloud: A step-by-step technical guide to safely removing all Azure resources deployed by Cortex onboarding templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"caUOrtYWFyE9a75fC9kQ","title":"Offboard Azure tenant with Entra ID only","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-tenant-with-entra-id-only","siteSpaceId":"sitesp_5zLVr","description":"How to offboard a Microsoft Azure tenant onboarded with the Entra ID only option from Cortex Cloud: A step-by-step technical guide to safely removing deployed resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"Lu6LjsShyaIB1QoONCE3","title":"Microsoft Azure provider permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-provider-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Microsoft Azure provider permissions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"hoPujFPqHcJTDNHeKTly","title":"Google Cloud Platform cloud onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Onboard Google Cloud Platform to monitor cloud resources with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"nAYZh00JmC6S1i4NKCQs","title":"Onboard Google Cloud Platform","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/onboard-google-cloud-platform","siteSpaceId":"sitesp_5zLVr","description":"Follow the GCP onboarding wizard, and Cortex creates a custom authentication template to be executed in GCP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"XLv9NaGs88jNiNPvXKdo","title":"Prerequisites for onboarding GCP","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp","siteSpaceId":"sitesp_5zLVr","description":"Before you begin onboarding GCP, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"8vhDXQ6slNV0H5Y4x3zh","title":"Required APIs","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp/required-apis","siteSpaceId":"sitesp_5zLVr","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"},{"label":"Prerequisites for onboarding GCP"}]},{"id":"XrvgzLILJYeTODwcDIGe","title":"How to onboard Google Cloud Platform","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/how-to-onboard-google-cloud-platform","siteSpaceId":"sitesp_5zLVr","description":"Follow the GCP onboarding wizard, and Cortex Cloud creates a custom authentication template to be applied in GCP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"sgJdF0h7lVv7pS7bcTSC","title":"Deploy the Terraform authentication template in GCP","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/deploy-the-terraform-authentication-template-in-gcp","siteSpaceId":"sitesp_5zLVr","description":"Learn how to deploy the Terraform authentication template in Google Cloud Console.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"p0i1TKFeQYrQdw2o4Vj3","title":"Connect Google Workspace with your GCP cloud instance","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/connect-google-workspace-with-your-gcp-cloud-instance","siteSpaceId":"sitesp_5zLVr","description":"Connect Google Workspace to your Google Cloud Platform cloud instance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"xOThCTwI5btHjbe7y6yg","title":"Monitor GCP resources inside service perimeters","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/monitor-gcp-resources-inside-service-perimeters","siteSpaceId":"sitesp_5zLVr","description":"Learn how to grant authorization to Cortex Cloud to scan within your GCP service perimeter.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"pNOjCDoUNjBJHBROPm2A","title":"Google Cloud Platform (GCP) provider permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/google-cloud-platform-cloud-onboarding/google-cloud-platform-gcp-provider-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex Cloud onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"4qQExCK5sdyLc8Sr9ae3","title":"Oracle Cloud Infrastructure cloud onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Follow the Oracle Cloud Infrastructure onboarding wizard and Cortex Cloud creates a custom Terraform authentication template to be deployed in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"dcDVI6UI4N8VcrYnR3wF","title":"Onboard Oracle Cloud Infrastructure","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_5zLVr","description":"Follow the OCI onboarding wizard, and Cortex creates a custom authentication template to be executed in OCI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"uOuxyEbsGeRlBUxqVZXC","title":"Prerequisites for onboarding OCI","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/prerequisites-for-onboarding-oci","siteSpaceId":"sitesp_5zLVr","description":"Before you begin onboarding Oracle Cloud Infrastructure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"MD1IbknLzSeMdVebb1QR","title":"How to onboard Oracle Cloud Infrastructure","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/how-to-onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_5zLVr","description":"Follow the OCI onboarding wizard and Cortex Cloud creates a custom authentication template to be applied in OCI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"RgnuWxK9FyS6INAyy7GB","title":"Deploy the Terraform authentication template in OCI","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/deploy-the-terraform-authentication-template-in-oci","siteSpaceId":"sitesp_5zLVr","description":"Learn how to deploy the Terraform authentication template in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"pswmqJRqEWRnTeZhyKlM","title":"Oracle Cloud Infrastructure (OCI) provider permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/oracle-cloud-infrastructure-oci-provider-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Oracle Cloud Infrastructure provider permissions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"UH4djcF71RDq4WKDdEDS","title":"Alibaba Cloud cloud onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Follow the Alibaba Cloud onboarding wizard and Cortex Cloud creates a custom Terraform authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"0FGI3iR3vTQqMatXSg7x","title":"Alibaba security capabilities and deployment planning","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_5zLVr","description":"Plan Alibaba Cloud onboarding based on security capabilities and deployment options.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"63XZRn3RuMOn9NRS6KjA","title":"Alibaba Cloud resource inventory","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-resource-inventory","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud inventories Alibaba Cloud resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"qE0MPjWQfoiZKXDfKt6m","title":"Alibaba Cloud security model and authentication","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-security-model-and-authentication","siteSpaceId":"sitesp_5zLVr","description":"Understand the Alibaba Cloud security model and authentication requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"T298W03o2PVQ45iMkuuo","title":"Onboard Alibaba Cloud","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/onboard-alibaba-cloud","siteSpaceId":"sitesp_5zLVr","description":"Follow the Alibaba Cloud onboarding wizard and Cortex Cloud creates a custom CloudFormation authentication template to be deployed in Alibaba Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"FotZLNuqzcBdZD6OkJmI","title":"Prerequisites for onboarding Alibaba Cloud","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/prerequisites-for-onboarding-alibaba-cloud","siteSpaceId":"sitesp_5zLVr","description":"Before you begin onboarding Alibaba Cloud, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"5CJGtIski69E6ltT9AqV","title":"How to onboard Alibaba Cloud","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/how-to-onboard-alibaba-cloud","siteSpaceId":"sitesp_5zLVr","description":"Follow the onboarding workflow for Alibaba Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"jt2NXX8jYqDJye9wmryr","title":"Alibaba Cloud post-deployment verification","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-post-deployment-verification","siteSpaceId":"sitesp_5zLVr","description":"After you have completed the Alibaba Cloud onboarding wizard and you have deployed the authentication template in Alibaba Cloud, verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"XZQbJw3bmKFcR7xGV1d4","title":"Alibaba Cloud provider permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/alibaba-cloud-cloud-onboarding/alibaba-cloud-provider-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Alibaba Cloud permissions for use during Cortex Cloud onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Alibaba Cloud cloud onboarding"}]},{"id":"CyDIXzNBYFTTboxv1eR6","title":"Outpost onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Learn about outposts, which are a dedicated set of infrastructure resources that extends the reach of Cortex Cloud into your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"IBQJG3OTOvA9OFwj8C7J","title":"Outpost fundamentals and planning","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-fundamentals-and-planning","siteSpaceId":"sitesp_5zLVr","description":"An outpost enables you to have security scans performed on infrastructure in a cloud account owned by you. Learn about outpost fundamentals and what to consider when planning your outpost.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"QYEpb2yUhAnk65LXlkaq","title":"Outpost creation workflow","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-creation-workflow","siteSpaceId":"sitesp_5zLVr","description":"Learn about the creation process for an outposts, which facilitate security scanning performed on infrastructure in a cloud account owned by you.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"Vrudf0VypNJ2BDppqBYQ","title":"Working with standard outposts","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts","siteSpaceId":"sitesp_5zLVr","description":"Standard outposts are the recommended way to create dedicated set of infrastructure resources that extends the reach of Cortex Cloud into your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"RyWv7J2jnLsMlCIJjjaM","title":"Create a standard outpost","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-standard-outposts/create-a-standard-outpost","siteSpaceId":"sitesp_5zLVr","description":"Instructions for creating a standard outpost while onboarding your CSP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with standard outposts"}]},{"id":"EFY0F6w5G4J8w86i62DJ","title":"Working with Bringing your own Azure app (BYOA) outposts","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts","siteSpaceId":"sitesp_5zLVr","description":"Using advanced settings while creating your outpost, you can deploy a Cortex Cloud Azure outpost using your own pre-created Entra ID app registration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"6P7tWYt5GkTHFbft2C0z","title":"Task 1: Meet the prerequisites for Azure BYOA outposts","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-1-meet-the-prerequisites-for-azure-byoa-outposts","siteSpaceId":"sitesp_5zLVr","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page lists the prerequisites that must be met before customizing your outpost in this way.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"O8peaoj0uGv83RLHjMAH","title":"Task 2: Create the app registration for the Azure BYOA outpost","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-2-create-the-app-registration-for-the-azure-byoa-outpost","siteSpaceId":"sitesp_5zLVr","description":"You can customize your own outpost for Azure by bringing your own app (BYOA). This page describes the steps for creating the app registration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"mhLGwPVHEjty95ezqI0u","title":"Task 3: Deploy the Azure BYOA outpost","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-3-deploy-the-azure-byoa-outpost","siteSpaceId":"sitesp_5zLVr","description":"You can customize your own outpost by bringing your own app (BYOA). This page describes the steps for deploying the Azure BYOA outpost.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"VnFjjPDscKvIPF5m1TAY","title":"Task 4: Verify the BYOA outpost deployment","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-4-verify-the-byoa-outpost-deployment","siteSpaceId":"sitesp_5zLVr","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page describes the steps for verifying your BYOA outpost deployment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"e9bdrxOng5XYH7Bm7jMo","title":"The shell script for Azure app registration","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/the-shell-script-for-azure-app-registration","siteSpaceId":"sitesp_5zLVr","description":"You can run this helper shell script to set up your resources and retrieve their IDs for use while creating your Azure BYOA outpost. This page provides technical, \"read-me style\" details about the scr","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"ycX1qYEGqZmykAXz7b4V","title":"Outpost troubleshooting","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-troubleshooting","siteSpaceId":"sitesp_5zLVr","description":"Check here for solutions to issues that might occur while configuring, deploying, and operating outposts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"qQ8KrGQkF3lcq3jTZ0mV","title":"Outpost Cloud Service Provider (CSP) permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions","siteSpaceId":"sitesp_5zLVr","description":"This page lists and explains the various roles and permissions needed for working with resources for outposts by CSP.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"iLo2mXmzjAsIWL9TXnIc","title":"Amazon Web Services (AWS) outpost permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/amazon-web-services-aws-outpost-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Amazon Web Services (AWS) permissions for use during Cortex Cloud outpost onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"Y7ttoA7nygxYNu6kOU3v","title":"Microsoft Azure outpost permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/microsoft-azure-outpost-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Microsoft Azure provider outpost permissions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"pPnALYcQlVkF4JzER0I7","title":"Google Cloud Platform (GCP) outpost permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/google-cloud-platform-gcp-outpost-permissions","siteSpaceId":"sitesp_5zLVr","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex Cloud onboarding outposts to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"AvdBwt8v82rshNsuOIR2","title":"Introduction to Terraform for Cloud service provider (CSP) onboarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/introduction-to-terraform-for-cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Learn how to onboard Cloud Service Providers (CSPs) using Terraform. Discover step-by-step workflows for initial provisioning, updates, and Cloud Shell deployment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"NViIi4C4cESiLTG4Q77t","title":"Manually connect a cloud instance","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/manually-connect-a-cloud-instance","siteSpaceId":"sitesp_5zLVr","description":"Connect a cloud instance manually when automated onboarding is unavailable.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"TUOixl13cqSymmek0lUV","title":"Pending cloud instances","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/pending-cloud-instances","siteSpaceId":"sitesp_5zLVr","description":"Review cloud instances awaiting onboarding or configuration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"VxruvhSKV3ra6KTHdHH3","title":"Edit your onboarded CSP configuration","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/edit-your-onboarded-csp-configuration","siteSpaceId":"sitesp_5zLVr","description":"Update configuration settings for an onboarded cloud service provider.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"fmITafJTnqnCpLpIyaT0","title":"Update cloud permissions after Cortex Cloud release updates","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_5zLVr","description":"Manage permission updates for your cloud instances following new feature releases or bug fixes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"Ge2cJF9T9hUpBEdTG1LA","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_5zLVr","description":"You can troubleshoot errors on cloud instances by drilling down on an instance from the Data Sources & Integrations page.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"GjAldFAjTLAhXNg3es6L","title":"Cloud service provider permissions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/cloud-service-provider-permissions","siteSpaceId":"sitesp_5zLVr","description":"Grant the correct cloud service provider permissions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"tc9E1vv7bMVdtUxvAVZp","title":"Onboard the Kubernetes Connector","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/onboard-the-kubernetes-connector","siteSpaceId":"sitesp_5zLVr","description":"Connect Kubernetes clusters to Cortex Cloud for monitoring and security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"KLZ3dMarroq1l1CLT0uQ","title":"What's new in Kubernetes Connector?","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/onboard-the-kubernetes-connector/whats-new-in-kubernetes-connector","siteSpaceId":"sitesp_5zLVr","description":"Review recent Kubernetes Connector features and updates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Onboard the Kubernetes Connector"}]},{"id":"SqTTFGjSBFPICgTu5x40","title":"Supported Kubernetes distributions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/onboard-the-kubernetes-connector/supported-kubernetes-distributions","siteSpaceId":"sitesp_5zLVr","description":"Review Kubernetes distributions supported by the Kubernetes Connector.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"Onboard the Kubernetes Connector"}]},{"id":"UoeJoGmkga9Gnj23AumS","title":"FedRAMP overview","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview","siteSpaceId":"sitesp_5zLVr","description":"Learn about Cortex Cloud FedRAMP support and deployment considerations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"}]},{"id":"WnG6XPxlnpe1bNX8oKdo","title":"Cortex Cloud federal compliance","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview/cortex-cloud-federal-compliance","siteSpaceId":"sitesp_5zLVr","description":"Review federal compliance capabilities in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"FedRAMP overview"}]},{"id":"gQ4rFZbbgi1MAbunb4El","title":"Onoarding & configuration","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview/onoarding-and-configuration","siteSpaceId":"sitesp_5zLVr","description":"Configure Cortex Cloud for a FedRAMP deployment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"FedRAMP overview"}]},{"id":"mvKIeDkzeJLohN3eAHw1","title":"Limitations & supported regions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/fedramp-overview/limitations-and-supported-regions","siteSpaceId":"sitesp_5zLVr","description":"Review FedRAMP limitations and supported Cortex Cloud regions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Deployment steps and checklist"},{"label":"FedRAMP overview"}]},{"id":"nSwK9NxVj7YBLwGjhb1F","title":"Post-deployment steps","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps","siteSpaceId":"sitesp_5zLVr","description":"Complete environment setup, access management, and other post-deployment tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"}]},{"id":"mx7hhPl0cDyd83gaD3mY","title":"Set up your environment","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment","siteSpaceId":"sitesp_5zLVr","description":"Learn more about setting up the Cortex Cloud environment based on your preferences.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"}]},{"id":"ZEMvG5hrukZ3ctsvjQYJ","title":"Configure server settings","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/configure-server-settings","siteSpaceId":"sitesp_5zLVr","description":"Configure server settings for your Cortex Cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"vLFNyFnHUloQn7UiBvmY","title":"Configure security settings","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/configure-security-settings","siteSpaceId":"sitesp_5zLVr","description":"Configure security settings for your Cortex Cloud environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"ZBBJf6ZP4QXrF1UEsSOG","title":"Data and log forwarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding","siteSpaceId":"sitesp_5zLVr","description":"Configure data and log forwarding from Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"}]},{"id":"EvhhtaTBbDUe2psOR2rV","title":"Forward logs and data from Cortex Cloud to external services","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services","siteSpaceId":"sitesp_5zLVr","description":"Send Cortex Cloud logs and data to external services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"}]},{"id":"gyVFCTBH0ZmrVsUUOlAW","title":"Configure external applications for forwarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding","siteSpaceId":"sitesp_5zLVr","description":"Configure external applications to receive Cortex Cloud notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"58MvPwmbBpp3224VHLtI","title":"Forward notifications to Amazon SQS","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-sqs","siteSpaceId":"sitesp_5zLVr","description":"Forward Cortex Cloud notifications to an Amazon SQS queue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"BOffnRkGrlEwSTQfb1KN","title":"Forward notifications to Amazon S3","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-s3","siteSpaceId":"sitesp_5zLVr","description":"Forward Cortex Cloud notifications to an Amazon S3 bucket.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"3wkBobPej9uNeDw5JI5E","title":"Forward notifications to Splunk","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-splunk","siteSpaceId":"sitesp_5zLVr","description":"Forward Cortex Cloud notifications to Splunk.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"BGWacEdKnTvwQ2r437cH","title":"Forward notifications to webhook","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-webhook","siteSpaceId":"sitesp_5zLVr","description":"Forward Cortex Cloud notifications to a webhook endpoint.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"O67dNTXjcHxFVNiTbndT","title":"Integrate a syslog receiver","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/integrate-a-syslog-receiver","siteSpaceId":"sitesp_5zLVr","description":"Configure a syslog receiver for Cortex Cloud notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"d0oLufubZQ9NPDJad2Qv","title":"Integrate Slack for outbound notifications","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-external-applications-for-forwarding/integrate-slack-for-outbound-notifications","siteSpaceId":"sitesp_5zLVr","description":"Configure Slack to receive outbound Cortex Cloud notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"MZEbFyqVdBMYUYpcjfhA","title":"Configure notification forwarding","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/configure-notification-forwarding","siteSpaceId":"sitesp_5zLVr","description":"Configure where Cortex Cloud forwards notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"BgtAeIYEBDN0b0C65cGv","title":"Set up email notifications for tenant updates","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/set-up-email-notifications-for-tenant-updates","siteSpaceId":"sitesp_5zLVr","description":"Configure email notifications for Cortex Cloud tenant updates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"YVDFsnFF9UKkpz95l6vD","title":"Monitor administrative activity","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/forward-logs-and-data-from-cortex-cloud-to-external-services/monitor-administrative-activity","siteSpaceId":"sitesp_5zLVr","description":"Monitor administrative activity in your Cortex Cloud tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Forward logs and data from Cortex Cloud to external services"}]},{"id":"7eELGaSRi1eesg1MnifR","title":"Data and log notification formats","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats","siteSpaceId":"sitesp_5zLVr","description":"Review formats for Cortex Cloud data and log notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"}]},{"id":"VdGQP4OnyLSogs6XA1hq","title":"Management audit log messages","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-messages","siteSpaceId":"sitesp_5zLVr","description":"Review management audit log message formats.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"RqhVLxAosJVDEIFeoNrl","title":"Issue notification format","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/issue-notification-format","siteSpaceId":"sitesp_5zLVr","description":"Review the format of Cortex Cloud issue notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"Y6dSmYzoYcwdyRGAtf6Q","title":"Agent Audit log notification format","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/agent-audit-log-notification-format","siteSpaceId":"sitesp_5zLVr","description":"Review the format of agent audit log notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"D8OMZQKSWrPElOwkfdYH","title":"Management Audit log notification format","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/management-audit-log-notification-format","siteSpaceId":"sitesp_5zLVr","description":"Review the format of management audit log notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"d3LDwwBRTZFoYMTVM51I","title":"Log format for IOC and BIOC issues","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/log-format-for-ioc-and-bioc-issues","siteSpaceId":"sitesp_5zLVr","description":"Review log formats for IOC and BIOC issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"U9wzqfiptSx0a9lSNpBa","title":"Analytics log format","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/set-up-your-environment/data-and-log-forwarding/data-and-log-notification-formats/analytics-log-format","siteSpaceId":"sitesp_5zLVr","description":"Review the analytics log format.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Set up your environment"},{"label":"Data and log forwarding"},{"label":"Data and log notification formats"}]},{"id":"6lcoOne5DLcvq0ZHqzSg","title":"Cortex MCP server","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/cortex-mcp-server","siteSpaceId":"sitesp_5zLVr","description":"The Cortex MCP server enables you to leverage Cortex's powerful capabilities directly through natural language.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"}]},{"id":"v03t5A48RlDF8XUPAEEt","title":"Install the Cortex MCP server","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/cortex-mcp-server/install-the-cortex-mcp-server","siteSpaceId":"sitesp_5zLVr","description":"Install the Cortex MCP server in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"TkuG4L6Rp7dgdSTiDdcb","title":"Configure the MCP client","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/cortex-mcp-server/configure-the-mcp-client","siteSpaceId":"sitesp_5zLVr","description":"Configure an MCP client to connect to the Cortex MCP server.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"JzuVco1Ba7VGw1heQFF7","title":"Use the Cortex MCP server","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/cortex-mcp-server/use-the-cortex-mcp-server","siteSpaceId":"sitesp_5zLVr","description":"Use the Cortex MCP server with your MCP client.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"fa6Ehzqhx6w5dQ3icPjh","title":"Create custom Cortex MCP server tools","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/cortex-mcp-server/create-custom-cortex-mcp-server-tools","siteSpaceId":"sitesp_5zLVr","description":"Create custom tools for the Cortex MCP server.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Cortex MCP server"}]},{"id":"qWFByCb9tKujS8IQ97CG","title":"Manage user roles and access management","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management","siteSpaceId":"sitesp_5zLVr","description":"Learn how to manage access for users, user roles, user groups, and Single Sign-On (SSO) for users on a specific Cortex Cloud tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"}]},{"id":"Bh509BICNWieHsE4X0ba","title":"Manage user roles","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-roles","siteSpaceId":"sitesp_5zLVr","description":"Create and manage user roles in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"MQxhznDvD3JZw2MpWfl9","title":"Manage user access","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-access","siteSpaceId":"sitesp_5zLVr","description":"Manage user access to Cortex Cloud features and data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"AEJbbPTVLhjL1EVZT5MB","title":"User access reference information","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-access/user-access-reference-information","siteSpaceId":"sitesp_5zLVr","description":"Review reference information for managing user access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage user access"}]},{"id":"8FI75FdSNEAhB1vniB7Y","title":"Manage user scope","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-user-scope","siteSpaceId":"sitesp_5zLVr","description":"Manage user scope to control access to Cortex Cloud data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"r6H0Z7d6ILxAUBpraklw","title":"Manage access to objects","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects","siteSpaceId":"sitesp_5zLVr","description":"Control access to Cortex Cloud objects and saved content.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"}]},{"id":"VpzZCQUl6BtNZuzRtuoy","title":"Manage access to custom dashboards","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-custom-dashboards","siteSpaceId":"sitesp_5zLVr","description":"Control access to custom dashboards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"NthsjrLsq169r8U4PYv6","title":"Manage access to report templates","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-report-templates","siteSpaceId":"sitesp_5zLVr","description":"Control access to report templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"zBmdhwMqfeeU0Kq5g0Au","title":"Manage access to playbooks and scripts","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-playbooks-and-scripts","siteSpaceId":"sitesp_5zLVr","description":"Control access to playbooks and scripts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"ygNVzrNjhK418T9xsWJO","title":"Manage access to saved queries","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/manage-user-roles-and-access-management/manage-access-to-objects/manage-access-to-saved-queries","siteSpaceId":"sitesp_5zLVr","description":"Control access to saved queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Manage user roles and access management"},{"label":"Manage access to objects"}]},{"id":"1ma28HKHKNtfnYuwQKNw","title":"Configure the Cortex Agentic Assistant","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant","siteSpaceId":"sitesp_5zLVr","description":"Configure the Cortex Agentic Assistant for your organization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"}]},{"id":"fzFOgQArmyGqwyvUICs2","title":"Agentic Assistant components and concepts","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agentic-assistant-components-and-concepts","siteSpaceId":"sitesp_5zLVr","description":"Learn about the key components and concepts, such as agents and actions in the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"TtOElTZJA9TmstoqnF0D","title":"Agentic Assistant Hub","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub","siteSpaceId":"sitesp_5zLVr","description":"Learn about personal and system agents in in the Agentic Assistant Hub","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"CjhCudF7fVlYpxVfdExR","title":"Manage actions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-actions","siteSpaceId":"sitesp_5zLVr","description":"Manage actions available to Cortex Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"CSZsh72ppy03VwxcZGUX","title":"Register actions","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/register-actions","siteSpaceId":"sitesp_5zLVr","description":"Register actions for use by Cortex Agentic Assistant agents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"P1NyTXuyyz3DoLrPq9Qq","title":"Manage agents","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-agents","siteSpaceId":"sitesp_5zLVr","description":"Manage Cortex Agentic Assistant agents and their configurations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"I2FcVss6B7wplfq3pahS","title":"Build agents","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/build-agents","siteSpaceId":"sitesp_5zLVr","description":"Build custom agents for the Cortex Agentic Assistant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"f4PagMJpxyrTkKKSohKq","title":"Manage knowledge sources (preview)","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/manage-knowledge-sources-preview","siteSpaceId":"sitesp_5zLVr","description":"Enhance AI agent capabilities by leveraging the Knowledge Center (preview) to provide agents with your business-specific source of truth and built-in Cortex (system) knowledge.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"owz6Xi0k1VFuY1rlQyRb","title":"Expand agent capabilities with MCP integrations","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agents-hub/expand-agent-capabilities-with-mcp-integrations","siteSpaceId":"sitesp_5zLVr","description":"Connect MCP integrations to extend agent capabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"cwZ8ZUhLaR1rdQf3Vsch","title":"Agentic Assistant role-based access control","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/configure-the-cortex-agentic-assistant/agentic-assistant-role-based-access-control","siteSpaceId":"sitesp_5zLVr","description":"Configure permissions to access Cortex Agentic Assistant features.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"LV8MnIvoMrVZhm0S0Nc7","title":"XQL query management","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/xql-query-management","siteSpaceId":"sitesp_5zLVr","description":"Administrators can set controls on running XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"}]},{"id":"gA6jpZsejx6AxjMyVXC5","title":"Dashboards and reports","pathname":"/cortex-cloud-posture-management/onboard-and-configure/post-deployment-steps/dashboards-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Use dashboards and reports to monitor Cortex Cloud data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"onboard and configure"},{"label":"Post-deployment steps"}]},{"id":"2FovXuGPG0DgKfI4ctHl","title":"Asset management","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-management","siteSpaceId":"sitesp_5zLVr","description":"View and manage assets across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"9KCm7shYNxXChjBOK3nA","title":"Asset inventory overview","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-inventory-overview","siteSpaceId":"sitesp_5zLVr","description":"Learn about the core concepts, features, and lifecycle of assets within the Asset Inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"sS8tsfR0nIwfa906g6GR","title":"All assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/all-assets","siteSpaceId":"sitesp_5zLVr","description":"Learn about the All Assets page, under Asset Inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"NiOTUwgOvMEYpdFtQy9O","title":"All cloud assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/all-cloud-assets","siteSpaceId":"sitesp_5zLVr","description":"Learn about the All Cloud Assets page to view and assess your cloud footprint.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"15TATjm5jKNtDL6ShxaN","title":"Discovery Engine","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/all-cloud-assets/discovery-engine","siteSpaceId":"sitesp_5zLVr","description":"Discover and update cloud assets in the Unified Asset Inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"All cloud assets"}]},{"id":"4OEYQKc5Q2oXxSrt0EMM","title":"Asset hierarchy","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/all-cloud-assets/asset-hierarchy","siteSpaceId":"sitesp_5zLVr","description":"Use cloud hierarchy paths to filter assets and control access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"All cloud assets"}]},{"id":"HWS9zl6r9LKFkYjUblDk","title":"Asset classes","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes","siteSpaceId":"sitesp_5zLVr","description":"Accelerating remediation: Automated fix suggestions and manual remediation guidance enable developers to resolve code weaknesses directly in the source repository without context-switching to external","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"Tw9iqwodxWMLqVSbDKNC","title":"AI assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/ai-assets","siteSpaceId":"sitesp_5zLVr","description":"Review AI assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"AEEWUGXVIrPrT3qC1qB9","title":"API assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/api-assets","siteSpaceId":"sitesp_5zLVr","description":"Review API assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"BNZIred36xvbhvL4iI2q","title":"Application assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/application-assets","siteSpaceId":"sitesp_5zLVr","description":"Review application assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"9URODSpwOepL4Q9Q5HWK","title":"Code and CI/CD assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/code-and-ci-cd-assets","siteSpaceId":"sitesp_5zLVr","description":"Review code repositories and CI/CD assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"8X3bJikJO0n05ZMGs3li","title":"IaC resources assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/code-and-ci-cd-assets/iac-resources-assets","siteSpaceId":"sitesp_5zLVr","description":"Review infrastructure-as-code resource assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"grH0GZwvpXGzIG6Dvi1p","title":"Repository assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/code-and-ci-cd-assets/repository-assets","siteSpaceId":"sitesp_5zLVr","description":"Review source code repository assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"lAbXkRxbXqJOMYEzxiHj","title":"VCS organization assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/code-and-ci-cd-assets/vcs-organization-assets","siteSpaceId":"sitesp_5zLVr","description":"Review version control system organization assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"ZF5rq0LmQrssQmGJesWL","title":"CI/CD pipeline assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/code-and-ci-cd-assets/ci-cd-pipeline-assets","siteSpaceId":"sitesp_5zLVr","description":"Review continuous integration and delivery pipeline assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"2Rzp723pWMisgVoWY2QO","title":"CI/CD instances assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/code-and-ci-cd-assets/ci-cd-instances-assets","siteSpaceId":"sitesp_5zLVr","description":"Review continuous integration and delivery instance assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"sYnzd6Xdwc6ec4R8Oz8H","title":"Software package assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/code-and-ci-cd-assets/software-package-assets","siteSpaceId":"sitesp_5zLVr","description":"Review software package assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Code and CI/CD assets"}]},{"id":"sNe5VWyjDefI34TzPak5","title":"Compute assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/compute-assets","siteSpaceId":"sitesp_5zLVr","description":"Review compute assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"GNlH7mRlMR2f5S4YvwPc","title":"Container image assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/compute-assets/container-image-assets","siteSpaceId":"sitesp_5zLVr","description":"Review container image assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"bZUPmxJI48Wrmn9BkTxt","title":"Serverless functions assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/compute-assets/serverless-functions-assets","siteSpaceId":"sitesp_5zLVr","description":"Review serverless function assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"GGKRuJEu2mDDfGHSbIYy","title":"VM images assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/compute-assets/vm-images-assets","siteSpaceId":"sitesp_5zLVr","description":"Review virtual machine image assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"Compute assets"}]},{"id":"NyXGvY4Y2FtSDSeW5J3R","title":"Data assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/data-assets","siteSpaceId":"sitesp_5zLVr","description":"Review data assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"21l72TK0c2b768C3pPOW","title":"Device assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/device-assets","siteSpaceId":"sitesp_5zLVr","description":"Review device assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"oveiknKt9wTycJlJBjWT","title":"External Surface assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/external-surface-assets","siteSpaceId":"sitesp_5zLVr","description":"Review externally exposed assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"MfXM6ry864NLvlnxYixu","title":"Website assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/external-surface-assets/website-assets","siteSpaceId":"sitesp_5zLVr","description":"Review website assets in your external attack surface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"aXwGwz2Cdk66jh0TjS6o","title":"Service assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/external-surface-assets/service-assets","siteSpaceId":"sitesp_5zLVr","description":"Review service assets in your external attack surface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"sL8QE4byPkn2wbI5N2O7","title":"Domain assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/external-surface-assets/domain-assets","siteSpaceId":"sitesp_5zLVr","description":"Review domain assets in your external attack surface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"JN1OipfIqL3lOXvSW15p","title":"Certificate assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/external-surface-assets/certificate-assets","siteSpaceId":"sitesp_5zLVr","description":"Review certificate assets in your external attack surface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"hgx2Nha7i7WgFebFkjVV","title":"External Surface attribution evidence","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/external-surface-assets/external-surface-attribution-evidence","siteSpaceId":"sitesp_5zLVr","description":"Review evidence used to attribute external assets to your organization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"},{"label":"External Surface assets"}]},{"id":"9Upt132QWtKBr8X6zoNo","title":"Identity assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/identity-assets","siteSpaceId":"sitesp_5zLVr","description":"Review identity assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"BnPyVP4oP2T1316ErtRw","title":"Network assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/network-assets","siteSpaceId":"sitesp_5zLVr","description":"Review network assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"LNFEcLdBRgVmqZEBPEhI","title":"Security services assets","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-classes/security-services-assets","siteSpaceId":"sitesp_5zLVr","description":"Review security service assets in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset classes"}]},{"id":"NsWePeb0fXfVHiR61yUd","title":"Asset groups","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-groups","siteSpaceId":"sitesp_5zLVr","description":"Group assets based on shared attributes to address them collectively, simplify filtering, and enable strict access control boundaries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"vY4r5vdlLMh24Z5qfZEd","title":"Manage Risk Scores","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/manage-asset-scores","siteSpaceId":"sitesp_5zLVr","description":"View and investigate User Scores and Host Scores using the Risk Scores page to identify high-risk assets and detect compromised accounts or malicious activities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"NumVxBCgPGDLcK3j9bO8","title":"Asset configurations","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-configurations","siteSpaceId":"sitesp_5zLVr","description":"Configure how Cortex Cloud identifies and classifies assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"}]},{"id":"7yt7Pugln9zZmIXFna6a","title":"Network configurations","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-configurations/network-configuration","siteSpaceId":"sitesp_5zLVr","description":"Configure your internal network parameters, trusted networks, and external IP ranges to help Cortex Cloud identify and map your network assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset configurations"}]},{"id":"nbb434WkbExrmbtVnZj7","title":"Application criteria","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-configurations/application-criteria","siteSpaceId":"sitesp_5zLVr","description":"Define criteria for identifying application assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset configurations"}]},{"id":"Y3TBgardjBWDEiryTN8x","title":"Asset Roles","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-configurations/asset-roles","siteSpaceId":"sitesp_5zLVr","description":"View asset roles and the number of assets that are associated with each role. Learn how to manage asset roles for users and endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset configurations"}]},{"id":"DA8yDvXDFGlmsgSSNA0K","title":"Manage Asset Roles for Endpoints","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-configurations/asset-roles/manage-asset-roles-for-endpoints","siteSpaceId":"sitesp_5zLVr","description":"Assign and manage asset roles for endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"7VSewiDLBz9S3mKS3Qpa","title":"Manage Asset Roles for Users","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-configurations/asset-roles/manage-asset-roles-for-users","siteSpaceId":"sitesp_5zLVr","description":"Assign and manage asset roles for users.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset configurations"},{"label":"Asset Roles"}]},{"id":"9hxc7lgOLMcHqboY1tPH","title":"Honey user","pathname":"/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-configurations/asset-roles/manage-asset-roles-for-users/honey-user","siteSpaceId":"sitesp_5zLVr","description":"Configure honey users to detect suspicious identity activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud inventory and environment"},{"label":"Asset configurations"},{"label":"Asset Roles"},{"label":"Manage Asset Roles for Users"}]},{"id":"xkFdvnfSATNHGQwIiZbE","title":"Overview of cases","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases","siteSpaceId":"sitesp_5zLVr","description":"Learn the core concepts and lifecycle of Cortex Cloud cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"QBzaKJDmC6xDAqZXQuyB","title":"What are cases?","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases/what-are-cases","siteSpaceId":"sitesp_5zLVr","description":"Understand how Cortex Cloud groups related security activity into cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"xTiyhrcwd6VzFafG6vRj","title":"Resolving cases with AI","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases/resolving-cases-with-ai","siteSpaceId":"sitesp_5zLVr","description":"Use AI capabilities to investigate and resolve cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"eE3gtSXRApWpN2j5850V","title":"Case lifecycle","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases/case-lifecycle","siteSpaceId":"sitesp_5zLVr","description":"Understand the stages and status changes in a case lifecycle.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"b8c0RsHZ7eytzS4gQ6pf","title":"Case thresholds","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases/case-thresholds","siteSpaceId":"sitesp_5zLVr","description":"Learn how case thresholds determine when cases are created.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"PvIKMExaGMeUNo4xRPUY","title":"Case scope and impact","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases/case-scope-and-impact","siteSpaceId":"sitesp_5zLVr","description":"Understand how case scope and impact help prioritize investigations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"QqjsEV8jmvJdYnb3UK2A","title":"Case and issue domains","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases/case-and-issue-domains","siteSpaceId":"sitesp_5zLVr","description":"Learn how domains organize cases and issues by security area.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"dyCF0fgB0x8sjGNWGElh","title":"Overview of case teams and roles","pathname":"/cortex-cloud-posture-management/cases-and-issues/overview-of-cases/overview-of-case-teams-and-roles","siteSpaceId":"sitesp_5zLVr","description":"Understand case teams and the roles that support investigations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Overview of cases"}]},{"id":"0uQtlC31bDU1fAu7fHa1","title":"Case concepts","pathname":"/cortex-cloud-posture-management/cases-and-issues/case-concepts","siteSpaceId":"sitesp_5zLVr","description":"Learn the concepts that govern cases, issues, and investigations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"xzXvERfC4tt4Aak59LMx","title":"Issues, findings, and events","pathname":"/cortex-cloud-posture-management/cases-and-issues/case-concepts/issues-findings-and-events","siteSpaceId":"sitesp_5zLVr","description":"Understand the relationship between issues, findings, and events.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"nXHu7NFu6qS0Pv0FRJUu","title":"Case grouping","pathname":"/cortex-cloud-posture-management/cases-and-issues/case-concepts/case-grouping","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud groups related issues into cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"uBfmwBxK3lUA4KnIhSX2","title":"Case scoring","pathname":"/cortex-cloud-posture-management/cases-and-issues/case-concepts/case-scoring","siteSpaceId":"sitesp_5zLVr","description":"Understand how Cortex Cloud calculates case scores.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"WwlqTDF1IaIRi3e14SUp","title":"What is Causality?","pathname":"/cortex-cloud-posture-management/cases-and-issues/case-concepts/what-is-causality","siteSpaceId":"sitesp_5zLVr","description":"Learn how causality connects related events during investigations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Case concepts"}]},{"id":"PjpeZfsv2czHCwuw1icr","title":"Analyze and resolve cases","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases","siteSpaceId":"sitesp_5zLVr","description":"Learn how to analyze and resolve cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"98ztyGweXeCG94YKbFnD","title":"Review all cases","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/review-all-cases","siteSpaceId":"sitesp_5zLVr","description":"Review and filter cases across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"nR8k2P9QYpCCV7qRDLrL","title":"Start case analysis","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/start-case-analysis","siteSpaceId":"sitesp_5zLVr","description":"Begin analyzing a case from the Cases page.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"azrl4bMq5SUnTw8vagJl","title":"Agentic Assistant- Case Investigation agent","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/start-case-analysis/agentic-assistant-case-investigation-agent","siteSpaceId":"sitesp_5zLVr","description":"Use the Case Investigation agent to analyze a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Start case analysis"}]},{"id":"JczsIJxaJXUlp21Pvrwu","title":"Establish case context","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/establish-case-context","siteSpaceId":"sitesp_5zLVr","description":"Gather and review the context needed to investigate a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"0TAzZah0Gv33KN1nreUb","title":"AI-generated case summaries","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/establish-case-context/ai-generated-case-summaries","siteSpaceId":"sitesp_5zLVr","description":"Use AI-generated summaries to quickly understand case details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"IetNfYuGNZW6ENHT7FLJ","title":"Assess case severity and score","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/establish-case-context/assess-case-severity-and-score","siteSpaceId":"sitesp_5zLVr","description":"Review and adjust a case's severity and score.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"8z4j0RtQAiaJkfymPnOA","title":"Update case attributes","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/establish-case-context/update-case-attributes","siteSpaceId":"sitesp_5zLVr","description":"Update case attributes to keep investigations accurate.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Establish case context"}]},{"id":"y6QoY4CaAnwb2tOg7BSU","title":"Analyze case details","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details","siteSpaceId":"sitesp_5zLVr","description":"Examine evidence, issues, and related data in a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"W7fkSIxcPwkIaSgz778c","title":"Grouping graph","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/grouping-graph","siteSpaceId":"sitesp_5zLVr","description":"Use the grouping graph to explore related case activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"9C4cNaFQW3tamHcq3P6c","title":"Evidence","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/evidence","siteSpaceId":"sitesp_5zLVr","description":"Review evidence associated with a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"DkZOPMi6zPYYzrUttmBr","title":"Issue feed","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/issue-feed","siteSpaceId":"sitesp_5zLVr","description":"Review issues associated with a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"qu49EYLhDQslQWg1pEwL","title":"Associated assets and artifacts","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/associated-assets-and-artifacts","siteSpaceId":"sitesp_5zLVr","description":"Review assets and artifacts associated with a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"WAq1AKJqBWNe3Lry0RNr","title":"MITRE ATT&CK tactics and techniques","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/mitre-att-and-ck-tactics-and-techniques","siteSpaceId":"sitesp_5zLVr","description":"Review MITRE ATT&CK tactics and techniques in a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"nDVUG3EGhe4Cv6pxusRy","title":"Compliance standards and controls","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/compliance-standards-and-controls","siteSpaceId":"sitesp_5zLVr","description":"Review compliance standards and controls associated with a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"0WGrD27xgiOIaXXsx7EO","title":"Case timeline","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/case-timeline","siteSpaceId":"sitesp_5zLVr","description":"Review chronological activity and events in a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"7jpYDGgf9wRzGSmaWnEY","title":"Detailed view","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/analyze-case-details/detailed-view","siteSpaceId":"sitesp_5zLVr","description":"Open a detailed view of case evidence and activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"uLxCXcf8NGSNSyC8jU4d","title":"Resolve the case","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/resolve-the-case","siteSpaceId":"sitesp_5zLVr","description":"Resolve a case and record its outcome.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"9ApxFa6bqzlTSZKPVV2k","title":"Resolution Center","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/resolution-center","siteSpaceId":"sitesp_5zLVr","description":"Use Resolution Center to manage case resolution tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"eaT3c1VZ0uZwE2voWAKu","title":"Collaborative notes and comments","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/collaborative-notes-and-comments","siteSpaceId":"sitesp_5zLVr","description":"Add notes and comments to collaborate on a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"weRy700O46Q6XUxdc2ne","title":"How to resolve a case","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/resolve-a-case","siteSpaceId":"sitesp_5zLVr","description":"Complete the steps required to resolve a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"9FcsrvyYatc04XwtR4Cd","title":"Resolution reasons for cases and issues","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/resolution-reasons-for-cases-and-issues","siteSpaceId":"sitesp_5zLVr","description":"Select resolution reasons for resolved cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"NwxvjouPJ2lKOJtG5Nmm","title":"Monitor and track resolution times","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/resolve-the-case/monitor-and-track-resolution-times","siteSpaceId":"sitesp_5zLVr","description":"Track case resolution times against defined goals.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"YxawkEaRZHAQWJGbySML","title":"Additional case actions","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/additional-case-actions","siteSpaceId":"sitesp_5zLVr","description":"Perform additional actions to manage and organize cases.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"}]},{"id":"dTwjKI7tIxQuKr2ed6fB","title":"Create a case","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/create-a-case","siteSpaceId":"sitesp_5zLVr","description":"Create a case for a security investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"mkOmKCVzm0JEs8WfJw0l","title":"Merge a case","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/merge-a-case","siteSpaceId":"sitesp_5zLVr","description":"Merge related cases into a single investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"1ACLDnCIi3uW6B6le411","title":"Assign a case team and restrict access","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access","siteSpaceId":"sitesp_5zLVr","description":"Assign a case team and restrict case access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"hMvBnan5pPAGqPk7nEgU","title":"Playbook examples","pathname":"/cortex-cloud-posture-management/cases-and-issues/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access/playbook-examples","siteSpaceId":"sitesp_5zLVr","description":"Review playbook examples for case teams and access restrictions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"},{"label":"Assign a case team and restrict access"}]},{"id":"kC1gFb95hx3YAzoV5vKv","title":"Investigation and response","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response","siteSpaceId":"sitesp_5zLVr","description":"Investigate issues, findings, and assets, then automate response actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"KZC3tfovns5bwUBXbe6l","title":"Investigate issues","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues","siteSpaceId":"sitesp_5zLVr","description":"Cortex Cloud generates issues to bring your attention to security risks in your framework.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"Mgrrg9fxekdQY6bJlkS4","title":"Overview of the Issues page","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/overview-of-the-issues-page","siteSpaceId":"sitesp_5zLVr","description":"Review and manage security issues from the Issues page.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"9k8wy5HS1lFImHKUEg9S","title":"Issue card","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-card","siteSpaceId":"sitesp_5zLVr","description":"Understand the information displayed on an issue card.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"nRMqusWbnYzvY4nGcFDe","title":"Resolution actions","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/resolution-actions","siteSpaceId":"sitesp_5zLVr","description":"Resolve, close, or otherwise act on an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"PzAdJdNGVoAoR2Iwo9o0","title":"Link or unlink issues from a case","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/link-or-unlink-issues-from-a-case","siteSpaceId":"sitesp_5zLVr","description":"Link issues to a case or remove existing links.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"8j2BFhOF87rVKq5yYymo","title":"Run an automation on an issue","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/run-an-automation-on-an-issue","siteSpaceId":"sitesp_5zLVr","description":"Run an automation directly from an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"9HRwE8nhjNpu22J2wdzz","title":"Use the War Room in an investigation","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_5zLVr","description":"Use the War Room to collaborate during an issue investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"nhYxRXmJckupKdmsYaTe","title":"Use the Work Plan in an investigation","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_5zLVr","description":"Use the Work Plan to track investigation tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"pDqcjRBXfv2IdOIWVI2v","title":"Issue deduplication","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-deduplication","siteSpaceId":"sitesp_5zLVr","description":"Understand how Cortex Cloud identifies and merges duplicate issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"nvID1HFgMPwhYKKmacrY","title":"Issue investigation actions","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions","siteSpaceId":"sitesp_5zLVr","description":"Use actions to manage and investigate issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"FnTVeHjF9RC3G3bsW0rc","title":"Copy issues","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/copy-issues","siteSpaceId":"sitesp_5zLVr","description":"Copy an issue to create a new investigation record.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"u4sX8hnlriK2wRcAlRRj","title":"Update issue fields","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/update-issue-fields","siteSpaceId":"sitesp_5zLVr","description":"Update fields on one or more issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"vQqo69k0SYfUF0rOOD32","title":"Export issue details to a file","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/export-issue-details-to-a-file","siteSpaceId":"sitesp_5zLVr","description":"Export issue details to a file.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"eVa503mM28UgwygUVkYs","title":"Exclude an issue","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/exclude-an-issue","siteSpaceId":"sitesp_5zLVr","description":"Exclude an issue from further investigation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"BOWrTFwWJhwWDqUcNBOp","title":"Query case and issue data","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-investigation-actions/query-case-and-issue-data","siteSpaceId":"sitesp_5zLVr","description":"Query case and issue data using XQL.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"zVTuE3a5qsBmFisyCsnS","title":"Issue syncing","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-issues/issue-syncing","siteSpaceId":"sitesp_5zLVr","description":"Configure and monitor synchronization of issues with external systems.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate issues"}]},{"id":"xdM05G17OcRpyfuPSSi9","title":"Review findings","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/review-findings","siteSpaceId":"sitesp_5zLVr","description":"Review findings for an asset to gain insights into an asset’s posture status.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"mdEispNV8uxnygN2V3LB","title":"Findings card","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/review-findings/findings-card","siteSpaceId":"sitesp_5zLVr","description":"Understand the information displayed on a finding card.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Review findings"}]},{"id":"14I65oJS134n1rESLG6x","title":"Investigate artifacts and assets","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets","siteSpaceId":"sitesp_5zLVr","description":"You can investigate specific artifacts and assets on dedicated views related to IP address, Network Assets, and File and Process Hash information.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"l3kubV0mQIx3aPMuzGuB","title":"Investigate an IP address","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-an-ip-address","siteSpaceId":"sitesp_5zLVr","description":"Investigate an IP address and its related activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"nSRVqzHgFG91KxttCuOI","title":"Investigate an asset","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-an-asset","siteSpaceId":"sitesp_5zLVr","description":"Investigate an asset and its related security data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"ENb2LlwfB6r8IlEiYr6e","title":"Investigate a file and process hash","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-a-file-and-process-hash","siteSpaceId":"sitesp_5zLVr","description":"Investigate a file or process hash.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"0VZ2i0QJQpBZY8LtV1bd","title":"Investigate a user","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/investigate-artifacts-and-assets/investigate-a-user","siteSpaceId":"sitesp_5zLVr","description":"Investigate a user and related security activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Investigate artifacts and assets"}]},{"id":"SVG2qSZZvd18jvhZwcHn","title":"Cortex Assistant","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/cortex-assistant","siteSpaceId":"sitesp_5zLVr","description":"Cortex Assistant is designed to streamline processes by simplifying case triaging, investigation, and remediation. It enables you to seamlessly uncover new insights on hashes, hosts, and more. You can","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"tHuUEAZLoHcAPkXJhTz3","title":"Cortex Assistant layout","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/cortex-assistant/cortex-assistant-layout","siteSpaceId":"sitesp_5zLVr","description":"Understand the Cortex Assistant interface and layout.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Cortex Assistant"}]},{"id":"L0uZCuf4jxI9ExuBu90y","title":"Cortex Assistant capabilities","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/cortex-assistant/cortex-assistant-capabilities","siteSpaceId":"sitesp_5zLVr","description":"Explore Cortex Assistant capabilities for investigations and response.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Cortex Assistant"}]},{"id":"zFdtiuGwRMfoVS3oAYZz","title":"Automation","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation","siteSpaceId":"sitesp_5zLVr","description":"Automate investigation and response workflows using Cortex Cloud automation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"bDpKf1HAIvMNci5LWFq2","title":"Quick Actions","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/quick-actions","siteSpaceId":"sitesp_5zLVr","description":"Run Quick Actions to respond to cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"qKajrtmwP461LNFe9kq4","title":"Automation Exclusion Center","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/automation-exclusion-center","siteSpaceId":"sitesp_5zLVr","description":"Manage automation exclusions for cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"19pfIPiru9Mx1VHdwBqT","title":"Manage automation exclusion policies","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/manage-automation-exclusion-policies","siteSpaceId":"sitesp_5zLVr","description":"Create and manage policies that exclude automation runs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"43vaOcI71WZCpOEFPSan","title":"Playbooks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks","siteSpaceId":"sitesp_5zLVr","description":"Create, manage, and run playbooks for automated response.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"WQ50lupoHTwiIq3U1lGD","title":"Playbooks overview","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/playbooks-overview","siteSpaceId":"sitesp_5zLVr","description":"Learn how playbooks automate investigation and response workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"rh1zICyrLDajt5IWBkWD","title":"Access to playbooks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/access-to-playbooks","siteSpaceId":"sitesp_5zLVr","description":"Control access to playbooks and their content.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"AIW55ThwgNWJ7bcGUDC7","title":"Playbook development checklist","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_5zLVr","description":"Use a checklist to plan and build effective playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"kh7K1SjD1Kt025LkBMon","title":"Plan your playbook","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/plan-your-playbook","siteSpaceId":"sitesp_5zLVr","description":"Plan a playbook before building its tasks and logic.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"5iVhxJwKhzc5sLQDNKjp","title":"Manage playbooks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/manage-playbooks","siteSpaceId":"sitesp_5zLVr","description":"Manage existing playbooks and their settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"73zfjqKqdl6OyxGr8rp4","title":"Build your playbook","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook","siteSpaceId":"sitesp_5zLVr","description":"Build a playbook by adding tasks, inputs, and logic.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"ECiFnhzxNIHffSEKaJGa","title":"Choose from existing playbooks or create your own","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_5zLVr","description":"Start with an existing playbook or create a new one.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"4lZGplXrQ8Kn7Zi3kD9X","title":"Configure playbook settings","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/configure-playbook-settings","siteSpaceId":"sitesp_5zLVr","description":"Configure playbook details, inputs, and settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"zJSLYKwsFJvrQR3iUiOc","title":"Add objects from the Task Library","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library","siteSpaceId":"sitesp_5zLVr","description":"Add Task Library objects to a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"OeWYpGJjR9OWgckfZVra","title":"Add commands and scripts","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-commands-and-scripts","siteSpaceId":"sitesp_5zLVr","description":"Add commands and scripts to a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"qyLXnOvmvhJNkw99zcOD","title":"Add sub-playbooks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-sub-playbooks","siteSpaceId":"sitesp_5zLVr","description":"Add sub-playbooks to reuse workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"g4pH4bnsFsIL7syzbnX8","title":"Add AI Prompt tasks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-ai-prompt-tasks","siteSpaceId":"sitesp_5zLVr","description":"Add AI Prompt tasks to a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"fTrF33zD3GJL7O5S90n3","title":"Add manual tasks and blank tasks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks","siteSpaceId":"sitesp_5zLVr","description":"Add manual and blank tasks to a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"B47C0sbdN3U5O8NXyYPm","title":"Create a standard task","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-standard-task","siteSpaceId":"sitesp_5zLVr","description":"Define a Standard task in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"k3dJmPVXuaQKEYdZKwdC","title":"Create a conditional task","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-conditional-task","siteSpaceId":"sitesp_5zLVr","description":"Create a Conditional task in a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"TOsFSX7ETP35B1FDAC7U","title":"Create a communication task","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-communication-task","siteSpaceId":"sitesp_5zLVr","description":"Communication tasks let you send surveys and collect issue data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"csXty7s0Vlyj7V6V11C3","title":"Create a section header","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/create-a-section-header","siteSpaceId":"sitesp_5zLVr","description":"Add section headers to organize playbook tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"OAYt4xxZJ5ScltxW91SM","title":"Configure script error handling in a playbook","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_5zLVr","description":"Configure how playbooks handle script errors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"ud77uxDx2GchnVGOCRhy","title":"Customize your playbook","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook","siteSpaceId":"sitesp_5zLVr","description":"Customize playbook behavior with loops, filters, and transformers.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"nV9NCWvSdQtZQ9q7ioKt","title":"Configure a sub-playbook loop","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_5zLVr","description":"Configure a loop that runs a sub-playbook repeatedly.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"TdWxIEHgzZbJYhk0XqBy","title":"Filter and Transform data","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_5zLVr","description":"Filter and transform data used by playbook tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"kE5RtIr2ui0aSkCNlVZr","title":"Create custom filter and transformers","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/create-custom-filter-and-transformers","siteSpaceId":"sitesp_5zLVr","description":"Create custom filters and transformers for playbook data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"zPYaPrItIeMSudlhkNOK","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_5zLVr","description":"Understand built-in filters and filter design considerations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"1VK1P2BzWJr8lSADhfgR","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_5zLVr","description":"Understand built-in transformers and transformer design considerations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"R6FN4pVYTDFFL2V3K2dA","title":"Extend context","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/extend-context","siteSpaceId":"sitesp_5zLVr","description":"Add data to the playbook context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"EH7IMSMhoVuxXXRC0xNt","title":"Extract Indicators","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_5zLVr","description":"Extract indicators from playbook data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"bjQfsFMBi3FI36jehaC0","title":"Update issue fields with playbook tasks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/customize-your-playbook/update-issue-fields-with-playbook-tasks","siteSpaceId":"sitesp_5zLVr","description":"Update issue fields with playbook tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"KUNpuBGWqZ0aa7RYF00I","title":"Test your playbook","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/test-your-playbook","siteSpaceId":"sitesp_5zLVr","description":"Set breakpoints, conditional breakpoints, skips, and input or output overrides in the playbook debugger.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"kioz6VgE1Hm2IUdyCxy2","title":"Troubleshoot playbook performance","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/test-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_5zLVr","description":"Identify and resolve playbook performance issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Test your playbook"}]},{"id":"JBSjRGq8qWLVhkOKj7aT","title":"Manage playbook content","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/build-your-playbook/manage-playbook-content","siteSpaceId":"sitesp_5zLVr","description":"Manage playbook inputs, outputs, and task content.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"BczK6PljVwg6CtgCi0r3","title":"Best practices for playbooks","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/playbooks/best-practices-for-playbooks","siteSpaceId":"sitesp_5zLVr","description":"Apply best practices when designing and maintaining playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Playbooks"}]},{"id":"Zqz3M3Ehbr0Gbo1CtoC2","title":"AI Prompts","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/ai-prompts","siteSpaceId":"sitesp_5zLVr","description":"Create and manage AI prompts for automations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"l7oweTQ4O7y4pKkHr3ni","title":"AI prompts role-based access control","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/ai-prompts/ai-prompts-role-based-access-control","siteSpaceId":"sitesp_5zLVr","description":"Manage AI prompt permissions with role-based access control.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"0IBpzomEFTTm7RMpknQn","title":"Use existing prompts","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/ai-prompts/use-existing-prompts","siteSpaceId":"sitesp_5zLVr","description":"Find, duplicate, and edit prompts from the Prompts Library.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"GjikxD3oSgQhXGBlJvxH","title":"Create a prompt","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/ai-prompts/create-a-prompt","siteSpaceId":"sitesp_5zLVr","description":"Create or edit prompts, configure settings, and use them in agents or playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"x9VHlXhXHzr3eBRiOqsz","title":"Write effective prompts","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/ai-prompts/write-effective-prompts","siteSpaceId":"sitesp_5zLVr","description":"Tips for creating effective AI prompts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"AI Prompts"}]},{"id":"nLWAI5Yw1aKhEh02DwVW","title":"Create an automation rule","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/create-an-automation-rule","siteSpaceId":"sitesp_5zLVr","description":"Learn how to create an automation rule for an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"aARAdf6t6Wjz8PHVElad","title":"Scripts","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/scripts","siteSpaceId":"sitesp_5zLVr","description":"Create, manage, and run scripts in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"9tKANDYgpGyTuli21P4O","title":"Access to scripts","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/scripts/access-to-scripts","siteSpaceId":"sitesp_5zLVr","description":"Control access to scripts and script content.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"dAKHrok5gzS6CmZTNUZA","title":"Use existing scripts","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/scripts/use-existing-scripts","siteSpaceId":"sitesp_5zLVr","description":"Find, review, and use existing scripts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"e91jKBR9REoWUmqweGBQ","title":"Create a script","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/scripts/create-a-script","siteSpaceId":"sitesp_5zLVr","description":"Create a script to automate investigation or response tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"9AEkmWouBPay1YsuYNMa","title":"Accelerate script development using the Automation Engineer agent","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/scripts/accelerate-script-development-using-the-automation-engineer-agent","siteSpaceId":"sitesp_5zLVr","description":"Use the Automation Engineer agent to accelerate script development.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"Jo0rXUDkR6stIzkE2qPj","title":"Change the Docker image in an integration or script","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/scripts/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_5zLVr","description":"Change the Docker image used by an integration or script.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Scripts"}]},{"id":"eTM3q5LoFXe5SoYzAnKV","title":"Context data","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data","siteSpaceId":"sitesp_5zLVr","description":"Use context data to assist with the investigation and remediation process.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"fUYw5ivIDlTa8hdpgLhZ","title":"Issue context data","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data/issue-context-data","siteSpaceId":"sitesp_5zLVr","description":"View context data associated with an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"tTqpEfaFRhunQr6z1vRM","title":"Case context data","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data/case-context-data","siteSpaceId":"sitesp_5zLVr","description":"View context data associated with a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"aNONHkALAwlw1GCieeS0","title":"Search context data","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data/search-context-data","siteSpaceId":"sitesp_5zLVr","description":"Search available context data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"W9nRMmqDzOUFSL25DUyq","title":"Add context data to an issue","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data/add-context-data-to-an-issue","siteSpaceId":"sitesp_5zLVr","description":"Add context data to an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"GfYOCAONnebqxzz0X65G","title":"Add context data to a case","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data/add-context-data-to-a-case","siteSpaceId":"sitesp_5zLVr","description":"Add context data to a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"xBY6tin70eJnXSuJd6hA","title":"Delete context data from a case","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data/delete-context-data-from-a-case","siteSpaceId":"sitesp_5zLVr","description":"Delete context data from a case.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"qHZdGsR5ZNe4Hrrq2tZc","title":"Use context data in a playbook","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/context-data/use-context-data-in-a-playbook","siteSpaceId":"sitesp_5zLVr","description":"Use context data in a playbook.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Context data"}]},{"id":"3vaPQ0z4feKder5r3bjW","title":"Lists","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/lists","siteSpaceId":"sitesp_5zLVr","description":"Create and manage lists for automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"zPGsM8VHV1ZoOObI58RN","title":"Create a list","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/lists/create-a-list","siteSpaceId":"sitesp_5zLVr","description":"Create a list for use in scripts and playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"qs9nYHXievw2xL6wteDu","title":"List commands","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/lists/list-commands","siteSpaceId":"sitesp_5zLVr","description":"Use commands to manage list contents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"WZ0YwOLJV8cuqHEnpa5y","title":"Use cases: JSON lists","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/lists/use-cases-json-lists","siteSpaceId":"sitesp_5zLVr","description":"Use JSON lists in automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"RiSN0RRroGR9RFVwgd3a","title":"Transform a list into an array","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_5zLVr","description":"Transform a list into an array for automation tasks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Lists"}]},{"id":"81ce6lnzUjTACW8GDC3j","title":"Integrations","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/integrations","siteSpaceId":"sitesp_5zLVr","description":"Configure and manage integrations used by automation workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"jwfCq2zzuD6ndjPDZcFQ","title":"Add an integration instance","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/integrations/add-an-integration-instance","siteSpaceId":"sitesp_5zLVr","description":"Add an integration instance for automation use.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"hUrYCLjkIBc3KvZfspDB","title":"Use integration commands in the CLI","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/integrations/use-integration-commands-in-the-cli","siteSpaceId":"sitesp_5zLVr","description":"Run integration commands from the Cortex CLI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"7zMQt6gLYWelL4UNIadk","title":"Troubleshoot integations","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/integrations/troubleshoot-integations","siteSpaceId":"sitesp_5zLVr","description":"Troubleshoot integration configuration and execution issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"rSJw2l7zBtJJMbQI1e1h","title":"Manage credentials","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/integrations/manage-credentials","siteSpaceId":"sitesp_5zLVr","description":"Manage credentials used by integrations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Integrations"}]},{"id":"gT3WNTkNh1WKbvweumXU","title":"Engines","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines","siteSpaceId":"sitesp_5zLVr","description":"Install, manage, configure, and troubleshoot engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"}]},{"id":"GTBZVWgJCq1vJdlPL8CJ","title":"What is an engine?","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/what-is-an-engine","siteSpaceId":"sitesp_5zLVr","description":"Learn how engines execute integrations, scripts, and playbooks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"IHREBHlADMQ4fwWVOH5R","title":"Engine requirements","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/engine-requirements","siteSpaceId":"sitesp_5zLVr","description":"Hardware, OS, and required URLs for engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"Cy7iIHWXnkdq7OiDM8n6","title":"Install an engine","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine","siteSpaceId":"sitesp_5zLVr","description":"Install, deploy and configure Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"gf7RqZRpabhizh1VM79U","title":"Docker","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker","siteSpaceId":"sitesp_5zLVr","description":"Install, configure, secure, and troubleshoot Docker for Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"Gvk90FsnzIpVefwVFbMH","title":"Install Docker","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_5zLVr","description":"Install Docker and verify engine user permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"4fnD7m1Cvbu02iXmSqOk","title":"Install Docker distribution for Red Hat","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/install-docker-distribution-for-red-hat","siteSpaceId":"sitesp_5zLVr","description":"Configure Docker and SELinux on Red Hat engine servers.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"89ETCgTUcpaKQr9KWatY","title":"Docker image security","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_5zLVr","description":"Secure, harden, and troubleshoot Docker images and containers.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"oKt4hyq7yjiVuG38noVe","title":"Docker FAQs","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_5zLVr","description":"Find answers to common Docker questions for engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"tKjbzbZcQpw5O4RT2UG5","title":"Troubleshoot Docker Issues","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_5zLVr","description":"Troubleshoot Docker issues on Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"vqfX28tp9Cn1N0aShWTI","title":"Configure Docker pull rate limit","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_5zLVr","description":"Configure Docker image pull rate limits for engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"IcbtAcY2ceZaFfFuUjvE","title":"Change the Docker Installation folder","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_5zLVr","description":"Change the Docker installation folder on an engine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"sQy8HwdEQ5ykub7VUeHx","title":"Docker hardening guide","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_5zLVr","description":"Apply Docker hardening guidance for Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"Ar7ITDlNwW89AqGu95S1","title":"Docker network hardening","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_5zLVr","description":"Harden Docker network settings for an engine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"5txszrdbh31wlqiZqMVe","title":"Configure Docker images","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-docker-images","siteSpaceId":"sitesp_5zLVr","description":"Configure Docker images for hardened engine deployments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"tqo5FAzJ4K5LfRGw0ilF","title":"Run Docker with non-root internal users","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_5zLVr","description":"Run Docker with non-root internal users.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"3gIjEuuWk2fIkOYMrxmV","title":"Configure the memory limit support without swap capabilities","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limit-support-without-swap-capabilities","siteSpaceId":"sitesp_5zLVr","description":"Configure memory limits without swap support.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"kq3TorpohyW5Gf3ySiTZ","title":"Configure the memory limitation","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_5zLVr","description":"Configure Docker memory limits for an engine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"pXOmuVzWW3nLowMNx1k1","title":"Configure the CPU, PIDs, and open the file descriptors limit","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/configure-the-cpu-pids-and-open-the-file-descriptors-limit","siteSpaceId":"sitesp_5zLVr","description":"Configure CPU, PID, and file descriptor limits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"4TSVzWuwHHSMKDBvbPhX","title":"Check Docker hardening configurations","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/docker/docker-hardening-guide/check-docker-hardening-configurations","siteSpaceId":"sitesp_5zLVr","description":"Verify Docker hardening configurations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"5CMV7CX7wqaHenpQsPqY","title":"Podman","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman","siteSpaceId":"sitesp_5zLVr","description":"Install, configure, and troubleshoot Podman for Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"ySKCgfpsA0biOmnvrE1z","title":"Change the Container storage","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/change-the-container-storage","siteSpaceId":"sitesp_5zLVr","description":"Configure Podman container storage for an engine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"fK6dcPkubnbRgviAcgpr","title":"Install Podman","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_5zLVr","description":"Install and configure Podman for Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"qYK9YPXqkOQ9xb6fiF98","title":"Migrate from Docker to Podman","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_5zLVr","description":"Migrate an existing engine from Docker to Podman.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"jcbWTUDNqJ7ktpeejWxv","title":"Troubleshoot Podman","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_5zLVr","description":"Resolve common Podman issues on Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"8CCJ0gcHzhKTa9T9vLWn","title":"Manage engines","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/manage-engines","siteSpaceId":"sitesp_5zLVr","description":"Manage engines and load balancing groups.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"gTRkmZvriyPUKnZiZfOi","title":"Upgrade an engine","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/upgrade-an-engine","siteSpaceId":"sitesp_5zLVr","description":"Upgrade an engine on Cortex Cloud or directly on the remote machine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"6g84rbT7ITix7eUtlU78","title":"Remove an engine","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/remove-an-engine","siteSpaceId":"sitesp_5zLVr","description":"Remove an engine by running the relevant command, depending on your operating system.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"WcRpdLCR14oxVIbMoSu4","title":"Configure engines","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/configure-engines","siteSpaceId":"sitesp_5zLVr","description":"Configure Cortex Cloud engines by editing the d1.conf file or modifying the configuration in the UI (for shell installations).","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"r4YdzkttgtNLE5cbzuBS","title":"Configure the engine to use a web proxy","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_5zLVr","description":"Configure an engine to connect through a web proxy.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"0EU6BcQJ6diitLMQVhY4","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_5zLVr","description":"Configure an engine to reach the server without a proxy.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"rhz5YmB7AoTrtW8K2enH","title":"Use NGINX as a reverse proxy","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/configure-engines/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_5zLVr","description":"Use NGINX as a reverse proxy for an engine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"dt5v6x9ij4CqXW2GaYb4","title":"Configure an engine to use custom certificates","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_5zLVr","description":"Configure custom certificates for an engine.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"YDtfSiWJ4TjPpEY5B0PW","title":"Use an engine in an integration","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_5zLVr","description":"Use an engine or a load-balancing group of engines to fetch issues and run commands for an integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"hqMg7VHGwjHFIQeAIaBX","title":"Run a script using an engine","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_5zLVr","description":"Run a script on an engine or load-balancing group to distribute the workload and improve performance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"SN8GedZo5Pfadi2T2T0Q","title":"Troubleshoot engines","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/troubleshoot-engines","siteSpaceId":"sitesp_5zLVr","description":"Troubleshoot engines by accessing logs and viewing errors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"rbVdLYAWmrAiB6tdkPVc","title":"Troubleshoot integrations running on engines","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/automation/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_5zLVr","description":"Troubleshoot integrations that run on Cortex Cloud engines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Automation"},{"label":"Engines"}]},{"id":"n2kKbnGPwPgCszi5uNWa","title":"Build XQL queries","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"RbhVgA4KYMorZBlKEF5N","title":"About the Query Builder","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_5zLVr","description":"The Query Builder facilitates threat detection, case expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"zo4smbE4G0WStcKqag9Z","title":"How to build XQL queries","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"nBUnvcgEkm9PDVHQFp50","title":"Get started with XQL queries","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_5zLVr","description":"Get started building XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"Gqf2JsgYwdbjCpZ6W9J8","title":"Useful XQL user interface features","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_5zLVr","description":"Use Query Builder interface features to build and refine queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"k4Z49f2Mhevflr49HZcL","title":"XQL Query best practices","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_5zLVr","description":"Apply best practices when writing XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"V3qmlpHY9OTca8i0glT5","title":"Expected results when querying fields","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_5zLVr","description":"Understand expected results when querying field values.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"NHCgiwW2WQv2ckSwCDRr","title":"Create XQL query","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_5zLVr","description":"Create an XQL query in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"qJjbOM9GXFncjaQ8vltE","title":"Review XQL query results","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_5zLVr","description":"Review and analyze XQL query results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"3l0KDbYDJiQvkcgGVxTU","title":"Translate to XQL","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_5zLVr","description":"Translate search criteria into an XQL query.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"1fwmchcCtyGWugcntTYW","title":"Graph query results","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_5zLVr","description":"Visualize XQL query results in a graph.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"LdN6sv9uVyz8AJ0HToEt","title":"XQL query entities","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the entities in the Legacy Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"kyttErswxybX1iUOT0tI","title":"Query across all entities","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/legacy-query-builder/query-across-all-entities","siteSpaceId":"sitesp_5zLVr","description":"Query data across all available entities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"AilFACz3RmmruV5sc4UR","title":"Overview of the Query Center","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_5zLVr","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"hQU8ABeTmorXf6KzO7ZF","title":"Edit and run queries in Query Center","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_5zLVr","description":"Edit and rerun queries from Query Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"ZzFhRuwMTvdr2KDKLzB0","title":"Query Center reference information","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/overview-of-the-query-center/query-center-reference-information","siteSpaceId":"sitesp_5zLVr","description":"Review Query Center fields and status information.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"P7Po62qXiy0Q9TpRJB9Z","title":"Manage scheduled queries","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"k89gdkUJM5F7aKz9LqJO","title":"Scheduled Queries reference information","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_5zLVr","description":"Review reference information for scheduled queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"rCuIcnm1YJlAIQe6sqnn","title":"Manage your personal query library","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_5zLVr","description":"Cortex Cloud provides as part of the Query Library a personal library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"jywDONOckcTc1GzXFwdu","title":"XQL macros","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/xql-macros","siteSpaceId":"sitesp_5zLVr","description":"Learn how XQL macros simplify reusable query logic.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"C8bojbLf1JzfP88X2tAA","title":"Manage your macros","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_5zLVr","description":"Create and manage XQL macros.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"},{"label":"Build XQL queries"}]},{"id":"jQMcWR0WrCPB5yxwSsoj","title":"Quick Launcher","pathname":"/cortex-cloud-posture-management/cases-and-issues/investigation-and-response/quick-launcher","siteSpaceId":"sitesp_5zLVr","description":"The Quick Launcher provides a quick, in-context shortcut that you can use to search for information, perform common investigation tasks, or initiate actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Investigation and response"}]},{"id":"5uhvOiL6oCpHbsOlCzEo","title":"Customize cases and issues","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues","siteSpaceId":"sitesp_5zLVr","description":"Customize your cases and issues for specific requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"}]},{"id":"bfDwFItTavgyVaYF2wrq","title":"Set up case scoring","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/set-up-case-scoring","siteSpaceId":"sitesp_5zLVr","description":"Configure how Cortex Cloud calculates case scores.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"yPrA7KHMFd3p7Y2wqlpB","title":"Create a starring configuration","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-a-starring-configuration","siteSpaceId":"sitesp_5zLVr","description":"Create a starring configuration to prioritize important cases and issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"wWYQkAd5HeC9a2CB8Rr5","title":"Create SLAs for case and issue resolution","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-slas-for-issue-resolution","siteSpaceId":"sitesp_5zLVr","description":"Create SLA rules to set and track issue-resolution timers and time goals.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"NoLeJ55ws21TSA7RbZhp","title":"Create additional case timers and SLAs","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas","siteSpaceId":"sitesp_5zLVr","description":"Create additional case timers and service level agreements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"}]},{"id":"pwmG7NWHUZ7WuS6YaCJh","title":"Update case timer and SLA fields","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-slas-for-issue-resolution/create-case-timers-and-slas/update-case-timer-and-sla-fields","siteSpaceId":"sitesp_5zLVr","description":"Update fields used by case timers and SLAs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create SLAs for case and issue resolution"},{"label":"Create additional case timers and SLAs"}]},{"id":"POXEQX3DGgM4BknKEuAc","title":"Create issue exceptions","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-issue-exceptions","siteSpaceId":"sitesp_5zLVr","description":"Create time-bound exceptions that pause issue SLA timers during approved remediation delays.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"HUrOpNJHqkKBb3XApnFY","title":"Configure the issue exception approval workflow","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/configure-the-issue-exception-approval-workflow","siteSpaceId":"sitesp_5zLVr","description":"Manage approvers and approval requirements for issue exception rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"8pEveVxeu7wnDIWO0Qjz","title":"Create issue exception rules","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/create-issue-exception-rules","siteSpaceId":"sitesp_5zLVr","description":"Create approval-based rules that temporarily pause SLA timers for selected issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"WErwKzaBWAJb6xH6urAq","title":"Create an exception rule from an issue","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/create-an-exception-rule-from-an-issue","siteSpaceId":"sitesp_5zLVr","description":"Create an issue exception rule from an issue.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"odsQsjFoHsqfsORYPft6","title":"View issue Exception Rules","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/view-issue-exception-rules","siteSpaceId":"sitesp_5zLVr","description":"View issue exception rules, approval status, affected issues, expiration dates, and workflow details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"ZCusmA3HttvOMjE0igrB","title":"Disable issue exception rules","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/disable-issue-exception-rules","siteSpaceId":"sitesp_5zLVr","description":"Disable issue exception rules that are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"oHiCP6nP4iKY1SkNOTwR","title":"View excepted issues","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-issue-exceptions/view-excepted-issues","siteSpaceId":"sitesp_5zLVr","description":"View issues covered by an active exception rule.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"},{"label":"Create issue exceptions"}]},{"id":"yxUmsx4DjKS0a11LQ4g5","title":"Create a sync profile","pathname":"/cortex-cloud-posture-management/cases-and-issues/customize-cases-and-issues/create-a-sync-profile","siteSpaceId":"sitesp_5zLVr","description":"Create a sync profile for external issue management systems.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cases and issues"},{"label":"Customize cases and issues"}]},{"id":"LffmP2LObUdSmdcbPHyG","title":"Learn more about the Agentic Assistant chat","pathname":"/cortex-cloud-posture-management/agentic-assistant/agentic-assistant-chat","siteSpaceId":"sitesp_5zLVr","description":"Chat with the Cortex Agentic Assistant using natural language prompts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"34lp2TPAAv28ljTgaRvC","title":"Get started with Agentic Assistant chat","pathname":"/cortex-cloud-posture-management/agentic-assistant/get-started-with-agentic-assistant-chat","siteSpaceId":"sitesp_5zLVr","description":"Enable Agentic Assistant and access the chat interface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"ASwpdWPwBdmkRGsRlf6u","title":"Choose an Agentic Assistant agent","pathname":"/cortex-cloud-posture-management/agentic-assistant/choose-an-agentic-assistant-agent","siteSpaceId":"sitesp_5zLVr","description":"Choose a system or custom agent for your chat.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"o4THPEVwQOjMlpg5qaaD","title":"Chat with an Agentic Assistant agent","pathname":"/cortex-cloud-posture-management/agentic-assistant/chat-with-an-agentic-assistant-agent","siteSpaceId":"sitesp_5zLVr","description":"Tips for chatting with the Cortex Agentic Assistant","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"wrL29rrDFSZZBSrgV95H","title":"Chat with the Agentic Assistant from Slack","pathname":"/cortex-cloud-posture-management/agentic-assistant/chat-with-the-agentic-assistant-from-slack","siteSpaceId":"sitesp_5zLVr","description":"Enable chatting with an Agentic Assistant agent from Slack.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"FFGDLcbAyruZWS6PyKtn","title":"Streamline troubleshooting and support with the Help Center agent","pathname":"/cortex-cloud-posture-management/agentic-assistant/streamline-troubleshooting-and-support-with-the-help-center-agent","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"jrd6uG5V1L3EIRudCorR","title":"Help Center agent actions","pathname":"/cortex-cloud-posture-management/agentic-assistant/streamline-troubleshooting-and-support-with-the-help-center-agent/help-center-agent-actions","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"},{"label":"Streamline troubleshooting and support with the Help Center agent"}]},{"id":"sIj16j5LXM8HwPM1mXWy","title":"Create and run XQL queries with Agentic Assistant chat","pathname":"/cortex-cloud-posture-management/agentic-assistant/create-and-run-xql-queries-with-agentic-assistant-chat","siteSpaceId":"sitesp_5zLVr","description":"Use natural language in Cortex Agentic Assistant Chat to automatically generate and execute Cortex Query Language (XQL) queries in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"MJFK3Y8xwYJ13Xnv9efa","title":"Use natural language to query and visualize your data","pathname":"/cortex-cloud-posture-management/agentic-assistant/use-natural-language-to-query-and-visualize-your-data","siteSpaceId":"sitesp_5zLVr","description":"Prompt Cortex Agentic Assistant agents to create graphs and charts from its findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"lSCIXGUVjnBUc3cGhxNV","title":"Manage chat history","pathname":"/cortex-cloud-posture-management/agentic-assistant/manage-chat-history","siteSpaceId":"sitesp_5zLVr","description":"Manage and navigate your past chats with the Cortex Agentic Assistant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Agentic assistant"}]},{"id":"IEJaE9Dc4AOI73f65rdu","title":"Monitor dashboards and reports","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Monitor security data with Cortex Cloud dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"}]},{"id":"tmPNoL9pcbaZLmC57urB","title":"Overview of dashboards and reports","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Learn dashboard, report, and widget concepts in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"p7q4aLwQkEitjnTVtTyN","title":"Dashboard interface basics","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-interface-basics","siteSpaceId":"sitesp_5zLVr","description":"Navigate dashboard pages, widgets, filters, and available actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"WoarmZwWwm6SDO3H4eZ8","title":"Dashboard types","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-types","siteSpaceId":"sitesp_5zLVr","description":"Understand system and custom dashboards and their different uses.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"cuAmCo8GiE2LaRwkyVBF","title":"Report basics","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/report-basics","siteSpaceId":"sitesp_5zLVr","description":"Learn how reports present dashboard data in a shareable format.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"6XNKqxTelnzYU2RGM0Ms","title":"Widget Library","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/widget-library","siteSpaceId":"sitesp_5zLVr","description":"Browse available widgets for dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"Y8rIln3kDVYZzJBtjHvi","title":"Access and visibility for dashboards and reports","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Control who can view, edit, and share dashboards and reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"XeVu4kyM8HAYSyfv7HGA","title":"Visibility settings","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/visibility-settings","siteSpaceId":"sitesp_5zLVr","description":"Configure visibility settings for dashboards and report templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"M2Zcv6ir3aat5ElTztcz","title":"Access to widgets","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-to-widgets","siteSpaceId":"sitesp_5zLVr","description":"Manage access to dashboard widgets and their underlying data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"Ostlqyp3Q1wov495wqlZ","title":"Sharing icons","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/sharing-icons","siteSpaceId":"sitesp_5zLVr","description":"Interpret sharing icons shown for dashboards and report templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"K9kHDbKITXltrIYhuA5u","title":"Access and sharing cheat sheet","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-and-sharing-cheat-sheet","siteSpaceId":"sitesp_5zLVr","description":"Use a reference for dashboard and report access and sharing.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"ODYzNkiiAQc1eyUR6CdR","title":"Manage dashboards and reports","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Manage dashboards, reports, ownership, sharing, and deleted content.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"cV4AnclOzoUpvk9mt7wN","title":"Dashboard Manager","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/dashboard-manager","siteSpaceId":"sitesp_5zLVr","description":"Use Dashboard Manager to find and manage dashboards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"nbByu5eBiaRZIYGAMaXh","title":"Reports","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/reports","siteSpaceId":"sitesp_5zLVr","description":"View, manage, and generate reports from report templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"D1oypGxELTOf2eDIENh1","title":"Duplicate dashboards and reports","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/duplicate-dashboards-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Duplicate dashboards and report templates for reuse or customization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"kSw8NHDQFfoBSCuVu59Z","title":"Share custom dashboards and report templates","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/share-custom-dashboards-and-report-templates","siteSpaceId":"sitesp_5zLVr","description":"Share custom dashboards and report templates with users or groups.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"boAbP4cHjCTDAxgFGpNR","title":"Change ownership to dashboards and report templates","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/change-ownership-to-dashboards-and-report-templates","siteSpaceId":"sitesp_5zLVr","description":"Transfer dashboard and report template ownership to another user.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"757EbQEpduUYLysux5Yy","title":"Import and export dashboards and report templates","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/import-and-export-dashboards-and-report-templates","siteSpaceId":"sitesp_5zLVr","description":"Import and export dashboards and report templates between environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"1PDj0bpIBA8rOp6FIb11","title":"Configure the notification rule for a failed report","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/configure-the-notification-rule-for-a-failed-report","siteSpaceId":"sitesp_5zLVr","description":"Configure notifications when a scheduled report fails.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"ujLEOUJEr1eVAnU9IINk","title":"Deleted content","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/manage-dashboards-and-reports/deleted-content","siteSpaceId":"sitesp_5zLVr","description":"Restore or permanently remove deleted dashboards and report templates.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"t1OlCc2eIqY39vWusLXv","title":"Create dashboards","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/create-dashboards","siteSpaceId":"sitesp_5zLVr","description":"Create custom dashboards to monitor the data that matters.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"e7Yf3kPOqGVmPpc3ttBn","title":"Create a dashboard","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/create-dashboards/create-a-dashboard","siteSpaceId":"sitesp_5zLVr","description":"Create and configure a custom Cortex Cloud dashboard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Create dashboards"}]},{"id":"vjk5Mlgo7D2x6jXGkBgE","title":"Create reports","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/create-reports","siteSpaceId":"sitesp_5zLVr","description":"Create report templates to share dashboard data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"zKoM68wmGgbWIDwsCwNV","title":"Create a report template from scratch","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/create-reports/create-a-report-template-from-scratch","siteSpaceId":"sitesp_5zLVr","description":"Create a custom report template from scratch.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Create reports"}]},{"id":"VODG39TynGZXPYYJm9di","title":"Advanced configuration","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration","siteSpaceId":"sitesp_5zLVr","description":"Configure widgets, filters, and drilldowns for custom dashboards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"QhpHQJe8KIMoSgUrfTet","title":"Create custom widgets","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets","siteSpaceId":"sitesp_5zLVr","description":"Create custom widgets to display tailored dashboard data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"aTKUfbwb0XPp9iQktT0Y","title":"Create widgets using AI","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-widgets-using-ai","siteSpaceId":"sitesp_5zLVr","description":"Use AI to create custom dashboard widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"DYckc95XTKKVhKQKIHPi","title":"Create XQL widgets","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-xql-widgets","siteSpaceId":"sitesp_5zLVr","description":"Create widgets that display XQL query results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"5kZa8AsCUAAydemc4YXq","title":"Add parameters to a custom XQL widget","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/add-parameters-to-a-custom-xql-widget","siteSpaceId":"sitesp_5zLVr","description":"Add parameters to customize XQL widget queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"GHGKLnP6uuBercnqErXn","title":"Create script-based widgets","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-script-based-widgets","siteSpaceId":"sitesp_5zLVr","description":"Create widgets that display data from scripts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"uzupJbc9MZ4Qa5b3c7pf","title":"Configure global filters","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/configure-global-filters","siteSpaceId":"sitesp_5zLVr","description":"Configure global filters that apply across a dashboard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"O2WB3qLHD1B8eGjf5FRI","title":"Configure drilldowns","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/advanced-configuration/configure-drilldowns","siteSpaceId":"sitesp_5zLVr","description":"Configure drilldowns to investigate data behind dashboard widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"AzKWHYzWv0p8UakRZAbb","title":"Dashboard reference","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference","siteSpaceId":"sitesp_5zLVr","description":"Reference system dashboards, Command Center dashboards, and their metrics.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"}]},{"id":"JyR5neXQBgsd0sekrJz1","title":"Command Center reference","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/command-center-reference","siteSpaceId":"sitesp_5zLVr","description":"Reference dashboards available in Cortex Cloud Command Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"hHKjg4xcAFvyLSNeVVtk","title":"Cortex Agentic Assistant dashboard","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-agentic-assistant-dashboard","siteSpaceId":"sitesp_5zLVr","description":"Review metrics and activity for Cortex Agentic Assistant usage.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"XdqLGLjgZCrrx4QJdfVx","title":"Cortex Cloud Command Center","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-cloud-command-center","siteSpaceId":"sitesp_5zLVr","description":"Review the Cortex Cloud Command Center dashboard and its widgets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"Ru3grMSxfrcKFyW5dxay","title":"System dashboards","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/system-dashboards","siteSpaceId":"sitesp_5zLVr","description":"Reference built-in dashboards for monitoring Cortex Cloud data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"EZIR9KWU12XKEwkdsAJt","title":"Cortex Cloud Consumption","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cortex-cloud-consumption","siteSpaceId":"sitesp_5zLVr","description":"Monitor Cortex Cloud consumption and usage metrics.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"ltB8E8UQVOFWKwQuOU7b","title":"Cloud Security Operations","pathname":"/cortex-cloud-posture-management/dashboards-and-reports/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cloud-security-operations","siteSpaceId":"sitesp_5zLVr","description":"Monitor cloud security operations with the built-in dashboard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Dashboards and reports"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"8o3XDZwSSJnnF2xMMBDl","title":"Monitor and track compliance adherence","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence","siteSpaceId":"sitesp_5zLVr","description":"Evaluate and track asset compliance against industry standards and organizational policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"}]},{"id":"xzAHHj9sjp1KeMTQ3cie","title":"Choose compliance standards from the compliance catalog","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog","siteSpaceId":"sitesp_5zLVr","description":"Select built-in or custom compliance standards and controls from the compliance catalogs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"2ziTZhRNfZSmUhga0znu","title":"Standards catalog","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/standards-catalog","siteSpaceId":"sitesp_5zLVr","description":"Browse available compliance standards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"8YcYgsPhBT1QpNtzCAXR","title":"Use a built-in or custom standard","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-standard","siteSpaceId":"sitesp_5zLVr","description":"Use built-in standards or create and edit custom standards for your organization.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"umh6PfOR6LZJzgi3TY4b","title":"Use a built-in or custom control","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-control","siteSpaceId":"sitesp_5zLVr","description":"Add built-in controls or create and manage custom controls for custom standards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"cGJbSWLDgRs0hcDDvFmM","title":"Create a new custom detection rule","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_5zLVr","description":"Create custom detection rules to enforce compliance requirements and security best practices.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"Choose compliance standards from the compliance catalog"}]},{"id":"RfumAovxv5WCyAAGhpJZ","title":"Use an assessment profile to run compliance checks on your assets","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets","siteSpaceId":"sitesp_5zLVr","description":"Create assessment profiles to evaluate selected asset groups against compliance standards.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"Q5D37BgXbF4qfxrvaFJw","title":"View and manage compliance assessments and reports","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Review assessment results and generate or schedule downloadable compliance reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"HSdAwbgxNLYZ3tMTImcL","title":"Review compliance assessments","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/assessments","siteSpaceId":"sitesp_5zLVr","description":"View assessment results and drill into control, rule, and asset compliance details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"eUkFUGDj5e6MoSkAWy4s","title":"Review compliance reports","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/reports","siteSpaceId":"sitesp_5zLVr","description":"View, export, and manage historical compliance assessment reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"},{"label":"View and manage compliance assessments and reports"}]},{"id":"8dr2WfYtPoYpNba60hh8","title":"Compliance Overview Dashboard","pathname":"/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/compliance-overview-dashboard","siteSpaceId":"sitesp_5zLVr","description":"Monitor organization-wide compliance scores, standards, failed controls, and asset group performance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Compliance"},{"label":"Monitor and track compliance adherence"}]},{"id":"SnZ4gBpzPXFD8EszuFY7","title":"What is Cortex Cloud AI Security?","pathname":"/cortex-cloud-posture-management/cortex-cloud-ai-security/what-is-cortex-cloud-ai-security","siteSpaceId":"sitesp_5zLVr","description":"A basic overview of the Cortex Cloud AI Security overview page, assets inventory, risks, and benefits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"LAwt0tW29MYihd8eorH3","title":"Supported services in Cortex Cloud AI Security","pathname":"/cortex-cloud-posture-management/cortex-cloud-ai-security/supported-services-in-cortex-cloud-ai-security","siteSpaceId":"sitesp_5zLVr","description":"A list of platforms and services that are compatible with Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"B4TxhyD81dVdNcBVhG1c","title":"Cortex Cloud AI Security concepts","pathname":"/cortex-cloud-posture-management/cortex-cloud-ai-security/cortex-cloud-ai-security-concepts","siteSpaceId":"sitesp_5zLVr","description":"Basic concepts of Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"Gf54zoNSqpjtfiy4IX8m","title":"Cortex Cloud AI Security use cases","pathname":"/cortex-cloud-posture-management/cortex-cloud-ai-security/cortex-cloud-ai-security-use-cases","siteSpaceId":"sitesp_5zLVr","description":"Learn about use cases that are relevant for Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"fCTIED6r9dTmTw5CxzMR","title":"How to perform advanced AI Security investigations using XQL","pathname":"/cortex-cloud-posture-management/cortex-cloud-ai-security/how-to-perform-advanced-ai-security-investigations-using-xql","siteSpaceId":"sitesp_5zLVr","description":"Working with datasets in Cortex Cloud AI Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud AI Security"}]},{"id":"5fZLbswFIky6DUYbchGy","title":"About Cortex Cloud Application Security","pathname":"/cortex-cloud-posture-management/cortex-cloud-application-security/about-cortex-cloud-application-security","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Application Security protects applications throughout their lifecycle.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Application Security"}]},{"id":"DOKivt1wauH9KCwnHuJ7","title":"Code-to Cloud","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud","siteSpaceId":"sitesp_5zLVr","description":"Trace software assets from source code to cloud runtime resources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"}]},{"id":"MrBw3YdIdSeTM9F3sGrQ","title":"How the C2C engine works","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/how-the-c2c-engine-works","siteSpaceId":"sitesp_5zLVr","description":"Learn how C2C correlates assets across the software delivery lifecycle.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"32k5xPb0HprVZXa8SBFR","title":"Identify and investigate gap","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/identify-and-investigate-gap","siteSpaceId":"sitesp_5zLVr","description":"Identify lineage gaps and investigate affected assets across your software lifecycle.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"baHpSmKYqPdqPQqn3dGa","title":"Execute remediation workflows","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/execute-remediation-workflows","siteSpaceId":"sitesp_5zLVr","description":"Close Code-to-Cloud lineage gaps through dashboard, asset, and YOR workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"I97zMA6ps6nmmniHlZ8K","title":"The Coverage dashboard","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/the-coverage-dashboard","siteSpaceId":"sitesp_5zLVr","description":"Measure Code-to-Cloud lineage coverage and prioritize remediation actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"skiDQHuZY89wQbYLrcMn","title":"C2C in Unified Asset Inventory","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory","siteSpaceId":"sitesp_5zLVr","description":"View Code-to-Cloud lineage and coverage in the Unified Asset Inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"0qUimfTezoDpL8lK7gf6","title":"Reference A: Lineage filtering matrix","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory/reference-a-lineage-filtering-matrix","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"C2C in Unified Asset Inventory"}]},{"id":"khAiapy0uFHdG35qVJkW","title":"Reference B: Essential filtering rules","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory/reference-b-essential-filtering-rules","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"C2C in Unified Asset Inventory"}]},{"id":"Ht5xBT83HzGI9KoQlSIE","title":"Reference C: Technical background","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/c2c-in-unified-asset-inventory/reference-c-technical-background","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"C2C in Unified Asset Inventory"}]},{"id":"NC7PfKiuZuyc1eq4O5XG","title":"C2C tab (asset level)","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/c2c-tab-asset-level","siteSpaceId":"sitesp_5zLVr","description":"Review an asset's Code-to-Cloud trace, coverage gaps, and remediation actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"HanR7kKlrtTIJPaC3hLH","title":"C2C tab (app level)","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/c2c-tab-app-level","siteSpaceId":"sitesp_5zLVr","description":"Review Code-to-Cloud coverage and lineage across an application's assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"otqYV3TvIvDzI7sWs7F7","title":"Agentix for C2C","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/agentix-for-c2c","siteSpaceId":"sitesp_5zLVr","description":"Use Agentix to explore Code-to-Cloud coverage, gaps, and lineage.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"TRGS3aZq7dcREKhbTC7G","title":"Investigate issues with C2C","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/investigate-issues-with-c2c","siteSpaceId":"sitesp_5zLVr","description":"Investigate security issues using Code-to-Cloud lineage and runtime context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"PgLRJC1yLacjOnHwz7sO","title":"C2C in ASPM Command Center","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/c2c-in-aspm-command-center","siteSpaceId":"sitesp_5zLVr","description":"Monitor Code-to-Cloud lineage and coverage from ASPM Command Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"mlKQ83VrayAmYQ76COgv","title":"Enforce policies with C2C","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/enforce-policies-with-c2c","siteSpaceId":"sitesp_5zLVr","description":"Enforce security policies using Code-to-Cloud lineage and runtime conditions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"8S7T2ITl0r7EsG9Frl8u","title":"Troubleshooting","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/troubleshooting","siteSpaceId":"sitesp_5zLVr","description":"Resolve common Code-to-Cloud configuration, coverage, and data issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"GJso1NVx0PKYS2UQqcVo","title":"FAQs","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/faqs","siteSpaceId":"sitesp_5zLVr","description":"Find answers to common Code-to-Cloud questions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"4HQyBbZQKrv3fvFTlJDl","title":"References","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/references","siteSpaceId":"sitesp_5zLVr","description":"Reference Code-to-Cloud integrations, calculations, filters, actions, and APIs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"}]},{"id":"xZUytdNBlEU2Pzty8BlC","title":"Reference A: Supported integrations and asset stages","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/references/reference-a-supported-integrations-and-asset-stages","siteSpaceId":"sitesp_5zLVr","description":"Review supported integrations and the asset stages they cover.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"V980gHIF6GmJdySmAOCr","title":"Reference B: Coverage % calculation and configuration toggles","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/references/reference-b-coverage-calculation-and-configuration-toggles","siteSpaceId":"sitesp_5zLVr","description":"Understand coverage calculations and the configuration toggles that affect them.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"OzfTgT4V3npfROp6KXZH","title":"Reference C: Dashboard filters by view","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/references/reference-c-dashboard-filters-by-view","siteSpaceId":"sitesp_5zLVr","description":"Review available filters for each Code-to-Cloud dashboard view.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"fElRqxTEhdVIwpGn7WdJ","title":"Reference D: Recommended actions by view and stage","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/references/reference-d-recommended-actions-by-view-and-stage","siteSpaceId":"sitesp_5zLVr","description":"Review recommended actions by Code-to-Cloud view and lifecycle stage.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"iyyIMmGic6CdjMhd7Z2w","title":"Reference E: Code-to-Cloud Coverage public API","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/references/reference-e-code-to-cloud-coverage-public-api","siteSpaceId":"sitesp_5zLVr","description":"Retrieve Code-to-Cloud coverage data programmatically with the public API.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"hfxS9Q85a8JoAQ6zxPoe","title":"Page Reference F: Call-to-action routing by asset type1","pathname":"/cortex-cloud-posture-management/code-to-cloud/code-to-cloud/references/page-reference-f-call-to-action-routing-by-asset-type1","siteSpaceId":"sitesp_5zLVr","description":"Review call-to-action routing for Code-to-Cloud assets by asset type.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to Cloud"},{"label":"References"}]},{"id":"I0NLDEJadjOSRdTFI5C7","title":"About Cortex Cloud Data Classification","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/cortex-cloud-data-classification","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Data Classification discovers and classifies sensitive data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"ol0a35pH9yTfYfMYhq8d","title":"How to create and validate a custom data pattern","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern","siteSpaceId":"sitesp_5zLVr","description":"Learn how to use Cortex Cloud Data Classification to define specific criteria for identifying sensitive data for your unique needs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"ZjqDds0Hfiz49SBpIQm4","title":"Custom data patterns: Guardrails and syntax guide","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern/custom-data-patterns-guardrails-and-syntax-guide","siteSpaceId":"sitesp_5zLVr","description":"Details and examples about the capabilities and limitations with regular expressions in Cortex Cloud Data Classification.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"},{"label":"How to create and validate a custom data pattern"}]},{"id":"vlVzJN9152dg2gSMzp94","title":"How to disable and enable data patterns in Data Classification","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/how-to-disable-and-enable-data-patterns-in-data-classification","siteSpaceId":"sitesp_5zLVr","description":"Enable or disable data patterns used to identify sensitive data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"qq3qMhKGCEXU5XAftiZb","title":"How to create and validate a custom data profile","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-profile","siteSpaceId":"sitesp_5zLVr","description":"Create and validate custom data profiles for sensitive-data discovery.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"SqtMD6qiRsbm0rReLui3","title":"How to disable and enable data profiles in Cortex Cloud Data Classification","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/how-to-disable-and-enable-data-profiles-in-cortex-cloud-data-classification","siteSpaceId":"sitesp_5zLVr","description":"Enable or disable data profiles used for sensitive-data classification.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"wiIK9ndcumbW6OZgRZtT","title":"How to report a false positive in Cortex Cloud Data Classification","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/how-to-report-a-false-positive-in-cortex-cloud-data-classification","siteSpaceId":"sitesp_5zLVr","description":"Report incorrectly classified data to improve classification accuracy.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"S4mzY8Iolcm5pmUEYzKL","title":"Topic classification","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-classification/topic-classification","siteSpaceId":"sitesp_5zLVr","description":"Classify files by topic to assess content sensitivity and apply appropriate controls.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Classification"}]},{"id":"Nd4SAbE8fhsEdFPKJ5oa","title":"What is Cortex Data Security?","pathname":"/cortex-cloud-posture-management/cortex-data-security/what-is-cortex-cloud-data-security","siteSpaceId":"sitesp_5zLVr","description":"Learn about Cortex Cloud Data Security capabilities and benefits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Data Security"}]},{"id":"kMFmCk163HJN5tFIN1dz","title":"What is Cortex Cloud Identity Security?","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/what-is-cortex-cloud-identity-security","siteSpaceId":"sitesp_5zLVr","description":"Cortex Cloud Identity Security can help you address the security challenges of managing identity in cloud environments.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"32TShNYURV9aIoUmVfp7","title":"Review and improve your Identity Security posture","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/review-and-improve-your-identity-security-posture","siteSpaceId":"sitesp_5zLVr","description":"Learn how to review and improve your Identity Security posture with the provided use case examples.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"f5uhh512nWa9BvXjRKXP","title":"How does Effective Permission Calculation work?","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/how-does-effective-permission-calculation-work","siteSpaceId":"sitesp_5zLVr","description":"An explanation of how Effective Permission Calculation works in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"tQMoArgab4LEPw21X1Yk","title":"Cortex Cloud Identity Security functionality","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/cortex-cloud-identity-security-functionality","siteSpaceId":"sitesp_5zLVr","description":"About the functionalities of Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"W02jJ1e1CMzzvYocDl3h","title":"Configure Cortex Cloud Identity Security","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/configure-cortex-cloud-identity-security","siteSpaceId":"sitesp_5zLVr","description":"Configure trusted domains for Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"XHKdw470lx7vPADCpW5V","title":"Unified Human Identities","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/unified-human-identities","siteSpaceId":"sitesp_5zLVr","description":"Correlate accounts into unified identities for complete access visibility.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"T7FUuwbTQmyxNALzzDDs","title":"Achieve the principle of least privilege access","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/achieve-the-principle-of-least-privilege-access","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Identity Security to achieve the principle of least privilege access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"cO4M2qDdsCQrwyKoG8Lv","title":"Explore permissions using the simple and advanced access tables","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/explore-permissions-using-the-simple-and-advanced-access-tables","siteSpaceId":"sitesp_5zLVr","description":"Learn how to explore permissions in Cortex Cloud Identity Security using the Simple and Advanced access tables.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"RUjSGVeIL7b3qWfWdjWQ","title":"Create a custom detection rule in Cortex Cloud Identity Security","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/create-a-custom-detection-rule-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_5zLVr","description":"Learn how to create a custom detection rule in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"mZcnVj8KSqvYvBJaiU9T","title":"Perform advanced Identity Security investigations using XQL","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/perform-advanced-identity-security-investigations-using-xql","siteSpaceId":"sitesp_5zLVr","description":"Working with datasets in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"jxQriJh62aAySMMFNwIz","title":"Ingest logs and data from Okta","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_5zLVr","description":"Learn more about Ingesting logs and data from Okta for use in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"MmPVkk3X6L0NQttcbvi4","title":"Enable inactive human identity logs on Azure in Cortex Cloud Identity Security","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/enable-inactive-human-identity-logs-on-azure-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_5zLVr","description":"Configuration information for enabling inactive human identity logs on Azure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"HGzzqZlpDdykZL3llQ6M","title":"Manage RBAC and SBAC in Cortex Cloud Identity Security","pathname":"/cortex-cloud-posture-management/cortex-cloud-identity-security/manage-rbac-and-sbac-in-cortex-cloud-identity-security","siteSpaceId":"sitesp_5zLVr","description":"Working with RBAC and SBAC in Cortex Cloud Identity Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Identity Security"}]},{"id":"Zg4splgstNJVEjy02wqL","title":"Learn about Cloud ASM","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/cloud-asm-concepts","siteSpaceId":"sitesp_5zLVr","description":"Learn about Cloud ASM, including scanning and network mapping.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"}]},{"id":"Qo2j84lIO0bzNWLUkTfL","title":"What is Cloud ASM?","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/cloud-asm-concepts/what-is-cloud-asm","siteSpaceId":"sitesp_5zLVr","description":"Cloud ASM provides visibility into all the assets in your cloud infrastructure that are exposed to the internet.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"},{"label":"Learn about Cloud ASM"}]},{"id":"b7iRGx1C2i1fLbGVYLKI","title":"Scanning","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/cloud-asm-concepts/scanning","siteSpaceId":"sitesp_5zLVr","description":"Cortex Cloud provides targeted scanning of customer networks from an attributed scanning infrastructure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"},{"label":"Learn about Cloud ASM"}]},{"id":"OyskIjFLLMI7ZBxDou38","title":"Network mapping","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/cloud-asm-concepts/network-mapping","siteSpaceId":"sitesp_5zLVr","description":"Through a network mapping process, Cortex Cloud discovers and attributes assets to organizations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"},{"label":"Learn about Cloud ASM"}]},{"id":"93DYdXpBzpiflqEuggi7","title":"Enable Cloud ASM","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/enable-cloud-asm","siteSpaceId":"sitesp_5zLVr","description":"Enable Cloud ASM data discovery to discover all your unmanaged cloud services and cloud services exposed to the internet.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"}]},{"id":"JgMyRypDBYk1MlDx1ZB6","title":"Attack surface management detections","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/attack-surface-management-detections","siteSpaceId":"sitesp_5zLVr","description":"Learn about Attack Surface Management detections, including rules and externally inferred CVEs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"}]},{"id":"vFRgIQpwEvt5Ps5opuBd","title":"Attack surface rules","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/attack-surface-management-detections/attack-surface-rules","siteSpaceId":"sitesp_5zLVr","description":"Attack surface rules are used to identify risks in your attack surface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"},{"label":"Attack surface management detections"}]},{"id":"UpWveUm94YYoZrbXvGSR","title":"Externally inferred CVEs","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/attack-surface-management-detections/externally-inferred-cves","siteSpaceId":"sitesp_5zLVr","description":"Understand CVEs inferred from externally discovered service versions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"},{"label":"Attack surface management detections"}]},{"id":"nbQL9iUWwdXZ62gtpyfH","title":"Attack surface assets","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/attack-surface-assets","siteSpaceId":"sitesp_5zLVr","description":"The assets discovered in an attack surface management scan are called attack surface assets or external surface assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"}]},{"id":"2Bp1Mx7b3t8KtrfkJYIt","title":"Review your unmanaged cloud services","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/review-your-unmanaged-cloud-services","siteSpaceId":"sitesp_5zLVr","description":"Review your unmanaged cloud services in your Attack Surface inventory.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"}]},{"id":"guYUGsAWqObieSdiWgMC","title":"Review unmanaged cloud issues","pathname":"/cortex-cloud-posture-management/cloud-attack-surface-management/review-unmanaged-cloud-issues","siteSpaceId":"sitesp_5zLVr","description":"View your unmanaged cloud issues, including service details.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cloud Attack Surface Management"}]},{"id":"Vl7qAVjaaN73WlR5RYwF","title":"About Network Exposure Detection","pathname":"/cortex-cloud-posture-management/network-exposure-detection/network-exposure-detection","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management identifies and remediates network exposure risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Network Exposure Detection"}]},{"id":"hgDDnLebqqOwXknvn7Bc","title":"What is Cloud Network Analyzer?","pathname":"/cortex-cloud-posture-management/network-exposure-detection/what-is-cloud-network-analyzer","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management identifies exposure across cloud accounts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Network Exposure Detection"}]},{"id":"imdoZzn5GYTENdwxDHV4","title":"Internet exposure detection","pathname":"/cortex-cloud-posture-management/network-exposure-detection/internet-exposure-detection","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management detects publicly reachable cloud assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Network Exposure Detection"}]},{"id":"eX7uqtEluGtLus9U9nnY","title":"Outbound exposure detection","pathname":"/cortex-cloud-posture-management/network-exposure-detection/outbound-exposure-detection","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management detects unrestricted outbound internet access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Network Exposure Detection"}]},{"id":"sGMyg0FTzF9RcXdfcmd5","title":"East-west exposure detection","pathname":"/cortex-cloud-posture-management/network-exposure-detection/east-west-exposure-detection","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management identifies unrestricted lateral access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Network Exposure Detection"}]},{"id":"vMvgv9c2WdjH9ClfcONI","title":"Investigate an internet exposure","pathname":"/cortex-cloud-posture-management/network-exposure-detection/investigate-an-internet-exposure","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management to investigate internet exposure through Issues and Graph Search.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Network Exposure Detection"}]},{"id":"5jR1oCD3b8PfDTUzd0uZ","title":"Configure trusted IPs","pathname":"/cortex-cloud-posture-management/network-exposure-detection/configure-trusted-ips","siteSpaceId":"sitesp_5zLVr","description":"Configure trusted IPs excluded from Cortex Cloud Posture Management exposure evaluations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Network Exposure Detection"}]},{"id":"3uPwW1TdHYfSYzqswGFm","title":"SaaS Security","pathname":"/cortex-cloud-posture-management/saas-security/saas-security","siteSpaceId":"sitesp_5zLVr","description":"Discover continuous SaaS visibility and control in Cortex Cloud Posture Management across identities, connected applications, and AI agents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"}]},{"id":"zye6u34Nv1bC8ctNvwNV","title":"Setup SaaS Security","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/setup-saas-security","siteSpaceId":"sitesp_5zLVr","description":"Get started with SaaS Security in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"rNKvdJcvzWuU3d55A28r","title":"Onboard a Supported SaaS Application","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application","siteSpaceId":"sitesp_5zLVr","description":"Connect supported SaaS applications in Cortex Cloud Posture Management to track misconfigurations and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"gdnfeGndNO8e03NMZiOe","title":"Onboard Aha.io","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-aha.io","siteSpaceId":"sitesp_5zLVr","description":"Connect an Aha.io instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"hPThtVQSzNmN3pRrksIS","title":"Onboard Asana","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-asana","siteSpaceId":"sitesp_5zLVr","description":"Connect an Asana instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"eRpKHkvAp4Mex6JtOtaf","title":"Onboard Atlassian","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-atlassian","siteSpaceId":"sitesp_5zLVr","description":"Connect an Atlassian instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"vJ1HzBLizrk8athZ1BVU","title":"Onboard Automox","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-automox","siteSpaceId":"sitesp_5zLVr","description":"Connect an Automox instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"wsygu4EkbqmCLTIt9VU5","title":"Onboard Businessmap","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-businessmap","siteSpaceId":"sitesp_5zLVr","description":"Connect a Businessmap instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"697Kx87qk9EUaovzfUSj","title":"Onboard Celonis","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-celonis","siteSpaceId":"sitesp_5zLVr","description":"Connect a Celonis instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"mQFG5SYCFarU1Tpr7Q8X","title":"Onboard Cisco Duo","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-cisco-duo","siteSpaceId":"sitesp_5zLVr","description":"Connect a Cisco Duo instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"BevzyT01FZX8WukNEBFw","title":"Onboard Cisco Meraki","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-cisco-meraki","siteSpaceId":"sitesp_5zLVr","description":"Connect a Cisco Meraki instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"BhkcZ2g2MgDfEYd7cJqa","title":"Onboard ClickUp","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-clickup","siteSpaceId":"sitesp_5zLVr","description":"Connect a ClickUp instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"vRlnMLTCSxcGdWnpe6zD","title":"Onboard Contentful","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-contentful","siteSpaceId":"sitesp_5zLVr","description":"Connect a Contentful instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"UAF4Ja3TV9vg1Vdiw6Ul","title":"Onboard Couchbase","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-couchbase","siteSpaceId":"sitesp_5zLVr","description":"Connect a Couchbase instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"MUtvHSQrzaCduUcBsXuR","title":"Onboard Coveo","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-coveo","siteSpaceId":"sitesp_5zLVr","description":"Connect a Coveo instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"4u66qNcBuv1tOpz9nPZm","title":"Onboard Databricks","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-databricks","siteSpaceId":"sitesp_5zLVr","description":"Connect a Databricks instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"Ek0BEff9JkY4CIwxbMxL","title":"Onboard Datadog","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-datadog","siteSpaceId":"sitesp_5zLVr","description":"Connect a Datadog instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"eo6oZ0Bx8u69W77V0B1W","title":"Onboard Gainsight PX","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-gainsight-px","siteSpaceId":"sitesp_5zLVr","description":"Connect a Gainsight PX instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"3AECHoIxMRQcrcHXoke1","title":"Onboard Grammarly","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-grammarly","siteSpaceId":"sitesp_5zLVr","description":"Connect a Grammarly instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"CIc9rAGuqriceCp64tgd","title":"Onboard Harness","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-harness","siteSpaceId":"sitesp_5zLVr","description":"Connect a Harness instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"SdMzlexb5jJ6ZXBs2b13","title":"Onboard Intercom","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-intercom","siteSpaceId":"sitesp_5zLVr","description":"Connect an Intercom instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"93QXdVzjxCxTUn0aT5cE","title":"Onboard Jamf Pro","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-jamf-pro","siteSpaceId":"sitesp_5zLVr","description":"Connect a Jamf Pro instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"KPIG82yr1qRMr6ptETm7","title":"Onboard JumpCloud","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-jumpcloud","siteSpaceId":"sitesp_5zLVr","description":"Connect a JumpCloud instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"2FpNj55dhZGNMW0HB6nl","title":"Onboard Kustomer","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-kustomer","siteSpaceId":"sitesp_5zLVr","description":"Connect a Kustomer instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"QwLFoEChWivlWRBHnZVx","title":"Onboard Microsoft Entra ID","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-microsoft-entra-id","siteSpaceId":"sitesp_5zLVr","description":"Connect a Microsoft Entra ID instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"7F7FZaPNU92UoD1cYc0v","title":"Onboard Monday.com","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-monday.com","siteSpaceId":"sitesp_5zLVr","description":"Connect a Monday.com instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"fSdvRL1elj393ExXDs2i","title":"Onboard MongoDB Atlas","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-mongodb-atlas","siteSpaceId":"sitesp_5zLVr","description":"Connect a MongoDB Atlas instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"jLcF7XcBPR2JAHEE70vn","title":"Onboard MuleSoft","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-mulesoft","siteSpaceId":"sitesp_5zLVr","description":"Connect a MuleSoft instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"lFCDiOe6dOiUL7NvhS3z","title":"Onboard Mural","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-mural","siteSpaceId":"sitesp_5zLVr","description":"Connect a Mural instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"NYJ2RkdPSp1FlbgW3qZe","title":"Onboard Office 365","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-office-365","siteSpaceId":"sitesp_5zLVr","description":"Connect an Office 365 instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"S5nv2rbduOaeMDq9y5aT","title":"Onboard Okta","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-okta","siteSpaceId":"sitesp_5zLVr","description":"Connect an Okta instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"hvFEUTMCgdlFm3CNKKJ1","title":"Onboard PagerDuty","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-pagerduty","siteSpaceId":"sitesp_5zLVr","description":"Connect a PagerDuty instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"skp22GsvDHoPXy50hY72","title":"Onboard Redis Labs","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-redis-labs","siteSpaceId":"sitesp_5zLVr","description":"Connect a Redis Labs instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"OZ3C3ZRFFrBDIWRhf6Ak","title":"Onboard Salesforce","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-salesforce","siteSpaceId":"sitesp_5zLVr","description":"Connect a Salesforce instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"O4hyJNdi22otsOM4RoQw","title":"Onboard SAP Ariba","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-sap-ariba","siteSpaceId":"sitesp_5zLVr","description":"Connect a SAP Ariba instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"Zy54AHLeEvg4mztan0e2","title":"Onboard Sentry","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-sentry","siteSpaceId":"sitesp_5zLVr","description":"Connect a Sentry instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"dP2zN5taeQaZg3zGxHIf","title":"Onboard ServiceNow","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-servicenow","siteSpaceId":"sitesp_5zLVr","description":"Connect a ServiceNow instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"ex4ea3uk4gP65OhCpwFe","title":"Onboard Shopify","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-shopify","siteSpaceId":"sitesp_5zLVr","description":"Connect a Shopify instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"2r5GDfEE7X5WA7pxsYrf","title":"Onboard Slack Enterprise","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-slack-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Connect a Slack Enterprise instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"63tXqSnoQ1YVziPeqOOU","title":"Onboard Sumo Logic","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-sumo-logic","siteSpaceId":"sitesp_5zLVr","description":"Connect a Sumo Logic instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"bbB9rArh91NNlfqvl4Ed","title":"Onboard Workday","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-workday","siteSpaceId":"sitesp_5zLVr","description":"Connect a Workday instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"AfJTpMyx6YOoAqPvY6ey","title":"Onboard Wrike","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-wrike","siteSpaceId":"sitesp_5zLVr","description":"Connect a Wrike instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"1XNiVr9iBaiisgAWdOhD","title":"Onboard YouTrack","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/onboard-a-supported-saas-application/onboard-youtrack","siteSpaceId":"sitesp_5zLVr","description":"Connect a YouTrack instance in Cortex Cloud Posture Management to detect posture risks and compliance violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"Onboard a Supported SaaS Application"}]},{"id":"nQt2HcL6eYXfpXbFw8oM","title":"SaaS Security Overview","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-security-overview","siteSpaceId":"sitesp_5zLVr","description":"Use the SaaS Security Overview in Cortex Cloud Posture Management to monitor posture, identity, data, and AI agent security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"IshnIWccjEa3vE8tc0QJ","title":"SaaS Security Checks","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-security-checks","siteSpaceId":"sitesp_5zLVr","description":"Use SaaS Security Checks in Cortex Cloud Posture Management to identify at-risk assets and prioritize remediation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"mck9p52X72ly0e7XFR42","title":"Provider Instances Security Check","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/provider-instances-security-check","siteSpaceId":"sitesp_5zLVr","description":"Use Provider Instances Security Check in Cortex Cloud Posture Management to assess security posture across application instances.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"3AiEPVOLI6ugpUozvHQO","title":"Detection Rules","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/detection-rules","siteSpaceId":"sitesp_5zLVr","description":"View SaaS Security detection rules in Cortex Cloud Posture Management to detect application risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"npg8zTpv6grYMfwfqwUm","title":"Remediation Actions","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/remediation-actions","siteSpaceId":"sitesp_5zLVr","description":"Use remediation actions in Cortex Cloud Posture Management to resolve SaaS Security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"J3LIEjiPihNz9hQBGnjw","title":"Create and monitor tickets","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/create-and-monitor-tickets","siteSpaceId":"sitesp_5zLVr","description":"Create and monitor tickets in Cortex Cloud Posture Management to remediate SaaS Security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"m35sU3iHGjujHG8pCl5f","title":"SaaS AI Agent Security","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security","siteSpaceId":"sitesp_5zLVr","description":"Use SaaS AI Agent Security in Cortex Cloud Posture Management to secure enterprise SaaS AI agents.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"}]},{"id":"0msRmxACq1NDsrks1hyl","title":"Setup SaaS Security for AISPM","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/setup-saas-security-for-aispm","siteSpaceId":"sitesp_5zLVr","description":"Get started with SaaS AI Agent Security in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"dLOCfrIA74UOQ8mAYBqF","title":"Onboard SaaS AI Agents","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents","siteSpaceId":"sitesp_5zLVr","description":"Learn how to onboard supported SaaS AI agents in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"62yQq1h4a3jl6lyL8Fzi","title":"Onboard Atlassian Rovo","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-atlassian-rovo","siteSpaceId":"sitesp_5zLVr","description":"Connect Atlassian Rovo in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"QbOc2fdCptYIebVrcg2b","title":"Onboard Box AI Agents","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-box-ai-agents","siteSpaceId":"sitesp_5zLVr","description":"Connect Box AI Agents in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"5Ok3ezeCYOCFRFQFox5o","title":"Onboard ChatGPT Enterprise","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-chatgpt-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Connect ChatGPT Enterprise in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"DZOyq4JiUcHTQr1yPvM2","title":"Onboard Cursor Enterprise","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-cursor-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Connect Cursor Enterprise in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"S4mXzeS2lJ62ParTd0SZ","title":"Onboard Gemini Enterprise","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-gemini-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Connect Gemini Enterprise in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"2BuoK6pr5V8dsMKxBI3J","title":"Onboard M365 Copilot","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-m365-copilot","siteSpaceId":"sitesp_5zLVr","description":"Connect M365 Copilot in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"sRF5I9qkD15RdOrmst3s","title":"Onboard Microsoft Copilot Studio","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-microsoft-copilot-studio","siteSpaceId":"sitesp_5zLVr","description":"Connect Microsoft Copilot Studio in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"Rz87NCdVgHa8dHWZsIYH","title":"Onboard Service Now","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-service-now","siteSpaceId":"sitesp_5zLVr","description":"Connect ServiceNow in Cortex Cloud Posture Management SaaS AI Agent Security for visibility and control across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Onboard SaaS AI Agents"}]},{"id":"CSsEwJ5c7NiqSMXfnNMA","title":"Manage SaaS AI Agents","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents","siteSpaceId":"sitesp_5zLVr","description":"Manage SaaS AI agents in Cortex Cloud Posture Management, including agents, datasets, and connected tools.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"}]},{"id":"AfArQwcywcWuzCCM3fbj","title":"View AI Agents","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-ai-agents","siteSpaceId":"sitesp_5zLVr","description":"View SaaS AI agents in Cortex Cloud Posture Management to assess their security context.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"grON6QDFTGTHHLu5VvFm","title":"View Datasets","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-datasets","siteSpaceId":"sitesp_5zLVr","description":"View inference datasets in Cortex Cloud Posture Management SaaS AI Agent Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"SAo9NljpA2kApLMTTcaN","title":"View Agent Tools","pathname":"/cortex-cloud-posture-management/saas-security/saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-agent-tools","siteSpaceId":"sitesp_5zLVr","description":"View tools connected to SaaS AI agents in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"SAAS SECURITY"},{"label":"SaaS Security"},{"label":"SaaS AI Agent Security"},{"label":"Manage SaaS AI Agents"}]},{"id":"YCngJAM9CWHFoa5WWsr1","title":"Vulnerability management in Cortex Cloud","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-management-in-cortex-cloud","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management to identify, assess, prioritize, and remediate security vulnerabilities across endpoints, code, and cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"E24dXfEI4Et8nkkHpFjb","title":"Cortex Cloud vulnerability concepts","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-management-in-cortex-cloud/cortex-cloud-vulnerability-concepts","siteSpaceId":"sitesp_5zLVr","description":"Familiarize yourself with Cortex Cloud Posture Management vulnerability concepts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability management in Cortex Cloud"}]},{"id":"HkTVo78reH0Mn0tQiJpU","title":"Vulnerability Management dashboard","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-management-in-cortex-cloud/vulnerability-management-dashboard","siteSpaceId":"sitesp_5zLVr","description":"Visualize your most pressing risks, changes over time, and remediation progress with Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability management in Cortex Cloud"}]},{"id":"B8esGI4z4wgBrhgNUYRM","title":"Cortex Vulnerability Risk Score","pathname":"/cortex-cloud-posture-management/vunerability-management/cortex-vulnerability-risk-score","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud calculates and displays CVRS to prioritize vulnerability remediation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"zHO8yDz5Rtqm6LSgoiGg","title":"Vulnerability policies","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-policies","siteSpaceId":"sitesp_5zLVr","description":"A vulnerability policy defines the action you want to take for a specific set of vulnerability findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"GglkD6iw8kz1onDnMSUd","title":"Create a vulnerability policy","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-policies/create-a-vulnerability-policy","siteSpaceId":"sitesp_5zLVr","description":"Create vulnerability policies that create issues or prevent findings based on defined conditions and scope.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"5TCDwlJQ858ZUgr0FSMt","title":"Update the Ignored CVEs, Asset Groups, and Assets policy","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-policies/update-the-ignored-cves-asset-groups-and-assets-policy","siteSpaceId":"sitesp_5zLVr","description":"Update the ignored CVEs, asset groups, and assets policy to prevent matching vulnerability findings from creating issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"R4y6O0qCQpeHzPGTRDDg","title":"Modify a vulnerability policy","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-policies/modify-a-vulnerability-policy","siteSpaceId":"sitesp_5zLVr","description":"Update vulnerability issue-creation and prevention policies through the policy wizard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"Sb3tbiMrngeUka2C5YzK","title":"Configure a block grace period","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-policies/configure-a-block-grace-period","siteSpaceId":"sitesp_5zLVr","description":"Configure remediation grace periods that delay Kubernetes deployment blocks or build failures after vulnerability disclosure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"TsAY0vp8buectNghh87d","title":"Enable or disable a vulnerability policy","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-policies/enable-or-disable-a-vulnerability-policy","siteSpaceId":"sitesp_5zLVr","description":"Enable or disable vulnerability issue-creation and prevention policies to control actions for matching findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"},{"label":"Vulnerability policies"}]},{"id":"8yi4YA8egcF1liKi0w1q","title":"Investigate and remediate vulnerabilities","pathname":"/cortex-cloud-posture-management/vunerability-management/investigate-and-remediate-vulnerabilities","siteSpaceId":"sitesp_5zLVr","description":"Investigate, prioritize, and remediate vulnerabilities through issues, findings, and vulnerable assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"KuB43diC686w3MsxvF8V","title":"Vulnerability Intelligence","pathname":"/cortex-cloud-posture-management/vunerability-management/vulnerability-intelligence","siteSpaceId":"sitesp_5zLVr","description":"Vulnerability Intelligence is an in-product, real-time feed that provides vulnerability data and threat intelligence from a variety of certified upstream sources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"aEOY3o4RTMJIQkq7jlR4","title":"Emerging Vulnerabilities","pathname":"/cortex-cloud-posture-management/vunerability-management/emerging-vulnerabilities","siteSpaceId":"sitesp_5zLVr","description":"The Emerging Vulnerabilities page is a a centralized hub for security teams to research, assess, and respond to global, emergent threats and zero-day exploits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"SemEwTvPJuxpgqo3k7jt","title":"Recast CVSS scores and CVSS severities","pathname":"/cortex-cloud-posture-management/vunerability-management/recast-cvss-scores-and-cvss-severities","siteSpaceId":"sitesp_5zLVr","description":"Customize CVSS scores and CVSS severities in the platform to align your risk management approach with your organizational context and priorities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Vunerability Management"}]},{"id":"3uYmjg3c9DVX0Th7a1Lp","title":"Registry scanning","pathname":"/cortex-cloud-posture-management/registry-scanning/registry-scanning","siteSpaceId":"sitesp_5zLVr","description":"Learn about Registry scanning capability in Cortex Cloud","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"HpoFgTQ8XtRYJSck4fVb","title":"Supported container registry integrations","pathname":"/cortex-cloud-posture-management/registry-scanning/registry-scanning/supported-container-registry-integrations","siteSpaceId":"sitesp_5zLVr","description":"Learn about supported container registry integrations in Cortex Cloud","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"},{"label":"Registry scanning"}]},{"id":"KucCBeOuVY5XzBhLGyjr","title":"How Container Registry Scanning Works","pathname":"/cortex-cloud-posture-management/registry-scanning/registry-scanning/how-container-registry-scanning-works","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud discovers, scans, and evaluates container images in onboarded registries to identify and continuously monitor security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"},{"label":"Registry scanning"}]},{"id":"KpWhRBwaxtqNqRR91uzc","title":"Scan re-evaluation process","pathname":"/cortex-cloud-posture-management/registry-scanning/registry-scanning/scan-re-evaluation-process","siteSpaceId":"sitesp_5zLVr","description":"Understand how Cortex Cloud re-evaluates container registry scan results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"},{"label":"Registry scanning"}]},{"id":"nDvSLw5YEzibJwaaxlvh","title":"Configure registry scanning for cloud accounts","pathname":"/cortex-cloud-posture-management/registry-scanning/configure-registry-scanning-for-cloud-accounts","siteSpaceId":"sitesp_5zLVr","description":"Configure Cortex Cloud to scan container registries in connected cloud accounts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"colNTEEHTU95SkGnZhPk","title":"Modify the container registry scanning scope","pathname":"/cortex-cloud-posture-management/registry-scanning/configure-registry-scanning-for-cloud-accounts/modify-the-container-registry-scanning-scope","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"},{"label":"Configure registry scanning for cloud accounts"}]},{"id":"0y9LoSsNJuXMvwABl3ME","title":"Configure registry scanning for third party integrations","pathname":"/cortex-cloud-posture-management/registry-scanning/configure-registry-scanning-for-third-party-integrations","siteSpaceId":"sitesp_5zLVr","description":"Learn how to configure Cortex Cloud to scan container registries in third-party integrations","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"S06OjIfPV5qV4iVs2DlP","title":"Manage registry scanning with APIs","pathname":"/cortex-cloud-posture-management/registry-scanning/manage-registry-scanning-with-apis","siteSpaceId":"sitesp_5zLVr","description":"Learn how to onboard and manage registry scanning programatically with APIs for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Registry scanning"}]},{"id":"01SPwOr7QI5sFnxc617s","title":"About Rules and Policies","pathname":"/cortex-cloud-posture-management/rules-and-policies/about-rules-and-policies","siteSpaceId":"sitesp_5zLVr","description":"Discover how Cortex Cloud detects security risks across your infrastructure, workloads, and container images, and how policies automate the response.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"XYOHJriPeIBXND662ZYc","title":"Cloud security rules and policies","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies","siteSpaceId":"sitesp_5zLVr","description":"Learn how to use Cortex Cloud Posture Management rules and policies to detect cloud risks and enforce controls.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"WQ2VaVlmVZv5Qte9Gcp0","title":"Cloud security rules","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/cloud-security-rules","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management cloud security rules detect risks across your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"xnINFRYs9jbpS2k6QAyJ","title":"Cloud security policies","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/cloud-security-policies","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management cloud security policies apply rules to selected assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"GVmsqvNnbWBAHE14aQh1","title":"Create and manage cloud security rules","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules","siteSpaceId":"sitesp_5zLVr","description":"Create and manage Cortex Cloud Posture Management cloud security rules to detect and prioritize risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"RV7ZfZEfiNG76DJYQAJn","title":"Create a graph rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-graph-rule","siteSpaceId":"sitesp_5zLVr","description":"Create graph rules in Cortex Cloud Posture Management to identify risky relationships and attack paths.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"TMZyVXC78Ep884E02YhU","title":"Create a configuration rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-configuration-rule","siteSpaceId":"sitesp_5zLVr","description":"Create configuration rules in Cortex Cloud Posture Management to detect resource misconfigurations and policy violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"7Zsnw6Q5ooXEbJVsq4nW","title":"Create a data rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-data-rule","siteSpaceId":"sitesp_5zLVr","description":"Create data rules in Cortex Cloud Posture Management to detect data risks, malware, and classification issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"DFBjkLZDNhsZqT5YpFe1","title":"Create an identity rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-identity-rule","siteSpaceId":"sitesp_5zLVr","description":"Create identity rules in Cortex Cloud Posture Management to detect excessive or unused permissions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"Ft2dBpfB5Y4Ms5FZQHgh","title":"Create a network exposure rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-network-exposure-rule","siteSpaceId":"sitesp_5zLVr","description":"Create network exposure rules in Cortex Cloud Posture Management to detect risky network access.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"2syn3FrfUUHG3zVkfSCW","title":"Create an AI rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-ai-rule","siteSpaceId":"sitesp_5zLVr","description":"Create AI rules in Cortex Cloud Posture Management to detect risks across your AI ecosystem.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"EtwsZmrgaXzkQKXOackP","title":"Create an attack path (legacy) rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-attack-path-rule","siteSpaceId":"sitesp_5zLVr","description":"Create legacy attack path rules in Cortex Cloud Posture Management to identify breach paths to high-value assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"xeUeU9Fp0gkO2ovwuIRM","title":"View cloud security rule status","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/view-cloud-security-rule-status","siteSpaceId":"sitesp_5zLVr","description":"View and filter cloud security rule status in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"yO2kiH01AoEspSIfaZLV","title":"Edit a cloud security rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/edit-a-cloud-security-rule","siteSpaceId":"sitesp_5zLVr","description":"Edit cloud security rules in Cortex Cloud Posture Management and review their effect on related issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"gBC2pp1HBnKMkkTAw6kF","title":"Enable or disable a rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/enable-or-disable-a-rule","siteSpaceId":"sitesp_5zLVr","description":"Enable or disable Cortex Cloud Posture Management cloud security rules to control asset evaluations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"Vku7dHHlXU6ISE8ZXfCM","title":"Use an existing rule to create a new one","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/use-an-existing-rule-to-create-a-new-one","siteSpaceId":"sitesp_5zLVr","description":"Duplicate Cortex Cloud Posture Management cloud security rules to create tailored detections.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"5YDXPAjUQj6wNNvi0p2d","title":"Delete a custom cloud security rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/delete-a-custom-cloud-security-rule","siteSpaceId":"sitesp_5zLVr","description":"Delete unneeded custom cloud security rules in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security rules"}]},{"id":"KenA7R3j0rbgTf8o8SHR","title":"Create and manage cloud security policies","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies","siteSpaceId":"sitesp_5zLVr","description":"Create and manage Cortex Cloud Posture Management cloud security policies to apply rules to cloud assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"}]},{"id":"ix8CZmh45w7j6ljYL1Hi","title":"Create a cloud security policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/create-a-cloud-security-policy","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management cloud security policies to apply rules to selected cloud assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"9LRusmgq8lkgzkveiEQ3","title":"Edit a cloud security policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/edit-a-cloud-security-policy","siteSpaceId":"sitesp_5zLVr","description":"Edit Cortex Cloud Posture Management cloud security policies to update their details, rules, and scopes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"9AosXnRI3LjeaeOO0pnv","title":"Enable or disable a policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/enable-or-disable-a-policy","siteSpaceId":"sitesp_5zLVr","description":"Enable or disable Cortex Cloud Posture Management cloud security policies to control enforcement.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"jb98rWTFT0LV4CASnpjK","title":"Use an existing policy to create a new one","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/use-an-existing-policy-to-create-a-new-one","siteSpaceId":"sitesp_5zLVr","description":"Clone Cortex Cloud Posture Management cloud security policies to create tailored policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"0u43UtSKCz8hDSrrRosg","title":"Delete a custom cloud security policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/delete-a-custom-cloud-security-policy","siteSpaceId":"sitesp_5zLVr","description":"Delete unneeded custom cloud security policies in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud security rules and policies"},{"label":"Create and manage cloud security policies"}]},{"id":"7t4Cntra0sWtB9HDgqwQ","title":"Cloud workload policies and rules","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management policies and rules to detect violations and enforce security controls.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"v0QYoRsNdl9Q6fy9LKwE","title":"How policies and rules work together","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/how-policies-and-rules-work-together","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management policies enforce actions for violations detected by rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"}]},{"id":"u4dJa6UrLdtDnUicIbnW","title":"Cloud workload policies","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management cloud workload policies to detect, prevent, and manage security violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"}]},{"id":"6vJyuqtlTiHfStrDoNFF","title":"Types of cloud workload policies","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies","siteSpaceId":"sitesp_5zLVr","description":"Explore Cortex Cloud Posture Management policy types for misconfigurations, malware, secrets, and trusted images.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"esnw7JP1x4zisSsVGK4d","title":"Trusted image cloud workload policies","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies/types-of-cloud-workload-policies","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management trusted image policies to enforce image trust and manage violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"},{"label":"Types of cloud workload policies"}]},{"id":"1WyOHIkyM13yj3ygQuwd","title":"Cloud Workload Policies page","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management to view, filter, and manage cloud workload policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"01gijzzG8vKpN2EWPYJN","title":"Enable or disable a cloud workload policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/enable-or-disable-a-cloud-workload-policy","siteSpaceId":"sitesp_5zLVr","description":"Enable or disable Cortex Cloud Posture Management cloud workload policies to control their enforcement.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"alTaL100KNvogFghigfQ","title":"Create a cloud workload policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/create-a-cloud-workload-policy","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management cloud workload policies to address security risks and compliance requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"WbF3m6qg80UagCyXYyFp","title":"Use an existing policy to create a new cloud workload policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/use-an-existing-policy-to-create-a-new-cloud-workload-policy","siteSpaceId":"sitesp_5zLVr","description":"Reuse a Cortex Cloud Posture Management cloud workload policy to create a new policy.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"B1bEp6S9GuBSxnrIQD2e","title":"Edit a cloud workload policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/edit-a-cloud-workload-policy","siteSpaceId":"sitesp_5zLVr","description":"Edit Cortex Cloud Posture Management cloud workload policies to update their settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"Gb9uJb3S6fSRnKVsRjLk","title":"Delete a cloud workload policy","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/delete-a-cloud-workload-policy","siteSpaceId":"sitesp_5zLVr","description":"Delete Cortex Cloud Posture Management cloud workload policies that are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"UF3CdRxkQTp1HB71WbYT","title":"Cloud workload preventive action","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-preventive-action","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management preventive actions to block violations and create issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"p0444cw0jAcun4mFauBi","title":"Cloud workload rules","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management cloud workload rules to define criteria for detecting security violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"}]},{"id":"twFvZznvsRwkzX1l6aFL","title":"Default (pre-defined) rules","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/default-pre-defined-rules","siteSpaceId":"sitesp_5zLVr","description":"Review predefined Cortex Cloud Posture Management rules that detect cloud runtime security violations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"Ock2VtBFLD1cYaKKdyyU","title":"Custom (user-defined) rules","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/custom-user-defined-rules","siteSpaceId":"sitesp_5zLVr","description":"Define custom Cortex Cloud Posture Management rules for tailored cloud workload security and compliance checks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"wc13wjMsfOqn5wsndJ4E","title":"Cloud Workload Rules page","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management to view, filter, and manage cloud workload rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"99lbpIEvyQAz3e94f2JH","title":"Create a new custom detection rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_5zLVr","description":"Create custom Cortex Cloud Posture Management detection rules for security and compliance requirements.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"yS6ZdCSBA6dFMnhmdLQA","title":"Use an existing rule to create a new custom detection rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/use-an-existing-rule-to-create-a-new-custom-detection-rule","siteSpaceId":"sitesp_5zLVr","description":"Reuse a Cortex Cloud Posture Management rule to create a new custom detection rule.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"kyuVJkZmsUkwtO7LNGCG","title":"Edit a custom detection rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/edit-a-custom-detection-rule","siteSpaceId":"sitesp_5zLVr","description":"Edit Cortex Cloud Posture Management custom detection rules to update their settings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"51KRCiiEHRoEHhi3igPu","title":"Delete a custom detection rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/delete-a-custom-detection-rule","siteSpaceId":"sitesp_5zLVr","description":"Delete Cortex Cloud Posture Management custom detection rules that are no longer needed.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"AbrhWZxCMF6M6ASrDVWj","title":"Base image rules","pathname":"/cortex-cloud-posture-management/rules-and-policies/base-images-rule","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management base image rules map image lineage and vulnerabilities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"}]},{"id":"Xot9Npz9Gg1dFKVUx6Qg","title":"Create a base image rule","pathname":"/cortex-cloud-posture-management/rules-and-policies/base-images-rule/create-a-base-images-rule","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management base image rules to map derived images to foundational images.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Base image rules"}]},{"id":"o7v8PpH8hxFB5jJwVzAy","title":"Find the base image for an asset","pathname":"/cortex-cloud-posture-management/rules-and-policies/base-images-rule/prerequisites","siteSpaceId":"sitesp_5zLVr","description":"Find an asset's foundational image and lineage in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Rules and Policies"},{"label":"Base image rules"}]},{"id":"lLVm0fD3Xl78WfxxSEGg","title":"About serverless function posture security","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-security","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management scans serverless functions for vulnerabilities, malware, and exposed secrets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"WZi0neLEERmkx6LOzaXo","title":"Onboard cloud providers for serverless functions","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/onboard-cloud-providers-for-serverless-functions","siteSpaceId":"sitesp_5zLVr","description":"Connect cloud providers to Cortex Cloud Posture Management for serverless function security scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"2J8GZBi4XKYx8tPkGGuW","title":"Serverless function posture rules","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-rules","siteSpaceId":"sitesp_5zLVr","description":"Create and manage Cortex Cloud Posture Management rules for serverless function risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"zTpzgODDLc4wzRBHWkys","title":"Manage serverless function rules","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-rules/manage-serverless-function-rules","siteSpaceId":"sitesp_5zLVr","description":"View, edit, and clone Cortex Cloud Posture Management rules for serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"qXrctjqL5767fEBhwc3z","title":"Create serverless function rules","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-rules/create-serverless-function-rules","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management rules for serverless attack paths, configurations, and network exposure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"zvt8CUhOUFDbe2Nugcnx","title":"Create an attack path rule for serverless functions","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-rules/create-an-attack-path-rule-for-serverless-functions","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management rules that identify attack paths across serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"IcznpTnplF1GxwWzwuEx","title":"Create a configuration rule for serverless functions","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-rules/create-a-configuration-rule-for-serverless-functions","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management rules that detect serverless function configuration risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"qDK5hYASlSSiHYTB5oJi","title":"Create a network exposure rule for serverless functions","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-rules/create-a-network-exposure-rule-for-serverless-functions","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management rules that detect serverless function network exposure.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture rules"}]},{"id":"5R7mRdNnTg4DKlJAjvvV","title":"Serverless function posture policies","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-policies","siteSpaceId":"sitesp_5zLVr","description":"Create and manage Cortex Cloud Posture Management policies for serverless function risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"4kcLUkiAOPFDCaqxtxkx","title":"Manage serverless function policies","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-policies/manage-serverless-function-policies","siteSpaceId":"sitesp_5zLVr","description":"View, edit, clone, and delete Cortex Cloud Posture Management policies for serverless functions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture policies"}]},{"id":"iSmNwbLmpeC2XlMdZmfl","title":"Create serverless function policies","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-posture-policies/create-serverless-function-policies","siteSpaceId":"sitesp_5zLVr","description":"Create Cortex Cloud Posture Management policies to detect and remediate serverless function risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"},{"label":"Serverless function posture policies"}]},{"id":"7cNcUzrtfYTFd39B8m4q","title":"Serverless function usage","pathname":"/cortex-cloud-posture-management/serverless-function-posture-security/serverless-function-usage","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management to investigate serverless function assets, findings, issues, and scan health.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Serverless function posture security"}]},{"id":"0gMNyuJai1bwkD6SLZW3","title":"Broker VM","pathname":"/cortex-cloud-posture-management/data-management/broker-vm","siteSpaceId":"sitesp_5zLVr","description":"Deploy and manage Cortex Cloud Posture Management Broker VM data collectors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"}]},{"id":"eALZkjTPvsdfw6h116gk","title":"What is the Broker VM?","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/what-is-the-broker-vm","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management Broker VM collects and forwards data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"sMiiS7bJAcvJCX4UPkEg","title":"Set up and configure Broker VM","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm","siteSpaceId":"sitesp_5zLVr","description":"Install and configure a Broker VM to collect data for Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"xVqsXVsk07xI2aW7PbEJ","title":"Broker VM image installations","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations","siteSpaceId":"sitesp_5zLVr","description":"Install Cortex Cloud Posture Management Broker VM on supported cloud and virtual platforms.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"BctTHgGsLK6Cz732JysP","title":"Set up Broker VM on Alibaba Cloud","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-alibaba-cloud","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on Alibaba Cloud for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"JzEjAGJkUZeRGYWnuJHi","title":"Set up Broker VM on Amazon Web Services","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-amazon-web-services","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on Amazon Web Services for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"VBmxkPL9qCjk1sBgnueq","title":"Set up Broker VM on Google Cloud Platform (GCP)","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-google-cloud-platform-gcp","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on Google Cloud Platform for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"FT92czXiuRIuKWEDyrc7","title":"Set up Broker VM on KVM using Ubuntu","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-kvm-using-ubuntu","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on KVM with Ubuntu for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"Fn8cQ6opis0PRl3iPKbO","title":"Set up Broker VM on Microsoft Azure","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-azure","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on Microsoft Azure for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"BbIex8B9VwhxN5seTqYU","title":"Set up Broker VM on Microsoft Hyper-V","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-hyper-v","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on Microsoft Hyper-V for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"FQpIg53Af1mhgvdPqhk1","title":"Set up Broker VM on Nutanix Hypervisor","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-nutanix-hypervisor","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on Nutanix Hypervisor for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"3ErWxjvP1ojPS99GtdoS","title":"Set up Broker VM on VMware ESXi using vSphere Client","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-vmware-esxi-using-vsphere-client","siteSpaceId":"sitesp_5zLVr","description":"Deploy Cortex Cloud Posture Management Broker VM on VMware ESXi for data collection.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"6DhPanuZEn53s0pWVwfs","title":"Broker VM data collector applets","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets","siteSpaceId":"sitesp_5zLVr","description":"Configure Cortex Cloud Posture Management Broker VM data collector applets for supported data sources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"4GWWzHEC9cS2YaSVe8Xe","title":"Manage Broker VM","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm","siteSpaceId":"sitesp_5zLVr","description":"Manage Cortex Cloud Posture Management Broker VM configuration, monitoring, upgrades, and clustering.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"654bD2PR8RTAW6hPl3AQ","title":"Edit Broker VM Configuration","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/edit-broker-vm-configuration","siteSpaceId":"sitesp_5zLVr","description":"Update the configuration of an existing Cortex Cloud Posture Management Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"9iQGgRmIATYm3xCGdgCa","title":"Increase Broker VM storage allocated for data caching","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-caching","siteSpaceId":"sitesp_5zLVr","description":"Increase Cortex Cloud Posture Management Broker VM storage for cached data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"Sb8oyYUxMhvy68XMLhhW","title":"Monitor Broker VM using Prometheus","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/monitor-broker-vm-using-prometheus","siteSpaceId":"sitesp_5zLVr","description":"Monitor Cortex Cloud Posture Management Broker VM metrics with Prometheus.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"CYkegyNrfm5JdXrEdjT3","title":"Collect Broker VM Logs","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/collect-broker-vm-logs","siteSpaceId":"sitesp_5zLVr","description":"Collect logs from Cortex Cloud Posture Management Broker VM for troubleshooting.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"6vAdsy3GrPbcfohQeEzd","title":"Upgrade Broker VM","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/upgrade-broker-vm","siteSpaceId":"sitesp_5zLVr","description":"Upgrade Cortex Cloud Posture Management Broker VM to a supported release.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"T2BOnt5mkqbUMGYlSB5e","title":"Update Broker VM applets independently","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/update-broker-vm-applets-independently","siteSpaceId":"sitesp_5zLVr","description":"Update Cortex Cloud Posture Management Broker VM data collector applets without upgrading the VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"CwTfYXl2sTWykuKWk7w7","title":"Import Broker VM Configuration","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/import-broker-vm-configuration","siteSpaceId":"sitesp_5zLVr","description":"Import a saved Cortex Cloud Posture Management Broker VM configuration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"NLl4FY4wHHGIfQlH4YWS","title":"Open Live Terminal","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/open-live-terminal","siteSpaceId":"sitesp_5zLVr","description":"Open a live terminal session on Cortex Cloud Posture Management Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"Aae1mHxm6YjsbInP4XWw","title":"Add Broker VM to cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/add-broker-vm-to-cluster","siteSpaceId":"sitesp_5zLVr","description":"Add a Cortex Cloud Posture Management Broker VM node to a high availability cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"obmxzzXfjomrTUBqajj6","title":"Switchover Primary Node in Cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/switchover-primary-node-in-cluster","siteSpaceId":"sitesp_5zLVr","description":"Switch the primary node in a Cortex Cloud Posture Management Broker VM cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"pSaJSTuv1I8pLbknJS9u","title":"Remove from Cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm/remove-from-cluster","siteSpaceId":"sitesp_5zLVr","description":"Remove a Cortex Cloud Posture Management Broker VM node from its cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"RHJhnSCP52GH71ykCMfA","title":"Manage Broker VM data collector applets","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/manage-broker-vm-data-collector-applets","siteSpaceId":"sitesp_5zLVr","description":"Manage applets installed on Cortex Cloud Posture Management Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"AQrVi0jcd49r5kH9QG4N","title":"Broker VM High Availability Cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster","siteSpaceId":"sitesp_5zLVr","description":"Configure Cortex Cloud Posture Management Broker VM clusters for high availability.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"g5TSWmm4QQlW31hfwhjh","title":"Configure High Availability Cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster/configure-high-availability-cluster","siteSpaceId":"sitesp_5zLVr","description":"Configure a high availability cluster for Cortex Cloud Posture Management Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"fBOb9PfwengCZTGmCQrE","title":"Manage Broker VM clusters","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters","siteSpaceId":"sitesp_5zLVr","description":"View and manage Cortex Cloud Posture Management Broker VM high availability clusters.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"nfCvshQBMJsIotN0ojXH","title":"View cluster details","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/view-cluster-details","siteSpaceId":"sitesp_5zLVr","description":"View configuration and status details for a Cortex Cloud Posture Management Broker VM cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"ZNGjo9aVxym3ffSOIb5f","title":"Edit cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/edit-cluster","siteSpaceId":"sitesp_5zLVr","description":"Update the configuration of a Cortex Cloud Posture Management Broker VM cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"UkN3aM9iwBCe1lXfbVhE","title":"Add applet to cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-applet-to-cluster","siteSpaceId":"sitesp_5zLVr","description":"Add a data collector applet to a Cortex Cloud Posture Management Broker VM cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"J84WKkiVwmkfBAJKCtFY","title":"Add Broker VM to cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-broker-vm-to-cluster","siteSpaceId":"sitesp_5zLVr","description":"Add a Cortex Cloud Posture Management Broker VM node to an existing cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"yTkurjtiAFmVA9anlOE9","title":"Remove cluster","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/remove-cluster","siteSpaceId":"sitesp_5zLVr","description":"Remove a Cortex Cloud Posture Management Broker VM high availability cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"YPLfQRvwkgHT2NxNHbXZ","title":"Broker VM notifications","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/broker-vm-notifications","siteSpaceId":"sitesp_5zLVr","description":"Configure and manage Cortex Cloud Posture Management Broker VM notifications.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"9FOKTUDFc4dq3WN2QX4M","title":"Monitor Broker VM activity","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/monitor-broker-vm-activity","siteSpaceId":"sitesp_5zLVr","description":"Monitor Cortex Cloud Posture Management Broker VM activity and operational status.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"eOXi9d4C4j5y8Yv9S3ZK","title":"Troubleshoot Broker VM applet errors","pathname":"/cortex-cloud-posture-management/data-management/broker-vm/troubleshoot-broker-vm-applet-errors","siteSpaceId":"sitesp_5zLVr","description":"Diagnose and resolve Cortex Cloud Posture Management Broker VM data collector applet errors.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"zKpOhpkgggj4FRjO3hG7","title":"Dataset management","pathname":"/cortex-cloud-posture-management/data-management/dataset-management","siteSpaceId":"sitesp_5zLVr","description":"Learn more about managing your datasets and understanding your overall data storage, period-based retention.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"}]},{"id":"nVqOdbiQawv1iOzIHRC3","title":"What are datasets?","pathname":"/cortex-cloud-posture-management/data-management/dataset-management/what-are-datasets","siteSpaceId":"sitesp_5zLVr","description":"Learn how to import, delete, and interact with custom or third-party datasets in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"9ot3mTzlSvcqn5JJFXJe","title":"Lookup datasets","pathname":"/cortex-cloud-posture-management/data-management/dataset-management/lookup-datasets","siteSpaceId":"sitesp_5zLVr","description":"Learn more about lookup datasets to correlate data from a data source with events in your environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"Ti1UaslcZMw7bhfztDUj","title":"Import a lookup dataset","pathname":"/cortex-cloud-posture-management/data-management/dataset-management/lookup-datasets/import-a-lookup-dataset","siteSpaceId":"sitesp_5zLVr","description":"Import a lookup dataset into Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"d02RDClBHx1hPO7C7lYx","title":"Download JSON file of lookup dataset","pathname":"/cortex-cloud-posture-management/data-management/dataset-management/lookup-datasets/download-json-file-of-lookup-dataset","siteSpaceId":"sitesp_5zLVr","description":"Download a lookup dataset as a JSON file from Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"xRrvTJCWgq2mf7GAjCtF","title":"Set time to live for lookup datasets","pathname":"/cortex-cloud-posture-management/data-management/dataset-management/lookup-datasets/set-time-to-live-for-lookup-datasets","siteSpaceId":"sitesp_5zLVr","description":"Set lookup dataset time-to-live in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"ZeyDUu6UK0FkYV9X2Gdq","title":"Monitor datasets and dataset views activity","pathname":"/cortex-cloud-posture-management/data-management/dataset-management/monitor-datasets-and-dataset-views-activity","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the monitored Cortex Cloud datasets and dataset views activities.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"6y42vM0wdFjCUMAl0Myl","title":"Manage compute units","pathname":"/cortex-cloud-posture-management/data-management/manage-compute-units","siteSpaceId":"sitesp_5zLVr","description":"Learn more about managing and tracking your compute units usage for API and Cold Storage XQL queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"}]},{"id":"qhmhcMZ7C8kR8k4qjgHx","title":"Compute units usage","pathname":"/cortex-cloud-posture-management/data-management/manage-compute-units/compute-units-usage","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how to compute units (CU) works in Cortex Cloud Posture Management according to your license and available options after reaching your quota.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Data management"},{"label":"Manage compute units"}]},{"id":"bDaBxUHpp4AzW5psSPfm","title":"What are Cortex Cloud data sources and connectors?","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/what-are-cortex-cloud-data-sources","siteSpaceId":"sitesp_5zLVr","description":"Learn more about Cortex Cloud data sources and connectors with a unified approach to integrations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"SoC5uU5cCjgBS2RdV0ij","title":"What is the data source and connector catalog?","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/complete-data-source-catalog","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the complete data source and connector catalog available in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"EUFnsg3hpxoF6ncx21S8","title":"Vendor-specific data sources and connectors","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"GVOOr2ldJzgHaIK9cNgN","title":"AbuseIPDB","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/abuseipdb","siteSpaceId":"sitesp_5zLVr","description":"Configure the AbuseIPDB connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HBlbzGTARzoeRuEG8N6W","title":"AbuseIPDB","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/abuseipdb/abuseipdb","siteSpaceId":"sitesp_5zLVr","description":"Use AbuseIPDB data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AbuseIPDB"}]},{"id":"KxW6IVIrIISgxJP29eCK","title":"Aha","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/aha","siteSpaceId":"sitesp_5zLVr","description":"Configure the Aha connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ySiMCGjWrHYreM8mCSeU","title":"Aha!","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/aha/aha","siteSpaceId":"sitesp_5zLVr","description":"Use Aha! data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Aha"}]},{"id":"MNLeF0RZvFZectbq4ul0","title":"AIOps","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/aiops","siteSpaceId":"sitesp_5zLVr","description":"Configure the AIOps connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"7misqzDqLnS64ouc53hs","title":"AIOps","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/aiops/aiops","siteSpaceId":"sitesp_5zLVr","description":"Use AIOps data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AIOps"}]},{"id":"KEDYaneqoez5F2QSEsZC","title":"Amazon","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon","siteSpaceId":"sitesp_5zLVr","description":"Configure the Amazon data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BRGVoQX93xkX8rivTQ3i","title":"Amazon Web Services","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/amazon-web-services","siteSpaceId":"sitesp_5zLVr","description":"Use Amazon Web Services data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"FYYAw4RVRkbJkiuTEDNk","title":"AWS Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/amazon/aws-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Configure AWS Automation and Collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"7YIFGlGa0BwKBaCUjFEW","title":"Anomali","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anomali","siteSpaceId":"sitesp_5zLVr","description":"Configure the Anomali connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rq6HRsbL20BozR14zey6","title":"Anomali","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anomali/anomali","siteSpaceId":"sitesp_5zLVr","description":"Use Anomali data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anomali"}]},{"id":"8nb5xlyG43TWNjEJRI7U","title":"Anthropic","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anthropic","siteSpaceId":"sitesp_5zLVr","description":"Configure the Anthropic connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"GkY3a5MEGGme4vV6vhU3","title":"Claude","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/anthropic/claude","siteSpaceId":"sitesp_5zLVr","description":"Use Claude data from Anthropic in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anthropic"}]},{"id":"rwcfxoekLcVStoBzV13v","title":"Apollo.io","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/apollo.io","siteSpaceId":"sitesp_5zLVr","description":"Configure the Apollo.io connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UFbEKya4UIrUGP5fM4ns","title":"Apollo.io","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/apollo.io/apollo.io","siteSpaceId":"sitesp_5zLVr","description":"Use Apollo.io data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Apollo.io"}]},{"id":"e8gy916M313F5bU2WuT3","title":"Articulate Global","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/articulate-global","siteSpaceId":"sitesp_5zLVr","description":"Configure the Articulate Global connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"N4vBTgm7NXodEhuwZSvm","title":"Articulate Global","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/articulate-global/articulate-global","siteSpaceId":"sitesp_5zLVr","description":"Use Articulate Global data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Articulate Global"}]},{"id":"aWKBqq1WBTGl8DrnBQoo","title":"Asana","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/asana","siteSpaceId":"sitesp_5zLVr","description":"Configure the Asana connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"7Me4jVTIZKvQ1NLlbXaQ","title":"Asana","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/asana/asana","siteSpaceId":"sitesp_5zLVr","description":"Use Asana data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Asana"}]},{"id":"w6oXq247TTiroQhhhXxU","title":"Atlassian","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/atlassian","siteSpaceId":"sitesp_5zLVr","description":"Configure the Atlassian connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"loSnRfiftQ87oInYQ4B5","title":"Atlassian","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/atlassian/atlassian","siteSpaceId":"sitesp_5zLVr","description":"Use Atlassian data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"Ay3icSWO1PaXROjEdTc7","title":"Atlassian Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/atlassian/atlassian-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Configure Atlassian Automation and Collection for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"mOBGB50PwZVBw50SvtuW","title":"Automox","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/automox","siteSpaceId":"sitesp_5zLVr","description":"Configure the Automox connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"CVgkgEPcIkDLk6ua4zEd","title":"Automox","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/automox/automox","siteSpaceId":"sitesp_5zLVr","description":"Use Automox data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Automox"}]},{"id":"kX0DOBSiPslp5WWBRWMd","title":"Box","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/box","siteSpaceId":"sitesp_5zLVr","description":"Configure the Box connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Jj3VC6eTOmaCQpUUX0yt","title":"Box","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/box/box","siteSpaceId":"sitesp_5zLVr","description":"Use Box data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"XeagGGPIaBTMZSpiX6BV","title":"Businessmap","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/businessmap","siteSpaceId":"sitesp_5zLVr","description":"Configure the Businessmap connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jIYdvBAouCfgr8efC7FW","title":"Businessmap","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/businessmap/businessmap","siteSpaceId":"sitesp_5zLVr","description":"Use Businessmap data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Businessmap"}]},{"id":"PxsL9qMyHISMWbXo1dy9","title":"Celonis","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/celonis","siteSpaceId":"sitesp_5zLVr","description":"Configure the Celonis connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OkrBJXzlx46tgIVnpWZH","title":"Celonis","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/celonis/celonis","siteSpaceId":"sitesp_5zLVr","description":"Use Celonis data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Celonis"}]},{"id":"r2mpf3LMxYE4h6BBEJON","title":"ChatGPT Enterprise","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/chatgpt-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Configure the ChatGPT Enterprise connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"U5AevqdkrbwcccVYVdXV","title":"ChatGPT Enterprise","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/chatgpt-enterprise/chatgpt-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Use ChatGPT Enterprise data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ChatGPT Enterprise"}]},{"id":"lpJUDDOuM21o8VFLmbGg","title":"Cisco","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cisco","siteSpaceId":"sitesp_5zLVr","description":"Configure the Cisco data sources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2BgXXnlKhU18Wa4BDTWm","title":"Cisco Duo","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cisco/cisco-duo","siteSpaceId":"sitesp_5zLVr","description":"Use Cisco Duo data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"6gIESOUw2pv829xej0js","title":"Cisco Meraki","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cisco/cisco-meraki","siteSpaceId":"sitesp_5zLVr","description":"Use Cisco Meraki data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"JcRtIHDF60wzkPJLX6lA","title":"ClickUp","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/clickup","siteSpaceId":"sitesp_5zLVr","description":"Configure the ClickUp connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"SyA9GtspBljHwanxEiKC","title":"ClickUp","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/clickup/clickup","siteSpaceId":"sitesp_5zLVr","description":"Use ClickUp data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ClickUp"}]},{"id":"lSCXxgKwbHyieOzsNefd","title":"Contentful","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/contentful","siteSpaceId":"sitesp_5zLVr","description":"Configure the Contentful connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"4uFtLcrNTXOl9qthhAba","title":"Contentful","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/contentful/contentful","siteSpaceId":"sitesp_5zLVr","description":"Use Contentful data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Contentful"}]},{"id":"e1yU1tMzLgKBXzk4ntDc","title":"Couchbase","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/couchbase","siteSpaceId":"sitesp_5zLVr","description":"Configure the Couchbase connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6CjSNufWUX923f2rkalR","title":"Couchbase","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/couchbase/couchbase","siteSpaceId":"sitesp_5zLVr","description":"Use Couchbase data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Couchbase"}]},{"id":"vdKNjOPYqPoZjcXqDYAP","title":"Coveo","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/coveo","siteSpaceId":"sitesp_5zLVr","description":"Configure the Coveo connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HzbfsB3sYCKIdYTU4ofs","title":"Coveo","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/coveo/coveo","siteSpaceId":"sitesp_5zLVr","description":"Use Coveo data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Coveo"}]},{"id":"Rg6JAunefqjP0Ry5FgEx","title":"Cribl","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cribl","siteSpaceId":"sitesp_5zLVr","description":"Configure the Cribl connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"k3d671qfAtbLlpGc6NQW","title":"Cribl connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cribl/cribl-connector","siteSpaceId":"sitesp_5zLVr","description":"Use Cribl data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cribl"}]},{"id":"yA8FnWTjIMI9vSFRd381","title":"Cursor","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cursor","siteSpaceId":"sitesp_5zLVr","description":"Configure the Cursor connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"eP7WKST356N77mVvxwt3","title":"Cursor","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cursor/cursor","siteSpaceId":"sitesp_5zLVr","description":"Use Cursor data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cursor"}]},{"id":"dP3H8KyO53QJl8Hkg9JZ","title":"CyberArk","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cyberark","siteSpaceId":"sitesp_5zLVr","description":"Configure the CyberArk connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jz7iTB3oba5zWM2S0KGh","title":"CyberArk","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/cyberark/cyberark","siteSpaceId":"sitesp_5zLVr","description":"Use CyberArk data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CyberArk"}]},{"id":"2jrLACSLSkYVxx8fRi7c","title":"Databricks","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/databricks","siteSpaceId":"sitesp_5zLVr","description":"Configure the Databricks data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"pF3JqBxd33WoQnn3CfzI","title":"How to onboard Databricks","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/databricks/how-to-onboard-databricks","siteSpaceId":"sitesp_5zLVr","description":"Learn how to onboard the Databricks data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"EudFjFa1HiAb15IYlG0B","title":"Databricks","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/databricks/databricks","siteSpaceId":"sitesp_5zLVr","description":"Use Databricks data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"jCbhK3JNwvfSIZlu601L","title":"DataDog","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/datadog","siteSpaceId":"sitesp_5zLVr","description":"Configure the DataDog connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lhfjsvz6zBAZNMjTT5YW","title":"DataDog","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/datadog/datadog","siteSpaceId":"sitesp_5zLVr","description":"Use DataDog data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"DataDog"}]},{"id":"yqAxtduzL2tYxFTvqnRF","title":"Docker","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker","siteSpaceId":"sitesp_5zLVr","description":"Configure the Docker data sources for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"m0bysIXRG0nIErs1VsAY","title":"Connect Docker Hub registry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-hub-registry","siteSpaceId":"sitesp_5zLVr","description":"Connect a Docker Hub registry to Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"}]},{"id":"H9Bo68VenDKL6g1y4fXu","title":"Manage a Docker Hub connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-hub-registry/manage-a-docker-hub-connector","siteSpaceId":"sitesp_5zLVr","description":"Manage the Docker Hub registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"},{"label":"Connect Docker Hub registry"}]},{"id":"sFXd9VQGKAUy6on1zVZO","title":"Connect Docker V2 compliant container registry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-v2-compliant-container-registry","siteSpaceId":"sitesp_5zLVr","description":"Connect a Docker V2-compliant registry to Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"}]},{"id":"WGNe7DWkc69OOylwnDvT","title":"Manage a Docker V2 connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/docker/connect-docker-v2-compliant-container-registry/manage-a-docker-v2-connector","siteSpaceId":"sitesp_5zLVr","description":"Manage the Docker V2-compliant registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Docker"},{"label":"Connect Docker V2 compliant container registry"}]},{"id":"PibQrJHxH19CHZl3fFP6","title":"Elastic","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic","siteSpaceId":"sitesp_5zLVr","description":"Configure the Elastic connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xMz2pjHTQeYVObW8tsEq","title":"ElasticSearch","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/elastic/elasticsearch","siteSpaceId":"sitesp_5zLVr","description":"Use ElasticSearch data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"C06Kwmn9rkMofopFNiOo","title":"Forcepoint","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/forcepoint","siteSpaceId":"sitesp_5zLVr","description":"Configure the Forcepoint connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"qus63qs9VFlPJlwkCLeN","title":"Forcepoint","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/forcepoint/forcepoint","siteSpaceId":"sitesp_5zLVr","description":"Use Forcepoint data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Forcepoint"}]},{"id":"dUu4pghszaC7of9RamYy","title":"Freshworks","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/freshworks","siteSpaceId":"sitesp_5zLVr","description":"Configure the Freshworks connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"r5ghQLadexGc326IeaTw","title":"Freshworks","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/freshworks/freshworks","siteSpaceId":"sitesp_5zLVr","description":"Use Freshworks data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Freshworks"}]},{"id":"GaX1k3J4sm4KPfMmuwaL","title":"Gainsight","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gainsight","siteSpaceId":"sitesp_5zLVr","description":"Configure the Gainsight connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XnyITnrsdSkpL45KPYDU","title":"Gainsight","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gainsight/gainsight","siteSpaceId":"sitesp_5zLVr","description":"Use Gainsight data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gainsight"}]},{"id":"F61R4TsPrY3NffJPNifY","title":"Gemini Enterprise","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gemini-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Configure the Gemini Enterprise connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wmoq3x4o0yOWvFolxAdW","title":"Gemini Enterprise","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gemini-enterprise/gemini-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Use Gemini Enterprise data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gemini Enterprise"}]},{"id":"VZCuHN4yHqZEwvkNpzbF","title":"Generic","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/generic","siteSpaceId":"sitesp_5zLVr","description":"Configure the Generic connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fdF9AfbSzlXIVxri3G7j","title":"Generic MCP","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/generic/generic-mcp","siteSpaceId":"sitesp_5zLVr","description":"Use Generic MCP data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"Sri1w5qTvNtNyLadIYee","title":"Generic SQL","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/generic/generic-sql","siteSpaceId":"sitesp_5zLVr","description":"Use Generic SQL data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"M2Hd3DUYuFUqIVKITR2M","title":"GitHub","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/github","siteSpaceId":"sitesp_5zLVr","description":"Configure the GitHub connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3Mkkf0nRhbG5pTUcOY8T","title":"GitHub","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/github/github","siteSpaceId":"sitesp_5zLVr","description":"Use GitHub data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitHub"}]},{"id":"5o9fPJr9C5npjmZlQYvg","title":"GitLab","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gitlab","siteSpaceId":"sitesp_5zLVr","description":"Configure the GitLab data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0ADbfeOZm2OcYdYC3KOL","title":"Connect GitLab container registry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gitlab/connect-gitlab-container-registry","siteSpaceId":"sitesp_5zLVr","description":"Connect a GitLab container registry to Cortex Cloud for image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"}]},{"id":"tlOt9kqRF9Fx1ZDocBOK","title":"Manage a GitLab Container Registry connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gitlab/connect-gitlab-container-registry/manage-a-gitlab-container-registry-connector","siteSpaceId":"sitesp_5zLVr","description":"Manage the GitLab Container Registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"},{"label":"Connect GitLab container registry"}]},{"id":"sbn3ucXdEWs6YtaDto6D","title":"GitLab","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/gitlab/gitlab","siteSpaceId":"sitesp_5zLVr","description":"Use GitLab data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"}]},{"id":"imvVYX5crSqVbNyvna7K","title":"Google","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google","siteSpaceId":"sitesp_5zLVr","description":"Configure the Google connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FAYmVLrNuE8br481iORn","title":"Google Workspace","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-workspace","siteSpaceId":"sitesp_5zLVr","description":"Configure Google Workspace connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"VRIzoNY8o4AgIlxmOxlD","title":"Google Workspace connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-workspace/google-workspace-connector","siteSpaceId":"sitesp_5zLVr","description":"Use Google Workspace data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"hPHcyocTNYQ7BeqtAhRn","title":"Google Workspace Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/google/google-workspace/google-workspace-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use Google Workspace Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"LbV2siRTcdL1oqXIX47i","title":"Harbor","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harbor","siteSpaceId":"sitesp_5zLVr","description":"Configure the Harbor data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"a2NmCqCaEEdS0kJY8NW0","title":"Connect Harbor registry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harbor/connect-harbor-registry","siteSpaceId":"sitesp_5zLVr","description":"Connect a Harbor registry to Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harbor"}]},{"id":"9rb1HVuBjLE17DE2z87S","title":"Manage a Harbor connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harbor/connect-harbor-registry/manage-a-harbor-connector","siteSpaceId":"sitesp_5zLVr","description":"Manage the Harbor registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harbor"},{"label":"Connect Harbor registry"}]},{"id":"SaaCEs47UsKpPY3eJLT8","title":"Harness","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harness","siteSpaceId":"sitesp_5zLVr","description":"Configure the Harness connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lWxquUIuSXNpmjCG2enF","title":"Harness","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/harness/harness","siteSpaceId":"sitesp_5zLVr","description":"Use Harness data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Harness"}]},{"id":"khYQ9ifmB3OonvzAX9zv","title":"IBM","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ibm","siteSpaceId":"sitesp_5zLVr","description":"Configure the IBM connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"soggUOPyTyQvS4AYB8qb","title":"IBM QRadar","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ibm/ibm-qradar","siteSpaceId":"sitesp_5zLVr","description":"Use IBM QRadar data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"NJqJm9YX7N7JEpL7WzIV","title":"Intercom","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/intercom","siteSpaceId":"sitesp_5zLVr","description":"Configure the Intercom connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Hh2oXKtAgEG35EtPTlXi","title":"Intercom","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/intercom/intercom","siteSpaceId":"sitesp_5zLVr","description":"Use Intercom data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Intercom"}]},{"id":"Hx5DWdLBkGAj04jL4M3T","title":"iZOOlogic","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/izoologic","siteSpaceId":"sitesp_5zLVr","description":"Configure the iZOOlogic connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"NObFSjZSrjQE1ROpQcSZ","title":"iZOOlogic","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/izoologic/izoologic","siteSpaceId":"sitesp_5zLVr","description":"Use iZOOlogic data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"iZOOlogic"}]},{"id":"JGqhro8G0pXCal4rc87P","title":"Jamf","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jamf","siteSpaceId":"sitesp_5zLVr","description":"Configure the Jamf connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FDaXGKfGycfn0ZnHAgpt","title":"Jamf Pro","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jamf/jamf-pro","siteSpaceId":"sitesp_5zLVr","description":"Use Jamf Pro data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Jamf"}]},{"id":"awKxM1XcYyvtjxXB2CcA","title":"JFrog","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jfrog","siteSpaceId":"sitesp_5zLVr","description":"Configure the JFrog data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"7GUjMX9Onv4cIIxb9x5n","title":"Connect JFrog container registry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jfrog/connect-jfrog-container-registry","siteSpaceId":"sitesp_5zLVr","description":"Connect a JFrog container registry to Cortex Cloud for image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JFrog"}]},{"id":"C2835Ppn91ulv38D5YL1","title":"Manage a JFrog connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jfrog/connect-jfrog-container-registry/manage-a-jfrog-connector","siteSpaceId":"sitesp_5zLVr","description":"Manage the JFrog container registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JFrog"},{"label":"Connect JFrog container registry"}]},{"id":"uhKxXa1mWlK43SDFiMyF","title":"JumpCloud","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jumpcloud","siteSpaceId":"sitesp_5zLVr","description":"Configure the JumpCloud connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fn6ZVhV75yRqH9QTYHt4","title":"JumpCloud","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/jumpcloud/jumpcloud","siteSpaceId":"sitesp_5zLVr","description":"Use JumpCloud data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JumpCloud"}]},{"id":"j2lj6JXVPeGITjWBCmDX","title":"Koi","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/koi","siteSpaceId":"sitesp_5zLVr","description":"Configure the Koi connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YfGYbmzLLpw7oFApwOL4","title":"Koi","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/koi/koi","siteSpaceId":"sitesp_5zLVr","description":"Use Koi data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Koi"}]},{"id":"d0tb1J8srNKvAYzde42b","title":"Kubernetes","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes","siteSpaceId":"sitesp_5zLVr","description":"Configure the Kubernetes data source for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"uP7sxdX3fWX4LyWjwfit","title":"Onboard the Kubernetes connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes/onboard-the-kubernetes-connector","siteSpaceId":"sitesp_5zLVr","description":"Onboard the Kubernetes connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"zqbI0HpeSiDmUBxiM08y","title":"What's new in Kubernetes connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes/whats-new-in-kubernetes-connector","siteSpaceId":"sitesp_5zLVr","description":"Learn about Kubernetes connector updates in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"T7BNRtdHDgBlYJmESFRj","title":"Supported Kubernetes distributions","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kubernetes/supported-kubernetes-distributions","siteSpaceId":"sitesp_5zLVr","description":"Review supported Kubernetes distributions for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kubernetes"}]},{"id":"XN4SnhJf70GZHDDLX23G","title":"Kustomer","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kustomer","siteSpaceId":"sitesp_5zLVr","description":"Configure the Kustomer connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IXtnBe62VlzwroIhM73y","title":"Kustomer","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/kustomer/kustomer","siteSpaceId":"sitesp_5zLVr","description":"Use Kustomer data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kustomer"}]},{"id":"3FiSj8N9sTfoMQQR85sv","title":"LastPass","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/lastpass","siteSpaceId":"sitesp_5zLVr","description":"Configure the LastPass connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xKCYVG4oUNMvqKGRkhM5","title":"LastPass","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/lastpass/lastpass","siteSpaceId":"sitesp_5zLVr","description":"Use LastPass data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LastPass"}]},{"id":"N7HQplBvEcq8AJdwv9Tj","title":"Mail Utilities","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mail-utilities","siteSpaceId":"sitesp_5zLVr","description":"Configure the Mail Utilities connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3UIMm1OUP1IKvxKOuBxa","title":"Mail Utilities","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mail-utilities/mail-utilities","siteSpaceId":"sitesp_5zLVr","description":"Use Mail Utilities data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mail Utilities"}]},{"id":"AmAR1naw4kXED2tkI3U3","title":"Microsoft","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft","siteSpaceId":"sitesp_5zLVr","description":"Configure the Microsoft data sources and connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MFzIoH1pQ1dZ5rzepQXT","title":"Microsoft Azure","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-azure","siteSpaceId":"sitesp_5zLVr","description":"Configure Microsoft Azure data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"fkEJD8niRbdO9DrkZ9ZF","title":"Microsoft Copilot Studio","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-copilot-studio","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft Copilot Studio data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"69E4wzVQnG5NYlBdL9an","title":"Microsoft Entra ID","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-entra-id","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft Entra ID data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"baIhZfTTQ6Tnp51oQHyV","title":"Microsoft365 (legacy)","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft365-legacy","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft365 data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"cxW09Y0js2yBRrh8tzeg","title":"Migrate to new Microsoft 365 connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft365-legacy/migrate-to-new-microsoft-365-connector","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft365 (legacy)"}]},{"id":"7KHjecFfj4dmxNQ0Des6","title":"Microsoft 365 (new)","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-new","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft 365 data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"8cFKGRULrjIqLQk8G7uq","title":"Create a Microsoft Entra ID","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-new/create-a-microsoft-entra-id","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft 365 (new)"}]},{"id":"xZKgOWbUWGTaMcsxE2N0","title":"Microsoft 365 Copilot","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-copilot","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft 365 Copilot data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"XQR0OqQaMOHMHcckKay5","title":"Microsoft 365 (Posture)","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-posture","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft 365 (Posture) data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"VH7ijm0Tcyix8t13r8nL","title":"How to onboard Microsoft 365","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-365-posture/how-to-onboard-microsoft-365","siteSpaceId":"sitesp_5zLVr","description":"Onboard Microsoft 365 data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft 365 (Posture)"}]},{"id":"wOI44CETnqvY1jB8psQE","title":"Microsoft Teams","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-teams","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft Teams data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"TLu3UEwZNJ8JFDIPSvx2","title":"Azure Log Analytics","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/azure-log-analytics","siteSpaceId":"sitesp_5zLVr","description":"Use Azure Log Analytics data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"GPOpAW7h9xuHVERgzd6u","title":"Azure Services","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/azure-services","siteSpaceId":"sitesp_5zLVr","description":"Use Azure Services data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"AKXT94uWTkAXEXu7xflP","title":"Microsoft Active Directory","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-active-directory","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft Active Directory data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"8qlxA3j8ffMe2OPSYkN4","title":"Microsoft Graph","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-graph","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft Graph data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"OiYfW9z5di96LteEs0ij","title":"Microsoft Identity","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-identity","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft Identity data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"eViswoSLS8mP3BTqVWHv","title":"Microsoft Security Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/microsoft-security-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use Microsoft Security Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"xUQ2ucgSQPSpfc6DLnSC","title":"M365 Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/microsoft/m365-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use M365 Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"vGANFrXhEyABzpIOl1Hn","title":"Monday","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/monday","siteSpaceId":"sitesp_5zLVr","description":"Configure the Monday connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0j49Zc8H5tl6cbwdDPQ6","title":"Monday","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/monday/monday","siteSpaceId":"sitesp_5zLVr","description":"Use Monday data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Monday"}]},{"id":"ZbFxNR3mnltYe5L0uB7Y","title":"Monday.com","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/monday/monday.com","siteSpaceId":"sitesp_5zLVr","description":"Use Monday.com data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Monday"}]},{"id":"EGgxRIVVL52m2dMhf9uS","title":"MongoDB","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mongodb","siteSpaceId":"sitesp_5zLVr","description":"Configure the MongoDB connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BBbF8VeAlsvRnAWemkUu","title":"How to onboard MongoDB Atlas (Posture)","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mongodb/how-to-onboard-mongodb-atlas","siteSpaceId":"sitesp_5zLVr","description":"Use MongoDB Atlas (Posture) data with Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"biS23ExwPisWaqH4iyUb","title":"MongoDB Atlas","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mongodb/mongodb-atlas","siteSpaceId":"sitesp_5zLVr","description":"Use MongoDB Atlas data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"4wrjjXFiOkLlT3XDEQS5","title":"MuleSoft","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mulesoft","siteSpaceId":"sitesp_5zLVr","description":"Configure the MuleSoft connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"G8hb0OXkkJeJd0lYoWgo","title":"MuleSoft","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mulesoft/mulesoft","siteSpaceId":"sitesp_5zLVr","description":"Use MuleSoft data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MuleSoft"}]},{"id":"We3hSzU0ifXzt0BrTXLu","title":"Mural","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mural","siteSpaceId":"sitesp_5zLVr","description":"Configure the Mural connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"557EJVVhHmac5zdKznV1","title":"Mural","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/mural/mural","siteSpaceId":"sitesp_5zLVr","description":"Use Mural data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mural"}]},{"id":"hpZjIir3ppaElBlNqrL4","title":"Nintex Workflow Cloud","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/nintex-workflow-cloud","siteSpaceId":"sitesp_5zLVr","description":"Configure the Nintex Workflow Cloud connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"82giHnlP4iWxJdcyxWBG","title":"Nintex Workflow Cloud","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/nintex-workflow-cloud/nintex-workflow-cloud","siteSpaceId":"sitesp_5zLVr","description":"Use Nintex Workflow Cloud data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Nintex Workflow Cloud"}]},{"id":"7vxGANONZvOYf6gMdXPk","title":"Okta","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/okta","siteSpaceId":"sitesp_5zLVr","description":"Configure the Okta data source and connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"il0wZjhSVLMeJU0yFTvX","title":"Ingest logs and data from Okta","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/okta/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_5zLVr","description":"Ingest Okta logs and data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"RowzgeGtUq7AMiH5iJoV","title":"Okta Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/okta/okta-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use Okta Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"dgdIpU9PQrRXmaojniMr","title":"Okta connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/okta/okta-connector","siteSpaceId":"sitesp_5zLVr","description":"Use Okta data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"XBAUmhD3SZDUfk21OUZz","title":"Oracle","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/oracle","siteSpaceId":"sitesp_5zLVr","description":"Configure the Oracle data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ulq9W1lwRjjAiB9mFhfP","title":"Oracle Cloud Infrastructure","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/oracle/oracle-cloud-infrastructure","siteSpaceId":"sitesp_5zLVr","description":"Use Oracle Cloud Infrastructure data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"ta8OFB2tkm50vY7gICp7","title":"Oracle","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/oracle/oracle","siteSpaceId":"sitesp_5zLVr","description":"Use Oracle data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"mt5t4q65bUNSOm37IEeL","title":"PagerDuty","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/pagerduty","siteSpaceId":"sitesp_5zLVr","description":"Configure the PagerDuty connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AT3MmhG59li7Ma3xCnPG","title":"PagerDuty Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/pagerduty/pagerduty-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use PagerDuty Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PagerDuty"}]},{"id":"Vrgx7ca0Y8Yt4vaqoIFp","title":"PagerDuty","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/pagerduty/pagerduty","siteSpaceId":"sitesp_5zLVr","description":"Use PagerDuty data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PagerDuty"}]},{"id":"vUMMYDYk3r5emYE4dUiZ","title":"Ping Identity","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ping-identity","siteSpaceId":"sitesp_5zLVr","description":"Configure the Ping Identity connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"x291RDfMVIJF2KDJgyNB","title":"Ping Identity","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/ping-identity/ping-identity","siteSpaceId":"sitesp_5zLVr","description":"Use Ping Identity data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"4nCtxZTKQVaqWruYaYXN","title":"Pipedrive","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/pipedrive","siteSpaceId":"sitesp_5zLVr","description":"Configure the Pipedrive connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"pEHNReBbLmPc8DYxX62W","title":"Pipedrive","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/pipedrive/pipedrive","siteSpaceId":"sitesp_5zLVr","description":"Use Pipedrive data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Pipedrive"}]},{"id":"Kx52ZBxKg8RlRLH6L6RV","title":"Qualtrics","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/qualtrics","siteSpaceId":"sitesp_5zLVr","description":"Configure the Qualtrics connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hDQy1biwb4QZg0LYp104","title":"Qualtrics","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/qualtrics/qualtrics","siteSpaceId":"sitesp_5zLVr","description":"Use Qualtrics data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Qualtrics"}]},{"id":"3fY56VC3WwyycigICmIc","title":"Redis Labs","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/redis-labs","siteSpaceId":"sitesp_5zLVr","description":"Configure the Redis Labs connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aMi5Yu4roeoTy707ftnQ","title":"Redis Labs","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/redis-labs/redis-labs","siteSpaceId":"sitesp_5zLVr","description":"Use Redis Labs data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Redis Labs"}]},{"id":"Fj34pzJ6XpYQDy4wIhi9","title":"Salesforce","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/salesforce","siteSpaceId":"sitesp_5zLVr","description":"Configure the Salesforce data source and connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FROpVuyOLeqTlQGO4Jot","title":"Ingest logs and data from Salesforce","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/salesforce/ingest-logs-and-data-from-salesforce","siteSpaceId":"sitesp_5zLVr","description":"Ingest Salesforce logs and data into Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"JYMEKXp9aoh03foFzCKq","title":"Salesforce connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/salesforce/ingest-and-run-salesforce-automation-and-remediation","siteSpaceId":"sitesp_5zLVr","description":"Use Salesforce data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"SW6CS9rboAwCLBQBLmYp","title":"SAP","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sap","siteSpaceId":"sitesp_5zLVr","description":"Configure the SAP connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jLavgig9EVuhUHsaUh1W","title":"SAP Ariba","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sap/sap-ariba","siteSpaceId":"sitesp_5zLVr","description":"Use SAP Ariba data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SAP"}]},{"id":"guJptPTcpEuaD3wiHQ4c","title":"Sentry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sentry","siteSpaceId":"sitesp_5zLVr","description":"Configure the Sentry connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wRiKfSmmC7NTFgl2Pgoi","title":"Sentry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sentry/sentry","siteSpaceId":"sitesp_5zLVr","description":"Use Sentry data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sentry"}]},{"id":"rRenKohl3Tks6jHlXUXF","title":"ServiceNow","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/servicenow","siteSpaceId":"sitesp_5zLVr","description":"Configure the ServiceNow connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Loh63VybffwMbabBMadC","title":"ServiceNow Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/servicenow/servicenow-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use ServiceNow Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"TsKXoC5Ap5qBXeHYgt3V","title":"ServiceNow","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/servicenow/servicenow","siteSpaceId":"sitesp_5zLVr","description":"Use ServiceNow data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"MrxTDkxACMltJcp2IQtX","title":"Shopify","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/shopify","siteSpaceId":"sitesp_5zLVr","description":"Configure the Shopify connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"RrbkBHdUFQ2KDykyxPyk","title":"Shopify","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/shopify/shopify","siteSpaceId":"sitesp_5zLVr","description":"Use Shopify data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Shopify"}]},{"id":"9MTUYdbYmuGiTDBsFgw9","title":"Slack","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/slack","siteSpaceId":"sitesp_5zLVr","description":"Configure the Slack connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"zsxvsI54xpMTDO4xY9lE","title":"Slack Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/slack/slack-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use Slack Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"Mtt2TsOdgXXfiCkyo7cI","title":"Slack Enterprise","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/slack/slack-enterprise","siteSpaceId":"sitesp_5zLVr","description":"Use Slack Enterprise data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"9OPKCXAzjgIZ9yuvSTIW","title":"SMB","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/smb","siteSpaceId":"sitesp_5zLVr","description":"Configure the SMB connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"kUnbP77V3tj4tTtnfzgw","title":"SMB","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/smb/smb","siteSpaceId":"sitesp_5zLVr","description":"Use SMB data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SMB"}]},{"id":"qq4AwopwbnGfQ8ER7Oli","title":"Snowflake","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/snowflake","siteSpaceId":"sitesp_5zLVr","description":"Configure the Snowflake connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"S1wQxEmWbKHlEVm9nIOq","title":"How to onboard Snowflake","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/snowflake/how-to-onboard-snowflake","siteSpaceId":"sitesp_5zLVr","description":"Onboard Snowflake data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Snowflake"}]},{"id":"6eBTOntsHY2o8UVGwCRb","title":"Sonatype Nexus","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sonatype-nexus","siteSpaceId":"sitesp_5zLVr","description":"Configure the Sonatype Nexus connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ZNtwINuVNbHXYbdmmQMG","title":"Connect Sonatype Nexus registry","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sonatype-nexus/connect-sonatype-nexus-registry","siteSpaceId":"sitesp_5zLVr","description":"Use Sonatype Nexus registry data in Cortex Cloud for container image scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sonatype Nexus"}]},{"id":"D4A7zMlObL0603XLsrkP","title":"Manage a Sonatype connector","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sonatype-nexus/connect-sonatype-nexus-registry/manage-a-sonatype-connector","siteSpaceId":"sitesp_5zLVr","description":"Manage the Sonatype registry connector in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sonatype Nexus"},{"label":"Connect Sonatype Nexus registry"}]},{"id":"aic1x7OiJILjhGGCbpIE","title":"Splunk","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/splunk","siteSpaceId":"sitesp_5zLVr","description":"Configure the Splunk connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"o4fYf7kWR6qjbpBzFEyc","title":"Splunk Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/splunk/splunk-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use Splunk Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Splunk"}]},{"id":"S4IAS4zE4n0OWQGoIk20","title":"Splunk","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/splunk/splunk","siteSpaceId":"sitesp_5zLVr","description":"Use Splunk data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Splunk"}]},{"id":"NE3tPdrkMdcJM024zNlO","title":"Sumo Logic","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sumo-logic","siteSpaceId":"sitesp_5zLVr","description":"Configure the Sumo Logic connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6IMPuBPwAS96vrmfSOxN","title":"Sumo Logic","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/sumo-logic/sumo-logic","siteSpaceId":"sitesp_5zLVr","description":"Use Sumo Logic data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sumo Logic"}]},{"id":"EGZ0chbU22pspKsxOAqz","title":"Terraform","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/terraform","siteSpaceId":"sitesp_5zLVr","description":"Configure the Terraform connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mkeiBbvaPb1ed92gqtqe","title":"Terraform","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/terraform/terraform","siteSpaceId":"sitesp_5zLVr","description":"Use Terraform data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Terraform"}]},{"id":"W1Ip8ycVbVENZA0F9yq9","title":"VMware","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/vmware","siteSpaceId":"sitesp_5zLVr","description":"Configure the VMware connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BL7uyZxuegR5dEVqqeyY","title":"VMWare","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/vmware/vmware","siteSpaceId":"sitesp_5zLVr","description":"Use VMWare data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"VMware"}]},{"id":"KdffvTJXbFV4v2uv73Ry","title":"Workday","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/workday","siteSpaceId":"sitesp_5zLVr","description":"Configure the Workday connectors for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mtvgxK5qrhmcDpanJknq","title":"Workday Automation and Collection","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/workday/workday-automation-and-collection","siteSpaceId":"sitesp_5zLVr","description":"Use Workday Automation and Collection data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"nQpOnPY6YXfBKTZvw4ps","title":"Workday","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/workday/workday","siteSpaceId":"sitesp_5zLVr","description":"Use Workday data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"eVJ7r5icRSrYlyyk55bK","title":"YouTrack","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/youtrack","siteSpaceId":"sitesp_5zLVr","description":"Configure the YouTrack connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sgPY5XtAjmc01hjo649H","title":"YouTrack","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/youtrack/youtrack","siteSpaceId":"sitesp_5zLVr","description":"Use YouTrack data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"YouTrack"}]},{"id":"SFPL7o6uLVZPddj5m3Nt","title":"Zendesk","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zendesk","siteSpaceId":"sitesp_5zLVr","description":"Configure the Zendesk connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YUQ8riiE4yKgK2uRKIwi","title":"Zendesk","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zendesk/zendesk","siteSpaceId":"sitesp_5zLVr","description":"Use Zendesk data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zendesk"}]},{"id":"3ucRaNjf568CV5l2KxVm","title":"Zscaler","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zscaler","siteSpaceId":"sitesp_5zLVr","description":"Configure the Zscaler connector for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"7WG1HLZ0cOP1ZwAJM0JB","title":"Zscaler","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/vendor-specific-data-sources/zscaler/zscaler","siteSpaceId":"sitesp_5zLVr","description":"Use Zscaler data for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"rM2HkZiG3UYZM3aOSfrG","title":"Connectors","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/connectors","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"PGBmK6a4gJd9skx4Tvqx","title":"Standard data sources","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/standard-data-sources","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"9cv50Uzi8sHn9A1XufGJ","title":"Cloud service provider (CSP) onboarding","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_5zLVr","description":"Learn about onboarding your cloud service provider to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"sLVFpsZMoQ1sxyH9Wldo","title":"Generic on-premise data collectors","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"sTPciKcc0BKkbQVPqeqs","title":"Broker VM data collector applets","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"IHXHN1AqDaGoRcRnjZR2","title":"Activate DSPM Database","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-database","siteSpaceId":"sitesp_5zLVr","description":"Configure the DSPM Database applet for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"3iXeZnqDHbAmvj4lAwT4","title":"Activate DSPM Fileshare","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-fileshare","siteSpaceId":"sitesp_5zLVr","description":"Configure the DSPM Fileshare applet for Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"AznCpVx4A5RlGLMjN5WD","title":"Activate Registry Scanner","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-registry-scanner","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"N2HZ7SfWERZZQ93R98Ed","title":"Activate Transporter","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-transporter","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"U3jLKZXNuVjflOrdIsuN","title":"Palo Alto Networks integrations","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"LtOlLyWcrdGWsA1qpBp2","title":"Cortex Internals","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/cortex-internals","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"aIprOLdRoWaHKGPUxgGT","title":"Cloud Next-Generation Firewall","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/cloud-next-generation-firewall","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"kK8MS2vLp6PzJqetPIDc","title":"Ingest data from Cloud Next-Generation Firewall","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/cloud-next-generation-firewall/ingest-data-from-cloud-next-generation-firewall","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Cloud Next-Generation Firewall"}]},{"id":"F5yQRjxjLktMejneNrXo","title":"Next-Generation Firewall","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"pv3DNCpjiuZrbMPjQYNq","title":"Panorama","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall/panorama","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"FZOIqNpNCT1vSYrrvezd","title":"Palo Alto Networks Cortex","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/palo-alto-networks-cortex","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"XxHA2szNfSPNrdXSANcO","title":"Prisma Access","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/prisma-access","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"l8odY8Ii667ra8CPj7ee","title":"Palo Alto Networks Prisma","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/prisma-access/palo-alto-networks-prisma","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"1Of7YiP75MVf0F9xbAYK","title":"WildFire Cloud","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/palo-alto-networks-integrations/wildfire-cloud","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"CG18ZyHZcnjpSQFuJ7Uf","title":"Cloud Posture and Runtime Security data sources","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/cloud-posture-and-runtime-security-data-sources","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the Cloud Posture and Runtime Security data sources in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"JRKKLPUbWizg9cplyC9H","title":"Administration and troubleshooting","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the administration and troubleshooting of the different data collector integrations in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"}]},{"id":"3GXC6iPUtffx01fbs4uu","title":"Manage instances","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"X2nxMbUv1KmiT4hBqety","title":"Add a new data source or instance","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/add-a-new-data-source-or-instance","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"uUw0oVkb8J0Bfj11eO2T","title":"How to configure the scanning settings for supported services","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/how-to-configure-the-scanning-settings-for-supported-services","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"fhBcM2NwZpoae3yo4Hl8","title":"Manage cloud instances","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/manage-cloud-instances","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"xZ9hsFexNAdhoHgzXaVi","title":"Update cloud permissions after Cortex release updates","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"3Awx7LlAnEqdMBlHRhLh","title":"Pending cloud instances","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/pending-cloud-instances","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"PnbnNrIYM2y1tW2h4HKm","title":"Troubleshoot errors on cloud instances","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"PVqYcY8QR4TeFdW6a2DC","title":"Manage Kubernetes Connector instances","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/manage-kubernetes-connector-instances","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"ODlLblhDGBLDe9qEjWw6","title":"Integrations","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"bgZe3YmYsRBIuo2SNnSF","title":"Add an integration instance","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations/add-an-integration-instance","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"94LzoNAtQNi8O2aXEG9g","title":"Configure integration permissions","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations/configure-integration-permissions","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"tcQILXM0I7avdhc8HZJO","title":"Troubleshoot Integrations","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/integrations/troubleshoot-integrations","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"Eie50fjoYBgnccLnKu6x","title":"Verify collector connectivity","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/verify-collector-connectivity","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"FJOM7EdvVsft0k5bN0Hp","title":"About health issues","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"rP0rA2WZFV3Vxs2GWjQO","title":"Investigate and resolve health issues","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues/investigate-and-resolve-health-issues","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"hlmzxwInnAxhhzXe8Zp0","title":"Monitor data ingestion health","pathname":"/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues/monitor-data-ingestion-health","siteSpaceId":"sitesp_5zLVr","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"aoHX0XgozVEIsErwwcwo","title":"Cortex Marketplace","pathname":"/cortex-cloud-posture-management/marketplace/cortex-marketplace","siteSpaceId":"sitesp_5zLVr","description":"Search Cortex Cloud Posture Management Marketplace content by use case, integration, or category.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Marketplace"}]},{"id":"4CeRM8VnlNSKBZbAOwAG","title":"Content Pack Support Types","pathname":"/cortex-cloud-posture-management/marketplace/content-pack-support-types","siteSpaceId":"sitesp_5zLVr","description":"Review Cortex Cloud Posture Management content pack support types, including Cortex, partner, developer, and community support.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Marketplace"}]},{"id":"92GvVRs2g4Yh7hUiy7Qe","title":"Cortex Cloud content","pathname":"/cortex-cloud-posture-management/marketplace/cortex-cloud-content","siteSpaceId":"sitesp_5zLVr","description":"Explore content types available in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Marketplace"}]},{"id":"cjHcYC20zaVM4JUhqZsP","title":"Manage content packs","pathname":"/cortex-cloud-posture-management/marketplace/manage-content-packs","siteSpaceId":"sitesp_5zLVr","description":"Install, delete, update, and revert Cortex Cloud Posture Management content packs.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Marketplace"}]},{"id":"tYAi9PXLDvuSw0xx283K","title":"Marketplace FAQs","pathname":"/cortex-cloud-posture-management/marketplace/marketplace-faqs","siteSpaceId":"sitesp_5zLVr","description":"Find answers to frequently asked questions about Cortex Cloud Posture Management Marketplace content.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Marketplace"}]},{"id":"xCcdTAolKTbpg84Akv1c","title":"Content changes when upgrading Cortex Cloud versions","pathname":"/cortex-cloud-posture-management/marketplace/content-changes-when-upgrading-cortex-cloud-versions","siteSpaceId":"sitesp_5zLVr","description":"Review Cortex Cloud Posture Management content updates when upgrading Cortex Cloud versions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Marketplace"}]},{"id":"2l1bP12G1UV2kpgow7sv","title":"About Cortex CLI","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli","siteSpaceId":"sitesp_5zLVr","description":"The Cortex CLI is a unified command-line tool integrating Cloud Workload Protection, API Security, and Code Security scans into a single executable.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"nSLJr67T41VmDmSzyPvy","title":"Connect Cortex CLI","pathname":"/cortex-cloud-posture-management/cortex-cli/connect-cortex-cli","siteSpaceId":"sitesp_5zLVr","description":"Connect Cortex CLI to Cortex Cloud Posture Management for command-line scanning workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"sv1PBT7GoMzEq7LWoL5z","title":"Installation workflows","pathname":"/cortex-cloud-posture-management/cortex-cli/connect-cortex-cli/installation-workflows","siteSpaceId":"sitesp_5zLVr","description":"Install Cortex CLI using a package manager, manual download, or the Cortex Cloud interface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"NsCz8x5FLb2fuoyGiJl0","title":"Manage the CLI after installation","pathname":"/cortex-cloud-posture-management/cortex-cli/connect-cortex-cli/manage-the-cli-after-installation","siteSpaceId":"sitesp_5zLVr","description":"Upgrade, pin, uninstall, or update Cortex CLI through automated downloads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"09iCBrosCk2xNMna3d50","title":"Authenticate credentials","pathname":"/cortex-cloud-posture-management/cortex-cli/connect-cortex-cli/authenticate-credentials","siteSpaceId":"sitesp_5zLVr","description":"Configure Cortex CLI credentials using a file, environment variables, or command-line flags.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"bQW2aY25RWsNFwjhC8jV","title":"Self-service API keys for CLI scans","pathname":"/cortex-cloud-posture-management/cortex-cli/connect-cortex-cli/self-service-api-keys-for-cli-scans","siteSpaceId":"sitesp_5zLVr","description":"Create and manage API keys for Cortex Cloud Posture Management CLI scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Connect Cortex CLI"}]},{"id":"x2YZvLT48IPgzmnEaeQg","title":"Cortex CLI usage","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-usage","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex CLI with Cortex Cloud Posture Management to run security scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"eYIsuKEGLwsCX2XrR8lC","title":"Exit codes and error handling","pathname":"/cortex-cloud-posture-management/cortex-cli/exit-codes-and-error-handling","siteSpaceId":"sitesp_5zLVr","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"b9xLgaHxudKnsW45lguy","title":"Cortex CLI common command line reference guide","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-common-command-line-reference-guide","siteSpaceId":"sitesp_5zLVr","description":"Reference common Cortex CLI commands for Cortex Cloud Posture Management workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"EvQTLTY8jvlVUZlC7Kc5","title":"Cortex CLI for Code Security","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex CLI with Cortex Cloud Posture Management to scan code for security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"wDD3EZdoRrJBvze3mcCR","title":"Cortex CLI usage for Cortex Cloud Application Security","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security/cortex-cli-usage-for-cortex-cloud-application-security","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex CLI to run Cortex Cloud Application Security scans in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"lnMOwLkwGYsiUgP4Bn2V","title":"Cortex CLI Cortex Cloud Application Security command line reference","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security/cortex-cli-cortex-cloud-application-security-command-line-reference","siteSpaceId":"sitesp_5zLVr","description":"Reference Cortex CLI commands for Cortex Cloud Application Security in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"UrZ3Tqx8T8XjJkZshpiA","title":"Custom Cortex checks and signature verification","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security/cortex-cli-cortex-cloud-application-security-command-line-reference/custom-cortex-checks-and-signature-verification","siteSpaceId":"sitesp_5zLVr","description":"Load custom Cortex checks and optionally verify their signatures.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI Cortex Cloud Application Security command line reference"}]},{"id":"EZSWZvoiS95xsITrCNbD","title":"Cortex CLI pre-commit hooks","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-commit-hooks","siteSpaceId":"sitesp_5zLVr","description":"Integrate Application Security secrets scanner as pre-commit hooks into your workflows to scan for errors on your machine before local commits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"ZRJ298F81r8SQ0QOu8Wh","title":"Pre-commit hook usage","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-commit-hooks/pre-commit-hook-usage","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex CLI pre-commit hooks in Cortex Cloud Posture Management to scan code before commits.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI pre-commit hooks"}]},{"id":"YxszTKomAMGRAamYS6B7","title":"Cortex CLI pre-receive hooks","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-receive-hooks","siteSpaceId":"sitesp_5zLVr","description":"Integrate the Application Security secrets scanner as a pre-receive hook into your workflows to scan for errors before code is accepted into your repository.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"}]},{"id":"NM6RLJPSZ9nYVzJ1pdc8","title":"Pre-receive hook usage","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-receive-hooks/pre-receive-hook-usage","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex CLI pre-receive hooks in Cortex Cloud Posture Management to scan code before repository acceptance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Code Security"},{"label":"Cortex CLI pre-receive hooks"}]},{"id":"FxpA94LcJ4elodXkZYkQ","title":"Cortex CLI for Cloud Workload Protection","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-cloud-workload-protection","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex CLI with Cortex Cloud Posture Management to scan cloud workloads for security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"dqTkj9Vhyb5dt9hmK9o8","title":"Cloud Workload Protection command line reference","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-cloud-workload-protection/cloud-workload-protection-command-line-reference","siteSpaceId":"sitesp_5zLVr","description":"Reference Cortex CLI commands for Cortex Cloud Posture Management cloud workload scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for Cloud Workload Protection"}]},{"id":"cOArBP8pq3Vvt6NrgjE6","title":"Cortex CLI for API Security","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-api-security","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex CLI with Cortex Cloud Posture Management to scan APIs for security risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"}]},{"id":"nn34oojsm1HM1lh3Qasu","title":"Cortex CLI API Security command line reference guide","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-api-security/cortex-cli-api-security-command-line-reference-guide","siteSpaceId":"sitesp_5zLVr","description":"Reference Cortex CLI commands for Cortex Cloud Posture Management API Security scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for API Security"}]},{"id":"ZhCAUejODDf2yeYdso2v","title":"API Security scan report schema","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-api-security/api-security-scan-report-schema","siteSpaceId":"sitesp_5zLVr","description":"Reference schema for API Security scan reports.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for API Security"}]},{"id":"IgKFPcDkSkamiPPfVdwE","title":"API Security scan output example","pathname":"/cortex-cloud-posture-management/cortex-cli/cortex-cli-for-api-security/api-security-scan-output-example","siteSpaceId":"sitesp_5zLVr","description":"Example API Security scan report output.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex CLI"},{"label":"Cortex CLI for API Security"}]},{"id":"631rR93rtpoiQkVFtoYA","title":"About Cortex Cloud XQL","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/cortex-cloud-xql","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud XQL in Cortex Cloud Posture Management to query security data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"}]},{"id":"xi7lTbLOvy7ZLCo3zhFA","title":"Get started with XQL","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql","siteSpaceId":"sitesp_5zLVr","description":"XQL is the Palo Alto Networks Cortex Query Language used in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"}]},{"id":"Lw7hI9XaLFkoOeNEncPs","title":"XQL language features","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/xql-language-features","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the Cortex Query Language features to query for raw network and endpoint data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"1rMiNffWpyk58043jKZp","title":"XQL Language Structure","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/xql-language-structure","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the Cortex Query Language structure when creating a query.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"x8XgYIAygJPfrMwALyQ6","title":"Supported operators","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/supported-operators","siteSpaceId":"sitesp_5zLVr","description":"Cortex Query Language supports specific comparison, boolean, and set operators in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"sYN7FkkLnckbUmv0L79s","title":"Datasets and presets","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/datasets-and-presets","siteSpaceId":"sitesp_5zLVr","description":"The Cortex Query Language supports built-in datasets, custom datasets, and presets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"MzUzT9NaAGvV0L8bpo76","title":"About examples","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/about-examples","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the Cortex Query Language (XQL) examples provided.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"qg3RhQlzSP8WzV9jQS72","title":"JSON functions","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/json-functions","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how Cortex Cloud treats JSON functions in the Cortex Query Language.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"ANKC0bpYSDrzJ3ujApDi","title":"How to filter for empty values in the results table","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/how-to-filter-for-empty-values-in-the-results-table","siteSpaceId":"sitesp_5zLVr","description":"Learn how to filter for empty values in the results table in Cortex Query Language.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"jNK2NQ1UogktfoqRpaEZ","title":"Understanding string manipulation in XQL","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/get-started-with-xql/understanding-string-manipulation-in-xql","siteSpaceId":"sitesp_5zLVr","description":"Learn more about string manipulation in Cortex Query Language (XQL) using double and triple quotes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Get started with XQL"}]},{"id":"zjxL71mIdvhCzsUGwVNK","title":"Build XQL queries","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how to build Cortex Query Language (XQL) queries using the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"}]},{"id":"HO1R8NwgjSFE5IcfPc1Y","title":"About the Query Builder","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_5zLVr","description":"The Query Builder facilitates threat detection, case expansion, and data analytics for suspected threats.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"naWsu9BGfIJu7V59HRqF","title":"How to build XQL queries","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how to build XQL queries in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"2QQ5J7GT6IhoaExhZ6qV","title":"XQL query entities","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the Cortex Query Language (XQL) entities available in the Query Builder.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"XP4pi3Ri6GAMBpNhIrnY","title":"Create authentication query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-authentication-query","siteSpaceId":"sitesp_5zLVr","description":"Create authentication queries in Cortex Cloud Posture Management to investigate authentication activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"mzgWSgp6fOcVHdfnFPFf","title":"Create event log query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-event-log-query","siteSpaceId":"sitesp_5zLVr","description":"Create event log queries in Cortex Cloud Posture Management to investigate event activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"baH3znLUmAMFis5HRuW2","title":"Create file query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-file-query","siteSpaceId":"sitesp_5zLVr","description":"Create file queries in Cortex Cloud Posture Management to investigate file activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"bdaE2uN7ZsaVEdII2cJG","title":"Create image load query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-image-load-query","siteSpaceId":"sitesp_5zLVr","description":"Create image load queries in Cortex Cloud Posture Management to investigate loaded images.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"SwlgDvdWaRADMzJ1H1oT","title":"Create network connections query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-network-connections-query","siteSpaceId":"sitesp_5zLVr","description":"Create network connection queries in Cortex Cloud Posture Management to investigate connection activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"h05vYHAQhsaf8eWgp7hj","title":"Create network query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-network-query","siteSpaceId":"sitesp_5zLVr","description":"Create network queries in Cortex Cloud Posture Management to investigate network activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"6EhzSeM1XipN1THjq5cg","title":"Create process query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-process-query","siteSpaceId":"sitesp_5zLVr","description":"Create process queries in Cortex Cloud Posture Management to investigate process activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"rU4wElf29uGV9hZ69iiY","title":"Create registry query","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/xql-query-entities/create-registry-query","siteSpaceId":"sitesp_5zLVr","description":"Create registry queries in Cortex Cloud Posture Management to investigate registry activity.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"},{"label":"XQL query entities"}]},{"id":"LwsYhjwE1EvSsN69k3Ev","title":"Overview of the Query Center","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_5zLVr","description":"View information about the In Progress and Completed queries that that were run on the tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"1TeHqMhAY8lZ6SSZd48M","title":"Manage scheduled queries","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn how to manage your scheduled and recurring queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"EGO5eqT7OCI3VSzHdlqp","title":"Manage your query library","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/build-xql-queries/manage-your-query-library","siteSpaceId":"sitesp_5zLVr","description":"Cortex Cloud provides a Query Library for saving and managing your own queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"},{"label":"Build XQL queries"}]},{"id":"gp9Krf28ZFGxvoX82eIV","title":"Cortex XQL syntax, parameters, and examples","pathname":"/cortex-cloud-posture-management/cortex-cloud-xql/cortex-xql-syntax-parameters-and-examples","siteSpaceId":"sitesp_5zLVr","description":"Comprehensive syntax rules and structural requirements for XQL queries","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Cortex Cloud XQL"}]},{"id":"NavBpaSGTZ5Wguwizk93","title":"What is Graph Search?","pathname":"/cortex-cloud-posture-management/graph-search/what-is-graph-search","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how to use Graph Search to search assets, findings, and their contextual data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"uccZ4Dl06SIblasWKhFr","title":"Get started with Graph Search queries","pathname":"/cortex-cloud-posture-management/graph-search/get-started-with-graph-search-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn more about how to get started before building a Graph Search query.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"Mcl4RcQO9Xo9XPKV2t6n","title":"How to build Graph Search queries?","pathname":"/cortex-cloud-posture-management/graph-search/how-to-build-graph-search-queries","siteSpaceId":"sitesp_5zLVr","description":"Learn more about building Graph Search queries using the built-in query interface.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"QkUppAZpFCyViev25EIY","title":"Understand Graph Search query results","pathname":"/cortex-cloud-posture-management/graph-search/understand-graph-search-query-results","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the Graph Search query results.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"EdVFERfxnFZeFCbqjeQq","title":"Create Graph Search query","pathname":"/cortex-cloud-posture-management/graph-search/create-graph-search-query","siteSpaceId":"sitesp_5zLVr","description":"Learn how to create Graph Search queries in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"aNiqkrk9AY7jGDWcNtbd","title":"Graph Search examples","pathname":"/cortex-cloud-posture-management/graph-search/graph-search-examples","siteSpaceId":"sitesp_5zLVr","description":"Learn how to build Graph Search queries by working through a few examples.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"legkoh00DoOfZawNk4E8","title":"Manage the Graph Search Query Library","pathname":"/cortex-cloud-posture-management/graph-search/manage-the-graph-search-query-library","siteSpaceId":"sitesp_5zLVr","description":"Learn more about the Cortex Cloud Graph Search Query Library to manage your queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"kOh21BzVB909Z04AeUWu","title":"Edit and run queries in Query Center","pathname":"/cortex-cloud-posture-management/graph-search/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_5zLVr","description":"Learn more about viewing the results of a query, modifying a query, and rerunning queries from Query Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"Yz2JcdbXzgy8uq0TNKba","title":"Query Center reference information","pathname":"/cortex-cloud-posture-management/graph-search/edit-and-run-queries-in-query-center/query-center-reference-information","siteSpaceId":"sitesp_5zLVr","description":"Descriptions of the fields in the Query Center table.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"},{"label":"Edit and run queries in Query Center"}]},{"id":"aASueO5JLGqN859t7uoO","title":"FAQ on Graph Search","pathname":"/cortex-cloud-posture-management/graph-search/faq-on-graph-search","siteSpaceId":"sitesp_5zLVr","description":"Answer some frequently asked questions relating to Graph Search.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"TUKaPSak8Sh90OC1fKou","title":"Supported assets and findings","pathname":"/cortex-cloud-posture-management/graph-search/supported-assets-and-findings","siteSpaceId":"sitesp_5zLVr","description":"Review supported assets and findings in Cortex Cloud Posture Management Graph Search.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"QC3wQme36X6OHe5WjLOl","title":"Create detection rules based on graph search","pathname":"/cortex-cloud-posture-management/graph-search/create-detection-rules-based-on-graph-search","siteSpaceId":"sitesp_5zLVr","description":"Create detection rules in Cortex Cloud Posture Management from Graph Search queries.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Graph Search"}]},{"id":"DgN2PIidzkgmKXOVqIMy","title":"About API specification inventory","pathname":"/cortex-cloud-posture-management/api-specification-inventory/api-specification-inventory","siteSpaceId":"sitesp_5zLVr","description":"Learn about API specification inventory in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"API specification inventory"}]},{"id":"8oFb8ILrr5f7AUwN7TZb","title":"Import API specification","pathname":"/cortex-cloud-posture-management/api-specification-inventory/import-api-specification","siteSpaceId":"sitesp_5zLVr","description":"Import API specifications into Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"API specification inventory"}]},{"id":"58BosgFqA8oL3TN99xDq","title":"Release and documentation updates","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/release-and-documentation-updates","siteSpaceId":"sitesp_5zLVr","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"viYyNyzocNfMGCO30Pii","title":"Data and platform administration","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/data-and-platform-administration","siteSpaceId":"sitesp_5zLVr","description":"Learn how to manage data ingestion, access, retention, and platform operations in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"1Wp12HWmgrdWSYapIM5k","title":"Audit logs","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/data-and-platform-administration/audit-logs","siteSpaceId":"sitesp_5zLVr","description":"Learn how audit logs in Cortex Cloud Posture Management track administrative and investigative activity, retain records, and forward notifications to external services.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"s0TiXidhVqm8u4qrlcf0","title":"Data ingestion health","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/data-and-platform-administration/data-ingestion-health","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management monitors data ingestion health, detects gaps and delays, measures data freshness, and creates custom alerts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"lROT9gujDFZmHyC1KSai","title":"Data retention","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/data-and-platform-administration/data-retention","siteSpaceId":"sitesp_5zLVr","description":"Learn about data retention periods, storage tiers, lifecycle options, and ways to manage retention costs in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"yIHFt2AZ2tHx1ZOHu5Dv","title":"Access control and authentication","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/data-and-platform-administration/access-control-and-authentication","siteSpaceId":"sitesp_5zLVr","description":"Learn how to manage role-based and scope-based access, SAML single sign-on, session controls, and tenant isolation in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"iynUJDl8hCXgL5AU0qhR","title":"Dashboards and reports","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/data-and-platform-administration/dashboards-and-reports","siteSpaceId":"sitesp_5zLVr","description":"Learn how to use Cortex Cloud Posture Management dashboards, scheduled reports, compliance content, and MITRE ATT&CK coverage to monitor security operations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Data and platform administration"}]},{"id":"GfcMaf3wFayDSEHwHugv","title":"Detection engineering and threat intelligence","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence","siteSpaceId":"sitesp_5zLVr","description":"Learn how to manage detection rules, identity threats, MITRE ATT&CK coverage, and false positives in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"kw95GrAVanGR60AU32iT","title":"Identity analytics and ITDR","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence/identity-analytics-and-itdr","siteSpaceId":"sitesp_5zLVr","description":"Learn how Identity Analytics and ITDR detect identity threats and assess user risk in Cortex Cloud Posture Management.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Detection engineering and threat intelligence"}]},{"id":"CizRFEBsXukRab7IlJll","title":"MITRE ATT&CK mapping","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence/mitre-att-and-ck-mapping","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management maps detections to MITRE ATT&CK and helps measure coverage gaps.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Detection engineering and threat intelligence"}]},{"id":"O53YMzAbQQyMtkLSwM1X","title":"False positive management","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/detection-engineering-and-threat-intelligence/false-positive-management","siteSpaceId":"sitesp_5zLVr","description":"Learn how Cortex Cloud Posture Management reduces false positives with baselining, case grouping, and exceptions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Detection engineering and threat intelligence"}]},{"id":"6hpyKZ42WguwzkgOSS1k","title":"Investigation and case management","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/investigation-and-case-management","siteSpaceId":"sitesp_5zLVr","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"}]},{"id":"Gfnu83VbRBwJpf7wMxjv","title":"Case lifecycle and grouping","pathname":"/cortex-cloud-posture-management/insights-and-tips-cortex-cloud/investigation-and-case-management/case-lifecycle-and-grouping","siteSpaceId":"sitesp_5zLVr","description":"Understand Cortex Cloud Posture Management case grouping and lifecycle stages, from signal investigation through resolution.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Insights & tips - Cortex Cloud"},{"label":"Investigation and case management"}]},{"id":"nlS6hG8pJeeXbCg2wkli","title":"Learn how to a migrate a new Broker VM image","pathname":"/cortex-cloud-posture-management/migrate-to-a-new-broker-vm-image/migrating-to-a-new-broker-vm-image","siteSpaceId":"sitesp_5zLVr","description":"Learn more about migrating to the latest broker VM image in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Migrate to a new Broker VM Image"}]},{"id":"iyFveyYpdq0YxRbj10a4","title":"Standalone Broker VM","pathname":"/cortex-cloud-posture-management/migrate-to-a-new-broker-vm-image/standalone-broker-vm","siteSpaceId":"sitesp_5zLVr","description":"Learn more about migrating a standalone broker VM image.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Migrate to a new Broker VM Image"}]},{"id":"iBIBBA5rj74zJOzV115d","title":"Broker VM high availability cluster node","pathname":"/cortex-cloud-posture-management/migrate-to-a-new-broker-vm-image/broker-vm-high-availability-cluster-node","siteSpaceId":"sitesp_5zLVr","description":"Learn more about migrating a broker VM High Availability (HA) cluster node.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"},{"label":"Migrate to a new Broker VM Image"}]},{"id":"sh600RfzTOfIpg6SiqPK","title":"Remediation actions","pathname":"/cortex-cloud-posture-management/remediation-actions","siteSpaceId":"sitesp_5zLVr","description":"Use Cortex Cloud Posture Management remediation actions to restore files, scan endpoints, isolate devices, and automate recovery workflows.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex CLOUD Posture Management","icon":"cloud"}]},{"id":"uxJ4kkzh4J54magIpdQp","title":"Kubernetes Security","pathname":"/kubernetes-security","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"rO1U3g1BpIVEJxrNR3VO","title":"What's new in Kubernetes Connector?","pathname":"/kubernetes-security/whats-new-in-kubernetes-connector","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"guxeaWOqE6dwcOS794wK","title":"KSPM limitations and system components","pathname":"/kubernetes-security/kspm-limitations-and-system-components","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"4360014d9c905fed1578f3bcb82eb0529e27cce1","title":"Configure Kubernetes Connector resource limits","pathname":"/kubernetes-security/kspm-limitations-and-system-components/configure-kubernetes-connector-resource-limits","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"KSPM limitations and system components"}]},{"id":"uhQx1N16k5EmTQ6BWS9D","title":"Supported Kubernetes distributions","pathname":"/kubernetes-security/supported-kubernetes-distributions","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"eQuwIJriYcBUMzs9lxJP","title":"Onboard the Kubernetes Connector","pathname":"/kubernetes-security/onboard-the-kubernetes-connector","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"nAYVFJ8Csnzoln4SlEZh","title":"OpenShift container registry","pathname":"/kubernetes-security/onboard-the-kubernetes-connector/openshift-container-registry","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Onboard the Kubernetes Connector"}]},{"id":"dbe427db58067df49cf66ed77740cb644b5bd6c5","title":"Deploy the Kubernetes Connector via GitOps","pathname":"/kubernetes-security/onboard-the-kubernetes-connector/deploy-the-kubernetes-connector-via-gitops","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Onboard the Kubernetes Connector"}]},{"id":"f40ec05006e93f0a6dce83afb32eaeef9a19724a","title":"Repository architecture and tenant management","pathname":"/kubernetes-security/onboard-the-kubernetes-connector/deploy-the-kubernetes-connector-via-gitops/repository-architecture-and-tenant-management","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Onboard the Kubernetes Connector"},{"label":"Deploy the Kubernetes Connector via GitOps"}]},{"id":"eafb5d9cc848a6e7fd8c2fa9d7e49f32f69e9d46","title":"Deploy with Flux CD","pathname":"/kubernetes-security/onboard-the-kubernetes-connector/deploy-the-kubernetes-connector-via-gitops/deploy-with-flux-cd","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Onboard the Kubernetes Connector"},{"label":"Deploy the Kubernetes Connector via GitOps"}]},{"id":"38a51ed94747a5e8d3e4d6179affb7d1c8b114c2","title":"Deploy with ArgoCD","pathname":"/kubernetes-security/onboard-the-kubernetes-connector/deploy-the-kubernetes-connector-via-gitops/deploy-with-argocd","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Onboard the Kubernetes Connector"},{"label":"Deploy the Kubernetes Connector via GitOps"}]},{"id":"eaf077ab6cf3f9e3da35e0c74f9e1ff78e764684","title":"Mirror connector images to a private registry","pathname":"/kubernetes-security/mirror-connector-images-to-a-private-registry","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"01e26d3a501827df16b5c8039ac0bc9dae6c2821","title":"Use kcli to mirror connector images","pathname":"/kubernetes-security/mirror-connector-images-to-a-private-registry/use-kcli-to-mirror-connector-images","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Mirror connector images to a private registry"}]},{"id":"bcXtMlujCEBUg7bciKYk","title":"KSPM dashboard","pathname":"/kubernetes-security/kspm-dashboard","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"GVeZ9gwRXDnvcFlClXLR","title":"KSPM graph","pathname":"/kubernetes-security/kspm-graph","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"c8d92cb7766cb9bcae694346736d2608080ff1de","title":"Asset detail card","pathname":"/kubernetes-security/kspm-graph/asset-detail-card","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"KSPM graph"}]},{"id":"d4c294cf39838dea0d365f002a7cf56d56fbb7b4","title":"Security finding categories","pathname":"/kubernetes-security/kspm-graph/security-finding-categories","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"KSPM graph"}]},{"id":"ayIO2KENyZ62g039CCSS","title":"Kubernetes clusters","pathname":"/kubernetes-security/kubernetes-clusters","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"DdSk5MEwIokYn1Q7qAEr","title":"Agentless Kubernetes security","pathname":"/kubernetes-security/agentless-kubernetes-security","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"JJKqGIwSHcE0bYdXIiEF","title":"Kubernetes Resources Inventory","pathname":"/kubernetes-security/kubernetes-resources-inventory","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"jWETD1IpOr6JJhOuS59M","title":"Kubernetes pods","pathname":"/kubernetes-security/kubernetes-resources-inventory/kubernetes-pods","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Kubernetes Resources Inventory"}]},{"id":"jx8HI6zYBfM9E2icAwN8","title":"Manage Kubernetes Connector instances","pathname":"/kubernetes-security/manage-kubernetes-connector-instances","siteSpaceId":"sitesp_6P8Lv","description":"You can manage the Kubernetes Connector instances on the Data Sources & Integrations page. You can check the status, edit, or delete Kubernetes Connector instances.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"dc6fce416e41646872d905e2aa0052cf5bffa793","title":"Run an on-demand Kubernetes cluster scan","pathname":"/kubernetes-security/manage-kubernetes-connector-instances/run-an-on-demand-kubernetes-cluster-scan","siteSpaceId":"sitesp_6P8Lv","description":"Request an Inventory or Nodes and containers scan for an eligible Kubernetes cluster.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Manage Kubernetes Connector instances"}]},{"id":"96bd64ed549f61f1f2b2be4c34e54e18e871d7a3","title":"Cloud workload policies and rules","pathname":"/kubernetes-security/cloud-workload-policies-and-rules","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"}]},{"id":"863ca89de974446af24bc44b570bbb032f1719c1","title":"How policies and rules work together","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/how-policies-and-rules-work-together","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"}]},{"id":"12b68134723f41d68fe259860d6c16a8a840ba81","title":"Cloud workload policies","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"}]},{"id":"8cf4734b184ebb7eb43b1c84fdbbad125006ffcb","title":"Types of cloud workload policies","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"7dcbf9c34b1c031b8f8a4dae1cb4185cd8be5579","title":"Trusted image cloud workload policies","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies/trusted-image-cloud-workload-policies","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"},{"label":"Types of cloud workload policies"}]},{"id":"5459f406d4a05e2ba90d44d9a51d2b464de30513","title":"Cloud workload policies page","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"871cba10a629395e75a75128d9b13ffec119b262","title":"Widgets panel","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page/widgets-panel","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"},{"label":"Cloud workload policies page"}]},{"id":"16cc6c25c59cfad1e453b6d201b816ce145a90c1","title":"Change the layout of the policies table","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page/change-the-layout-of-the-policies-table","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"},{"label":"Cloud workload policies page"}]},{"id":"8a5c424345dcb8438a8ab901e0839b6535a4bfc1","title":"Policy details panel","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page/policy-details-panel","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"},{"label":"Cloud workload policies page"}]},{"id":"63d641c8d47f1730be9a0cae04a16f74add80254","title":"Manage cloud workload policies","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/manage-cloud-workload-policies","siteSpaceId":"sitesp_6P8Lv","description":"Create, copy, edit, enable, disable, and delete cloud workload policies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"b30e41980cbf938b57a0a19bdd78aed6e3254833","title":"Cloud workload preventive action","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-preventive-action","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload policies"}]},{"id":"a676f7d133ced9c122e8dc83aec9e83a646e092b","title":"Cloud workload rules","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"}]},{"id":"19d20b178d9a25f193c94eb34eea37b44be64306","title":"Default (pre-defined) rules","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/default-pre-defined-rules","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"74700f1dfaa237e5f81c20669cf5d97e569195c7","title":"Custom (user-defined) rules","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/custom-user-defined-rules","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"9fdb986f585533c15c41b118962c3bc99f1db7b1","title":"Cloud workload rules page","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"0fe6c3897e51b607e8e10f61e307abe4deb4d9bf","title":"Filter page results","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page/filter-page-results","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"},{"label":"Cloud workload rules page"}]},{"id":"a0271a0914fd66a669ed85618dc9b9bad0ad4b67","title":"Change the layout of the rules table","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page/change-the-layout-of-the-rules-table","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"},{"label":"Cloud workload rules page"}]},{"id":"ff18dba23084fcccd251e473009adb1c7d6830d5","title":"Rule details panel","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page/rule-details-panel","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"},{"label":"Cloud workload rules page"}]},{"id":"CU2dxmECAFCNI9xT1abo","title":"Create a new custom detection rule","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule","siteSpaceId":"sitesp_6P8Lv","description":"Create scanner-specific custom detection rules for Cloud Workload.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"6e5e95e3869b4712853233249b9658eb7da0e847","title":"Use an existing rule to create a new custom detection rule","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/use-an-existing-rule-to-create-a-new-custom-detection-rule","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"57546565b7c60403d7c9ec72a4117753fd77e20c","title":"Edit a custom detection rule","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/edit-a-custom-detection-rule","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"e90b9f9d84122c6cbefdfeaa6182761cb6b777d0","title":"Delete a custom detection rule","pathname":"/kubernetes-security/cloud-workload-policies-and-rules/cloud-workload-rules/delete-a-custom-detection-rule","siteSpaceId":"sitesp_6P8Lv","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Kubernetes Security","icon":"cloud"},{"label":"Cloud workload policies and rules"},{"label":"Cloud workload rules"}]},{"id":"oxggweJF7dE2mtrIBWfO","title":"Cortex Cloud Application Security","pathname":"/application-security","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"}]},{"id":"q0teKghQoQlFofkmGGhc","title":"Onboard data sources","pathname":"/application-security/application-security/onboard-data-sources","siteSpaceId":"sitesp_uRgcB","description":"Onboard VCS, integrate CI tools, registries and ingest third-party data for a comprehensive view of your application and supply chain security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"}]},{"id":"78u3cfZeJ207Z8tomtcz","title":"Onboard version control systems","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"fzKYqf2x6za4YPbSdne9","title":"AWS CodeCommit","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/aws-codecommit","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"SNSB9IawzuexajOYZw7s","title":"Onboard AWS CodeCommit","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/aws-codecommit/onboard-aws-codecommit","siteSpaceId":"sitesp_uRgcB","description":"Connect AWS CodeCommit repositories to Cortex Cloud and manage the integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"AWS CodeCommit"}]},{"id":"3h17yKgQW0lPFOnMHmjI","title":"Reference A: IAM Service Role permissions","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/aws-codecommit/reference-a-iam-service-role-permissions","siteSpaceId":"sitesp_uRgcB","description":"AWS CodeCommit permissions configured by the CloudFormation integration template","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"AWS CodeCommit"}]},{"id":"bmpwfYM1mhCVs3wih318","title":"Azure DevOps","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/azure-devops","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"TZRN1AM13dpzNZgdptzm","title":"Onboard Azure DevOps","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/azure-devops/onboard-azure-devops","siteSpaceId":"sitesp_uRgcB","description":"Connect Azure DevOps repositories to Cortex Cloud and manage the integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Azure DevOps"}]},{"id":"sWaPityf18et5ctA4xSz","title":"Reference A: Subscribed events and permission scopes","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/azure-devops/reference-a-subscribed-events-and-permission-scopes","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Azure DevOps"}]},{"id":"EsTOXDVydVp6jkg3bKLZ","title":"Reference B: Instance-scope troubleshooting","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/azure-devops/reference-b-instance-scope-troubleshooting","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Azure DevOps"}]},{"id":"2FDpBlpqiIxjmN59VEe9","title":"Reference C: Repository-scope troubleshooting","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/azure-devops/reference-c-repository-scope-troubleshooting","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Azure DevOps"}]},{"id":"lmisXJNtEx0yaaAkRCgk","title":"Reference D: Azure DevOps onboarding system architecture","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/azure-devops/reference-d-azure-devops-onboarding-system-architecture","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Azure DevOps"}]},{"id":"Oj3AGrZC9yYdfWrWNefX","title":"Bitbucket Cloud","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/bitbucket-cloud","siteSpaceId":"sitesp_uRgcB","description":"Integrate Bitbucket Cloud to scan for secrets, IaC misconfigurations, vulnerabilities, and license compliance to strengthen your VCS security posture.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"Uk4cxklqt6PsGnQWMWah","title":"Reference A: Authorization scopes and subscribed events","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/bitbucket-cloud/authorization-scopes-and-event-architecture","siteSpaceId":"sitesp_uRgcB","description":"Review the OAuth scopes and Bitbucket Cloud events required for the integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Bitbucket Cloud"}]},{"id":"QM8gSVRU2UyzGiqjSgaK","title":"Bitbucket Data Center","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/bitbucket-data-center","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"3R4lrh06EJRcdUmKXpM1","title":"Onboard Bitbucket Data Center","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/bitbucket-data-center/onboard-bitbucket-data-center","siteSpaceId":"sitesp_uRgcB","description":"Connect Bitbucket Data Center to Cortex Cloud Application Security.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Bitbucket Data Center"}]},{"id":"gcL1NPkPxa1Oi4Grun6z","title":"Reference C: Bitbucket Data Center events","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/bitbucket-data-center/reference-c-bitbucket-data-center-events","siteSpaceId":"sitesp_uRgcB","description":"Events Cortex Cloud subscribes to for Bitbucket Data Center.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Bitbucket Data Center"}]},{"id":"2jt97J2EHf1Y81pzTYSo","title":"Reference B: Rotate Bitbucket Data Center tokens","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/bitbucket-data-center/reference-b-rotate-bitbucket-data-center-tokens","siteSpaceId":"sitesp_uRgcB","description":"Rotate the PAT used by a Bitbucket Data Center integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Bitbucket Data Center"}]},{"id":"2Z4vfgS2TTto4rpxEJWo","title":"Reference A: Create a Bitbucket Data Center PAT","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/bitbucket-data-center/reference-a-create-a-bitbucket-data-center-pat","siteSpaceId":"sitesp_uRgcB","description":"Create a Personal Access Token for Bitbucket Data Center integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"Bitbucket Data Center"}]},{"id":"eJheM6r0WH7h9IPXEiDz","title":"GitHub SaaS","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"MX3Sja7BKHjo0iOW9U8T","title":"Onboard the shared Cortex GitHub App","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/onboard-a-cortex-github-app","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"vC8vADGAgY98JWB1RzJc","title":"Onboard a new customer-owned GitHub App","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/onboard-a-new-customer-owned-github-app","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"YbgTpxy0Tf6QiL3e0V5X","title":"Onboard an existing Customer-Owned GitHub App","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/reuse-an-existing-customer-owned-github-app","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"eHPVFG4ti6d88zbLDrVh","title":"Verify and manage VCS integrations.","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/post-onboarding-management-and-verification","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"nOdYfQykfGjtK135uzxe","title":"Reference A: Shared Cortex GitHub App permissions","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/reference-a-shared-cortex-github-app-permissions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"A6TXOcZsyMkXnVWsmCbC","title":"Reference B: Customer Owned GitHub App permissions","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/reference-b-customer-owned-github-app-permissions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"XX30jaeECKCskKCc2fmm","title":"Reference C: Feature permission requirements","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/reference-c-feature-permission-requirements","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"EAL1Zjc6h0gZBTJwYNCM","title":"Reference D: Ownership model comparison","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/reference-d-ownership-model-comparison","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"gjHq5h267t1Duyku8Znp","title":"Reference E: Subscribed GitHub events","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-cloud/reference-e-subscribed-github-events","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub SaaS"}]},{"id":"m5845rgh3Jhd3twlFimx","title":"GitHub Enterprise (On-Prem)","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-enterprise-on-prem","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"4PYZlGMiI23MDF4F28SY","title":"Onboard GitHub Enterprise (On-Prem)","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-enterprise-on-prem/onboard-github-enterprise-on-prem","siteSpaceId":"sitesp_uRgcB","description":"Connect GitHub Enterprise Server repositories to Cortex Cloud.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub Enterprise (On-Prem)"}]},{"id":"NbMN2TBz7EiBm5CTDW0u","title":"Reference A: GitHub Enterprise OAuth scopes","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-enterprise-on-prem/reference-a-github-enterprise-oauth-scopes","siteSpaceId":"sitesp_uRgcB","description":"OAuth scopes required for GitHub Enterprise Server onboarding.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub Enterprise (On-Prem)"}]},{"id":"G1x7HITEQCvkCltYv2Pv","title":"Reference B: Egress proxy IP addresses","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-enterprise-on-prem/reference-b-egress-proxy-ip-addresses","siteSpaceId":"sitesp_uRgcB","description":"Egress proxy IP addresses for GitHub Enterprise Server allow lists.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub Enterprise (On-Prem)"}]},{"id":"8CQ3wIl5PxlLUcaRYfQa","title":"Reference C: GitHub Enterprise subscribed events","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/github-enterprise-on-prem/reference-c-github-enterprise-subscribed-events","siteSpaceId":"sitesp_uRgcB","description":"Events Cortex Cloud monitors for GitHub Enterprise Server.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitHub Enterprise (On-Prem)"}]},{"id":"AeB0y4UUToqkvIo1ICDo","title":"GitLab SaaS","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/gitlab-saas","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"MPrUfDzwXhoJsgnV60wl","title":"Reference A: Subscribed events","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/gitlab-saas/reference-a-subscribed-events","siteSpaceId":"sitesp_uRgcB","description":"Events Cortex Cloud subscribes to for GitLab SaaS.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"},{"label":"GitLab SaaS"}]},{"id":"H5OPv3mkKws80l05saHn","title":"GitLab Self Managed (On-Prem)","pathname":"/application-security/application-security/onboard-data-sources/onboard-version-control-systems/gitlab-self-managed-on-prem","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard version control systems"}]},{"id":"7pZJKJ4UGTwdYxNcjoV1","title":"Onboard CI/CD systems","pathname":"/application-security/application-security/onboard-data-sources/onboard-cicd-systems","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"MJRakPNy2cqFKvmSlMI7","title":"CircleCI for CI/CD pipeline scans","pathname":"/application-security/application-security/onboard-data-sources/onboard-cicd-systems/circleci-for-cicd-pipeline-scans","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard CI/CD systems"}]},{"id":"nhH35uVLim7j0X8bLTxt","title":"Jenkins for CI/CD pipeline scans","pathname":"/application-security/application-security/onboard-data-sources/onboard-cicd-systems/jenkins-for-cicd-pipeline-scans","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard CI/CD systems"}]},{"id":"jkd5tVSNMv5zyTY6hjMO","title":"Integrate CI tools","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"zZYyjy3CgoBK2bPzbc97","title":"AWS CodeBuild","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/aws-codebuild","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"}]},{"id":"mGQVqca4GBegSk82zMCS","title":"AWS CodeBuild code scan workflow template","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/aws-codebuild/aws-codebuild-code-scan-workflow-template","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in an AWS CodeBuild buildspec.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"},{"label":"AWS CodeBuild"}]},{"id":"JyCZOTUs4MfhyYttac5A","title":"CircleCI for code scans","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/circleci-for-code-scans","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"}]},{"id":"s3zKg2DmcJsuJJilkOD4","title":"CircleCI code scan workflow template","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/circleci-for-code-scans/circleci-code-scan-workflow-template","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in a CircleCI workflow.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"},{"label":"CircleCI for code scans"}]},{"id":"XBsm2jS4ZG6U2Hff0BZu","title":"Cortex CLI","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/connect-cortex-cli","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"}]},{"id":"1gEFLvGl9CoEvI6thjl4","title":"GitHub Actions","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/github-actions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"}]},{"id":"wPEXMCx3Ziba4EeXjiOO","title":"GitHub Actions code scan workflow template","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/github-actions/github-actions-code-scan-workflow-template","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in a GitHub Actions workflow.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"},{"label":"GitHub Actions"}]},{"id":"HCVkEgoaOnnmhV9UjdVR","title":"Jenkins for code scans","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/jenkins-for-code-scans","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"}]},{"id":"RMPBj7gGg3EyQsm1k1Qe","title":"Reference A: Jenkins code scan workflow template without checkout","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/jenkins-for-code-scans/reference-a-jenkins-code-scan-workflow-template-without-checkout","siteSpaceId":"sitesp_uRgcB","description":"Configure a Jenkins code scan workflow without repository checkout.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"},{"label":"Jenkins for code scans"}]},{"id":"O9aGCSvBuZwaTgJvQ1zz","title":"Reference B: Jenkins code scan workflow template with checkout","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/jenkins-for-code-scans/reference-b-jenkins-code-scan-workflow-template-with-checkout","siteSpaceId":"sitesp_uRgcB","description":"Configure a Jenkins code scan workflow with repository checkout.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"},{"label":"Jenkins for code scans"}]},{"id":"uJ4AWJvGpuJqtMcJYdKD","title":"Terraform Cloud (Run Tasks)","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/terraform-cloud-run-tasks","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"}]},{"id":"kJyz1qwwVfG1F1eXjhQc","title":"Terraform workflow for Run Tasks enforcement","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/terraform-cloud-run-tasks/terraform-workflow-for-run-tasks-enforcement","siteSpaceId":"sitesp_uRgcB","description":"Configure policy-based Terraform Run Tasks enforcement.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"},{"label":"Terraform Cloud (Run Tasks)"}]},{"id":"Wa3ByUKVHarznLmJt5Rt","title":"Terraform Enterprise (Run Tasks)","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/terraform-enterprise-run-tasks","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"}]},{"id":"9zZQRTSBTQ9FvKFMSp8s","title":"Terraform workflow for Run Tasks enforcement","pathname":"/application-security/application-security/onboard-data-sources/integrate-ci-tools/terraform-enterprise-run-tasks/terraform-workflow-for-run-tasks-enforcement","siteSpaceId":"sitesp_uRgcB","description":"Configure policy-based Terraform Run Tasks enforcement.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Integrate CI tools"},{"label":"Terraform Enterprise (Run Tasks)"}]},{"id":"NT441Z5GHmYvCX3iX9vS","title":"CLI pipeline code snippets","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets","siteSpaceId":"sitesp_uRgcB","description":"Add Cortex CLI code scans to supported CI/CD pipelines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"8guDeEwXyCqZ6uzwKG0C","title":"AWS CodeBuild","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets/aws-codebuild","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in AWS CodeBuild.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"CLI pipeline code snippets"}]},{"id":"otl17JLEM4BLLCGCySeT","title":"Azure Pipelines","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets/azure-pipelines","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in Azure Pipelines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"CLI pipeline code snippets"}]},{"id":"7zDN8W3rAwBJ2SFNMQ0Z","title":"Bitbucket","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets/bitbucket","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in Bitbucket Pipelines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"CLI pipeline code snippets"}]},{"id":"egGHBKbXS6b3krjRKXpE","title":"CircleCI","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets/circleci","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in CircleCI.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"CLI pipeline code snippets"}]},{"id":"gETkC1S7AeHgSs3w8LAy","title":"GitHub Actions","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets/github-actions","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in GitHub Actions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"CLI pipeline code snippets"}]},{"id":"w9LTQxOLkKSiAdNn77id","title":"GitLab Runner","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets/gitlab-runner","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in GitLab Runner.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"CLI pipeline code snippets"}]},{"id":"4s3wVnkPOzlHX5bDesbD","title":"Jenkins","pathname":"/application-security/application-security/onboard-data-sources/cli-pipeline-code-snippets/jenkins","siteSpaceId":"sitesp_uRgcB","description":"Configure Cortex CLI code scanning in Jenkins.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"CLI pipeline code snippets"}]},{"id":"5wxUqtDgMwGDBpAvz1y8","title":"Onboard private package registries","pathname":"/application-security/application-security/onboard-data-sources/onboard-private-package-registries","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"KoMlpvM0xs8Uhdl6wECn","title":"JFrog Artifactory","pathname":"/application-security/application-security/onboard-data-sources/onboard-private-package-registries/jfrog-artifactory","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard private package registries"}]},{"id":"xFfMv4pajxNb9UGqaIFs","title":"Onboard JFrog Artifactory","pathname":"/application-security/application-security/onboard-data-sources/onboard-private-package-registries/onboard-jfrog-artifactory","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Onboard private package registries"}]},{"id":"yxjEBJOAVcU2nA9gzqV9","title":"Ingest third-party data sources","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources","siteSpaceId":"sitesp_uRgcB","description":"Centralize findings from supported third-party or SARIF-compatible scanners into Cortex Cloud. Unified triage, Urgency-based priority, and policy enforcement in one view.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"VXPLKcMGtxdYKYFBGEAn","title":"Checkmarx","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/checkmarx","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"}]},{"id":"XQibdSnbXPrZWQNFZ3xJ","title":"Configure Checkmarx One ingestion","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/checkmarx/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Checkmarx"}]},{"id":"b0pmBALovm9t18B77BlN","title":"Reference A: Checkmarx troubleshooting","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/checkmarx/troubleshooting","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Checkmarx"}]},{"id":"zsWsgOe3d62NnTHNSayv","title":"Reference B: Checkmarx frequently asked questions","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/checkmarx/frequently-asked-questions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Checkmarx"}]},{"id":"rILBCfupYQDu2CMI1Tou","title":"Semgrep","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/semgrep","siteSpaceId":"sitesp_uRgcB","description":"Cortex Cloud AppSec integrates with Semgrep to ingest SCA and SAST findings into the unified AppSec data model.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"}]},{"id":"a6dh3yI85C3EJo0EXSEx","title":"Configure Semgrep ingestion","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/semgrep/configure-semgrep-ingestion","siteSpaceId":"sitesp_uRgcB","description":"Connect Semgrep to Cortex Cloud, select findings, and manage the integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Semgrep"}]},{"id":"aRyq9jo1Lw49ddOpwjno","title":"Snyk","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/snyk","siteSpaceId":"sitesp_uRgcB","description":"Configure the Snyk integration to ingest SAST and SCA vulnerability findings into Cortex Cloud, unifying your software package assets and security code.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"}]},{"id":"HJZWJcGDEKNXLdOdRejb","title":"Configure Snyk ingestion","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/snyk/configure-snyk-ingestion","siteSpaceId":"sitesp_uRgcB","description":"Connect Snyk to Cortex Cloud, select findings, and manage the integration.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Snyk"}]},{"id":"2VpgwMOu2yHhr92zfkAx","title":"SonarQube","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/sonarqube","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"}]},{"id":"U8k82PpBrGcTTqelVIHy","title":"Configure SonarQube ingestion","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/sonarqube/onboard-via-tenant-ui","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"SonarQube"}]},{"id":"11gqvQCSUcKABGO4V1ip","title":"Troubleshoot SonarQube integrations","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/sonarqube/troubleshoot","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"SonarQube"}]},{"id":"l1UfPVD85ITvQ3QspykV","title":"Veracode","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/veracode","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"}]},{"id":"1sqsMepkMli6vAdZ4rou","title":"Generic 3rd Party AppSec Collector","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector","siteSpaceId":"sitesp_uRgcB","description":"Streamline security by ingesting SARIF findings from any tool into Cortex Cloud. Achieve unified visibility and risk-based prioritization for all AppSec scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"}]},{"id":"NUWyyKkoVgsE2TfhRbCH","title":"Configure the Generic 3rd Party AppSec Collector","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/tenant-console-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"}]},{"id":"E9OjVzqxwEJklrxcqp2B","title":"Upload findings from CI/CD pipelines","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/upload-findings-from-ci-cd-pipelines","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"}]},{"id":"HlkIjA63l8B6PqiW2y07","title":"Troubleshooting","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/troubleshooting","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"}]},{"id":"a8rzNt8GYR1trzDdwbAK","title":"References","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"}]},{"id":"ZN1Hxtx6Vfww8Iu4F5oJ","title":"Reference A: System requirements","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/references/technical-requirements-and-sarif-specifications","siteSpaceId":"sitesp_uRgcB","description":"Review system requirements before uploading SARIF findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"},{"label":"References"}]},{"id":"Is0RAlWLNi3z5T9SMQuk","title":"Reference B: SARIF format and mapping","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/references/reference-b-sarif-format-and-mapping","siteSpaceId":"sitesp_uRgcB","description":"Required and optional SARIF fields for collector uploads.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"},{"label":"References"}]},{"id":"GWLqE2PwZXlasBTL1h12","title":"Reference C: Severity mapping","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/references/reference-c-severity-mapping","siteSpaceId":"sitesp_uRgcB","description":"How SARIF severity levels map to Cortex Cloud severity values.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"},{"label":"References"}]},{"id":"0SezyYGu7wQ0i0P39DXY","title":"Reference D: Repository mapping","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/references/reference-d-repository-mapping","siteSpaceId":"sitesp_uRgcB","description":"Map uploaded SARIF findings to Cortex Cloud repository assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"},{"label":"References"}]},{"id":"oMGMVOf8E8pRW0sIvAH1","title":"Reference E: Validation statuses","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/generic-3rd-party-appsec-collector/references/reference-e-validation-statuses","siteSpaceId":"sitesp_uRgcB","description":"Interpret SARIF validation results before uploading findings.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Generic 3rd Party AppSec Collector"},{"label":"References"}]},{"id":"d4ze3TgmZtYOH3SShPGw","title":"Third-party integrations lifecycle administration and automation","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/third-party-integrations-lifecycle-administration-and-automation","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"}]},{"id":"DJBwCg6PATNzKBZc2exT","title":"Reference A: Programmatic automation and key rotation","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/third-party-integrations-lifecycle-administration-and-automation/reference-a-programmatic-automation-and-key-rotation","siteSpaceId":"sitesp_uRgcB","description":"Reference for third-party integration API operations.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Third-party integrations lifecycle administration and automation"}]},{"id":"6XFZzRdPibny1qNnqKva","title":"Reference B: GitOps and infrastructure-as-code (IaC)","pathname":"/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/third-party-integrations-lifecycle-administration-and-automation/reference-b-gitops-and-infrastructure-as-code-iac","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Ingest third-party data sources"},{"label":"Third-party integrations lifecycle administration and automation"}]},{"id":"uLpOL84iLqvtUCkE0iTI","title":"Transporter over Broker VM","pathname":"/application-security/application-security/onboard-data-sources/transporter-over-broker-vm","siteSpaceId":"sitesp_uRgcB","description":"Transporter over Broker VM sets up a secure communication channel between your VCS and Cortex.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"JUrjuiiNV05drRi5d9WB","title":"Set up a Transporter applet on Broker VM","pathname":"/application-security/application-security/onboard-data-sources/transporter-over-broker-vm/set-up-a-transporter-applet-on-broker-vm","siteSpaceId":"sitesp_uRgcB","description":"Setup a Transporter applet on Broker VM.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Transporter over Broker VM"}]},{"id":"q8NbQXTp9ddw1TPJkZYu","title":"Set up a Transporter on your VCS","pathname":"/application-security/application-security/onboard-data-sources/transporter-over-broker-vm/set-up-a-transporter-on-your-vcs","siteSpaceId":"sitesp_uRgcB","description":"Setup a Transporter on your version control system.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"},{"label":"Transporter over Broker VM"}]},{"id":"7O0ltm8o63GGhrYXFEhk","title":"Manage integrations via data source APIs","pathname":"/application-security/application-security/onboard-data-sources/manage-integrations-via-data-source-apis","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"Onboard data sources"}]},{"id":"U3kC4wQQVZmJCgMmBWNo","title":"Application Security dashboard","pathname":"/application-security/application-security/cortex-cloud-application-security-dashboard","siteSpaceId":"sitesp_uRgcB","description":"Monitor and analyze your Application Security posture with the Application Security dashboard.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"}]},{"id":"9LUSv7V5FhOinkJMK9Dv","title":"AppSec Objectives with Agentix","pathname":"/application-security/application-security/appsec-objectives-with-agentix","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"}]},{"id":"Rkq44BIfaqMgxvCnmnWE","title":"Track objectives","pathname":"/application-security/application-security/appsec-objectives-with-agentix/track-objectives","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"AppSec Objectives with Agentix"}]},{"id":"mftQqEZbtcXji4shL2hU","title":"Vulnerability objectives","pathname":"/application-security/application-security/appsec-objectives-with-agentix/vulnerability-objectives","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"AppSec Objectives with Agentix"}]},{"id":"oXO33e2HsN11gQhnPk4v","title":"References","pathname":"/application-security/application-security/appsec-objectives-with-agentix/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"AppSec Objectives with Agentix"}]},{"id":"4gGM90ttuMKWooKeuvqr","title":"Reference A: Objective scope filters","pathname":"/application-security/application-security/appsec-objectives-with-agentix/references/reference-a-objective-scope-filters","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"AppSec Objectives with Agentix"},{"label":"References"}]},{"id":"6DI3RTQGDVfWVrMwjTDV","title":"Reference B: Objective condition filters","pathname":"/application-security/application-security/appsec-objectives-with-agentix/references/reference-b-objective-condition-filters","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"AppSec Objectives with Agentix"},{"label":"References"}]},{"id":"D23NTzzaDVMtsQE04qmT","title":"Reference C: Metric calculations","pathname":"/application-security/application-security/appsec-objectives-with-agentix/references/reference-c-metric-calculations","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security","icon":"shield-alt"},{"label":"AppSec Objectives with Agentix"},{"label":"References"}]},{"id":"YV0LsUtOCWQr6wF1Pd9X","title":"Code-to-Cloud","pathname":"/application-security/code-to-cloud/code-to-cloud","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"}]},{"id":"6y1GrRjGgcPHNum3HPjs","title":"How the C2C engine works","pathname":"/application-security/code-to-cloud/code-to-cloud/how-the-c2c-engine-works","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"YLhM1VKgs8Bjug9vGhSI","title":"Identify and investigate gap","pathname":"/application-security/code-to-cloud/code-to-cloud/identify-and-investigate-gap","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"M0jcIHwxdUVt0qs2mAnE","title":"Execute remediation workflows","pathname":"/application-security/code-to-cloud/code-to-cloud/execute-remediation-workflows","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"ScD9jIEpojW6yrcL9pRr","title":"The Coverage dashboard","pathname":"/application-security/code-to-cloud/code-to-cloud/the-coverage-dashboard","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"EKErc2cJC0nqZCSnbiUN","title":"C2C in the UAI","pathname":"/application-security/code-to-cloud/code-to-cloud/c2c-in-the-uai","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"gFBw2WTyk52J9nacP6JO","title":"Reference A: Lineage filtering matrix","pathname":"/application-security/code-to-cloud/code-to-cloud/c2c-in-the-uai/reference-a-lineage-filtering-matrix","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"C2C in the UAI"}]},{"id":"vyGybkNQjy9UnnagNQB9","title":"Reference B: Essential filtering rules","pathname":"/application-security/code-to-cloud/code-to-cloud/c2c-in-the-uai/reference-b-essential-filtering-rules","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"C2C in the UAI"}]},{"id":"bMREuzige6Usr3aqUjQx","title":"Reference C: Technical background","pathname":"/application-security/code-to-cloud/code-to-cloud/c2c-in-the-uai/reference-c-technical-background","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"C2C in the UAI"}]},{"id":"hoEaigpZsLKGKRuhCWGW","title":"C2C tab (asset level)","pathname":"/application-security/code-to-cloud/code-to-cloud/c2c-tab-asset-level","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"UeqN5OVbE5igvaxJQy2l","title":"C2C tab (app level)","pathname":"/application-security/code-to-cloud/code-to-cloud/c2c-tab-app-level","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"2ByQRObtc6TBrkqJWBhN","title":"Agentix for C2C","pathname":"/application-security/code-to-cloud/code-to-cloud/agentix-for-c2c","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"xEntkhW8vKNFF4CH37kb","title":"Investigate issues with C2C","pathname":"/application-security/code-to-cloud/code-to-cloud/investigate-issues-with-c2c","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"D88IBe6W8BKXJQbO55Hw","title":"C2C in ASPM Command Center","pathname":"/application-security/code-to-cloud/code-to-cloud/c2c-in-aspm-command-center","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"jQtmlYdaCzCb38eGgt8e","title":"Enforce policies with C2C","pathname":"/application-security/code-to-cloud/code-to-cloud/enforce-policies-with-c2c","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"wFc5V9POD5LLc1sv0Bcq","title":"API endpoints for C2C","pathname":"/application-security/code-to-cloud/code-to-cloud/api-endpoints-for-c2c","siteSpaceId":"sitesp_uRgcB","description":"Retrieve Code-to-Cloud coverage programmatically.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"u2qeHrI6Cn4nOLTDRj4P","title":"Troubleshooting","pathname":"/application-security/code-to-cloud/code-to-cloud/troubleshooting","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"cJanXFzVgeSwByEi03EL","title":"FAQs","pathname":"/application-security/code-to-cloud/code-to-cloud/faqs","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"midz4rHAfn6T8DBEDFQt","title":"References","pathname":"/application-security/code-to-cloud/code-to-cloud/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"}]},{"id":"I2avCtV7tNSuczj225rx","title":"Reference A: Supported integrations and asset stages","pathname":"/application-security/code-to-cloud/code-to-cloud/references/reference-a-supported-integrations-and-asset-stages","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"References"}]},{"id":"j8sN4RFTfBrUmQXLospm","title":"Reference B: Coverage % calculation and configuration toggles","pathname":"/application-security/code-to-cloud/code-to-cloud/references/reference-b-coverage-calculation-and-configuration-toggles","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"References"}]},{"id":"S87iRBMJSqP7RI97YmBd","title":"Reference C: Dashboard filters by view","pathname":"/application-security/code-to-cloud/code-to-cloud/references/reference-c-dashboard-filters-by-view","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"References"}]},{"id":"M9shTpeK9I80I5loVMYD","title":"Reference D: Recommended actions by view and stage","pathname":"/application-security/code-to-cloud/code-to-cloud/references/reference-d-recommended-actions-by-view-and-stage","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"References"}]},{"id":"gwhODC1C1GJoO9CFC5Qd","title":"Reference E: Code-to-Cloud Coverage public API","pathname":"/application-security/code-to-cloud/code-to-cloud/references/reference-e-code-to-cloud-coverage-public-api","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"References"}]},{"id":"ekmwcB1FfPLgfIt2uTKH","title":"Page Reference F: Call-to-action routing by asset type1","pathname":"/application-security/code-to-cloud/code-to-cloud/references/page-reference-f-call-to-action-routing-by-asset-type1","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"code-to-cloud"},{"label":"Code-to-Cloud"},{"label":"References"}]},{"id":"AmtH8leBotePS2RPbQ64","title":"What is Application Security Posture Management (ASPM)","pathname":"/application-security/application-security-posture-management-aspm/application-security-posture-management-aspm","siteSpaceId":"sitesp_uRgcB","description":"ASPM centralizes AppSec monitoring across the SDLC. It aggregates findings from tools such as IaC and SCA to provide a holistic view and prioritize risks.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"oxexa6zQHT0m3gAphC52","title":"ASPM Command Center","pathname":"/application-security/application-security-posture-management-aspm/aspm-command-center","siteSpaceId":"sitesp_uRgcB","description":"The ASPM Command Center is your central hub for real-time application security posture management across the SDLC. It offers critical insights to identify risks, track compliance, and enable secure de","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"oRAgc5PPn8XIcfyoPraY","title":"Operational workflows","pathname":"/application-security/application-security-posture-management-aspm/aspm-command-center/operational-workflows","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"ASPM Command Center"}]},{"id":"m6zNBv0cmQzIyKsOX11K","title":"Business applications","pathname":"/application-security/application-security-posture-management-aspm/applications","siteSpaceId":"sitesp_uRgcB","description":"Build and manage applications as holistic entities. Gain centralized visibility across the SDLC to monitor assets and remediate threats based on business risk.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"005YJrNUHidbamfAZcAr","title":"Define business applications by Criteria","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"}]},{"id":"iEQAygeRKP0ibIVL47ft","title":"Define applications by code Criteria","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications/define-applications-by-code-criteria","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"},{"label":"Define business applications by Criteria"}]},{"id":"7rxYxHvINbItyrXaoY4Y","title":"Reference A: Code Criteria grouping and unification","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications/define-applications-by-code-criteria/reference-a-code-criteria-grouping-and-unification","siteSpaceId":"sitesp_uRgcB","description":"Understand Code Criteria grouping, scope filters, and application unification.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"},{"label":"Define business applications by Criteria"},{"label":"Define applications by code Criteria"}]},{"id":"LTM18GVqScKFVhWryf7G","title":"Reference B: Code Criteria references and examples","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications/define-applications-by-code-criteria/reference-b-code-criteria-references-and-examples","siteSpaceId":"sitesp_uRgcB","description":"Examples and reference rules for Code Criteria grouping, unification, and scope.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"},{"label":"Define business applications by Criteria"},{"label":"Define applications by code Criteria"}]},{"id":"sg2YSb9QGbvPZ0eQvSPJ","title":"Define applications by cloud Criteria","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications/define-applications-by-cloud-criteria","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"},{"label":"Define business applications by Criteria"}]},{"id":"eC5TtBHP7Pg7H9XUGqmC","title":"View and manage Criteria via the tenant (UI)","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications/view-and-manage-criteria-via-the-tenant-ui","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"},{"label":"Define business applications by Criteria"}]},{"id":"C0XnKGLdNb1TR0hA9Li6","title":"Manage Criteria via the public API","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications/manage-criteria-via-the-public-api","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"},{"label":"Define business applications by Criteria"}]},{"id":"4J6nMKe64MK3eLbfAJ8U","title":"Reference: Core concepts","pathname":"/application-security/application-security-posture-management-aspm/applications/defining-business-applications/reference-core-concepts","siteSpaceId":"sitesp_uRgcB","description":"Reference details for Application Criteria types, evaluation, business context, and application scope.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"},{"label":"Define business applications by Criteria"}]},{"id":"nL1EGk4RamR99ccBIgC8","title":"Manually build an application","pathname":"/application-security/application-security-posture-management-aspm/applications/manually-build-an-application","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"}]},{"id":"23PJITUNB1mgyQvenHjo","title":"View and manage applications (UI)","pathname":"/application-security/application-security-posture-management-aspm/applications/application-management-and-visibility","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"}]},{"id":"LyQzmlQGBLOJdPq8P6jn","title":"Manage applications via public APIs","pathname":"/application-security/application-security-posture-management-aspm/applications/manage-applications-via-public-apis","siteSpaceId":"sitesp_uRgcB","description":"Automate application lifecycle management by creating, updating, and deleting applications programmatically via the Cortex Cloud public API endpoints.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"}]},{"id":"YvWmaGUyWTvglRVrlFiu","title":"Scope user access to applications (Application SBAC)","pathname":"/application-security/application-security-posture-management-aspm/applications/scope-user-access-to-applications-application-sbac","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"}]},{"id":"sR01sexwMbwhwhTTyedr","title":"Business application assets","pathname":"/application-security/application-security-posture-management-aspm/applications/business-application-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Business applications"}]},{"id":"DqqPKcvz6mTteVrFQyS4","title":"Repository as an asset","pathname":"/application-security/application-security-posture-management-aspm/repository-as-an-asset","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"HZ1HBWMgtlN7MHTZ5PAx","title":"Manage repository assets through the tenant (UI)","pathname":"/application-security/application-security-posture-management-aspm/repository-as-an-asset/understanding-repository-assets-via-the-ui","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Repository as an asset"}]},{"id":"0KYS608tz78Ai7fcZepZ","title":"Investigate repository assets","pathname":"/application-security/application-security-posture-management-aspm/repository-as-an-asset/understanding-repository-assets-via-the-ui/investigate-repository-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Repository as an asset"},{"label":"Manage repository assets through the tenant (UI)"}]},{"id":"EWI1YfWmFm705hJI3zHx","title":"Reference: Repositories asset attributes","pathname":"/application-security/application-security-posture-management-aspm/repository-as-an-asset/understanding-repository-assets-via-the-ui/reference-repositories-asset-attributes","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Repository as an asset"},{"label":"Manage repository assets through the tenant (UI)"}]},{"id":"gP0iUyQfrtsYuKghcgSm","title":"Manage repositories via API","pathname":"/application-security/application-security-posture-management-aspm/repository-as-an-asset/manage-repositories-via-api","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Repository as an asset"}]},{"id":"vbUss3iJltxp5gdXzwZ3","title":"Coverage","pathname":"/application-security/application-security-posture-management-aspm/coverage","siteSpaceId":"sitesp_uRgcB","description":"The AppSec Coverage page provides centralized visibility into security scanner deployment across the SDLC. Monitor asset health, identify gaps, and orchestrate onboarding.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"8zHy01K7DPd5Wa7xAssz","title":"Coverage in the tenant (UI)","pathname":"/application-security/application-security-posture-management-aspm/coverage/coverage-in-the-user-interface","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Coverage"}]},{"id":"soBodtdTCBNCfyZ9WyBo","title":"Urgency","pathname":"/application-security/application-security-posture-management-aspm/urgency","siteSpaceId":"sitesp_uRgcB","description":"Prioritize issues using Urgency, a context-aware risk score that dynamically evaluates runtime exposure, business impact, and protection status.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"PJRDJ6lWRY4DwthtUkhG","title":"Review Application Security posture and remediate issues by Urgency","pathname":"/application-security/application-security-posture-management-aspm/urgency/view-urgency-in-the-tenant","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Urgency"}]},{"id":"HJcUIiO6W38OT7TEHMBK","title":"Understand Urgency and Code-to-Cloud traceability","pathname":"/application-security/application-security-posture-management-aspm/urgency/urgency-and-code-to-cloud-traceability","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Urgency"}]},{"id":"D3uoKbKbHSgHQTZADb5t","title":"Understand Urgency metrics","pathname":"/application-security/application-security-posture-management-aspm/urgency/urgency-metrics","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Urgency"}]},{"id":"J5UmapqlUvXTFP9TJ0lZ","title":"Scan issue types by Urgency level","pathname":"/application-security/application-security-posture-management-aspm/urgency/prioritize-issues-by-urgency-levels","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Urgency"}]},{"id":"Osf6DCCBkg1CmhGwff2x","title":"Backlog baseline","pathname":"/application-security/application-security-posture-management-aspm/backlog-baseline","siteSpaceId":"sitesp_uRgcB","description":"Backlog represents pre-existing code issues discovered by a scanner's first run or by new rules.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"p6ekOl3vcLfKryAyj4CW","title":"Backlog use cases","pathname":"/application-security/application-security-posture-management-aspm/backlog-baseline/backlog-use-cases","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Backlog baseline"}]},{"id":"ME9vRdhB5eNJg3AV27aD","title":"Issue/Finding classification by scanner","pathname":"/application-security/application-security-posture-management-aspm/backlog-baseline/issuefinding-classification-by-scanner","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Backlog baseline"}]},{"id":"9MQ5LKD6GHSd0GD1SDMB","title":"Using Backlog","pathname":"/application-security/application-security-posture-management-aspm/backlog-baseline/using-backlog","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Backlog baseline"}]},{"id":"jQj8e2KuPb1Frmmsv0Qf","title":"Service Lead Agreements (SLA)","pathname":"/application-security/application-security-posture-management-aspm/service-lead-agreements-sla","siteSpaceId":"sitesp_uRgcB","description":"Application Security SLA defines deadlines for fixing security issues based on severity, ensuring timely remediation and improving team performance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"xcqJcZqC9F3BN6XEge2U","title":"Configure and monitor Cortex Cloud Application Security SLAs","pathname":"/application-security/application-security-posture-management-aspm/service-lead-agreements-sla/configure-and-monitor-cortex-cloud-application-security-slas","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Service Lead Agreements (SLA)"}]},{"id":"KuHmLQhE70M3fhnsd07F","title":"Compliance for Cortex Cloud Application Security","pathname":"/application-security/application-security-posture-management-aspm/compliance-for-cortex-cloud-application-security","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"OfwUVKhxuS6soS4BoTrj","title":"Monitor and track compliance adherence","pathname":"/application-security/application-security-posture-management-aspm/compliance-for-cortex-cloud-application-security/monitor-and-track-compliance-adherence","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Compliance for Cortex Cloud Application Security"}]},{"id":"EOFOTaiQZvItqE5ezVNv","title":"Infrastructure-as-Code (IaC) compliance","pathname":"/application-security/application-security-posture-management-aspm/compliance-for-cortex-cloud-application-security/infrastructure-as-code-iac-compliance","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Compliance for Cortex Cloud Application Security"}]},{"id":"C9pwzCjSlOg6pV5ZymiA","title":"Manage IaC compliance","pathname":"/application-security/application-security-posture-management-aspm/compliance-for-cortex-cloud-application-security/manage-iac-compliance","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Compliance for Cortex Cloud Application Security"}]},{"id":"b52SsNiEwKd8qs3wxWRV","title":"CI/CD Compliance","pathname":"/application-security/application-security-posture-management-aspm/compliance-for-cortex-cloud-application-security/cicd-compliance","siteSpaceId":"sitesp_uRgcB","description":"CI/CD compliance ensures adherence to industry standards: CIS GitLab/GitHub and OWASP Top 10.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Compliance for Cortex Cloud Application Security"}]},{"id":"UNbGyghZXuY91YejXo5D","title":"Terraform workflow for Compliance assessments","pathname":"/application-security/application-security-posture-management-aspm/compliance-for-cortex-cloud-application-security/terraform-workflow-for-compliance-assessments","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Compliance for Cortex Cloud Application Security"}]},{"id":"xBdW2g1M70oza3pXGREy","title":"Unified Application Security policies","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies","siteSpaceId":"sitesp_uRgcB","description":"AppSec policies define threat responses by setting conditions, scope, and actions. Use out-of-the-box policies or clone them to create custom ones.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"9PWL4y6VOrEALWRyD4yk","title":"Tenant (UI) workflow","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"}]},{"id":"uCWI6M6HaKAr9ROO0EoG","title":"Create a policy","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/tenant-ui-workflow/create-a-policy","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"Tenant (UI) workflow"}]},{"id":"Gwmn58qz6hyttapewbdI","title":"API workflow","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/api-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"}]},{"id":"fcTREgZZ7NRU2UleyzJ2","title":"Cortex CLI workflow","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/cortex-cli-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"}]},{"id":"082PzetTDgpcPXhX9fYO","title":"IDE workflow","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/ide-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"}]},{"id":"I6N1XYlgpMr02y8Nz9EW","title":"Terraform workflow","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/terraform-workflow-for-policies","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"}]},{"id":"8dXOFoGZDNaKoQvuWIS2","title":"View and manage policy details","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/view-and-manage-policy-details","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"}]},{"id":"XrnxJK9lpiqoEWLTWDV7","title":"References","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"}]},{"id":"PLejcB9ze6SA9X6AMnzS","title":"Reference: Core concepts","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/core-concepts","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"QY3yCPSwa089R5qpCpLq","title":"Reference A: Finding type details","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-a-finding-type-details","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"1zuGyNhlLCitKoMiqQjv","title":"Reference B: Condition filters and logic","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-b-condition-filters-and-logic","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"dLWtaKqS10qyon6rmofb","title":"Reference C: Scope mapping details","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-c-scope-mapping-details","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"9QJ0dCvzormX1xYAceFb","title":"Reference D: Trigger and actions mapping","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-d-trigger-and-actions-mapping","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"Ijbg50xywmlIHG2oPmyk","title":"Reference E: Grace period logic and configuration","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-e-grace-period-logic-and-configuration","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"QUtpeJ335gsrGfn5Adpe","title":"Reference F: Engine evaluation and Urgency logic","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-f-engine-evaluation-and-urgency-logic","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"Y0Aa1LrhyRUt6k72SICE","title":"Reference G: Finding type to trigger mapping","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-g-finding-type-to-trigger-mapping","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"IcTVRBYxIUzMpNOblWQd","title":"Reference H: Action availability by trigger","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-h-action-availability-by-trigger","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"oB2BcvhcRZ1cNABOYNQa","title":"Reference I: Audit logging","pathname":"/application-security/application-security-posture-management-aspm/unified-application-security-policies/references/reference-i-audit-logging","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Unified Application Security policies"},{"label":"References"}]},{"id":"90LP2R0XYxWrLahxdtH9","title":"Application Security Rules","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules","siteSpaceId":"sitesp_uRgcB","description":"AppSec rules detect security threats using predefined criteria based on standard compliance frameworks and best practices. Custom rules are supported.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"NEBz6K4DLj4tBLBsv6lq","title":"Tenant (UI) workflow","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"Manage Application Security rules through the Cortex Cloud tenant.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Application Security Rules"}]},{"id":"B70K3oZsBYGIFfVjZQ6Y","title":"Understand and investigate rules","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules/tenant-ui-workflow/rules-inventory","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Application Security Rules"},{"label":"Tenant (UI) workflow"}]},{"id":"3NILO6uhNPVhy20TFF3i","title":"Create custom Cortex Cloud Application Security rules","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules/tenant-ui-workflow/create-custom-cortex-cloud-application-security-rules","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Application Security Rules"},{"label":"Tenant (UI) workflow"}]},{"id":"WfRP8Cz6cqiueHWehhNO","title":"Configure YAML file properties","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules/tenant-ui-workflow/create-custom-cortex-cloud-application-security-rules/configure-yaml-file-properties","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Application Security Rules"},{"label":"Tenant (UI) workflow"},{"label":"Create custom Cortex Cloud Application Security rules"}]},{"id":"DFQ8gScSAp8yxfLhpT4W","title":"API workflows for rules","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules/api-workflows-for-rules","siteSpaceId":"sitesp_uRgcB","description":"Manage Application Security rule definitions through the public API.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Application Security Rules"}]},{"id":"o6NnFHgEz7dBF4CNfGxz","title":"Terraform workflows for rules","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules/terraform-workflows-for-rules","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Application Security Rules"}]},{"id":"bQwuOc5twOq1fr7zhXhc","title":"Manage custom rules","pathname":"/application-security/application-security-posture-management-aspm/application-security-rules/manage-custom-rules","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Application Security Rules"}]},{"id":"onk4KKcUhIm1iPrunfaF","title":"Manage SAST code weakness issues","pathname":"/application-security/application-security-posture-management-aspm/manage-code-weakness-issues","siteSpaceId":"sitesp_uRgcB","description":"Ingest third-party SAST findings to create actionable issues, enabling you to prioritize and track remediation and enhancing your security posture.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"1oJNdbuG4aoubt8uTESP","title":"Navigate to SAST code weakness issues","pathname":"/application-security/application-security-posture-management-aspm/manage-code-weakness-issues/navigate-to-sast-code-weakness-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Manage SAST code weakness issues"}]},{"id":"FIadh1NKBSd5ZpB9H6ws","title":"Understand the Code Weaknesses table","pathname":"/application-security/application-security-posture-management-aspm/manage-code-weakness-issues/understand-the-code-weaknesses-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Manage SAST code weakness issues"}]},{"id":"iyABY6mKweyNs3PjmD4B","title":"Investigate and remediate code weakness issues","pathname":"/application-security/application-security-posture-management-aspm/manage-code-weakness-issues/investigate-and-remediate-code-weakness-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Manage SAST code weakness issues"}]},{"id":"OrzHZydOZVX9BNK0W754","title":"Code weakness findings","pathname":"/application-security/application-security-posture-management-aspm/manage-code-weakness-issues/code-weakness-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"},{"label":"Manage SAST code weakness issues"}]},{"id":"K7SAxvij1g0Gcw0CnJ5M","title":"Manage the third-party data lifecycle","pathname":"/application-security/application-security-posture-management-aspm/manage-the-third-party-data-lifecycle","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Application Security Posture Management (ASPM)"}]},{"id":"PYSP0t9OgOYSuvpYaT6A","title":"Software Supply Chain Security","pathname":"/application-security/software-supply-chain-security/software-supply-chain-security","siteSpaceId":"sitesp_uRgcB","description":"Software supply chain security protects the integrity and trustworthiness of all components, tools, and processes across the SDLC to proactively prevent risk.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"}]},{"id":"YPqdGcbbPxUnTIuH6jFd","title":"Supply Chain Attacks","pathname":"/application-security/software-supply-chain-security/supply-chain-attacks","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"}]},{"id":"QXPksYL1XkL90ANoOk4Z","title":"Tenant (UI) workflow","pathname":"/application-security/software-supply-chain-security/supply-chain-attacks/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Supply Chain Attacks"}]},{"id":"y4CxHbExaZmBR2qTYAPM","title":"CLI workflow","pathname":"/application-security/software-supply-chain-security/supply-chain-attacks/cli-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Supply Chain Attacks"}]},{"id":"Dd0eOqKFQECn1BZoGVBS","title":"Referenecs","pathname":"/application-security/software-supply-chain-security/supply-chain-attacks/referenecs","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Supply Chain Attacks"}]},{"id":"qxI9DEb2S1cAQKFRutUH","title":"Reference A: Supply Chain Attacks filters","pathname":"/application-security/software-supply-chain-security/supply-chain-attacks/referenecs/reference-a-supply-chain-attacks-filters","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Supply Chain Attacks"},{"label":"Referenecs"}]},{"id":"jUFP1ex78z9Rc3qNcKpq","title":"Reference B: Exposure determination matrix","pathname":"/application-security/software-supply-chain-security/supply-chain-attacks/referenecs/reference-b-exposure-determination-matrix","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Supply Chain Attacks"},{"label":"Referenecs"}]},{"id":"Q3TqEkaTSuXexQTKBVub","title":"Reference C: Attack catalog and data freshness","pathname":"/application-security/software-supply-chain-security/supply-chain-attacks/referenecs/reference-c-attack-catalog-and-data-freshness","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Supply Chain Attacks"},{"label":"Referenecs"}]},{"id":"Wtu0bYdDogkK0Dfj99nl","title":"Visibililty and inventory","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"}]},{"id":"A9KhSiuUPzdNN1NJaiGI","title":"Supply Chain assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets","siteSpaceId":"sitesp_uRgcB","description":"Manage software supply chain assets like VCS organizations, code identities, and CI/CD pipelines to gain deep visibility and remediate risks directly.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"}]},{"id":"3x8MlWTqUeHXhOsDfkKc","title":"VCS organization assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/vcs-organization-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"6vacrK7eRoVHvMRimG78","title":"Understand and prioritize VCS organization assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/vcs-organization-assets/understand-and-prioritize-vcs-organization-assets","siteSpaceId":"sitesp_uRgcB","description":"Access, review, filter, and prioritize VCS organization assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"VCS organization assets"}]},{"id":"4RiKvH4zO7aQdyOsYvRN","title":"Investigate and manage VCS organization assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/vcs-organization-assets/investigate-and-manage-vcs-organization-assets","siteSpaceId":"sitesp_uRgcB","description":"Investigate VCS organization security posture, remediate issues, and manage asset data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"VCS organization assets"}]},{"id":"WsGkz5IsCdsVKvt44NCM","title":"VCS collaborators as assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/vcs-collaborators-as-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"4HNE0zbVYJ1vB8Oq0fGT","title":"Repository as an asset","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/repository-as-an-asset","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"UFGPT38wdJG4n3vCQcM5","title":"Manage repository assets through the tenant (UI)","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/repository-as-an-asset/manage-repository-assets-through-the-tenant-ui","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Repository as an asset"}]},{"id":"mgVcEDi7yWz0YiBhywjK","title":"Investigate repository assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/repository-as-an-asset/manage-repository-assets-through-the-tenant-ui/investigate-repository-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Repository as an asset"},{"label":"Manage repository assets through the tenant (UI)"}]},{"id":"CZBEmCeJZnbJhgoIb5jx","title":"Reference: Repositories asset attributes","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/repository-as-an-asset/manage-repository-assets-through-the-tenant-ui/reference-repositories-asset-attributes","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Repository as an asset"},{"label":"Manage repository assets through the tenant (UI)"}]},{"id":"lvOr6BFlFNdk5TA2NdKs","title":"Manage repositories via API","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/repository-as-an-asset/manage-repositories-via-api","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Repository as an asset"}]},{"id":"iKoOFmo3xRETsTRkBGuA","title":"Technologies as assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/technologies-as-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"PnAjWliaSl99LSU09QAt","title":"Troubleshoot repository technology detection","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/technologies-as-assets/troubleshoot-repository-technology-detection","siteSpaceId":"sitesp_uRgcB","description":"Resolve technology detection issues and review common questions.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Technologies as assets"}]},{"id":"f1dgePEYqjkO1qhATcLg","title":"Software packages as assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/software-packages-as-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"bDofLImMzWcTH9N6C6bT","title":"Understand software package assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/software-packages-as-assets/understand-software-package-assets","siteSpaceId":"sitesp_uRgcB","description":"Access, filter, investigate, and manage software package assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Software packages as assets"}]},{"id":"tsehOM46xuMVif9mJY7Z","title":"Investigate software package assets and security issues","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/software-packages-as-assets/investigate-software-package-assets-and-security-issues","siteSpaceId":"sitesp_uRgcB","description":"Investigate dependency context and remediate software package security issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Software packages as assets"}]},{"id":"hPvMIg8U3yndjMNaGkLL","title":"CI/CD instance as an asset","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-instance-as-an-asset","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"FhmgaWWJOacs9SKl2B1N","title":"Understand and prioritize CI/CD instance assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-instance-as-an-asset/understand-and-prioritize-ci-cd-instance-assets","siteSpaceId":"sitesp_uRgcB","description":"Access, review, filter, and prioritize CI/CD instance assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"CI/CD instance as an asset"}]},{"id":"TNgmYT0BCsmAXn9WzgPF","title":"Investigate and manage CI/CD instance assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-instance-as-an-asset/investigate-and-manage-ci-cd-instance-assets","siteSpaceId":"sitesp_uRgcB","description":"Investigate CI/CD instance security posture, remediate issues, and manage asset data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"CI/CD instance as an asset"}]},{"id":"xWhn5GoiV6uoRPrvRjpb","title":"CI/CD pipeline as an asset","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-pipeline-as-an-asset","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"IAawaxERouTvC163DVev","title":"Understand and prioritize CI/CD pipeline assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-pipeline-as-an-asset/understand-and-prioritize-ci-cd-pipeline-assets","siteSpaceId":"sitesp_uRgcB","description":"Access, review, filter, and prioritize CI/CD pipeline assets.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"CI/CD pipeline as an asset"}]},{"id":"2v5LlmUlqbU3nCdkNNN2","title":"Investigate and manage CI/CD pipeline assets","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-pipeline-as-an-asset/investigate-and-manage-ci-cd-pipeline-assets","siteSpaceId":"sitesp_uRgcB","description":"Investigate CI/CD pipeline security posture, remediate issues, and manage asset data.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"CI/CD pipeline as an asset"}]},{"id":"7hD5hxNjJLIyEU3FRDhf","title":"Tools as an asset","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/tools-as-an-asset","siteSpaceId":"sitesp_uRgcB","description":"Supply Chain: Gain full visibility by tracking detected tools in your environment and cross-referencing them against a catalog of Cortex-recognized, trusted technologies.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"}]},{"id":"YBxnSXXBw1BFpJc5grOP","title":"Supply Chain tools","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/tools-as-an-asset/supply-chain-tools","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Tools as an asset"}]},{"id":"9UfcHvRiOCwHCWJNAcUn","title":"Supply Chain catalog","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/tools-as-an-asset/supply-chain-catalog","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Supply Chain assets"},{"label":"Tools as an asset"}]},{"id":"3zWRKGEvbY5XELjxZ8B7","title":"Package Explorer","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"}]},{"id":"FixnTyG5U5nOFGft9z0f","title":"Tenant (UI) workflow","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Package Explorer"}]},{"id":"0rZ4AM1gXTXFfQt72yx5","title":"Agentix package recommendations","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/agentix-package-recommendations","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Package Explorer"}]},{"id":"tsgz1d92llCKWxy9UKLL","title":"API workflow","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/api-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Package Explorer"}]},{"id":"FS1oKmEfzwGgwBFjOIYJ","title":"References","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Package Explorer"}]},{"id":"ccaRVXD3GEo7Bbqln32L","title":"Reference A: Package table columns","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/references/reference-a-package-table-columns","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Package Explorer"},{"label":"References"}]},{"id":"oMmlhO2x2Kv4Sg209UYx","title":"Reference B: Used In table columns","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/references/reference-b-used-in-table-columns","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Package Explorer"},{"label":"References"}]},{"id":"80N7b1IirCN4aKcLlfAo","title":"Artifact Trust Score","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/artifact-trust-score","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"}]},{"id":"aJSpvZUYRAq1vhXB9zit","title":"Tenant (UI) workflow","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/artifact-trust-score/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Artifact Trust Score"}]},{"id":"69k4dVDQE6lkS2qTDLA0","title":"References","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/artifact-trust-score/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Artifact Trust Score"}]},{"id":"kGcS7h4f2rCKwC2VVEm5","title":"Reference A: Trust Level bands","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/artifact-trust-score/references/reference-a-trust-level-bands","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Artifact Trust Score"},{"label":"References"}]},{"id":"4E59jN34llMxwwa0kUzD","title":"Reference B: Supply Chain Security Category values","pathname":"/application-security/software-supply-chain-security/visibililty-and-inventory/artifact-trust-score/references/reference-b-supply-chain-security-category-values","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Visibililty and inventory"},{"label":"Artifact Trust Score"},{"label":"References"}]},{"id":"TbLTVU2FIjCMoCMWe6Z0","title":"Risk and remediation","pathname":"/application-security/software-supply-chain-security/risk-and-remediation","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"}]},{"id":"ik6Mmnm9QFd7yUzuu102","title":"CI/CD Risks","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/cicd-risks","siteSpaceId":"sitesp_uRgcB","description":"CI/CD risks identify vulnerabilities and misconfigurations in pipelines, then prioritize them into actionable issues for efficient remediation.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"}]},{"id":"Azo0lDTelQeTd0L3kxBj","title":"Understand the CI/CD Risks table","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/cicd-risks/understand-the-ci-cd-risks-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"CI/CD Risks"}]},{"id":"3tL7lKk6cRojUr2pX6So","title":"Investigate, prioritize, and remediate CI/CD risk issues","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/cicd-risks/investigate-prioritize-and-remediate-ci-cd-risk-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"CI/CD Risks"}]},{"id":"AzlI0um5RotHbAS3ipqq","title":"View and understand VCS and CI/CD pipeline risk findings","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/cicd-risks/vcs-and-cicd-pipeline-risk-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"CI/CD Risks"}]},{"id":"SQNBxz9aj7nfsRN13WxJ","title":"Malicious packages","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"}]},{"id":"nyhICl4Lk6r0bVfe2LMy","title":"Tenant (UI) workflow","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"nhzZ1qQOhnpIxto7BXkg","title":"API Workflow","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/api-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"HmkXazsczAZ0aos5jMEW","title":"CLI workflow","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/cli-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"NilLQ9Gv7w5CK3oXBi6q","title":"Pull request workflow","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/pull-request-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"ls3bSOok5CBMQLJZURBV","title":"IDE workflow","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/ide-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"JrOCbyXivpUL6rlfJ47o","title":"Reference A: Workflows","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/reference-a-workflows","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"q0eghhs1Ue7PO8jEXQIP","title":"Reference B: RBAC permission levels by capability","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/reference-b-rbac-permission-levels-by-capability","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"YMFORl4bYSTb4iHzUxDt","title":"Reference C: Supported ecosystems","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/reference-c-supported-ecosystems","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"RcpueRJhPQSgEsbQMy5N","title":"Reference D: Malicious package finding and issue fields","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/malicious-packages/reference-d-malicious-package-finding-and-issue-fields","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Malicious packages"}]},{"id":"5jLVvyOF5oZ6ppcWlPbg","title":"Software Composition Analysis (SCA )","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"}]},{"id":"Ls43Gz9azyewvEf7iL22","title":"Supported Software Composition Analysis (SCA) frameworks and languages","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/supported-software-composition-analysis-sca-frameworks-and-languages","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"}]},{"id":"mtBvNraDihI1O6wTzyGz","title":"Software Composition Analysis (SCA) vulnerability issues","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues","siteSpaceId":"sitesp_uRgcB","description":"SCA scanners detect known CVEs in open-source dependencies, protecting your organization by keeping vulnerable third-party code out of production.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"}]},{"id":"lr3oYxYRZgYAWpXRILcU","title":"Understand the Vulnerabilities table","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/understand-the-vulnerabilities-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"DWGyHZ1q2t3vE4stlSmg","title":"Investigate, prioritize and remediate vulnerability issues","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/investigate-prioritize-and-remediate-vulnerability-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"40LU0KkqtnROKGdoDZ7b","title":"View and understand CVE findings","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/view-and-understand-cve-findings","siteSpaceId":"sitesp_uRgcB","description":"Review the findings associated with CVE vulnerability issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"VYjolAddO2N4P2mld7SA","title":"References","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"1DfFlKl9BEO86DQeKBQZ","title":"Reference A: Prioritization metrics","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/references/reference-a-prioritization-metrics","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"},{"label":"Software Composition Analysis (SCA) vulnerability issues"},{"label":"References"}]},{"id":"quEqynbiiGRdoRvtyPfQ","title":"Reference B: Investigation details","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/references/reference-b-investigation-details","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"},{"label":"Software Composition Analysis (SCA) vulnerability issues"},{"label":"References"}]},{"id":"BntEOGXCqv9aSQ9Ys16d","title":"License miscompliance issues","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/license-miscompliance-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"}]},{"id":"GLO2YIr3lEdqInffCMWL","title":"Ingest third-party SCA data","pathname":"/application-security/software-supply-chain-security/risk-and-remediation/software-composition-analysis-sca-scanners/ingest-third-party-sca-data","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Risk and remediation"},{"label":"Software Composition Analysis (SCA )"}]},{"id":"nRrl43Sxk6AROvCgS23v","title":"Governance and enforcement","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"}]},{"id":"iJieqwOJg12Rbszi9mrc","title":"CI/CD Rules","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-rules","siteSpaceId":"sitesp_uRgcB","description":"CI/CD rules detect security threats within your pipelines.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"}]},{"id":"oBGzP0tikm4bMDT0ygUL","title":"CI/CD rules roles and permissions","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-rules/cicd-rules-roles-and-permissions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Rules"}]},{"id":"FkMqbLpQ6GwaubJZK5zb","title":"CI/CD rules inventory","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-rules/cicd-rules-inventory","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Rules"}]},{"id":"j3wG1LdBgGuOkwPRCVCf","title":"CI/CD Policies","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-policies","siteSpaceId":"sitesp_uRgcB","description":"Control CI/CD security: view system & custom policies. Create and manage policies to ensure pipeline integrity and compliance.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"}]},{"id":"6Q5JOL70ajrtrOyXwYo5","title":"CI/CD policies user roles and permissions","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-policies/cicd-policies-user-roles-and-permissions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Policies"}]},{"id":"tdGg22EUR9ZQoBL6wxE9","title":"CI/CD policies inventory","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-policies/cicd-policies-inventory","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Policies"}]},{"id":"6gmRjB5BTO20031ihVYZ","title":"Create CI/CD configuration policies","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-policies/create-cicd-configuration-policies","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Policies"}]},{"id":"J7y27O5XJsb4qJhU8uAh","title":"Manage CI/CD policies","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-policies/manage-cicd-policies","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Policies"}]},{"id":"PTMA5tUYj65D7cYiydXC","title":"Reference A: CI/CD policy Condition attributes","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-policies/reference-a-ci-cd-policy-condition-attributes","siteSpaceId":"sitesp_uRgcB","description":"Supported CI/CD policy condition attributes and values.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Policies"}]},{"id":"ix9wLWu70x6iCvn3EoTk","title":"Reference B: Scope Asset Types","pathname":"/application-security/software-supply-chain-security/governance-and-enforcement/cicd-policies/reference-b-scope-asset-types","siteSpaceId":"sitesp_uRgcB","description":"Supported asset types and values for CI/CD policy scope.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Software supply chain security"},{"label":"Governance and enforcement"},{"label":"CI/CD Policies"}]},{"id":"XsQMbdbbJ5EvhFoC33Jq","title":"About Code security","pathname":"/application-security/code-security/about-code-security","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"dJBehOuq80W3k7Zy8wr7","title":"Code Security assets","pathname":"/application-security/code-security/code-security-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"31QfoUSOq8wg9EXVPPQR","title":"Software packages as assets","pathname":"/application-security/code-security/code-security-assets/software-packages-as-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"}]},{"id":"vIuWUsgBoiamOCoDxHYV","title":"Supported Software Composition Analysis (SCA) frameworks and languages","pathname":"/application-security/code-security/code-security-assets/software-packages-as-assets/supported-software-composition-analysis-sca-frameworks-and-languages","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"},{"label":"Software packages as assets"}]},{"id":"66pSmF5Y0F6mfC0FBwQy","title":"SCA support matrix by language","pathname":"/application-security/code-security/code-security-assets/software-packages-as-assets/supported-software-composition-analysis-sca-frameworks-and-languages/sca-support-matrix-by-language","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"},{"label":"Software packages as assets"},{"label":"Supported Software Composition Analysis (SCA) frameworks and languages"}]},{"id":"lYdeyu80GDDCk7PWwHZU","title":"Understand software package assets","pathname":"/application-security/code-security/code-security-assets/software-packages-as-assets/understanding-software-package-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"},{"label":"Software packages as assets"}]},{"id":"WMecXxKdKN9UvqrI6ZBH","title":"Investigate software package assets and security issues","pathname":"/application-security/code-security/code-security-assets/software-packages-as-assets/investigate-software-package-assets-and-security-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"},{"label":"Software packages as assets"}]},{"id":"DtBQUTnM6qOoevUdXotc","title":"Infrastructure-as-Code (IaC) resources as assets","pathname":"/application-security/code-security/code-security-assets/infrastructure-as-code-iac-resources-as-assets","siteSpaceId":"sitesp_uRgcB","description":"Infrastructure-as-Code (IaC) assets provide a governed inventory of cloud templates, enabling teams to detect misconfigurations and map code-to-cloud lineage.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"}]},{"id":"ka3mMMMx7i7Iy8nsFFOH","title":"Supported frameworks and languages","pathname":"/application-security/code-security/code-security-assets/infrastructure-as-code-iac-resources-as-assets/supported-frameworks-and-languages","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"},{"label":"Infrastructure-as-Code (IaC) resources as assets"}]},{"id":"cu48F0Vaf2siYFIkrkSl","title":"Access and filter IaC assets","pathname":"/application-security/code-security/code-security-assets/infrastructure-as-code-iac-resources-as-assets/access-and-filter-iac-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"},{"label":"Infrastructure-as-Code (IaC) resources as assets"}]},{"id":"R2FiZHeU2MqrGRqteSu2","title":"Investigate IaC assets","pathname":"/application-security/code-security/code-security-assets/infrastructure-as-code-iac-resources-as-assets/investigate-iac-assets","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security assets"},{"label":"Infrastructure-as-Code (IaC) resources as assets"}]},{"id":"8G1FyWtWWYf5iCEri6JV","title":"Code Security scanners","pathname":"/application-security/code-security/code-security-scanners","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"Ku3EfAj0bs7Uq8bRmebf","title":"Software Composition Analysis (SCA ) scanners","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"}]},{"id":"Ks9C31V9znMcNL1PpFcz","title":"Supported Software Composition Analysis (SCA) frameworks and languages","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/supported-software-composition-analysis-sca-frameworks-and-languages","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"}]},{"id":"aXPwtXFZXezWyP3odBDX","title":"Software Composition Analysis (SCA) vulnerability issues","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues","siteSpaceId":"sitesp_uRgcB","description":"SCA scanners detect known CVEs in open-source dependencies, protecting your organization by keeping vulnerable third-party code out of production.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"}]},{"id":"6w6KFK9szD4I5XjVPh7K","title":"Understand the Vulnerabilities table","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/understand-the-vulnerabilities-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"3DZBNeoyoHxQkXanR7ZE","title":"Investigate, prioritize and remediate vulnerability issues","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/investigate-and-remediate-cve-vulnerability-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"r0tvfYI8sOsKvlPKegd2","title":"View and understand CVE findings","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/investigate-cve-vulnerabilities-findings","siteSpaceId":"sitesp_uRgcB","description":"Review the findings associated with CVE vulnerability issues.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"eG3Eb68p3gRaeBqVTt81","title":"References","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/navigate-to-cve-vulnerability-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Software Composition Analysis (SCA) vulnerability issues"}]},{"id":"mCteR9grDmUJETyKX6oS","title":"Reference A: Prioritization metrics","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/navigate-to-cve-vulnerability-issues/reference-a-prioritization-metrics","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Software Composition Analysis (SCA) vulnerability issues"},{"label":"References"}]},{"id":"IlYOytR6cvtAUkzsaYBW","title":"Reference B: Investigation details","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/software-composition-analysis-sca-vulnerability-issues/navigate-to-cve-vulnerability-issues/reference-b-investigation-details","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Software Composition Analysis (SCA) vulnerability issues"},{"label":"References"}]},{"id":"zLs6uKGxmF05MUf5FOVy","title":"License miscompliance issues","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/license-miscompliance-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"}]},{"id":"Gqnv0ZVS2z7BWIYC6acH","title":"Understand the Licenses misconfigurations table","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/license-miscompliance-issues/understand-the-licenses-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"License miscompliance issues"}]},{"id":"vMJkWKWawuDwt5opCEhC","title":"Investigate, prioritize, and remediate license miscompliance issues","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/license-miscompliance-issues/navigate-to-license-miscompliance-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"License miscompliance issues"}]},{"id":"V7ceBdpo1gstZRnXnx44","title":"Understand license micompliance findings","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/license-miscompliance-issues/understand-license-micompliance-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"License miscompliance issues"}]},{"id":"FaUy7s6m1SZ3m3fUvL0I","title":"Open-source software license categories","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/license-miscompliance-issues/open-source-software-license-categories","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"License miscompliance issues"}]},{"id":"s6w2kvrFZl6Aww0MP5xk","title":"Package operational risks","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"}]},{"id":"8B1NgZaArkm0VKvMhT1Y","title":"Understand the package operational risk table","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/understand-the-package-operational-risk-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"}]},{"id":"CPblBlLipiUrThbfEKoY","title":"Investigate, prioritize and remediate package operational risk issues","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/investigate-and-remediate-package-operational-risk-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"}]},{"id":"HOS3037O7PMhGr2uOmfy","title":"Understand package operational risk findings","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/understand-package-operational-risk-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"}]},{"id":"76ATAqnXpwMKxpg9xK0A","title":"Package operational risks findings reference","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/understand-package-operational-risk-findings/package-operational-risks-findings-reference","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"},{"label":"Understand package operational risk findings"}]},{"id":"4mpL9isfzqFbXxUAHOd4","title":"Reference A: Findings tab columns","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/understand-package-operational-risk-findings/package-operational-risks-findings-reference/reference-a-findings-tab-columns","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"},{"label":"Understand package operational risk findings"},{"label":"Package operational risks findings reference"}]},{"id":"DVT6Z0H3hxULga3cvwVH","title":"Reference B: Finding side panel fields","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/understand-package-operational-risk-findings/package-operational-risks-findings-reference/reference-b-finding-side-panel-fields","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"},{"label":"Understand package operational risk findings"},{"label":"Package operational risks findings reference"}]},{"id":"RgI4XVmRQznRUOwtjuco","title":"Reference C: Operational risk finding field model","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/understand-package-operational-risk-findings/package-operational-risks-findings-reference/reference-c-operational-risk-finding-field-model","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"},{"label":"Understand package operational risk findings"},{"label":"Package operational risks findings reference"}]},{"id":"BDUum96moMoTsEXNGbgH","title":"Reference: How package operational risk issues fit in the Application Security ecosystem","pathname":"/application-security/code-security/code-security-scanners/software-composition-analysis-sca-scanners/package-operational-risk-scanner/how-package-operational-risk-issues-fit-in-the-application-security-ecosystem","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Software Composition Analysis (SCA ) scanners"},{"label":"Package operational risks"}]},{"id":"RmcBJP2qMkd2nR3wMbqd","title":"Secrets scans","pathname":"/application-security/code-security/code-security-scanners/secrets-scans","siteSpaceId":"sitesp_uRgcB","description":"Protect your organization by detecting hardcoded credentials, API keys, and tokens in source code. Secrets scanning prevents credential theft and lateral movement by closing security gaps from develop","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"}]},{"id":"yeRbR4ZmqRmjaaQAslfx","title":"Understand the secrets issues table","pathname":"/application-security/code-security/code-security-scanners/secrets-scans/understand-the-secrets-issues-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Secrets scans"}]},{"id":"1B4oB8mC6B7X5pY7cJcQ","title":"Investigate, prioritize, and remediate secrets issues","pathname":"/application-security/code-security/code-security-scanners/secrets-scans/investigate-and-remediate-secrets-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Secrets scans"}]},{"id":"WYP7pEPMfa0g794UQca0","title":"Secrets findings","pathname":"/application-security/code-security/code-security-scanners/secrets-scans/secrets-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Secrets scans"}]},{"id":"pv99ZRB9yTMHIP3qJ3Xy","title":"Secrets findings inventory","pathname":"/application-security/code-security/code-security-scanners/secrets-scans/secrets-findings/secrets-findings-inventory","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Secrets scans"},{"label":"Secrets findings"}]},{"id":"sXOSn8OkPRbvBIdDh1vd","title":"Infrastructure as Code (IaC) misconfiguration scanner","pathname":"/application-security/code-security/code-security-scanners/infrastructure-as-code-iac-misconfiguration-scanner","siteSpaceId":"sitesp_uRgcB","description":"IaC scanners safeguard cloud infrastructure by identifying misconfigurations before deployment, preventing vulnerabilities in your operational environment.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"}]},{"id":"LfZZnHtzpqqJrTwrHrPl","title":"Understand the IaC misconfigurations table","pathname":"/application-security/code-security/code-security-scanners/infrastructure-as-code-iac-misconfiguration-scanner/understand-the-iac-misconfigurations-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Infrastructure as Code (IaC) misconfiguration scanner"}]},{"id":"Yt6svQCJjIcnID0IgZhk","title":"Investigate, prioritize, and remediate IaC misconfiguration issues","pathname":"/application-security/code-security/code-security-scanners/infrastructure-as-code-iac-misconfiguration-scanner/investigate-and-remediate-iac-misconfiguration-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Infrastructure as Code (IaC) misconfiguration scanner"}]},{"id":"D3p4dKCBqEMscaU8srOI","title":"IaC misconfiguration findings","pathname":"/application-security/code-security/code-security-scanners/infrastructure-as-code-iac-misconfiguration-scanner/iac-misconfiguration-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Infrastructure as Code (IaC) misconfiguration scanner"}]},{"id":"25V17OWa0j0fGlqwtIH7","title":"Supported frameworks and languages","pathname":"/application-security/code-security/code-security-scanners/infrastructure-as-code-iac-misconfiguration-scanner/supported-frameworks-and-languages","siteSpaceId":"sitesp_uRgcB","description":"Supported infrastructure-as-code frameworks for IaC misconfiguration scanning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Infrastructure as Code (IaC) misconfiguration scanner"}]},{"id":"mWZihFcTYoLnxSKEOUBg","title":"IaC Drift Detection scans","pathname":"/application-security/code-security/code-security-scanners/iac-drift-detection-scans","siteSpaceId":"sitesp_uRgcB","description":"IaC Drift Detection identifies runtime configurations that diverge from code. It flags security-critical discrepancies to focus remediation efforts.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"}]},{"id":"rfdQUsU7k6pju33VWWXp","title":"Understand the IaC drift detection table","pathname":"/application-security/code-security/code-security-scanners/iac-drift-detection-scans/understand-the-iac-drift-detection-table","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"IaC Drift Detection scans"}]},{"id":"yDNLHYMWyVadyPsrHXf5","title":"Investigate, prioritize and remediate IaC drift issues","pathname":"/application-security/code-security/code-security-scanners/iac-drift-detection-scans/investigate-and-remediate-iac-drift-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"IaC Drift Detection scans"}]},{"id":"eYafolI3Hv9a76zXh0xN","title":"Investigate IaC drift detection findings","pathname":"/application-security/code-security/code-security-scanners/iac-drift-detection-scans/investigate-iac-drift-detection-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"IaC Drift Detection scans"}]},{"id":"nLj0uz7WVrwwaHZI0Qm9","title":"Malicious packages","pathname":"/application-security/code-security/code-security-scanners/malicious-packages","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"}]},{"id":"Bf1YHKVNJ6q1cpoUcGET","title":"Tenant (UI) workflow","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/tenant-ui-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"xsfenBfFJlKmq7wi2cGf","title":"API Workflow","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/api-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"7lzmZ27ogWEfhyIAnKla","title":"CLI workflow","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/cli-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"l9FXSJCSbA6pBduzKiQz","title":"Pull request workflow","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/pull-request-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"ZieUgwxfpwd0LjrQb4dh","title":"IDE workflow","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/ide-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"V2JEge6nqZNBhG8m3SNp","title":"Reference A: Workflows","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/reference-a-workflows","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"fA4QLo99SvJMiVkseEQl","title":"Reference B: RBAC permission levels by capability","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/reference-b-rbac-permission-levels-by-capability","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"VOLzjiuIZ6dl5Vv68MQM","title":"Reference C: Supported ecosystems","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/reference-c-supported-ecosystems","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"FV4h1NnEnfklGUB7YBDF","title":"Reference D: Malicious package finding and issue fields","pathname":"/application-security/code-security/code-security-scanners/malicious-packages/reference-d-malicious-package-finding-and-issue-fields","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"},{"label":"Malicious packages"}]},{"id":"kYyvdM4K1Xuj4bCEalvr","title":"Issue table attributes reference","pathname":"/application-security/code-security/code-security-scanners/issue-table-attributes-reference","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Code Security scanners"}]},{"id":"Qez2uDCwm5xERfYdt6Iy","title":"API workflows for Code Security issues","pathname":"/application-security/code-security/api-workflows-for-code-security-issues","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"lcSUBsvCM5JjmxnOLB7s","title":"Manage Application Security scans","pathname":"/application-security/code-security/application-security-scans-management","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"zfdaDkQXWHd12UAOx6H1","title":"Manage scans through the tenant (UI)","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"}]},{"id":"kb2clXIevqcJQOkz5VVo","title":"Branch periodic scans","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"}]},{"id":"sDS0CMjzw7kvN2k62Yyp","title":"Branch periodic scan workflow","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/branch-periodic-scan-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"}]},{"id":"gNH9skqHgmVijMgOkF2y","title":"Configure repository scan coverage","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/branch-periodic-scan-workflow/configure-repository-scan-coverage","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"Branch periodic scan workflow"}]},{"id":"VXqwiiNNm4l8vbGm02pe","title":"Assess scan coverage and health across the portfolio","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/branch-periodic-scan-workflow/assess-scan-coverage-and-health-across-the-portfolio","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"Branch periodic scan workflow"}]},{"id":"gPCF8Ip8YhoHX1WZfzoO","title":"Investigate a scan result, prioritize the issues, and remediate","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/branch-periodic-scan-workflow/investigate-a-scan-result-prioritize-the-issues-and-remediate","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"Branch periodic scan workflow"}]},{"id":"JDuLAhLrx3VcPNwMw0xq","title":"Triage a scan that failed or completed partially","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/branch-periodic-scan-workflow/triage-a-scan-that-failed-or-completed-partially","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"Branch periodic scan workflow"}]},{"id":"qXnFWnJGm8vB8hXQ47Lc","title":"Diagnose a scan failure through data source instance health","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/branch-periodic-scan-workflow/diagnose-a-scan-failure-through-data-source-instance-health","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"Branch periodic scan workflow"}]},{"id":"yrqfNYcPQm4rPxrWcqsa","title":"References","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"}]},{"id":"s7hW2TDVn1OUUqHYrKhS","title":"Reference A: Branch periodic scan concepts","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-a-branch-periodic-scan-concepts","siteSpaceId":"sitesp_uRgcB","description":"Detailed concepts for interpreting branch periodic scans.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"GaSaX8p8lTisKT2gFTlP","title":"Reference B: Inventory columns","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-b-inventory-columns","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"RKxTUmOncg1UKsHf63rf","title":"Reference C: Scan health values","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-c-scan-health-values","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"qOoCQp5fNVjpq5rXLHLy","title":"Reference D: Issue category routing","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-d-issue-category-routing","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"4zA455SrtP6ZK1qQFLcF","title":"Reference E: Instance health error types","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-e-instance-health-error-types","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"2HYnT6ImRiAF9BMOPJCU","title":"Reference F: Scan configuration settings","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-f-scan-configuration-settings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"EjhDmDoZGi2vYLqbNJDv","title":"Reference G: Scanner to issue category mapping","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-g-scanner-to-issue-category-mapping","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"GLB9giiVyc0EpZH8Ck7u","title":"Reference H: Permissions","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/branch-periodic-scans/references/reference-h-permissions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Branch periodic scans"},{"label":"References"}]},{"id":"j37UPIhAHGbOTmhzRAnz","title":"Pull Request scans","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"}]},{"id":"hyNoGXUEpfam35K97lk6","title":"Pull request scan workflow","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/pull-request-scan-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"}]},{"id":"svjkUxuJj0ZxmKOzyKSg","title":"References","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"}]},{"id":"nHNDX4WvMy40e7WiVUFv","title":"Reference A: Pull request scan concepts","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-a-pull-request-scan-concepts","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"4uSvAP4TyQ5RBymZNkAJ","title":"Reference B: Inventory columns","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-b-inventory-columns","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"hjVEBMdLju4BTsAwnF7E","title":"Reference C: Scan health values","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-c-scan-health-values","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"khh2af3ZiC9icU543G7q","title":"Reference D: PR status values","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-d-pr-status-values","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"fGUfJBfe19OoAqkIksK1","title":"Reference E: Issue category routing","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-e-issue-category-routing","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"lqd8658cqqUmQjCzrr8S","title":"Reference F: Pull request scan configuration settings","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-f-pull-request-scan-configuration-settings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"oYRbX6EZK7xsmKu7tNA7","title":"Reference G: Scanner to issue category mapping","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-g-scanner-to-issue-category-mapping","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"B09l1YU05mFkpOVt5zSe","title":"Reference H: Pull request comment feedback","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-h-pull-request-comment-feedback","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"g7jqQOHA6UfY4SKe4Za1","title":"Reference I: Permissions","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/pull-request-scans/references/reference-i-permissions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Pull Request scans"},{"label":"References"}]},{"id":"HpaVVT8IpE5zp6yLjrr3","title":"CI scans","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"}]},{"id":"ajPmrsr5oFeAJKycQqI2","title":"CI scan workflow","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/ci-scan-workflow","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"}]},{"id":"rXjwgjonxqXynRCxjwL9","title":"References","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"}]},{"id":"3iTBGYWPOz5ggDSEWEbv","title":"Reference A: CI scan concepts","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-a-ci-scan-concepts","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"yb9cuPtSCKZrCjo1M7sH","title":"Reference B: Inventory columns","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-b-inventory-columns","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"ATvGIil77nNsMdvBJbIZ","title":"Reference C: Scan health values","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-c-scan-health-values","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"At0ne8gAbLRlOfIlafkh","title":"Reference D: CI status values","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-d-ci-status-values","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"VZQqBr0gXM1T4XOnKnvG","title":"Reference E: Issue category routing","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-e-issue-category-routing","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"I8XB1Z5Ix71A1sFycelF","title":"Reference F: CI scan sources","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-f-ci-scan-sources","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"ea61N7X0hbIa8dU13GWm","title":"Reference G: Scanner to issue category mapping","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-g-scanner-to-issue-category-mapping","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"0Qmaba5neMXohrYt8bGe","title":"Reference H: Permissions","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/ci-scans/references/reference-h-permissions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"CI scans"},{"label":"References"}]},{"id":"Kw05JZXxfSlASKpDww94","title":"Scan health and status reference","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/scan-health-and-status-reference","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"}]},{"id":"WIiPMA4YfcJOzrhpdoiE","title":"Manage repository scan configurations","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/manage-repository-scan-configurations","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"}]},{"id":"BRZToXv7vKRAJPLD11YB","title":"Monitor data source instances health","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/monitor-data-source-instances-health","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"}]},{"id":"Yq9QrDSM517LrDgmCuY3","title":"How to view an instance health","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-the-tenant-ui/monitor-data-source-instances-health/how-to-view-an-instance-health","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through the tenant (UI)"},{"label":"Monitor data source instances health"}]},{"id":"cNjIU8rcer1vAzLa8P2x","title":"Manage scans through public APIs","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-public-apis","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"}]},{"id":"yWjbOdsKRgGgARAiyGRG","title":"Prerequisites","pathname":"/application-security/code-security/application-security-scans-management/manage-scans-through-public-apis/prerequisites","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"Manage Application Security scans"},{"label":"Manage scans through public APIs"}]},{"id":"SWMeZDbC3LkAp0tAjgww","title":"Application Security Cortex CLI","pathname":"/application-security/code-security/application-security-cli","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"VrYz91GUsK5ST0aQIlwF","title":"IDE","pathname":"/application-security/code-security/ide","siteSpaceId":"sitesp_uRgcB","description":"Integrating the AppSec IDE security plugin to scan for IaC misconfigurations, SCA vulnerabilities, license miscompliance and exposed secrets while coding, with in-IDE fixes.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"Bu2OvVKqPn8EMVgFv68W","title":"System requirements","pathname":"/application-security/code-security/ide/system-requirements","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"IDE"}]},{"id":"LeCFTgDSaFexdSCGsHvQ","title":"Visual Studio (VS) Code and VS Code compatible IDEs","pathname":"/application-security/code-security/ide/visual-studio-vs-code-and-vs-code-compatible-ides","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"IDE"}]},{"id":"hlucZzXnovFGojdEfuyZ","title":"How to use the Cortex Cloud extension","pathname":"/application-security/code-security/ide/visual-studio-vs-code-and-vs-code-compatible-ides/how-to-use-the-cortex-cloud-extension-in-vs-code","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"IDE"},{"label":"Visual Studio (VS) Code and VS Code compatible IDEs"}]},{"id":"gzkFIJ4VW0qvtcFiHLGI","title":"JetBrains","pathname":"/application-security/code-security/ide/jetbrains","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"IDE"}]},{"id":"q4bdZNiO9m9BOGNLLnuK","title":"How to use the JetBrains Cortex Cloud extension","pathname":"/application-security/code-security/ide/jetbrains/how-to-use-the-jetbrains-cortex-cloud-extension","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"},{"label":"IDE"},{"label":"JetBrains"}]},{"id":"s18Qx2k44dtp71WawHmK","title":"Developer suppressions","pathname":"/application-security/code-security/developer-suppressions","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"IxlSEx6mgKFfrrkF8Fmy","title":"Pre-commit hooks","pathname":"/application-security/code-security/pre-commit-hooks","siteSpaceId":"sitesp_uRgcB","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"GWZFiw6Y0MWIxFFplwdD","title":"Pre-receive hooks","pathname":"/application-security/code-security/pre-receive-hooks","siteSpaceId":"sitesp_uRgcB","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Code Security","icon":"code"}]},{"id":"5H0t0Kw9wsCyRgQh56fo","title":"About API endpoints","pathname":"/application-security/api-endpoints/api-endpoints","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"mnVqJ9EMGAjL4WT5vgqe","title":"Data source integrations","pathname":"/application-security/api-endpoints/data-source-integrations","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"oltOJDFhd1oQvFc0vZjU","title":"Unified Application Security policies","pathname":"/application-security/api-endpoints/unified-application-security-policies","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"kGro83w3ef8UA8ghpmuE","title":"Application criteria","pathname":"/application-security/api-endpoints/application-criteria","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"jqCNikGT9TkrJKDSJfXi","title":"Manage applications","pathname":"/application-security/api-endpoints/manage-applications","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"AnGVX6br2p1JRrCB5sHO","title":"Repositories and scan configurations","pathname":"/application-security/api-endpoints/repositories-and-scan-configurations","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"kagx9AnEr0yD5jcYFG3Z","title":"Business applications","pathname":"/application-security/api-endpoints/business-applications","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"0wjCnDvhE3Jn1KDevVPn","title":"Scans, issues, and findings","pathname":"/application-security/api-endpoints/scans-issues-and-findings","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"API endpoints"}]},{"id":"K0V4jbPpfzR6QliwZ3jv","title":"About Terraform workflows","pathname":"/application-security/terraform-workflows/terraform-workflows","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"}]},{"id":"26BtEqpveOFbCllJVlSk","title":"Authentication and configuration","pathname":"/application-security/terraform-workflows/authentication-and-configuration","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"}]},{"id":"d5q77ppGG7ACz9O9xXVH","title":"Manage resources","pathname":"/application-security/terraform-workflows/manage-resources","siteSpaceId":"sitesp_uRgcB","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"}]},{"id":"0bzwWLGtbgypMKKhrjyM","title":"Manage Asset Groups","pathname":"/application-security/terraform-workflows/manage-resources/manage-asset-groups","siteSpaceId":"sitesp_uRgcB","description":"Manage Application Security asset groups with Terraform.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"},{"label":"Manage resources"}]},{"id":"eOk0zHFMOR62fx78EIF7","title":"Manage Terraform Run Tasks enforcement","pathname":"/application-security/terraform-workflows/manage-resources/manage-terraform-run-tasks-enforcement","siteSpaceId":"sitesp_uRgcB","description":"Enforce Application Security guardrails during Terraform planning.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"},{"label":"Manage resources"}]},{"id":"t6xQXMspXPJDTEc8uXBK","title":"Manage policies","pathname":"/application-security/terraform-workflows/manage-resources/manage-policies","siteSpaceId":"sitesp_uRgcB","description":"Manage Application Security policies, rules, and compliance profiles with Terraform.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"},{"label":"Manage resources"}]},{"id":"RV3mQhDcMJH8QtTR3LC7","title":"Manage custom rules","pathname":"/application-security/terraform-workflows/manage-resources/manage-custom-rules","siteSpaceId":"sitesp_uRgcB","description":"Manage custom Application Security detection rules with Terraform.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"},{"label":"Manage resources"}]},{"id":"YVrVclps2bEBT5bmcK82","title":"Manage compliance assessment profiles","pathname":"/application-security/terraform-workflows/manage-resources/manage-compliance-assessment-profiles","siteSpaceId":"sitesp_uRgcB","description":"Automate Application Security compliance assessments with Terraform.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"},{"label":"Manage resources"}]},{"id":"iw3hP7ogEDAzUudKFdRG","title":"Leverage Terraform data sources","pathname":"/application-security/terraform-workflows/manage-resources/leverage-terraform-data-sources","siteSpaceId":"sitesp_uRgcB","description":"Look up Application Security configuration with Terraform data sources.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Application Security","icon":"cloud"},{"label":"Terraform workflows"},{"label":"Manage resources"}]},{"id":"ef95OzrfqtI63RRcirG9","title":"Navigate the Cortex AgentiX docs","pathname":"/cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Start here for a visual overview of the main Cortex AgentiX documentation areas.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"6E4ZGxTOkmE3ckimjjs4","title":"Get Started with Cortex AgentiX","pathname":"/cortex-agentix/learn-about-cortex-agentix/get-started-with-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Learn about Cortex AgentiX and the key integrated capabilities.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"FWr5Ejd0zFYJZ2GhYy8i","title":"Understand Cortex AgentiX licenses","pathname":"/cortex-agentix/learn-about-cortex-agentix/understand-cortex-agentix-licenses","siteSpaceId":"sitesp_RfNNx","description":"The Cortex AgentiX license is downloaded from Cortex Gateway and determines which components users can use and how many users can access the tenant.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"A4cv25wzG8sOvAuL9pbM","title":"Agentic AI in Cortex AgentiX","pathname":"/cortex-agentix/learn-about-cortex-agentix/agentic-ai-in-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Use AI agents to investigate threats, automate security tasks, and streamline operations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"6DSNdeP3e3XOKDsKl4Px","title":"Manage Cortex AgentiX agents","pathname":"/cortex-agentix/learn-about-cortex-agentix/agentic-ai-in-cortex-agentix/manage-cortex-agentix-agents","siteSpaceId":"sitesp_RfNNx","description":"Learn about personal and system agents in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"},{"label":"Agentic AI in Cortex AgentiX"}]},{"id":"nnilxVniV9syrHG5fnZE","title":"Cortex AgentiX use cases","pathname":"/cortex-agentix/learn-about-cortex-agentix/agentic-ai-in-cortex-agentix/cortex-agentix-use-cases","siteSpaceId":"sitesp_RfNNx","description":"Recommended prompts to automate your SOC in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"},{"label":"Agentic AI in Cortex AgentiX"}]},{"id":"a7zceR5DOYKfnwLTD8je","title":"Agentic Assistant security","pathname":"/cortex-agentix/learn-about-cortex-agentix/agentic-ai-in-cortex-agentix/agentic-assistant-security","siteSpaceId":"sitesp_RfNNx","description":"Learn how the Agentic Assistant protects data through RBAC, approvals, regional processing, and action auditing in Cortex AgentiX,","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"},{"label":"Agentic AI in Cortex AgentiX"}]},{"id":"vG9LkMBTSKXkwNNMrOZW","title":"Best practices for using Agentic AI in Cortex Agentix","pathname":"/cortex-agentix/learn-about-cortex-agentix/agentic-ai-in-cortex-agentix/best-practices-for-using-agentic-ai-in-cortex-agentix","siteSpaceId":"sitesp_RfNNx","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"},{"label":"Agentic AI in Cortex AgentiX"}]},{"id":"Xg3uRBJ0KLi7Q7IwTqFe","title":"Key components and concepts","pathname":"/cortex-agentix/learn-about-cortex-agentix/key-components-and-concepts","siteSpaceId":"sitesp_RfNNx","description":"Learn about the key components and concepts, such as agents and actions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"QUg1KlgccmeGx6vqIrcY","title":"Data retention policy","pathname":"/cortex-agentix/learn-about-cortex-agentix/data-retention-policy","siteSpaceId":"sitesp_RfNNx","description":"Learn more about the default retention periods for all Cortex AgentiX licenses and the available retention add-ons.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"B3i2DnQ9HpHZBpUkNst8","title":"Supported ciphers","pathname":"/cortex-agentix/learn-about-cortex-agentix/supported-ciphers","siteSpaceId":"sitesp_RfNNx","description":"Review the TLS 1.2 and TLS 1.3 cipher suites supported by Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"aDEAmuGcpRR25zEgjdSg","title":"Supported web browsers","pathname":"/cortex-agentix/learn-about-cortex-agentix/supported-web-browsers","siteSpaceId":"sitesp_RfNNx","description":"Review supported browser versions and HTTP/2 guidance for optimal Cortex AgentiX performance.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Learn about Cortex AgentiX","icon":"book"}]},{"id":"uo7iCHW7ovzhGgyc55Zh","title":"How to onboard Cortex AgentiX","pathname":"/cortex-agentix/onboard-cortex-agentix/onboard-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Follow the steps to successfully onboard and configure Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"}]},{"id":"C0kOstkyukMgFuELQCLE","title":"Plan and prepare your deployment","pathname":"/cortex-agentix/onboard-cortex-agentix/plan-and-prepare-your-deployment","siteSpaceId":"sitesp_RfNNx","description":"Plan your Cortex AgentiX deployment by selecting a region, data sources, agents, licensing, and access controls.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"}]},{"id":"EwAd03OofJn60z5zJRo1","title":"Deployment steps","pathname":"/cortex-agentix/onboard-cortex-agentix/deployment-steps","siteSpaceId":"sitesp_RfNNx","description":"Review the plan and prepare considerations, and then follow the steps in the onboarding checklist to successfully deploy and onboard Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"}]},{"id":"xY3KIDk1OJMZCLfltP8b","title":"Onboarding checklist","pathname":"/cortex-agentix/onboard-cortex-agentix/deployment-steps/onboarding-checklist","siteSpaceId":"sitesp_RfNNx","description":"Activate, provision, grant access, and configure Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"V1VqrQWVsQu7BWolkJp6","title":"Activate Cortex AgentiX","pathname":"/cortex-agentix/onboard-cortex-agentix/deployment-steps/activate-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Activate a Cortex AgentiX tenant through Cortex Gateway and configure its name, region, and subdomain.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"EdiPNdWFLODvd6ZU2UsZ","title":"Cortex AgentiX supported regions","pathname":"/cortex-agentix/onboard-cortex-agentix/deployment-steps/activate-cortex-agentix/cortex-agentix-supported-regions","siteSpaceId":"sitesp_RfNNx","description":"Supported regions in which you want to host Cortex AgentiX and any associated services.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex AgentiX"}]},{"id":"J5Nf3pUDyQbKniY06M5c","title":"Enable access to Palo Alto Networks resources","pathname":"/cortex-agentix/onboard-cortex-agentix/deployment-steps/activate-cortex-agentix/enable-access-to-palo-alto-networks-resources","siteSpaceId":"sitesp_RfNNx","description":"Depending on your network environment settings, you may need to enable network access to the Cortex AgentiX resources.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Deployment steps"},{"label":"Activate Cortex AgentiX"}]},{"id":"QwaCa969KVN2A57Jbv9S","title":"Install and configure content","pathname":"/cortex-agentix/onboard-cortex-agentix/deployment-steps/install-and-configure-content","siteSpaceId":"sitesp_RfNNx","description":"Learn how content works in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"J8Kn1rUx6kEG1t0hRQ0M","title":"Post-deployment steps","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps","siteSpaceId":"sitesp_RfNNx","description":"Complete post-deployment configuration for automation, integrations, users, roles, and access in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"}]},{"id":"sTVgP3Lx3VAHIuFR0Kwy","title":"Post-deployment checklist","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/post-deployment-checklist","siteSpaceId":"sitesp_RfNNx","description":"Complete your Cortex AgentiX post-deployment checklist for automations, integrations, users, dashboards, engines, and security settings.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"0boWa0BTlxfAhSLr3PFY","title":"Set up users, groups, and roles","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/set-up-users-and-roles","siteSpaceId":"sitesp_RfNNx","description":"Set up Cortex AgentiX and Cortex Gateway users, user groups, roles, role-based access control (RBAC), and SAML SSO authentication.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"D5d0MKvLr2pPV6rBtKfi","title":"Configure server settings","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/configure-server-settings","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX server settings for user preferences, security controls, AI features, access, and tenant operations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"fXPBb5gN93wDVS6hGcOk","title":"Configure security settings","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/configure-security-settings","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX login sessions, approved domains and IP ranges, user expiration, and cookie security policies.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"V2LObzzT3eBvs7YysveV","title":"Set up an engine","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/set-up-an-engine","siteSpaceId":"sitesp_RfNNx","description":"Set up a Cortex AgentiX engine on a remote machine.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"Kd9AYlfPWsqcrVb4pPBF","title":"Log forwarding","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX log forwarding and notifications for email, Slack, and syslog receivers.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"}]},{"id":"YAnXEdZ1cc4lOdpWhImK","title":"Forward Cortex AgentiX logs and data to external services","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services","siteSpaceId":"sitesp_RfNNx","description":"Forward Cortex AgentiX logs, cases, and issues to Slack, syslog, email, Splunk, Amazon SQS, Amazon S3, and webhooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"}]},{"id":"R1rwjgEudS330MitZUcS","title":"Configure external applications for forwarding","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-external-applications-for-forwarding","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX external applications and Cortex Gateway egress for forwarding cases, issues, and logs to third-party services.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"}]},{"id":"b253yxZ9Ry5foKRARHSM","title":"Forward notifications to Amazon SQS","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-sqs","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex XSIAM notification forwarding to Amazon SQS with Cortex Gateway egress, an AWS SQS queue, IAM role or access keys, and queue permissions.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"yLm5ZexYJX2kQk0KYh5m","title":"Forward notifications to Amazon S3","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-amazon-s3","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex XSIAM notification forwarding to Amazon S3 with Cortex Gateway egress, AWS IAM roles, bucket permissions, and file rollup.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"UwJPFE67gEths3Pvhb8P","title":"Forward notifications to Splunk","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-splunk","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex XSIAM notification forwarding to Splunk with firewall access, Cortex Gateway egress, HTTPS Event Collector, and authentication tokens.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"nszFRbl9eLCxgRaeAULz","title":"Forward notifications to webhook","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-external-applications-for-forwarding/forward-notifications-to-webhook","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex XSIAM case and issue notifications to HTTPS webhooks with firewall access, Gateway egress, authentication, and JSON payload support.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"OFRiEeCdY9Oc93DHFQvx","title":"Integrate a syslog receiver","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-external-applications-for-forwarding/integrate-a-syslog-receiver","siteSpaceId":"sitesp_RfNNx","description":"Configure a Cortex AgentiX syslog receiver to forward logs and issues, allow regional IP addresses, and set TCP, UDP, or TLS connection settings.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"0sBbMgQH6VGoVHVPamBL","title":"Integrate Slack for outbound notifications","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-external-applications-for-forwarding/integrate-slack-for-outbound-notifications","siteSpaceId":"sitesp_RfNNx","description":"Integrate Cortex AgentiX with a Slack workspace to forward issue and report notifications to dedicated Slack channels.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"},{"label":"Configure external applications for forwarding"}]},{"id":"qg9gTIVkt3eednF3z9xM","title":"Configure notification forwarding","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/configure-notification-forwarding","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX notification forwarding for issues, cases, and audit logs to email, Slack, syslog, Splunk, Amazon S3, Amazon SQS, and webhooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"}]},{"id":"JzH6ofI6hnrJGTZovfRm","title":"Set up email notifications for tenant updates","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/set-up-email-notifications-for-tenant-updates","siteSpaceId":"sitesp_RfNNx","description":"Set up Cortex AgentiX email notifications for tenant upgrades, hotfixes, downtime warnings, and Management Audit Log events.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"}]},{"id":"a6IxfBGPcz7kt0eeLK87","title":"Monitor administrative activity","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/forward-logs-and-data-from-cortex-agentix-to-external-services/monitor-administrative-activity","siteSpaceId":"sitesp_RfNNx","description":"Monitor Cortex AgentiX management audit logs for administrative and investigative activity, filter log entries, and forward audit notifications to email, syslog, or Slack.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Forward Cortex AgentiX logs and data to external services"}]},{"id":"iH9Dq13xHSIJ2F0LQsul","title":"Data and log notification formats","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/data-and-log-notification-formats","siteSpaceId":"sitesp_RfNNx","description":"Learn about Cortex AgentiX notification formats for forwarded cases, issues, and logs, including alert-format issue notifications for email, syslog, and Slack.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"}]},{"id":"JyD2oLPL4B67fi6SLu0T","title":"Issue notification format","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/data-and-log-notification-formats/issue-notification-format","siteSpaceId":"sitesp_RfNNx","description":"Review Cortex AgentiX issue notification formats for email, Slack, Splunk, Amazon S3, Amazon SQS, webhooks, and CEF-formatted syslog messages.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Data and log notification formats"}]},{"id":"bnE6GJl0JeOF98hRJfnI","title":"Management Audit log notification format","pathname":"/cortex-agentix/onboard-cortex-agentix/post-deployment-steps/log-forwarding/data-and-log-notification-formats/management-audit-log-notification-format","siteSpaceId":"sitesp_RfNNx","description":"Review Cortex AgentiX Management Audit log notification formats for email and CEF-formatted syslog forwarding, including field mappings.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Onboard Cortex AgentiX","icon":"rocket"},{"label":"Post-deployment steps"},{"label":"Log forwarding"},{"label":"Data and log notification formats"}]},{"id":"loBKgapKJXUJqiqEj5bq","title":"Learn how to configure Cortex AgentiX","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-configuration","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX to match your use case.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"WehQqbAMedokDOmIT46h","title":"Configure Cortex AgentiX","pathname":"/cortex-agentix/configure-cortex-agentix/configure-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX content, agents, users, integrations, automations, data, dashboards, and reporting.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"70ce9XXM58xyCDwC17y9","title":"Cortex AgentiX Data Sources and Connectors","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors","siteSpaceId":"sitesp_RfNNx","description":"Connect Cortex AgentiX to supported data sources and third-party services.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"sI5YhPoZsHTLSGyEFSt8","title":"What are Cortex AgentiX data sources and connectors?","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/what-are-cortex-agentix-data-sources-and-connectors","siteSpaceId":"sitesp_RfNNx","description":"Learn more about Cortex AgentiX Data Sources and connectors with a unified approach to integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"}]},{"id":"tPGjMytfCysL9ofe3tJV","title":"What is the data source and connector catalog?","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/what-is-the-data-source-and-connector-catalog","siteSpaceId":"sitesp_RfNNx","description":"Learn more about the complete data source and connector catalog available in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"}]},{"id":"cYdv5C33bUgjl9vWq5h2","title":"Vendor-specific data sources and connectors","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors","siteSpaceId":"sitesp_RfNNx","description":"Choose and configure vendor connectors, data sources, and Marketplace integrations for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"}]},{"id":"iN6gA8Fm2uZ1xgUyq6U3","title":"Absolute","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/absolute","siteSpaceId":"sitesp_RfNNx","description":"Configure the Absolute connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"tkCBqnfAPeTwKrekFCTL","title":"Absolute","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/absolute/absolute","siteSpaceId":"sitesp_RfNNx","description":"Use Absolute data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Absolute"}]},{"id":"K4kmn4W5WhE7tla0djfF","title":"abuse.ch","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/abuse.ch","siteSpaceId":"sitesp_RfNNx","description":"Configure the abuse.ch connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gbraGtzYBrpMRjMR91dE","title":"abuse.ch","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/abuse.ch/abuse.ch","siteSpaceId":"sitesp_RfNNx","description":"Use abuse.ch threat intelligence with Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"abuse.ch"}]},{"id":"06mv0w95Qhhe0RnAJqIu","title":"AbuseIPDB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/abuseipdb","siteSpaceId":"sitesp_RfNNx","description":"Configure the AbuseIPDB connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WVppjg0oEZGKniTU40BI","title":"AbuseIPDB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/abuseipdb/abuseipdb","siteSpaceId":"sitesp_RfNNx","description":"Use AbuseIPDB data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AbuseIPDB"}]},{"id":"679jApHy0HILcC57bf82","title":"Accenture","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/accenture","siteSpaceId":"sitesp_RfNNx","description":"Configure the Accenture connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"73eiwoUhDQYZjq6b4D9h","title":"Accenture","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/accenture/accenture","siteSpaceId":"sitesp_RfNNx","description":"Use Accenture data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Accenture"}]},{"id":"h8Y2p6OabgKSEOftndPs","title":"AdminByRequest","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/adminbyrequest","siteSpaceId":"sitesp_RfNNx","description":"Configure the AdminByRequest connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UoC1grOqjhicM1hBziqs","title":"AdminByRequest","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/adminbyrequest/adminbyrequest","siteSpaceId":"sitesp_RfNNx","description":"Use AdminByRequest data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AdminByRequest"}]},{"id":"lGljMzr8eLWBdJvqnmiC","title":"Aha","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/aha","siteSpaceId":"sitesp_RfNNx","description":"Configure the Aha connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AvZyqG9yqp1KCbfnNwpw","title":"Aha","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/aha/aha","siteSpaceId":"sitesp_RfNNx","description":"Use Aha data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Aha"}]},{"id":"sC1KJtyTYTZaQTa1jxvD","title":"AIOps","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/aiops","siteSpaceId":"sitesp_RfNNx","description":"Configure the AIOps connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cQudYsh6zo0gF1ek1qIF","title":"AIOps","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/aiops/aiops","siteSpaceId":"sitesp_RfNNx","description":"Use AIOps data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AIOps"}]},{"id":"O890DQtQdfhsrKMN73Im","title":"Akamai","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/akamai","siteSpaceId":"sitesp_RfNNx","description":"Configure the Akamai connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"84PS7M0KSSearQ0u9ZLS","title":"Akamai","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/akamai/akamai","siteSpaceId":"sitesp_RfNNx","description":"Use Akamai data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Akamai"}]},{"id":"e2F257IaREs61wlF5pBK","title":"AlgoSec","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/algosec","siteSpaceId":"sitesp_RfNNx","description":"Configure the AlgoSec connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OpmMQubRqCt9zylpl9Fy","title":"AlgoSec","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/algosec/algosec","siteSpaceId":"sitesp_RfNNx","description":"Use AlgoSec data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AlgoSec"}]},{"id":"TXH5YwiIYdkNF6h67uG0","title":"AlienVault","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/alienvault","siteSpaceId":"sitesp_RfNNx","description":"Configure the AlienVault connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AtfPeWggsifCQPceaNus","title":"AlienVault","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/alienvault/alienvault","siteSpaceId":"sitesp_RfNNx","description":"Use AlienVault data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AlienVault"}]},{"id":"0OLrhvCDAbEJyJUDmZK8","title":"Amazon","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/amazon","siteSpaceId":"sitesp_RfNNx","description":"Configure the Amazon connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"QbLRr3CePA6UjC679eOB","title":"AWS Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/amazon/aws-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Amazon data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"NUS6FibV2rz3qd781lAA","title":"Anomali","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/anomali","siteSpaceId":"sitesp_RfNNx","description":"Configure the Anomali connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IH2070T7n1dl83FPPkhX","title":"Anomali","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/anomali/anomali","siteSpaceId":"sitesp_RfNNx","description":"Use Anomali data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anomali"}]},{"id":"DmYl9Y22I1PcK3UmMR2y","title":"Anthropic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/anthropic","siteSpaceId":"sitesp_RfNNx","description":"Configure the Anthropic connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OWblIezhXybh5SKT3ver","title":"Claude Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/anthropic/claude-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Claude automation and collection with Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anthropic"}]},{"id":"wUKQgiexmBhuJkMoXhx3","title":"Apache","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/apache","siteSpaceId":"sitesp_RfNNx","description":"Configure the Apache connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hwwnP2a7jRoIgew8hmky","title":"Apache","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/apache/apache","siteSpaceId":"sitesp_RfNNx","description":"Use Apache data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Apache"}]},{"id":"7bldU2hXx9dYcrnraqFj","title":"APIVoid","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/apivoid","siteSpaceId":"sitesp_RfNNx","description":"Configure the APIVoid connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"b8uwqFSVN1SvA0iXWxNZ","title":"APIVoid","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/apivoid/apivoid","siteSpaceId":"sitesp_RfNNx","description":"Use APIVoid data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"APIVoid"}]},{"id":"UoavEsCIg3wHNKg2mx1N","title":"ArcSight","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/arcsight","siteSpaceId":"sitesp_RfNNx","description":"Configure the ArcSight connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9dfXa8z5IsahACl325ug","title":"ArcSight","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/arcsight/arcsight","siteSpaceId":"sitesp_RfNNx","description":"Use ArcSight data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ArcSight"}]},{"id":"IPsApt9ShPdYhqtHtmVN","title":"Arista Networks","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/arista-networks","siteSpaceId":"sitesp_RfNNx","description":"Configure the Arista Networks connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"X1wEAoNDUe0R8ODUpaQX","title":"Arista Networks","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/arista-networks/arista-networks","siteSpaceId":"sitesp_RfNNx","description":"Use Arista Networks data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Arista Networks"}]},{"id":"Ri7EDuZBCjOI86ziAAH2","title":"Arkime","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/arkime","siteSpaceId":"sitesp_RfNNx","description":"Configure the Arkime connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sTYIu0HdC9iXCeyBg22W","title":"Arkime","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/arkime/arkime","siteSpaceId":"sitesp_RfNNx","description":"Use Arkime data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Arkime"}]},{"id":"xZtiVLRffCKdkuohkPMK","title":"Atlassian","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/atlassian","siteSpaceId":"sitesp_RfNNx","description":"Configure the Atlassian connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wyhVg8on8gKn790bcc7X","title":"Atlassian Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/atlassian/atlassian-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Atlassian data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"F2p81L8veGq1NgdARlCu","title":"AttackIQ","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/attackiq","siteSpaceId":"sitesp_RfNNx","description":"Configure the AttackIQ connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1Ouspf84F0r1GIRTGEhz","title":"AttackIQ","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/attackiq/attackiq","siteSpaceId":"sitesp_RfNNx","description":"Use AttackIQ data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"AttackIQ"}]},{"id":"ohPoZDauNDKDmHJBtwLa","title":"Aurora Endpoint Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/aurora-endpoint-security","siteSpaceId":"sitesp_RfNNx","description":"Configure the Aurora Endpoint Security connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gIP9UVDgewNXgfXxkyMU","title":"Aurora Endpoint Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/aurora-endpoint-security/aurora-endpoint-security","siteSpaceId":"sitesp_RfNNx","description":"Use Aurora Endpoint Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Aurora Endpoint Security"}]},{"id":"yMaZYFqdxv5WNOtONEaO","title":"BeyondTrust","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/beyondtrust","siteSpaceId":"sitesp_RfNNx","description":"Configure the BeyondTrust connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JmgHewBNoW0EnwYJpPhT","title":"BeyondTrust","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/beyondtrust/beyondtrust","siteSpaceId":"sitesp_RfNNx","description":"Use BeyondTrust data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BeyondTrust"}]},{"id":"R8NfO4tGU2bzjJm9kT7s","title":"Blocklist.de","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/blocklist.de","siteSpaceId":"sitesp_RfNNx","description":"Configure the Blocklist.de connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dH3n4TFhVLZldlk9rPcX","title":"Blocklist.de","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/blocklist.de/blocklist.de","siteSpaceId":"sitesp_RfNNx","description":"Use Blocklist.de data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Blocklist.de"}]},{"id":"eOBJKIECGvIfSMW31986","title":"BlueCat Address Manager","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/bluecat-address-manager","siteSpaceId":"sitesp_RfNNx","description":"Configure the BlueCat Address Manager connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"oxiGiE39wXNOrJUZhMsq","title":"BlueCat Address Manager","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/bluecat-address-manager/bluecat-address-manager","siteSpaceId":"sitesp_RfNNx","description":"Use BlueCat Address Manager data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BlueCat Address Manager"}]},{"id":"V36N9OnVkHuszwPS4QPt","title":"BMC","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/bmc","siteSpaceId":"sitesp_RfNNx","description":"Configure the BMC connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"84Mi1kozsoL6PhESxdEL","title":"BMC","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/bmc/bmc","siteSpaceId":"sitesp_RfNNx","description":"Use BMC data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BMC"}]},{"id":"z2Bw8JaFLs6CGwnj6uCF","title":"Box","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/box","siteSpaceId":"sitesp_RfNNx","description":"Configure the Box connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cM1ot3yiDaWJMUgFBiCA","title":"Box Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/box/box-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Box data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"Azpv6usFruz8hLXOHUkj","title":"Broadcom","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/broadcom","siteSpaceId":"sitesp_RfNNx","description":"Configure the Broadcom connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mHkx5iYtSddZWlLnlRox","title":"Broadcom","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/broadcom/broadcom","siteSpaceId":"sitesp_RfNNx","description":"Use Broadcom data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Broadcom"}]},{"id":"qGeqeG7s8szjl4Y8AhAP","title":"BruteForceBlocker","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/bruteforceblocker","siteSpaceId":"sitesp_RfNNx","description":"Configure the BruteForceBlocker connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"AcI84aWAdHGI4jQFOMnw","title":"BruteForceBlocker","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/bruteforceblocker/bruteforceblocker","siteSpaceId":"sitesp_RfNNx","description":"Use BruteForceBlocker data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"BruteForceBlocker"}]},{"id":"bjR9Le8ZSdaebHJBrXTu","title":"C2SEC","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/c2sec","siteSpaceId":"sitesp_RfNNx","description":"Configure the C2SEC connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"n5UTjMeHP4s2smRiv6xw","title":"C2SEC","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/c2sec/c2sec","siteSpaceId":"sitesp_RfNNx","description":"Use C2SEC data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"C2SEC"}]},{"id":"VO8vmMNLeDUA6GpwHXoB","title":"CAPESandbox","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/capesandbox","siteSpaceId":"sitesp_RfNNx","description":"Configure the CAPESandbox connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"DWXzl4VKclcHKT5zqZtq","title":"CAPESandbox","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/capesandbox/capesandbox","siteSpaceId":"sitesp_RfNNx","description":"Use CAPESandbox data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CAPESandbox"}]},{"id":"F8d3rJpa09Ipb6CrhBNc","title":"Carbon Black","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/carbon-black","siteSpaceId":"sitesp_RfNNx","description":"Configure the Carbon Black connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"NcZpRJU4wwoB6UYUCsls","title":"Carbon Black","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/carbon-black/carbon-black","siteSpaceId":"sitesp_RfNNx","description":"Use Carbon Black data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Carbon Black"}]},{"id":"IVJs2wRnSCTwLZChGnra","title":"Centreon","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/centreon","siteSpaceId":"sitesp_RfNNx","description":"Configure the Centreon connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"h0AfK9wcnKRrOecIZyfQ","title":"Centreon","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/centreon/centreon","siteSpaceId":"sitesp_RfNNx","description":"Use Centreon data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Centreon"}]},{"id":"sFwkToOt65QQXXvc7MIM","title":"Check Point","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/check-point","siteSpaceId":"sitesp_RfNNx","description":"Configure the Check Point data source and connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"hMYcEZBznCa2pidr6mEI","title":"Check Point FW1/VPN1","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/check-point/check-point-fw1-vpn1","siteSpaceId":"sitesp_RfNNx","description":"Use Check Point FW1/VPN1 data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Check Point"}]},{"id":"Q6BZ0tTiANxjNsWI2nf9","title":"Checkpoint Firewall","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/check-point/checkpoint-firewall","siteSpaceId":"sitesp_RfNNx","description":"Use Checkpoint Firewall data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Check Point"}]},{"id":"vptFF3aAxfBCjODnRIsf","title":"CheckPhish","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/checkphish","siteSpaceId":"sitesp_RfNNx","description":"Configure the CheckPhish connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"OPlNVJgMXjwcoBrcqYqx","title":"CheckPhish","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/checkphish/checkphish","siteSpaceId":"sitesp_RfNNx","description":"Use CheckPhish data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CheckPhish"}]},{"id":"12pfytvx7It5gI6MrzJQ","title":"CipherTrust","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ciphertrust","siteSpaceId":"sitesp_RfNNx","description":"Configure the CipherTrust connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IdeztKzuQ9nXoQQxzqLk","title":"CipherTrust","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ciphertrust/ciphertrust","siteSpaceId":"sitesp_RfNNx","description":"Use CipherTrust data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CipherTrust"}]},{"id":"e8cfKUO06COpp1DRtT4y","title":"CIRCL","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/circl","siteSpaceId":"sitesp_RfNNx","description":"Configure the CIRCL connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WWkuJ3BLPspslwWNQa4E","title":"CIRCL","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/circl/circl","siteSpaceId":"sitesp_RfNNx","description":"Use CIRCL data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CIRCL"}]},{"id":"yr8NmctgbEWmgYU54CeY","title":"CircleCI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/circleci","siteSpaceId":"sitesp_RfNNx","description":"Configure the CircleCI connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jAeh49mqxYDarTk1b34d","title":"CircleCI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/circleci/circleci","siteSpaceId":"sitesp_RfNNx","description":"Use CircleCI data with Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CircleCI"}]},{"id":"vbnhpoQv2WFJffUe4zLe","title":"Cisco","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco","siteSpaceId":"sitesp_RfNNx","description":"Configure the Cisco data sources and connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"E0CIvd6gWqCoR8pNJWBb","title":"Cisco ASA firewalls and AnyConnect`","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-asa-firewalls-and-anyconnect","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco ASA firewalls and AnyConnect data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"DwQPJDokmlZqQaRIyDos","title":"Cisco ASA","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-asa","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco ASA data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"fNGOsboOsmLJIEPSkVmL","title":"Cisco DUO Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-duo-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco DUO Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"p9fLOZorsYPEOmNFEtCD","title":"Cisco Firepower","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-firepower","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco Firepower data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"V4HpmbpUpsNgwqIuo4Bt","title":"Cisco ISE","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-ise","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco ISE data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"UwL1KKkwXLNAojm6tpvr","title":"Cisco Meraki Automation and Remediation","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-meraki-automation-and-remediation","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco Meraki Automation and Remediation data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"nGqWSXqKYcHosMi8KjfJ","title":"Cisco Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-security","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"a59AQxeH239sFOiuUdi4","title":"Cisco Umbrella","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cisco/cisco-umbrella","siteSpaceId":"sitesp_RfNNx","description":"Use Cisco Umbrella data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cisco"}]},{"id":"tmBFToJLRP4CxSvTFEPJ","title":"Cloaken","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cloaken","siteSpaceId":"sitesp_RfNNx","description":"Configure the Cloaken connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VhNgVnemEubh6zHsbhql","title":"Cloaken","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cloaken/cloaken","siteSpaceId":"sitesp_RfNNx","description":"Use Cloaken data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cloaken"}]},{"id":"IiEDDuflrAEMKZMrxqmQ","title":"CloudConvert","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cloudconvert","siteSpaceId":"sitesp_RfNNx","description":"Configure the CloudConvert connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"LLTCY58jHfmai7OIETWw","title":"CloudConvert","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cloudconvert/cloudconvert","siteSpaceId":"sitesp_RfNNx","description":"Use CloudConvert data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CloudConvert"}]},{"id":"GSuOjEzQSO7LDAM7J31d","title":"Cloudflare","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cloudflare","siteSpaceId":"sitesp_RfNNx","description":"Configure the Cloudflare connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Qb9YwLpZXmWpJ0pe22vV","title":"Cloudflare","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cloudflare/cloudflare","siteSpaceId":"sitesp_RfNNx","description":"Use Cloudflare data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cloudflare"}]},{"id":"O1gFuPqet0KdQMLVZiwQ","title":"CounterTack","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/countertack","siteSpaceId":"sitesp_RfNNx","description":"Configure the CounterTack connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"GQu0WprQkep3zGAkjZCc","title":"CounterTack","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/countertack/countertack","siteSpaceId":"sitesp_RfNNx","description":"Use CounterTack data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CounterTack"}]},{"id":"OFUUzEV1YJtLoRtnr6Y2","title":"CrowdStrike","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/crowdstrike","siteSpaceId":"sitesp_RfNNx","description":"Configure the CrowdStrike connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"PD4DWSI20dron4HFYP93","title":"CrowdStrike","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/crowdstrike/crowdstrike","siteSpaceId":"sitesp_RfNNx","description":"Use CrowdStrike data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CrowdStrike"}]},{"id":"UY1Y3IJcGIQNKFK5WQCM","title":"CryptoCurrency","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cryptocurrency","siteSpaceId":"sitesp_RfNNx","description":"Configure the CryptoCurrency connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"PvUN6bh6fuUtvlXAtXej","title":"CryptoCurrency","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cryptocurrency/cryptocurrency","siteSpaceId":"sitesp_RfNNx","description":"Use CryptoCurrency data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CryptoCurrency"}]},{"id":"lxLFoVDe7QKANWIdj5DD","title":"Cuckoo Sandbox","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cuckoo-sandbox","siteSpaceId":"sitesp_RfNNx","description":"Configure the Cuckoo Sandbox connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"63DUM6Bm2h6MkjmbFRIV","title":"Cuckoo Sandbox","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cuckoo-sandbox/cuckoo-sandbox","siteSpaceId":"sitesp_RfNNx","description":"Use Cuckoo Sandbox data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cuckoo Sandbox"}]},{"id":"0d8FIJxQLaTkvSUXS7tI","title":"CybelAngel","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cybelangel","siteSpaceId":"sitesp_RfNNx","description":"Configure the CybelAngel connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"WSq1fd6E0O03FXfS5VXt","title":"CybelAngel","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cybelangel/cybelangel","siteSpaceId":"sitesp_RfNNx","description":"Use CybelAngel data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CybelAngel"}]},{"id":"0hQ2BCQJMGjGd3bsuBzK","title":"CyberArk","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cyberark","siteSpaceId":"sitesp_RfNNx","description":"Configure the CyberArk connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"N4WpWT6QhcPOT8OsyRkm","title":"CyberArk","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cyberark/cyberark","siteSpaceId":"sitesp_RfNNx","description":"Use CyberArk data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"CyberArk"}]},{"id":"6ziK0ZK7z1txy98vO5sh","title":"Cyber Triage","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cyber-triage","siteSpaceId":"sitesp_RfNNx","description":"Configure the Cyber Triage connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"43kvRJImViIg1rGgFD27","title":"Cyber Triage","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/cyber-triage/cyber-triage","siteSpaceId":"sitesp_RfNNx","description":"Use Cyber Triage data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Cyber Triage"}]},{"id":"7wIX3HyJ1rFTpCOrblxe","title":"DeHashed","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dehashed","siteSpaceId":"sitesp_RfNNx","description":"Configure the DeHashed connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wXk6kqYfMAJTlv4WYiLf","title":"DeHashed","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dehashed/dehashed","siteSpaceId":"sitesp_RfNNx","description":"Use DeHashed data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"DeHashed"}]},{"id":"aSUdm8Ht4ATluRNEQ9mI","title":"DHS","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dhs","siteSpaceId":"sitesp_RfNNx","description":"Configure the DHS connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"zydPy35C9VsbkWk1jWMG","title":"DHS","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dhs/dhs","siteSpaceId":"sitesp_RfNNx","description":"Use DHS data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"DHS"}]},{"id":"38zVyJlXQukzEOaVIM9W","title":"dnstwist","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dnstwist","siteSpaceId":"sitesp_RfNNx","description":"Configure the dnstwist connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fDU6jUUROQHc0DFtVomD","title":"dnstwist","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dnstwist/dnstwist","siteSpaceId":"sitesp_RfNNx","description":"Use dnstwist data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"dnstwist"}]},{"id":"oGIZNIYEkCHqLKLpdtcZ","title":"EasyVista","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/easyvista","siteSpaceId":"sitesp_RfNNx","description":"Configure the EasyVista connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0D0AThAiBaX7ZVKZyO7E","title":"EasyVista","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/easyvista/easyvista","siteSpaceId":"sitesp_RfNNx","description":"Use EasyVista data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"EasyVista"}]},{"id":"tOstOtTTM4S5Xyef4Tzg","title":"Email Hippo","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/email-hippo","siteSpaceId":"sitesp_RfNNx","description":"Configure the Email Hippo connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fYwN3GV1gy0J3cY2Vchb","title":"Email Hippo","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/email-hippo/email-hippo","siteSpaceId":"sitesp_RfNNx","description":"Use Email Hippo data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Email Hippo"}]},{"id":"KvVymIYDBBdxmHWtmWHT","title":"Elastic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/elastic","siteSpaceId":"sitesp_RfNNx","description":"Configure the Elastic connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"0GcDLL5WVjYaecZ5ymfk","title":"ElasticSearch","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/elastic/elasticsearch","siteSpaceId":"sitesp_RfNNx","description":"Use ElasticSearch data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Elastic"}]},{"id":"elaAs1xxSSM1z1O8QWvk","title":"Endgame","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/endgame","siteSpaceId":"sitesp_RfNNx","description":"Configure the Endgame connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bQQhW7zuYtEwyzW83fdZ","title":"Endgame","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/endgame/endgame","siteSpaceId":"sitesp_RfNNx","description":"Use Endgame data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Endgame"}]},{"id":"zsop1dzo5QJRgptI4jti","title":"Envoy","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/envoy","siteSpaceId":"sitesp_RfNNx","description":"Configure the Envoy connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Ya6dVCJ8CDFFuYf6rsen","title":"Envoy","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/envoy/envoy","siteSpaceId":"sitesp_RfNNx","description":"Use Envoy data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Envoy"}]},{"id":"xEVy7s2UwRYytVGOivCB","title":"Exabeam","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/exabeam","siteSpaceId":"sitesp_RfNNx","description":"Configure the Exabeam connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"38f46I9OTrwkiwvs3i4J","title":"Exabeam","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/exabeam/exabeam","siteSpaceId":"sitesp_RfNNx","description":"Use Exabeam data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Exabeam"}]},{"id":"f8u6qAoq1BJNJGh6WtKH","title":"F5","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/f5","siteSpaceId":"sitesp_RfNNx","description":"Configure the F5 connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JHHZrQqNy0BTyUFDbMgq","title":"F5 Automation and Remediation","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/f5/f5-automation-and-remediation","siteSpaceId":"sitesp_RfNNx","description":"Use F5 Automation and Remediation data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"F5"}]},{"id":"Ly3RUn0UrD2zEnAilYOk","title":"Fastly","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fastly","siteSpaceId":"sitesp_RfNNx","description":"Configure the Fastly connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6mqUCPbdg1EIpzMGGf2I","title":"Fastly","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fastly/fastly","siteSpaceId":"sitesp_RfNNx","description":"Use Fastly data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fastly"}]},{"id":"jJ68493D615GdDs9MHx9","title":"Fidelis","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fidelis","siteSpaceId":"sitesp_RfNNx","description":"Configure the Fidelis connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"7CuzscqV9o4KDoPCj23N","title":"Fidelis","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fidelis/fidelis","siteSpaceId":"sitesp_RfNNx","description":"Use Fidelis data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fidelis"}]},{"id":"TGZIG8ZM7icDWaWYCy1s","title":"Filigran","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/filigran","siteSpaceId":"sitesp_RfNNx","description":"Configure the Filigran connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HKvtErkipuT0PcCA4ozm","title":"Filigran OpenCTI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/filigran/filigran-opencti","siteSpaceId":"sitesp_RfNNx","description":"Use Filigran OpenCTI data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Filigran"}]},{"id":"NJCnNf2rp6Mr2gqGSGAg","title":"Forcepoint","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/forcepoint","siteSpaceId":"sitesp_RfNNx","description":"Configure the Forcepoint data source and connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ZUMmWmX8Fe1KTwkXZj7I","title":"Forcepoint DLP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/forcepoint/forcepoint-dlp","siteSpaceId":"sitesp_RfNNx","description":"Use Forcepoint DLP data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Forcepoint"}]},{"id":"GOdjM2sh9ygkSiERcTdT","title":"Forcepoint","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/forcepoint/forcepoint","siteSpaceId":"sitesp_RfNNx","description":"Use Forcepoint data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Forcepoint"}]},{"id":"d4yAOyJSVUWl58YqpLMh","title":"ForeScout","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/forescout","siteSpaceId":"sitesp_RfNNx","description":"Configure the ForeScout connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"L7gzqjEh1IxDZoHmTgCX","title":"ForeScout","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/forescout/forescout","siteSpaceId":"sitesp_RfNNx","description":"Use ForeScout data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ForeScout"}]},{"id":"QeFp7efHASyMJLIEaXkJ","title":"Fortinet","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fortinet","siteSpaceId":"sitesp_RfNNx","description":"Configure the Fortinet data source and connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"kJlXX01u1eXm0fYlQ7hd","title":"Fortinet Fortigate","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fortinet/fortinet-fortigate","siteSpaceId":"sitesp_RfNNx","description":"Collect Fortinet Fortigate data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"Eit7X2kYzXno7ej0BVIB","title":"Fortinet FortiGate connector","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fortinet/fortinet-fortigate/fortinet-fortigate-connector","siteSpaceId":"sitesp_RfNNx","description":"Use Fortinet FortiGate data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"},{"label":"Fortinet Fortigate"}]},{"id":"XV3aLXgCt9IyY4hJoHPx","title":"Fortinet","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fortinet/fortinet","siteSpaceId":"sitesp_RfNNx","description":"Use Fortinet data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"BjQAGxAEWS4MD8Z7M9MD","title":"Fortinet FortiWeb VM","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fortinet/fortinet-fortiweb-vm","siteSpaceId":"sitesp_RfNNx","description":"Use Fortinet FortiWeb VM data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortinet"}]},{"id":"nskX18jZAq8INkC6Gdp2","title":"Fortra","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fortra","siteSpaceId":"sitesp_RfNNx","description":"Configure the Fortra connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"g7tcht4lioPjeZoRwQVm","title":"Fortra","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fortra/fortra","siteSpaceId":"sitesp_RfNNx","description":"Use Fortra data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Fortra"}]},{"id":"bBpLggNeeostUlSNkRDS","title":"FraudWatch","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fraudwatch","siteSpaceId":"sitesp_RfNNx","description":"Configure the FraudWatch connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9iSq3XIqZxqEe8ilA6MI","title":"FraudWatch","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/fraudwatch/fraudwatch","siteSpaceId":"sitesp_RfNNx","description":"Use FraudWatch data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"FraudWatch"}]},{"id":"UkX8PeYjibK3qgGbnRos","title":"Freshworks","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/freshworks","siteSpaceId":"sitesp_RfNNx","description":"Configure the Freshworks connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Pk5MoiIKdO3YYhj8FoUn","title":"Freshworks","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/freshworks/freshworks","siteSpaceId":"sitesp_RfNNx","description":"Use Freshworks data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Freshworks"}]},{"id":"V5y9fSJ3YORWdtsk9Mek","title":"Gamma.AI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/gamma.ai","siteSpaceId":"sitesp_RfNNx","description":"Configure the Gamma.AI connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bRJZeKt79d0Whn0qBGgq","title":"Gamma.AI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/gamma.ai/gamma.ai","siteSpaceId":"sitesp_RfNNx","description":"Use Gamma.AI data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gamma.AI"}]},{"id":"hzqKPlHnEz2CYVJ6rND2","title":"Generic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/generic","siteSpaceId":"sitesp_RfNNx","description":"Configure the Generic connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aWpQFlHSe8cJKiyFrcPN","title":"Generic Intel Feed","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/generic/generic-intel-feed","siteSpaceId":"sitesp_RfNNx","description":"Use Generic Intel Feed data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"yMxX6OTEIfaQ9ZVdk7cd","title":"Generic MCP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/generic/generic-mcp","siteSpaceId":"sitesp_RfNNx","description":"Use Generic MCP data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"cekchmqXGHcXtelm8QWE","title":"Generic SQL","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/generic/generic-sql","siteSpaceId":"sitesp_RfNNx","description":"Use Generic SQL data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Generic"}]},{"id":"FX1czMIFo6S5ez4GEhnX","title":"Gigamon","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/gigamon","siteSpaceId":"sitesp_RfNNx","description":"Configure the Gigamon connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"x8KZOQ8xsidTXZlYmAXy","title":"Gigamon","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/gigamon/gigamon","siteSpaceId":"sitesp_RfNNx","description":"Use Gigamon data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Gigamon"}]},{"id":"fuMOlGUDeluuJwtSfjHr","title":"GitHub","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/github","siteSpaceId":"sitesp_RfNNx","description":"Configure the GitHub connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"vdcKlUUCDDCFgyOoztRj","title":"GitHub","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/github/github","siteSpaceId":"sitesp_RfNNx","description":"Use GitHub data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitHub"}]},{"id":"0bRaRx85tiyirwcZ6fjI","title":"GitLab","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/gitlab","siteSpaceId":"sitesp_RfNNx","description":"Configure the GitLab connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"eH8pMOTlI7Earzludc25","title":"GitLab Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/gitlab/gitlab-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use GitLab Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GitLab"}]},{"id":"RTEKu5sy9kaXwAf6lhhE","title":"Giphy","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/giphy","siteSpaceId":"sitesp_RfNNx","description":"Configure the Giphy connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jxXRhJtFnuoUiiSapT7j","title":"Giphy","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/giphy/giphy","siteSpaceId":"sitesp_RfNNx","description":"Use Giphy data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Giphy"}]},{"id":"uhMJOZOa9fNWcYNehXAb","title":"Google","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google","siteSpaceId":"sitesp_RfNNx","description":"Configure the Google connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VJDiblQztcOJoesgbZqC","title":"Google AI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-ai","siteSpaceId":"sitesp_RfNNx","description":"Use Google AI data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"PpqBsRTmQla3eXOXA8lD","title":"Google Cloud","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-cloud","siteSpaceId":"sitesp_RfNNx","description":"Use Google Cloud data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"YYu5cYe4v2VdKv4k3Btp","title":"Google SecOps","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-secops","siteSpaceId":"sitesp_RfNNx","description":"Use Google SecOps data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"hpp3jYa5gz87ZP537UB8","title":"Google Services","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-services","siteSpaceId":"sitesp_RfNNx","description":"Use Google Services data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"arx7SYnoGHThYoOYvLCG","title":"Google Workspace","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-workspace","siteSpaceId":"sitesp_RfNNx","description":"Use Google Workspace data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"nUkbmiOliFI6uxCVSgKX","title":"Google Workspace connector","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-workspace/google-workspace-connector","siteSpaceId":"sitesp_RfNNx","description":"Use Google Workspace connector data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"EvtWNfwx3vxYWbyDV0PO","title":"Google Workspace Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-workspace/google-workspace-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Google Workspace Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"5yG1DDLvlueXR2xAJR9p","title":"GraphQL","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/graphql","siteSpaceId":"sitesp_RfNNx","description":"Configure the GraphQL connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"KLbeR6EAmYusqTOQHHNZ","title":"GraphQL","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/graphql/graphql","siteSpaceId":"sitesp_RfNNx","description":"Use GraphQL data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GraphQL"}]},{"id":"YDw54rnb261JgzB9jXoq","title":"Grouped Example Connector","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/grouped-example-connector","siteSpaceId":"sitesp_RfNNx","description":"Configure the Grouped Example Connector connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"6Sef25dz3i48KV3a5cWH","title":"Grouped Example Connector","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/grouped-example-connector/grouped-example-connector","siteSpaceId":"sitesp_RfNNx","description":"Use Grouped Example Connector data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Grouped Example Connector"}]},{"id":"JfOhlom3T35sby07qfLW","title":"GRR","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/grr","siteSpaceId":"sitesp_RfNNx","description":"Configure the GRR connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"o7reFRc9AZOInJCAjxam","title":"GRR","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/grr/grr","siteSpaceId":"sitesp_RfNNx","description":"Use GRR data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"GRR"}]},{"id":"vlj7VTbUljttRsaKpSmP","title":"Grafana","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/grafana","siteSpaceId":"sitesp_RfNNx","description":"Configure the Grafana connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"QPLEkleJZumSWGlRJ7Ps","title":"Grafana","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/grafana/grafana","siteSpaceId":"sitesp_RfNNx","description":"Use Grafana data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Grafana"}]},{"id":"YilKP8me5RrDLNfguFkO","title":"HashiCorp","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hashicorp","siteSpaceId":"sitesp_RfNNx","description":"Configure the HashiCorp connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"INldVOEKMjPVzwvLqpGF","title":"HashiCorp","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hashicorp/hashicorp","siteSpaceId":"sitesp_RfNNx","description":"Use HashiCorp data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HashiCorp"}]},{"id":"7M3ozfx0fV4fnBjS6ZE1","title":"Have I Been Pwnd","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/have-i-been-pwnd","siteSpaceId":"sitesp_RfNNx","description":"Configure the Have I Been Pwnd connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xiW1lnWCsn1JXpQb0UQ3","title":"Have I Been Pwnd","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/have-i-been-pwnd/have-i-been-pwnd","siteSpaceId":"sitesp_RfNNx","description":"Use Have I Been Pwnd data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Have I Been Pwnd"}]},{"id":"OiNgOKUZxQHu81lXSfjU","title":"HCL BigFix","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hcl-bigfix","siteSpaceId":"sitesp_RfNNx","description":"Configure the HCL BigFix connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"91M8hSCtQY5z4mf1mQOV","title":"HCL BigFix","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hcl-bigfix/hcl-bigfix","siteSpaceId":"sitesp_RfNNx","description":"Use HCL BigFix data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HCL BigFix"}]},{"id":"MUAI9NCF5sx0V1V7el3p","title":"HPE Aruba","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hpe-aruba","siteSpaceId":"sitesp_RfNNx","description":"Configure the HPE Aruba connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"K1SJsXWzxsHN69F56jVO","title":"HPE Aruba","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hpe-aruba/hpe-aruba","siteSpaceId":"sitesp_RfNNx","description":"Use HPE Aruba data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"HPE Aruba"}]},{"id":"GxL7EPhQspWEeuNZeJhw","title":"Hostio Solutions","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hostio-solutions","siteSpaceId":"sitesp_RfNNx","description":"Configure the Hostio Solutions connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rdxjUwdJb1g5TY1bov8n","title":"Hostio Solutions","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/hostio-solutions/hostio-solutions","siteSpaceId":"sitesp_RfNNx","description":"Use Hostio Solutions data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Hostio Solutions"}]},{"id":"H5uj41abEdtd9E7NZ3oQ","title":"IBM","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ibm","siteSpaceId":"sitesp_RfNNx","description":"Configure the IBM connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XNSkLYvr0xWsKF8MRLGB","title":"IBM QRadar","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ibm/ibm-qradar","siteSpaceId":"sitesp_RfNNx","description":"Use IBM QRadar data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"R64mljoPa3LJjSTjGUcN","title":"IBM Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ibm/ibm-security","siteSpaceId":"sitesp_RfNNx","description":"Use IBM Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IBM"}]},{"id":"XHlPasgG5KGGmnVVcBvl","title":"Imperva","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/imperva","siteSpaceId":"sitesp_RfNNx","description":"Configure the Imperva connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"8hC5d4C4WkcjIiJsxqzV","title":"Imperva","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/imperva/imperva","siteSpaceId":"sitesp_RfNNx","description":"Use Imperva data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Imperva"}]},{"id":"q6fFflTGNJzt6NJ71Abz","title":"InfoArmor","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/infoarmor","siteSpaceId":"sitesp_RfNNx","description":"Configure the InfoArmor connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XkJC8Lhtzw366t80YAY9","title":"InfoArmor","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/infoarmor/infoarmor","siteSpaceId":"sitesp_RfNNx","description":"Use InfoArmor data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"InfoArmor"}]},{"id":"7HegI37VwbQiECCbs65o","title":"Intellum","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/intellum","siteSpaceId":"sitesp_RfNNx","description":"Configure the Intellum connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dm9TXRkkrsMWBNVI7cVa","title":"Intellum","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/intellum/intellum","siteSpaceId":"sitesp_RfNNx","description":"Use Intellum data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Intellum"}]},{"id":"N4xQmKfmycyx5ZkRmXuN","title":"IPInfo.io","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ipinfo.io","siteSpaceId":"sitesp_RfNNx","description":"Configure the IPInfo.io connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"RvSeX4HZub0AO1fCN6qx","title":"IPInfo.io","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ipinfo.io/ipinfo.io","siteSpaceId":"sitesp_RfNNx","description":"Use IPInfo.io data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IPInfo.io"}]},{"id":"uWZVWtG2tTqFcxTzuoCP","title":"IPstack","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ipstack","siteSpaceId":"sitesp_RfNNx","description":"Configure the IPstack connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"pHeTqxbQWxoBc8B75fxk","title":"IPstack","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ipstack/ipstack","siteSpaceId":"sitesp_RfNNx","description":"Use IPstack data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"IPstack"}]},{"id":"PeMvoc9Vk7YzWRuB6FCL","title":"Ivanti","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ivanti","siteSpaceId":"sitesp_RfNNx","description":"Configure the Ivanti connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IzjltDcij1deLQAwefDV","title":"Ivanti","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ivanti/ivanti","siteSpaceId":"sitesp_RfNNx","description":"Use Ivanti data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ivanti"}]},{"id":"TS8JlEaTDWKwtvNv5wAg","title":"iZOOlogic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/izoologic","siteSpaceId":"sitesp_RfNNx","description":"Configure the iZOOlogic connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aGqTaz9FWDdSQ3xmezjy","title":"iZOOlogic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/izoologic/izoologic","siteSpaceId":"sitesp_RfNNx","description":"Use iZOOlogic data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"iZOOlogic"}]},{"id":"FLGY3lohatm8lHSfzTnJ","title":"Jamf","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/jamf","siteSpaceId":"sitesp_RfNNx","description":"Configure the Jamf connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XOZGWVUlPFoelC5gnFV2","title":"Jamf","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/jamf/jamf","siteSpaceId":"sitesp_RfNNx","description":"Use Jamf data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Jamf"}]},{"id":"DZxJL3TUA1HBTc1fXcH1","title":"Joe Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/joe-security","siteSpaceId":"sitesp_RfNNx","description":"Configure the Joe Security connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"HMXccxir7koZOFLTSqkt","title":"Joe Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/joe-security/joe-security","siteSpaceId":"sitesp_RfNNx","description":"Use Joe Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Joe Security"}]},{"id":"SZEG7qyNQ1EuX2pqG1qn","title":"JSONWhoIs.com","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/jsonwhois.com","siteSpaceId":"sitesp_RfNNx","description":"Configure the JSONWhoIs.com connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"KWQuFSCduI2tUS7uSpUb","title":"JSONWhoIs.com","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/jsonwhois.com/jsonwhois.com","siteSpaceId":"sitesp_RfNNx","description":"Use JSONWhoIs.com data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"JSONWhoIs.com"}]},{"id":"hgUAtUbyLepUenfttt57","title":"Kafka","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/kafka","siteSpaceId":"sitesp_RfNNx","description":"Configure the Kafka connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"rsV6rHWDffgGyZ2Ac2kL","title":"Kafka","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/kafka/kafka","siteSpaceId":"sitesp_RfNNx","description":"Use Kafka data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kafka"}]},{"id":"IyxvKFlI2nAJNmdErkbM","title":"Kaspersky","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/kaspersky","siteSpaceId":"sitesp_RfNNx","description":"Configure the Kaspersky connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"TReP7nR6sBRL386qiwNV","title":"Kaspersky","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/kaspersky/kaspersky","siteSpaceId":"sitesp_RfNNx","description":"Use Kaspersky data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Kaspersky"}]},{"id":"3RdglpPqsjrkV8UdHRHt","title":"Koi","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/koi","siteSpaceId":"sitesp_RfNNx","description":"Configure the Koi connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"O6Q0uY3Q65V0h771MROH","title":"Koi","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/koi/koi","siteSpaceId":"sitesp_RfNNx","description":"Use Koi data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Koi"}]},{"id":"mDW8HswEZtH9dGw8zPCx","title":"Koodous","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/koodous","siteSpaceId":"sitesp_RfNNx","description":"Configure the Koodous connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"TqFxmWYIBH0rl7fIp5MD","title":"Koodous","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/koodous/koodous","siteSpaceId":"sitesp_RfNNx","description":"Use Koodous data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Koodous"}]},{"id":"KymZg0xom6O5BaKkDTZg","title":"Lastline","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lastline","siteSpaceId":"sitesp_RfNNx","description":"Configure the Lastline connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9PE5tJ4DbsJOs4gjnC7B","title":"Lastline","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lastline/lastline","siteSpaceId":"sitesp_RfNNx","description":"Use Lastline data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Lastline"}]},{"id":"ITCWePvsij6CKW8mkIkF","title":"LevelBlue","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/levelblue","siteSpaceId":"sitesp_RfNNx","description":"Configure the LevelBlue connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UGSEveGjR9uvQGcFGwOE","title":"LevelBlue","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/levelblue/levelblue","siteSpaceId":"sitesp_RfNNx","description":"Use LevelBlue data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LevelBlue"}]},{"id":"g8aKSDRaUpdV26XbFpQs","title":"LogRhythm","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/logrhythm","siteSpaceId":"sitesp_RfNNx","description":"Configure the LogRhythm connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Y2nCmS2BFqFPbPOkBCPH","title":"LogRhythm","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/logrhythm/logrhythm","siteSpaceId":"sitesp_RfNNx","description":"Use LogRhythm data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LogRhythm"}]},{"id":"AhUan0Z0iHwaVkk6L9Qx","title":"LOLBAS","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lolbas","siteSpaceId":"sitesp_RfNNx","description":"Configure the LOLBAS connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"JID2538DXl6ZLtLcuXj0","title":"LOLBAS","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lolbas/lolbas","siteSpaceId":"sitesp_RfNNx","description":"Use LOLBAS data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"LOLBAS"}]},{"id":"la5Up3GKxcy2AlMaUNLx","title":"Lookout","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lookout","siteSpaceId":"sitesp_RfNNx","description":"Configure the Lookout connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"uKrlNBdeYJz4vOoLlro0","title":"Lookout","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lookout/lookout","siteSpaceId":"sitesp_RfNNx","description":"Use Lookout data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Lookout"}]},{"id":"vDbXfubMyPlrBsY5Nreb","title":"Lumu","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lumu","siteSpaceId":"sitesp_RfNNx","description":"Configure the Lumu connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"X0SbTtxoQXlJj5tWbcnY","title":"Lumu","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/lumu/lumu","siteSpaceId":"sitesp_RfNNx","description":"Use Lumu data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Lumu"}]},{"id":"y7SiaOB7nqpdMmHt5gv9","title":"Mail Utilities","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mail-utilities","siteSpaceId":"sitesp_RfNNx","description":"Configure the Mail Utilities connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2MvFMhUQ0Vr9S9I9nAeI","title":"Mail Utilities","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mail-utilities/mail-utilities","siteSpaceId":"sitesp_RfNNx","description":"Use Mail Utilities data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mail Utilities"}]},{"id":"eiKYh1cFaT47FXsjGLdg","title":"Majestic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/majestic","siteSpaceId":"sitesp_RfNNx","description":"Configure the Majestic connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"yqw65WVO6bWXbK8bGHY0","title":"Majestic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/majestic/majestic","siteSpaceId":"sitesp_RfNNx","description":"Use Majestic data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Majestic"}]},{"id":"zhrxTdSJHDIkebgFOMsJ","title":"ManageEngine","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/manageengine","siteSpaceId":"sitesp_RfNNx","description":"Configure the ManageEngine connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dtop5v3rSl6od6niDA0E","title":"ManageEngine","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/manageengine/manageengine","siteSpaceId":"sitesp_RfNNx","description":"Use ManageEngine data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ManageEngine"}]},{"id":"1M2h4lW6pZwGceBnQDFQ","title":"Mattermost","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mattermost","siteSpaceId":"sitesp_RfNNx","description":"Configure the Mattermost connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"DvGqO6wClbA1isbgFGYX","title":"Mattermost","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mattermost/mattermost","siteSpaceId":"sitesp_RfNNx","description":"Use Mattermost data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mattermost"}]},{"id":"9oYmAj7xMveabCj7Qr1w","title":"MaxMind","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/maxmind","siteSpaceId":"sitesp_RfNNx","description":"Configure the MaxMind connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"SP1cn4gyUIs9lvBSIq75","title":"MaxMind","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/maxmind/maxmind","siteSpaceId":"sitesp_RfNNx","description":"Use MaxMind data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MaxMind"}]},{"id":"U42JTXszqxfFV9nsQDZY","title":"Meta","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/meta","siteSpaceId":"sitesp_RfNNx","description":"Configure the Meta connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"kmq6DpCo7VPqnzd3z1Hs","title":"Meta","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/meta/meta","siteSpaceId":"sitesp_RfNNx","description":"Use Meta data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Meta"}]},{"id":"Rjtu2dqtMGZy1a1lVsk7","title":"Mimecast","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mimecast","siteSpaceId":"sitesp_RfNNx","description":"Configure the Mimecast connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fQDfU4flvLg5WwI3VDph","title":"Mimecast","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mimecast/mimecast","siteSpaceId":"sitesp_RfNNx","description":"Use Mimecast data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Mimecast"}]},{"id":"BmLkoCIUVyPNrbAnj3pP","title":"Microsoft","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft","siteSpaceId":"sitesp_RfNNx","description":"Configure the Microsoft connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"4bh0f3X8nwE3580n681A","title":"Azure DevOps","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/azure-devops","siteSpaceId":"sitesp_RfNNx","description":"Use Azure DevOps data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"2uUbd4suopLpyFpkWbf7","title":"Azure Firewall","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/azure-firewall","siteSpaceId":"sitesp_RfNNx","description":"Use Azure Firewall data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"rVvBeTOMLtPFi3kePH4Q","title":"Microsoft 365","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-365","siteSpaceId":"sitesp_RfNNx","description":"Use Microsoft 365 data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"gRJsm77Z8FQqBMzQR1nI","title":"Azure Log Analytics","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/azure-log-analytics","siteSpaceId":"sitesp_RfNNx","description":"Use Azure Log Analytics data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"k71k3PlObV6evkpBN42U","title":"Azure Services","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/azure-services","siteSpaceId":"sitesp_RfNNx","description":"Use Azure Services data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"xH196RHY3DShnLZIuVp4","title":"Azure WAF","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/azure-waf","siteSpaceId":"sitesp_RfNNx","description":"Use Azure WAF data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"XLMIX1babEVtkTCTUsUx","title":"Microsoft Active Directory","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-active-directory","siteSpaceId":"sitesp_RfNNx","description":"Use Microsoft Active Directory data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"9HCWm4LfVRSVKqcGgv6m","title":"Microsoft Graph","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-graph","siteSpaceId":"sitesp_RfNNx","description":"Use Microsoft Graph data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"hQNKOqNeya2pGNpLUBuE","title":"Microsoft Identity","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-identity","siteSpaceId":"sitesp_RfNNx","description":"Use Microsoft Identity data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"6XTve6m492f8zKYmL6tC","title":"Microsoft Intune","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-intune","siteSpaceId":"sitesp_RfNNx","description":"Use Microsoft Intune data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"qiCuz34SmWs7Qhma3Uc1","title":"Microsoft Security Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-security-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Microsoft Security Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"teOhMT18qyQ8UxBsxlUw","title":"Microsoft Windows Tools","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-windows-tools","siteSpaceId":"sitesp_RfNNx","description":"Use Microsoft Windows Tools data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"VZwfO0rfgt8hIu75NTy0","title":"M365 Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/m365-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use M365 Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"Gmmnhfk8UceCrU3x18Ii","title":"MISP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/misp","siteSpaceId":"sitesp_RfNNx","description":"Configure the MISP connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"945JTp4MdxkQk9p5uhnj","title":"MISP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/misp/misp","siteSpaceId":"sitesp_RfNNx","description":"Use MISP data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MISP"}]},{"id":"fa95o58bmwl7L2wcD1Sd","title":"MITRE","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mitre","siteSpaceId":"sitesp_RfNNx","description":"Configure the MITRE connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cVeATMgk0F1oMZMhMBcF","title":"MITRE","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mitre/mitre","siteSpaceId":"sitesp_RfNNx","description":"Use MITRE data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MITRE"}]},{"id":"WLPutYywDp8LTXuE24zy","title":"MongoDB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mongodb","siteSpaceId":"sitesp_RfNNx","description":"Configure the MongoDB connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sqc35Nkko3v4bwc01Ogf","title":"MongoDB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mongodb/mongodb","siteSpaceId":"sitesp_RfNNx","description":"Use MongoDB data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"P8xUVeMg8xlKYO6sDE8C","title":"MxToolBox","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mxtoolbox","siteSpaceId":"sitesp_RfNNx","description":"Configure the MxToolBox connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"LLQBiKp2QhYmcJvCSTh1","title":"MxToolBox","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mxtoolbox/mxtoolbox","siteSpaceId":"sitesp_RfNNx","description":"Use MxToolBox data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MxToolBox"}]},{"id":"fE8eKFWY6Ng6cXOw3HsA","title":"Netcraft","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netcraft","siteSpaceId":"sitesp_RfNNx","description":"Configure the Netcraft connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"b4XSqPpJ210yrvJuVYvU","title":"Netcraft","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netcraft/netcraft","siteSpaceId":"sitesp_RfNNx","description":"Use Netcraft data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Netcraft"}]},{"id":"4vEPaUdcexT9MAYSQB2L","title":"Netmiko","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netmiko","siteSpaceId":"sitesp_RfNNx","description":"Configure the Netmiko connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VdZh4b8LON6Mc4tcQWSZ","title":"Netmiko","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netmiko/netmiko","siteSpaceId":"sitesp_RfNNx","description":"Use Netmiko data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Netmiko"}]},{"id":"nlu8oTY9yaE5O7ZTpyTI","title":"NetQuest","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netquest","siteSpaceId":"sitesp_RfNNx","description":"Configure the NetQuest connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XfOjYyxwAcBpbrRzpCkS","title":"NetQuest","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netquest/netquest","siteSpaceId":"sitesp_RfNNx","description":"Use NetQuest data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"NetQuest"}]},{"id":"uUyYXt3Bhkfoa7k74cBI","title":"Netskope","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netskope","siteSpaceId":"sitesp_RfNNx","description":"Configure the Netskope connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"j7utcEjcI9Jfnj2OhCSk","title":"Netskope","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/netskope/netskope","siteSpaceId":"sitesp_RfNNx","description":"Use Netskope data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Netskope"}]},{"id":"vlilpgCQ40YwYRjWErsR","title":"NIST","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/nist","siteSpaceId":"sitesp_RfNNx","description":"Configure the NIST connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cW1zjnncD4nAUAxfjje6","title":"NIST","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/nist/nist","siteSpaceId":"sitesp_RfNNx","description":"Use NIST data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"NIST"}]},{"id":"wE8ovXLmTVyFW2PteCHo","title":"nmap","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/nmap","siteSpaceId":"sitesp_RfNNx","description":"Configure the nmap connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sOWtMMDIrKhD87N0BJlc","title":"nmap","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/nmap/nmap","siteSpaceId":"sitesp_RfNNx","description":"Use nmap data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"nmap"}]},{"id":"9q2ENlDuAOf3DuLFD6DO","title":"NAVEX","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/navex","siteSpaceId":"sitesp_RfNNx","description":"Configure the NAVEX connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"pTJJbfh94hKjsoMTptTY","title":"NAVEX","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/navex/navex","siteSpaceId":"sitesp_RfNNx","description":"Use NAVEX data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"NAVEX"}]},{"id":"EfkYpXUSUnM4g5c17jZK","title":"Nutanix","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/nutanix","siteSpaceId":"sitesp_RfNNx","description":"Configure the Nutanix connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Irt8QCgmWuCH79ScP4mX","title":"Nutanix","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/nutanix/nutanix","siteSpaceId":"sitesp_RfNNx","description":"Use Nutanix data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Nutanix"}]},{"id":"jxOOiaktJcUqJJgTQ4EG","title":"Okta","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/okta","siteSpaceId":"sitesp_RfNNx","description":"Configure the Okta connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sbzWuQFIjyblu6yuZv3k","title":"Okta Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/okta/okta-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Okta Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"KYz8shOAxCSIyzXUOq9z","title":"OpenAI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/openai","siteSpaceId":"sitesp_RfNNx","description":"Configure the OpenAI connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"o3tHnmWhjdqS4HbAv1ug","title":"OpenAI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/openai/openai","siteSpaceId":"sitesp_RfNNx","description":"Use OpenAI data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenAI"}]},{"id":"a6WADbbfcOFXkQmXpA1r","title":"OpenCVE","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opencve","siteSpaceId":"sitesp_RfNNx","description":"Configure the OpenCVE connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"IC248LisqbAfmksacgA8","title":"OpenCVE","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opencve/opencve","siteSpaceId":"sitesp_RfNNx","description":"Use OpenCVE data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenCVE"}]},{"id":"xFDZaC2MF5sDhXKChdON","title":"OpenLDAP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/openldap","siteSpaceId":"sitesp_RfNNx","description":"Configure the OpenLDAP connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"CfqvzIu8NKeOuYp28LJm","title":"OpenLDAP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/openldap/openldap","siteSpaceId":"sitesp_RfNNx","description":"Use OpenLDAP data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenLDAP"}]},{"id":"i0KUdkHyzC2O6b8Cwpy7","title":"OpenPhish","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/openphish","siteSpaceId":"sitesp_RfNNx","description":"Configure the OpenPhish connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"C9KoyaseoD1rGUXQYK7s","title":"OpenPhish","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/openphish/openphish","siteSpaceId":"sitesp_RfNNx","description":"Use OpenPhish data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenPhish"}]},{"id":"IcbNcMbWNR4VLwvpnoxD","title":"OpenText","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opentext","siteSpaceId":"sitesp_RfNNx","description":"Configure the OpenText connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"gi7xB9e6kkUS0rj9yI7N","title":"OpenText EnCase Endpoint Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opentext/opentext-encase-endpoint-security","siteSpaceId":"sitesp_RfNNx","description":"Use OpenText EnCase Endpoint Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenText"}]},{"id":"UBq7007OuS3LYcz3JSJi","title":"OpenText Service Manager","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opentext/opentext-service-manager","siteSpaceId":"sitesp_RfNNx","description":"Use OpenText Service Manager data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenText"}]},{"id":"VbCB5wzMG4Ccll0g6MHC","title":"OpenText Vertica","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opentext/opentext-vertica","siteSpaceId":"sitesp_RfNNx","description":"Use OpenText Vertica data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OpenText"}]},{"id":"FyVbM2SCb7aVoqkoHAl6","title":"OPSWAT","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opswat","siteSpaceId":"sitesp_RfNNx","description":"Configure the OPSWAT connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"glhxsMOYqVOCiR04oLkf","title":"OPSWAT MetaDefender","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/opswat/opswat-metadefender","siteSpaceId":"sitesp_RfNNx","description":"Use OPSWAT MetaDefender data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OPSWAT"}]},{"id":"48BjP8Nz5ux9No2E7VQF","title":"Oracle","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/oracle","siteSpaceId":"sitesp_RfNNx","description":"Configure the Oracle connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Y7dNxrGf8TnhFUXpN4UV","title":"Oracle","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/oracle/oracle","siteSpaceId":"sitesp_RfNNx","description":"Use Oracle data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"eLHRVt8M7k5PNdusQfC5","title":"PacketMail.net","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/packetmail.net","siteSpaceId":"sitesp_RfNNx","description":"Configure the PacketMail.net connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xFFFuzg3DL2RqEH1D15M","title":"PacketMail.net","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/packetmail.net/packetmail.net","siteSpaceId":"sitesp_RfNNx","description":"Use PacketMail.net data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PacketMail.net"}]},{"id":"Ur5cGWqZvYKw9VyJMgah","title":"PacketSled","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/packetsled","siteSpaceId":"sitesp_RfNNx","description":"Configure the PacketSled connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1hxnYfehaco35jzPzhP6","title":"PacketSled","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/packetsled/packetsled","siteSpaceId":"sitesp_RfNNx","description":"Use PacketSled data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PacketSled"}]},{"id":"Ogfe9xwSTcXZSDNZXW4H","title":"PagerDuty","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/pagerduty","siteSpaceId":"sitesp_RfNNx","description":"Configure the PagerDuty connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"mPRwxdzHWBikNhHpDuAd","title":"PagerDuty Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/pagerduty/pagerduty-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use PagerDuty Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PagerDuty"}]},{"id":"6TK0HqhAFclIqd3T3dPI","title":"PAT Helpdesk Advanced","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/pat-helpdesk-advanced","siteSpaceId":"sitesp_RfNNx","description":"Configure the PAT Helpdesk Advanced connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"z2nP5f9bxq9mqHFKG35e","title":"PAT Helpdesk Advanced","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/pat-helpdesk-advanced/pat-helpdesk-advanced","siteSpaceId":"sitesp_RfNNx","description":"Use PAT Helpdesk Advanced data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PAT Helpdesk Advanced"}]},{"id":"z0e3fzYLbrnwMLTHYPxW","title":"PhishLabs","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/phishlabs","siteSpaceId":"sitesp_RfNNx","description":"Configure the PhishLabs connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"vzA8WOVRJa62qTMmO86X","title":"PhishLabs","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/phishlabs/phishlabs","siteSpaceId":"sitesp_RfNNx","description":"Use PhishLabs data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"PhishLabs"}]},{"id":"0WyfgJtHR2ioXHzKqvf5","title":"Pipl","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/pipl","siteSpaceId":"sitesp_RfNNx","description":"Configure the Pipl connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"YpIzRHYgz8IpIu2ZrNze","title":"Pipl","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/pipl/pipl","siteSpaceId":"sitesp_RfNNx","description":"Use Pipl data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Pipl"}]},{"id":"HKLnQUbwCOPA570y4FWe","title":"Plainview","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/plainview","siteSpaceId":"sitesp_RfNNx","description":"Configure the Plainview connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"k2VDZuDpOpP1uLhSpjhG","title":"Plainview","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/plainview/plainview","siteSpaceId":"sitesp_RfNNx","description":"Use Plainview data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Plainview"}]},{"id":"OIWVHqZxmUoGxOEHZYjp","title":"Proofpoint","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/proofpoint","siteSpaceId":"sitesp_RfNNx","description":"Configure the Proofpoint connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UtvpO3RQaqMbYMIovIMu","title":"Proofpoint","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/proofpoint/proofpoint","siteSpaceId":"sitesp_RfNNx","description":"Use Proofpoint data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Proofpoint"}]},{"id":"AinU9QXydFHUweeiZBBs","title":"ProtectWise","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/protectwise","siteSpaceId":"sitesp_RfNNx","description":"Configure the ProtectWise connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cLUEzIt5prqySgJcgVWj","title":"ProtectWise","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/protectwise/protectwise","siteSpaceId":"sitesp_RfNNx","description":"Use ProtectWise data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ProtectWise"}]},{"id":"jEMCMewstAxB5oEVUpTj","title":"Qualys","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/qualys","siteSpaceId":"sitesp_RfNNx","description":"Configure the Qualys connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"zrz1boxlzsfp3zlT605g","title":"Qualys","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/qualys/qualys","siteSpaceId":"sitesp_RfNNx","description":"Use Qualys data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Qualys"}]},{"id":"P5wNc8CtFSIlnKNoJ4e4","title":"Quest KACE","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/quest-kace","siteSpaceId":"sitesp_RfNNx","description":"Configure the Quest KACE connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Q42SenznCAS1maZrnUfc","title":"Quest KACE","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/quest-kace/quest-kace","siteSpaceId":"sitesp_RfNNx","description":"Use Quest KACE data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Quest KACE"}]},{"id":"KuTWJ0eb3AD3TU6hfVeH","title":"Rapid7","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/rapid7","siteSpaceId":"sitesp_RfNNx","description":"Configure the Rapid7 connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"vFtItpaHjsP4aRIUQCK7","title":"Rapid7","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/rapid7/rapid7","siteSpaceId":"sitesp_RfNNx","description":"Use Rapid7 data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Rapid7"}]},{"id":"juwS9dU8Eca5U78gTGve","title":"Razor Group","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/razor-group","siteSpaceId":"sitesp_RfNNx","description":"Configure the Razor Group connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"87gwyi0F6DdyCfCEW4XU","title":"Razor Group","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/razor-group/razor-group","siteSpaceId":"sitesp_RfNNx","description":"Use Razor Group data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Razor Group"}]},{"id":"kdbIZXepsbw29TAnso8K","title":"Recorded Future","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/recorded-future","siteSpaceId":"sitesp_RfNNx","description":"Configure the Recorded Future connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"GbBUlA0TKY6sXkus54Sm","title":"Recorded Future","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/recorded-future/recorded-future","siteSpaceId":"sitesp_RfNNx","description":"Use Recorded Future data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Recorded Future"}]},{"id":"PBSpZkhHwK0nuHW7rYGi","title":"Red Hat","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/red-hat","siteSpaceId":"sitesp_RfNNx","description":"Configure the Red Hat connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"UtZqyTpLN9JC9MMxJm2N","title":"Red Hat Ansible","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/red-hat/red-hat-ansible","siteSpaceId":"sitesp_RfNNx","description":"Use Red Hat Ansible data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Red Hat"}]},{"id":"coIXaLMPtsG1gvbGxJuJ","title":"Redmine","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/redmine","siteSpaceId":"sitesp_RfNNx","description":"Configure the Redmine connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"TssqvqTFij14utf7q0Lr","title":"Redmine","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/redmine/redmine","siteSpaceId":"sitesp_RfNNx","description":"Use Redmine data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Redmine"}]},{"id":"cZVioyj2HDlbTRICL6dB","title":"ReliaQuest","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/reliaquest","siteSpaceId":"sitesp_RfNNx","description":"Configure the ReliaQuest connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"nF0gVPC2AmvioSt4wxNs","title":"ReliaQuest","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/reliaquest/reliaquest","siteSpaceId":"sitesp_RfNNx","description":"Use ReliaQuest data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ReliaQuest"}]},{"id":"sJv5ROJs5dIkD80fE424","title":"RemoteAccess","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/remoteaccess","siteSpaceId":"sitesp_RfNNx","description":"Configure the RemoteAccess connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"15ac4VfWBqjMpoaiPxIY","title":"RemoteAccess","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/remoteaccess/remoteaccess","siteSpaceId":"sitesp_RfNNx","description":"Use RemoteAccess data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"RemoteAccess"}]},{"id":"UNOKDGz5CuiJz71eLXiL","title":"Retarus","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/retarus","siteSpaceId":"sitesp_RfNNx","description":"Configure the Retarus connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"KhUJ9LKj2lFYauou6xVL","title":"Retarus","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/retarus/retarus","siteSpaceId":"sitesp_RfNNx","description":"Use Retarus data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Retarus"}]},{"id":"qjg7qprNYydICw3FnGKv","title":"RSA","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/rsa","siteSpaceId":"sitesp_RfNNx","description":"Configure the RSA connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Kz1kpp9VIPw2Lj5o7EDa","title":"RSA","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/rsa/rsa","siteSpaceId":"sitesp_RfNNx","description":"Use RSA data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"RSA"}]},{"id":"HupMvNTxMdFK75D5PkG9","title":"RTIR","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/rtir","siteSpaceId":"sitesp_RfNNx","description":"Configure the RTIR connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"e3lkWwkPvEuKWCCwYtxV","title":"RTIR","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/rtir/rtir","siteSpaceId":"sitesp_RfNNx","description":"Use RTIR data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"RTIR"}]},{"id":"CLK8ZJRqo9VXVyHhMt9H","title":"Salesforce","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/salesforce","siteSpaceId":"sitesp_RfNNx","description":"Configure the Salesforce connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"VYdV9wMgNryuP70S0MF9","title":"Salesforce connector","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/salesforce/ingest-and-run-salesforce-automation-and-remediation","siteSpaceId":"sitesp_RfNNx","description":"Use Salesforce connector data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"FkeEZ8NDzA3YOrFsmkQo","title":"Automation and remediation commands","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/salesforce/ingest-and-run-salesforce-automation-and-remediation/automation-and-remediation-commands","siteSpaceId":"sitesp_RfNNx","description":"Salesforce Automation and Remediation commands for playbooks and the War Room for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"},{"label":"Salesforce connector"}]},{"id":"TKBxjAaV16TRqHyBgmWj","title":"Samhaus","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/samhaus","siteSpaceId":"sitesp_RfNNx","description":"Configure the Samhaus connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"DsEnikNy7hRw8GCFylOj","title":"Samhaus","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/samhaus/samhaus","siteSpaceId":"sitesp_RfNNx","description":"Use Samhaus data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Samhaus"}]},{"id":"jMrBddLZRVCIzPo1lJw1","title":"SANS DShield","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sans-dshield","siteSpaceId":"sitesp_RfNNx","description":"Configure the SANS DShield connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"2uudi5KkBDve8mb2fC91","title":"SANS DShield","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sans-dshield/sans-dshield","siteSpaceId":"sitesp_RfNNx","description":"Use SANS DShield data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SANS DShield"}]},{"id":"LWq9HCFrFefYJ6Izbnzf","title":"SAP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sap","siteSpaceId":"sitesp_RfNNx","description":"Configure the SAP connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"fQ4fkDgGdK530mi1vPGG","title":"SAP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sap/sap","siteSpaceId":"sitesp_RfNNx","description":"Use SAP data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SAP"}]},{"id":"uzwZKwYVVxLDpYd599Vr","title":"Securonix","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/securonix","siteSpaceId":"sitesp_RfNNx","description":"Configure the Securonix connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MOyvioqtZaUYzTOSswVW","title":"Securonix","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/securonix/securonix","siteSpaceId":"sitesp_RfNNx","description":"Use Securonix data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Securonix"}]},{"id":"7QbxZDecoqWcCaTEBzXg","title":"ServiceNow","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/servicenow","siteSpaceId":"sitesp_RfNNx","description":"Configure the ServiceNow connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"X5wrY1D0ya0SWR8s0POY","title":"ServiceNow Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/servicenow/servicenow-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use ServiceNow Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"3HM7IweHhUzR1HfnuPpg","title":"Shodan","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/shodan","siteSpaceId":"sitesp_RfNNx","description":"Configure the Shodan connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Qkb52vefff6aFAptPfkN","title":"Shodan","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/shodan/shodan","siteSpaceId":"sitesp_RfNNx","description":"Use Shodan data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Shodan"}]},{"id":"R4MSZqi1towjCDZKrFsB","title":"Skyhigh Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/skyhigh-security","siteSpaceId":"sitesp_RfNNx","description":"Configure the Skyhigh Security connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"NmAt8G2UPwBRMfEX4WbO","title":"Skyhigh Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/skyhigh-security/skyhigh-security","siteSpaceId":"sitesp_RfNNx","description":"Use Skyhigh Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Skyhigh Security"}]},{"id":"r8I3ffnMRlZX68HgpZdu","title":"Slack","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/slack","siteSpaceId":"sitesp_RfNNx","description":"Configure the Slack connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"PoxkF4qYt95CioGMMc47","title":"Slack Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/slack/slack-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Slack Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"UneVQ7RJToN7RQrOvV02","title":"SMB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/smb","siteSpaceId":"sitesp_RfNNx","description":"Configure the SMB connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dQ4gE5ScTHpP4WTa2qQv","title":"SMB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/smb/smb","siteSpaceId":"sitesp_RfNNx","description":"Use SMB data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SMB"}]},{"id":"OG7yU9J4Qn2KC2UMviOS","title":"SMIME Messaging","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/smime-messaging","siteSpaceId":"sitesp_RfNNx","description":"Configure the SMIME Messaging connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"T4dTuWrpAP16XW9InGSq","title":"SMIME Messaging","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/smime-messaging/smime-messaging","siteSpaceId":"sitesp_RfNNx","description":"Use SMIME Messaging data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SMIME Messaging"}]},{"id":"06rd2zC56PJZwMn4cEQx","title":"Snowflake","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/snowflake","siteSpaceId":"sitesp_RfNNx","description":"Configure the Snowflake connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ghfeFendX0R3pX3MldxN","title":"Snowflake Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/snowflake/snowflake-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Snowflake Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Snowflake"}]},{"id":"piir0S5aLjm9CvBjhQyf","title":"SolarWinds","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/solarwinds","siteSpaceId":"sitesp_RfNNx","description":"Configure the SolarWinds connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"f6lEaGrtqAKunqGd1psQ","title":"SolarWinds","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/solarwinds/solarwinds","siteSpaceId":"sitesp_RfNNx","description":"Use SolarWinds data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SolarWinds"}]},{"id":"54Gs77XincmMcA4XrpJw","title":"Sophos","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sophos","siteSpaceId":"sitesp_RfNNx","description":"Configure the Sophos connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ONEyfhlhL45Dcwr5gMju","title":"Sophos","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sophos/sophos","siteSpaceId":"sitesp_RfNNx","description":"Use Sophos data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sophos"}]},{"id":"yGUVjMZkPxiZvaxpM3Te","title":"Splunk","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/splunk","siteSpaceId":"sitesp_RfNNx","description":"Configure the Splunk connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"jFDP0UGz4Iw5F4oYuyf5","title":"Splunk Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/splunk/splunk-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Splunk Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Splunk"}]},{"id":"Ch3dysj8p9tIr8zMaSYy","title":"Sublime Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sublime-security","siteSpaceId":"sitesp_RfNNx","description":"Configure the Sublime Security connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1ri8kwoXTFo02y1N8WcU","title":"Sublime Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sublime-security/sublime-security","siteSpaceId":"sitesp_RfNNx","description":"Use Sublime Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sublime Security"}]},{"id":"6w3VBXmG3plXy60JHsrR","title":"Sumo Logic","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sumo-logic","siteSpaceId":"sitesp_RfNNx","description":"Configure the Sumo Logic connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dWvLo2UGKTNq2tTbFcEr","title":"Sumo Logic Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sumo-logic/sumo-logic-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Sumo Logic Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Sumo Logic"}]},{"id":"NJHsgRCH1vOGRvgL4cNA","title":"SysAid","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sysaid","siteSpaceId":"sitesp_RfNNx","description":"Configure the SysAid connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"dMfijFM5KJ3qD8dTSMGc","title":"SysAid","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/sysaid/sysaid","siteSpaceId":"sitesp_RfNNx","description":"Use SysAid data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"SysAid"}]},{"id":"7jUoyowTkbzyHGCNhQPK","title":"Syslog Sender","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/syslog-sender","siteSpaceId":"sitesp_RfNNx","description":"Configure the Syslog Sender connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"BZIGMNuCbp2mPs4ju3s1","title":"Syslog Sender","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/syslog-sender/syslog-sender","siteSpaceId":"sitesp_RfNNx","description":"Use Syslog Sender data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Syslog Sender"}]},{"id":"Cez6naZ9Tjm9amTfAOmR","title":"Tanium","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tanium","siteSpaceId":"sitesp_RfNNx","description":"Configure the Tanium connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3VSFlYBocXLdEfcTPqOs","title":"Tanium","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tanium/tanium","siteSpaceId":"sitesp_RfNNx","description":"Use Tanium data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tanium"}]},{"id":"EwbW9fDzq73RybwXFn9h","title":"TAXII","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/taxii","siteSpaceId":"sitesp_RfNNx","description":"Configure the TAXII connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"3PpPLJjK6UfEajl0ME5V","title":"TAXII","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/taxii/taxii","siteSpaceId":"sitesp_RfNNx","description":"Use TAXII data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TAXII"}]},{"id":"Jo96jQBae9rs0nCG4ke8","title":"Telegram","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/telegram","siteSpaceId":"sitesp_RfNNx","description":"Configure the Telegram connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"r4WiHAxnjcu5dszFcInI","title":"Telegram","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/telegram/telegram","siteSpaceId":"sitesp_RfNNx","description":"Use Telegram data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Telegram"}]},{"id":"s2DTVptJqQOR0yriHa7W","title":"Tenable","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tenable","siteSpaceId":"sitesp_RfNNx","description":"Configure the Tenable connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"MIdZpzWl2ghOFRU7egVN","title":"Tenable","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tenable/tenable","siteSpaceId":"sitesp_RfNNx","description":"Use Tenable data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tenable"}]},{"id":"LzUtngfbEGYHuV1GNqZ5","title":"TheHive","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/thehive","siteSpaceId":"sitesp_RfNNx","description":"Configure the TheHive connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"XG6C5E9HcqQddKlE2gjT","title":"TheHive","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/thehive/thehive","siteSpaceId":"sitesp_RfNNx","description":"Use TheHive data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TheHive"}]},{"id":"AIn03HyOQQSeE3iCUg4b","title":"Thinkst Canary","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/thinkst-canary","siteSpaceId":"sitesp_RfNNx","description":"Configure the Thinkst Canary connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FKZZbcMLUDhm7pK7ia2o","title":"Thinkst Canary","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/thinkst-canary/thinkst-canary","siteSpaceId":"sitesp_RfNNx","description":"Use Thinkst Canary data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Thinkst Canary"}]},{"id":"OrahVbJcviTULwYsFtYq","title":"ThreatConnect","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/threatconnect","siteSpaceId":"sitesp_RfNNx","description":"Configure the ThreatConnect connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ZQjo4Fb0dB2eeLrmVOEX","title":"ThreatConnect","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/threatconnect/threatconnect","siteSpaceId":"sitesp_RfNNx","description":"Use ThreatConnect data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ThreatConnect"}]},{"id":"Ye2EOejANjCUajzymudh","title":"ThreatMiner.org","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/threatminer.org","siteSpaceId":"sitesp_RfNNx","description":"Configure the ThreatMiner.org connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"CnHBcSCMgbMzpbX3t6TE","title":"ThreatMiner.org","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/threatminer.org/threatminer.org","siteSpaceId":"sitesp_RfNNx","description":"Use ThreatMiner.org data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ThreatMiner.org"}]},{"id":"GurIH2KlS5TTWt0j7EIJ","title":"ThreatX","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/threatx","siteSpaceId":"sitesp_RfNNx","description":"Configure the ThreatX connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"qP2pGzvskpRK04vVS2mv","title":"ThreatX","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/threatx/threatx","siteSpaceId":"sitesp_RfNNx","description":"Use ThreatX data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ThreatX"}]},{"id":"47CCx4fHwpJi8IladqyP","title":"Tidy","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tidy","siteSpaceId":"sitesp_RfNNx","description":"Configure the Tidy connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"4J35dxqj9klAJJKBT2Dl","title":"Tidy","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tidy/tidy","siteSpaceId":"sitesp_RfNNx","description":"Use Tidy data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tidy"}]},{"id":"HxIlIRdJfsrF3hK04EzZ","title":"TOPdesk","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/topdesk","siteSpaceId":"sitesp_RfNNx","description":"Configure the TOPdesk connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"s1lozYkO3lMOPBXOOL7I","title":"TOPdesk","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/topdesk/topdesk","siteSpaceId":"sitesp_RfNNx","description":"Use TOPdesk data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TOPdesk"}]},{"id":"r23HAlyS0e7iVFr4FeQI","title":"Tor Exit Adress","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tor-exit-adress","siteSpaceId":"sitesp_RfNNx","description":"Configure the Tor Exit Adress connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"qJJIbWBKGPrHscuxCKmI","title":"Tor Exit Adress","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/tor-exit-adress/tor-exit-adress","siteSpaceId":"sitesp_RfNNx","description":"Use Tor Exit Adress data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Tor Exit Adress"}]},{"id":"rTTR5HWbzZrOF27zDPnC","title":"Trellix","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix","siteSpaceId":"sitesp_RfNNx","description":"Configure the Trellix connectors for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"p5kyN3TxCCVf9U52Sble","title":"Trellix Database Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-database-security","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix Database Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"DWorrka9xXPXbkILFRhM","title":"Trellix Email Security (ETP)","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-email-security-etp","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix Email Security (ETP) data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"lwLekeXntdGvDBsF7z2E","title":"Trellix Email Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-email-security","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix Email Security data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"Tas7WBhLMTJQFTWMUApX","title":"Trellix Endpoint (HX)","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-endpoint-hx","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix Endpoint (HX) data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"06q4wLJuvwQaciuEp5kt","title":"Trellix ePO","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-epo","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix ePO data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"zXVviqL8MdjTsBexr7vl","title":"Trellix Network","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-network","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix Network data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"jYS8x7znGGAHwfohjfJk","title":"Trellix Sandbox","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-sandbox","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix Sandbox data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"Cww05jEB0ShNljQdzvFo","title":"Trellix SIEM","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-siem","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix SIEM data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"OVPfH69lvQeXqEGrEUBH","title":"Trellix Threat Intel","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trellix/trellix-threat-intel","siteSpaceId":"sitesp_RfNNx","description":"Use Trellix Threat Intel data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Trellix"}]},{"id":"uZHvWMXMsRS09FNFCcAS","title":"TrendAI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trendai","siteSpaceId":"sitesp_RfNNx","description":"Configure the TrendAI connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"F8qILHQ23L6dYMb2HSz3","title":"TrendAI","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/trendai/trendai","siteSpaceId":"sitesp_RfNNx","description":"Use TrendAI data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"TrendAI"}]},{"id":"OmzhBo4by5yC20ylhakP","title":"Twilio","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/twilio","siteSpaceId":"sitesp_RfNNx","description":"Configure the Twilio connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"PO1sT1keQBMf273jpEV4","title":"Twilio","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/twilio/twilio","siteSpaceId":"sitesp_RfNNx","description":"Use Twilio data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Twilio"}]},{"id":"81WzSJJkDfQBPiZbgFCj","title":"Versa Networks","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/versa-networks","siteSpaceId":"sitesp_RfNNx","description":"Configure the Versa Networks connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ny6rJWayo131YEVSlk9l","title":"Versa Networks","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/versa-networks/versa-networks","siteSpaceId":"sitesp_RfNNx","description":"Use Versa Networks data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Versa Networks"}]},{"id":"5VJE79j7t4fWMQXAZRYu","title":"VMware","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/vmware","siteSpaceId":"sitesp_RfNNx","description":"Configure the VMware connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"f3P9W2mLkQCjxmLUp89l","title":"VMware Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/vmware/vmware-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use VMware Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"VMware"}]},{"id":"lPuAkwC1tg48LxgkAyF4","title":"VulnDB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/vulndb","siteSpaceId":"sitesp_RfNNx","description":"Configure the VulnDB connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"999xNEc23C89eASznp5h","title":"VulnDB","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/vulndb/vulndb","siteSpaceId":"sitesp_RfNNx","description":"Use VulnDB data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"VulnDB"}]},{"id":"rX0vm901XRHOa0cPrhMD","title":"WhatsMyBrowser.org","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/whatsmybrowser.org","siteSpaceId":"sitesp_RfNNx","description":"Configure the WhatsMyBrowser.org connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"GoXRLri3yiWzQ6yN68z6","title":"WhatsMyBrowser.org","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/whatsmybrowser.org/whatsmybrowser.org","siteSpaceId":"sitesp_RfNNx","description":"Use WhatsMyBrowser.org data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"WhatsMyBrowser.org"}]},{"id":"KkzIeRtSXkTOh9XkS6gt","title":"Whois","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/whois","siteSpaceId":"sitesp_RfNNx","description":"Configure the Whois connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"lYsrlsWPIAbu8HYoa3JI","title":"Whois","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/whois/whois","siteSpaceId":"sitesp_RfNNx","description":"Use Whois data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Whois"}]},{"id":"oIdLM2qXhAEZ66S3BLZI","title":"Workday","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/workday","siteSpaceId":"sitesp_RfNNx","description":"Configure the Workday connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Ij8QelRrwkDHJHOwX43P","title":"Workday Automation and Collection","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/workday/workday-automation-and-collection","siteSpaceId":"sitesp_RfNNx","description":"Use Workday Automation and Collection data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Workday"}]},{"id":"w4QSgBaLn44nKbXLsgiO","title":"X","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/x","siteSpaceId":"sitesp_RfNNx","description":"Configure the X connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"9AO2yR3UztxbS0s9aVNf","title":"X Automation and Remediation","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/x/x-automation-and-remediation","siteSpaceId":"sitesp_RfNNx","description":"Use X Automation and Remediation data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"X"}]},{"id":"TlW3Ziaox9EXk3QQ0yoz","title":"Zendesk","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zendesk","siteSpaceId":"sitesp_RfNNx","description":"Configure the Zendesk connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"xYOiCkCORLBsOknrcsuj","title":"Zendesk","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zendesk/zendesk","siteSpaceId":"sitesp_RfNNx","description":"Use Zendesk data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zendesk"}]},{"id":"VRcW3mGuWuyogvRrGtgC","title":"Zimperium","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zimperium","siteSpaceId":"sitesp_RfNNx","description":"Configure the Zimperium connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"k9iSMS3gWZIpjX7141qV","title":"Zimperium","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zimperium/zimperium","siteSpaceId":"sitesp_RfNNx","description":"Use Zimperium data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zimperium"}]},{"id":"LALWnWEnevzK4dlxhMkA","title":"Zoom","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zoom","siteSpaceId":"sitesp_RfNNx","description":"Configure the Zoom connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"FiqQ9kyLfuNJl8WDQNir","title":"Zoom","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zoom/zoom","siteSpaceId":"sitesp_RfNNx","description":"Use Zoom data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zoom"}]},{"id":"J0PSfhoCq2aW4FcV1uZv","title":"Zscaler","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zscaler","siteSpaceId":"sitesp_RfNNx","description":"Configure the Zscaler connector for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"aLjrGweYSjkNrPcnqdNk","title":"Zscaler","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/zscaler/zscaler","siteSpaceId":"sitesp_RfNNx","description":"Use Zscaler data for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Zscaler"}]},{"id":"mDi805RIl4BGVS20qKwj","title":"Connectors","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/connectors","siteSpaceId":"sitesp_RfNNx","description":"Use unified connectors to configure third-party services and security capabilities in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"}]},{"id":"AMqdoexNgXP8IfeG6r9K","title":"Standard data sources","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/standard-data-sources","siteSpaceId":"sitesp_RfNNx","description":"Configure standard Cortex AgentiX data sources to ingest, parse, and normalize third-party security logs.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"}]},{"id":"KqSG0bWpSIzEKbiumM5o","title":"Palo Alto Networks integrations","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"}]},{"id":"AR4uY95cxlFMWW0LbFdU","title":"Next-Generation Firewall","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"9amvHv3E7R9lNufZObqW","title":"Panorama","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/next-generation-firewall/panorama","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Next-Generation Firewall"}]},{"id":"9wapkN7VUB17TkAyvZTF","title":"Prisma Access","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/prisma-access","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"2xTGPHzirMrfk38LHvvE","title":"Palo Alto Networks Prisma","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/prisma-access/palo-alto-networks-prisma","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"Prisma Access"}]},{"id":"i5qGZwaEAHbLGnpokoqM","title":"IoT Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/iot-security","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"4YXklp6uz31WiCWq4jrD","title":"IoT Security","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/iot-security/iot-security","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"},{"label":"IoT Security"}]},{"id":"rovK3a1HvJdWWzKsrv7I","title":"Cortex Automation Developer Tools","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/cortex-automation-developer-tools","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"Prxsk9KESgWFOP8nfXXB","title":"Cortex Data Lake","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/cortex-data-lake","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"azLQaUI2aGC5rlkSDEuR","title":"Cortex Internals","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/cortex-internals","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"rRi6WgTRvdXpcLtyJBgv","title":"Cortex XDR","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/cortex-xdr","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"CBIgvAUpB9wtsOeXhU03","title":"Enterprise DLP","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/enterprise-dlp","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"Onfezud5vNnij7lPypvT","title":"Palo Alto Networks Cortex","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/palo-alto-networks-cortex","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"knJtinJ7OszypZVp3mT5","title":"PAN PSIRT Advisories","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/pan-psirt-advisories","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"OY54bmWvbvj898L2snl6","title":"Prisma Cloud Compute","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/prisma-cloud-compute","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"Qb6G4FbtGlRtDVUSWDBW","title":"Prisma Cloud CSPM","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/prisma-cloud-cspm","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"CkWS6oawH7AELCbfLrYf","title":"SaaS Security (Aperture)","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/saas-security-aperture","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"lrnhYvB36ygtNKXkXLuk","title":"Threat Vault","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/threat-vault","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"F96uhtq87ORbfJi3m5fu","title":"WildFire Cloud","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/palo-alto-networks-integrations/wildfire-cloud","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Palo Alto Networks integrations"}]},{"id":"JiNRgZqYQ0ndmlNsGH1k","title":"Administration and troubleshooting","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting","siteSpaceId":"sitesp_RfNNx","description":"Learn more about the administration and troubleshooting of the different data collector and connector integrations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"}]},{"id":"7DTHvUscWYcfZTOt18UD","title":"Manage instances","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/manage-instances","siteSpaceId":"sitesp_RfNNx","description":"Manage data source and integration instances in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"pXKGSIQ7RRswa1uO6xkn","title":"Add a new data source or instance","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/add-a-new-data-source-or-instance","siteSpaceId":"sitesp_RfNNx","description":"Add a data source or integration instance in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"kBg2evrLHzEmwHVpdKVb","title":"Integrations","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX integrations and instances to connect third-party tools and automate SOC operations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"yh4a7vmgw9cajjbyRClf","title":"Manage API keys","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/manage-api-keys","siteSpaceId":"sitesp_RfNNx","description":"Create and manage API keys for Cortex AgentiX integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"h9HX5k1igYp6NPVSHOg1","title":"Integration use cases","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/integration-use-cases","siteSpaceId":"sitesp_RfNNx","description":"Explore integration use cases for Cortex AgentiX security workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"Esmr6jEQaZjrCleT5ohk","title":"Add an integration instance","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/add-an-integration-instance","siteSpaceId":"sitesp_RfNNx","description":"Add and configure Cortex AgentiX integration instances for third-party security tools, issue ingestion, and automation.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"ToXYt27Gvq1uoJM8nEtG","title":"Configure integration permissions","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/configure-integration-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure permissions for Cortex AgentiX integration instances and commands.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"3oMcrLifum20wCjS0pAF","title":"Fetch issues from an integration instance","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/fetch-issues-from-an-integration-instance","siteSpaceId":"sitesp_RfNNx","description":"Fetch issues from an integration instance in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"pL54MkuzaQb6aFoDJtWG","title":"Map fields to issue types","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/fetch-issues-from-an-integration-instance/map-fields-to-issue-types","siteSpaceId":"sitesp_RfNNx","description":"Map integration fields to issue types in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"},{"label":"Fetch issues from an integration instance"}]},{"id":"4CH6i2NREFBrMQM64fQ5","title":"Classify events using a classifier for issue types","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/fetch-issues-from-an-integration-instance/classify-events-using-a-classifier-for-issue-types","siteSpaceId":"sitesp_RfNNx","description":"Classify integration events for Cortex AgentiX issue types.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"},{"label":"Fetch issues from an integration instance"}]},{"id":"G5wmdjBDvj1WjTd0ySvX","title":"Forward requests to long-running integrations","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_RfNNx","description":"Forward requests to long-running integrations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"KvSpDdUZNVUCi0TD8MhV","title":"Manage credentials","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/manage-credentials","siteSpaceId":"sitesp_RfNNx","description":"Manage credentials used by Cortex AgentiX integrations and automations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"jRLYvNybZwRkIncqx6CU","title":"Troubleshoot Integrations","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/integrations/troubleshoot-integrations","siteSpaceId":"sitesp_RfNNx","description":"Troubleshoot integration configuration and connectivity in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"okRECwT9KQGJBryR0BK7","title":"Verify collector connectivity","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-agentix-data-sources-and-connectors/administration-and-troubleshooting/verify-collector-connectivity","siteSpaceId":"sitesp_RfNNx","description":"Verify data collector connectivity and troubleshoot errors in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex AgentiX Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"qbPK87aiY8aR1HqvqL99","title":"Marketplace","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace","siteSpaceId":"sitesp_RfNNx","description":"Use the Marketplace, a centralized content portal, to download and manage content packs in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"UIl2ZjbHQWN4o6z4g9Bf","title":"Cortex Marketplace","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace/cortex-marketplace","siteSpaceId":"sitesp_RfNNx","description":"Browse, search, and manage content packs for security orchestration in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Marketplace"}]},{"id":"YdJhgwdI2YSloQa6i418","title":"Content packs","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace/content-packs","siteSpaceId":"sitesp_RfNNx","description":"Explore pre-installed and recommended Cortex AgentiX content packs for security workflows and integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Marketplace"}]},{"id":"2oAr5qrkW91zYqClJCrN","title":"Content pack support types","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace/content-pack-support-types","siteSpaceId":"sitesp_RfNNx","description":"Understand content pack support types, maintenance responsibilities, and support channels in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Marketplace"}]},{"id":"BEtCtEHFzlE3KGNvGkmh","title":"Manage content packs","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace/manage-content-packs","siteSpaceId":"sitesp_RfNNx","description":"Install, update, revert, and delete Cortex Marketplace content packs and manage required and optional dependencies in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Marketplace"}]},{"id":"qS3KNFtSkrZQFkCSc8Q1","title":"Marketplace FAQs","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace/marketplace-faqs","siteSpaceId":"sitesp_RfNNx","description":"Find answers about updating, customizing, detaching, and reverting Cortex AgentiX Marketplace content packs.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Marketplace"}]},{"id":"pzLljhxJKaPHo71vJWGW","title":"Content changes when upgrading Cortex AgentiX versions","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace/content-changes-when-upgrading-cortex-agentix-versions","siteSpaceId":"sitesp_RfNNx","description":"Review content packs that automatically update during version upgrades in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Marketplace"}]},{"id":"IgI1ZIU4unqvJJTdpYLX","title":"Content pack contributions","pathname":"/cortex-agentix/configure-cortex-agentix/marketplace/content-pack-contributions","siteSpaceId":"sitesp_RfNNx","description":"Submit content pack contributions for review, approval, and publication in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Marketplace"}]},{"id":"7GgustgTG5GJ8coW5Zuo","title":"Configure the Cortex Agentic Assistant","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant","siteSpaceId":"sitesp_RfNNx","description":"Configure AI agents, actions, knowledge, and access controls in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"6NXZJSXbufeobyK9UJLV","title":"Agentic Assistant components and concepts","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agentic-assistant-components-and-concepts","siteSpaceId":"sitesp_RfNNx","description":"Understand Cortex Agentic Assistant agents, actions, plans, conversations, and knowledge in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"2x7GoJ5LM4cGQxFVj0H1","title":"Agentic Assistant Hub","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agents-hub","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex Agentic Assistant agents and actions in Cortex AgentiX using the Agentic Assistant Hub.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"H3BVVgDFFS8OfuTPNiky","title":"Manage actions","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agents-hub/manage-actions","siteSpaceId":"sitesp_RfNNx","description":"Manage system and custom Agentic Assistant actions in Cortex AgentiX, including sensitive action approvals.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"ltPCfJ7EEJpKjMKGB23x","title":"Register actions","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agents-hub/register-actions","siteSpaceId":"sitesp_RfNNx","description":"Register scripts, commands, and AI prompts as Agentic Assistant actions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"HnnADm4YDcXIRsyGHv3b","title":"Manage agents","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agents-hub/manage-agents","siteSpaceId":"sitesp_RfNNx","description":"Manage system and custom Agentic Assistant agents in Cortex AgentiX, including actions and permissions.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"FMOOWI0ODFDMSgNmg7Hv","title":"Build agents","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agents-hub/build-agents","siteSpaceId":"sitesp_RfNNx","description":"Build custom Agentic Assistant agents in Cortex AgentiX with instructions, knowledge, roles, and actions.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"n5bms0p5EqP2b83jEYeF","title":"Manage knowledge sources (preview)","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agents-hub/manage-knowledge-sources-preview","siteSpaceId":"sitesp_RfNNx","description":"Add, manage, and sync Knowledge Center knowledge sources to ground Cortex AgentiX Agentic Assistant agents with trusted organizational and system knowledge.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"Yk2vrwK9kwX3S87xv8zJ","title":"Expand agent capabilities with MCP integrations","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agents-hub/expand-agent-capabilities-with-mcp-integrations","siteSpaceId":"sitesp_RfNNx","description":"Connect Model Context Protocol (MCP) integrations in Cortex AgentiX to extend Agentic Assistant agents with third-party tools and external system access.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"},{"label":"Agentic Assistant Hub"}]},{"id":"qW5jfSHHGHKRicu4XBtm","title":"Agentic Assistant role-based access control","pathname":"/cortex-agentix/configure-cortex-agentix/configure-the-cortex-agentic-assistant/agentic-assistant-role-based-access-control","siteSpaceId":"sitesp_RfNNx","description":"Configure role-based access for Cortex Agentic Assistant agents, actions, and chat in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Configure the Cortex Agentic Assistant"}]},{"id":"ydrlBtc9cMhdawTDuAi6","title":"Cortex MCP server","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-mcp-server","siteSpaceId":"sitesp_RfNNx","description":"Connect LLM applications to Cortex AgentiX using the Cortex MCP server for natural-language security workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"i9Ecw9OC0sSxPB1eQmgH","title":"Install the Cortex MCP server","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-mcp-server/install-the-cortex-mcp-server","siteSpaceId":"sitesp_RfNNx","description":"Install the Cortex MCP server for natural-language case and issue management in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"314Ddu4804Xb5sI38fGD","title":"Configure the MCP client","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-mcp-server/configure-the-mcp-client","siteSpaceId":"sitesp_RfNNx","description":"Configure an MCP client to connect securely to the Cortex MCP server in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"nLXLZojq6V5RMWSRXkR5","title":"Use the Cortex MCP server","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-mcp-server/use-the-cortex-mcp-server","siteSpaceId":"sitesp_RfNNx","description":"Use Cortex MCP server tools to investigate and manage cases, issues, and assets in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"4sgIy0X3nRnv33iDFfKk","title":"Create custom Cortex MCP server tools","pathname":"/cortex-agentix/configure-cortex-agentix/cortex-mcp-server/create-custom-cortex-mcp-server-tools","siteSpaceId":"sitesp_RfNNx","description":"Create custom OpenAPI and Python tools for Cortex MCP server workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cortex MCP server"}]},{"id":"pu2dNAz99HoLtGwTfvZG","title":"Remote repository management","pathname":"/cortex-agentix/configure-cortex-agentix/remote-repository-management","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX content across development and production tenants with remote repositories.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"2xZ9vbzDUaOc2cMuIZz9","title":"Cortex AgentiX development tenant","pathname":"/cortex-agentix/configure-cortex-agentix/remote-repository-management/cortex-agentix-development-tenant","siteSpaceId":"sitesp_RfNNx","description":"Develop, test, and synchronize Cortex AgentiX content safely before deploying it to production.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"x7hUVuniyZmePeAKARme","title":"Set up a remote repository","pathname":"/cortex-agentix/configure-cortex-agentix/remote-repository-management/set-up-a-remote-repository","siteSpaceId":"sitesp_RfNNx","description":"Configure a built-in or private remote repository for Cortex AgentiX content version control.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"iSPTkFAu8SOx3NWB3Bvm","title":"Set up a built-in remote repository","pathname":"/cortex-agentix/configure-cortex-agentix/remote-repository-management/set-up-a-remote-repository/set-up-a-built-in-remote-repository","siteSpaceId":"sitesp_RfNNx","description":"Set up the built-in remote repository to synchronize Cortex AgentiX content between tenants.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Remote repository management"},{"label":"Set up a remote repository"}]},{"id":"X9XlK74icCnM9cK8TnJp","title":"Set up a Private Remote Repository","pathname":"/cortex-agentix/configure-cortex-agentix/remote-repository-management/set-up-a-remote-repository/set-up-a-private-remote-repository","siteSpaceId":"sitesp_RfNNx","description":"Configure a private Git remote repository for Cortex AgentiX content synchronization and collaboration.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Remote repository management"},{"label":"Set up a remote repository"}]},{"id":"9A79Y48OkiU4sVyB3QoJ","title":"Push and pull content","pathname":"/cortex-agentix/configure-cortex-agentix/remote-repository-management/push-and-pull-content","siteSpaceId":"sitesp_RfNNx","description":"Push and pull Cortex AgentiX content between development and production tenants using remote repositories.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"JYw2nwF9SmXc3AA2PhSk","title":"Remote repository troubleshooting","pathname":"/cortex-agentix/configure-cortex-agentix/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_RfNNx","description":"Troubleshoot Cortex AgentiX remote repository setup, branch conflicts, and repository type changes.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Remote repository management"}]},{"id":"SByySjkX4eay8IKFH2tE","title":"Users and roles management","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX users, roles, user groups, authentication, and access permissions.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"IXqcbT8IfidSh3JR4JdR","title":"Users, groups, and roles in Cortex AgentiX","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/users-and-roles-in-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Set up and configure roles and user groups for the Cortex AgentiX tenant and Cortex Gateway. Configure authentication and manage users.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"}]},{"id":"BvvEZB3x3MUz45N8eTIH","title":"Roles management","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX roles, permissions, and role assignments in Cortex Gateway and tenant environments.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"}]},{"id":"MP2CuNRWhaCQZNs45CQz","title":"Manage roles in the Cortex AgentiX tenant","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/manage-roles-in-the-cortex-agentix-tenant","siteSpaceId":"sitesp_RfNNx","description":"Create, edit, and manage roles in your Cortex AgentiX tenant.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"}]},{"id":"K5VE2Z4r4fcydEaRZLRP","title":"Role permissions by component","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component","siteSpaceId":"sitesp_RfNNx","description":"Review the permissions available for each Cortex AgentiX component.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"}]},{"id":"qRRABYQjyGiiU0envszL","title":"Dashboards and Reports permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/dashboards-and-reports-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for dashboards, reports, widgets, and security posture visibility.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"V0efTad95vleJZ4YMi4D","title":"Dashboards permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/dashboards-and-reports-permissions/dashboards-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX dashboard permissions for viewing, creating, sharing, and accessing widget data.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Dashboards and Reports permissions"}]},{"id":"CI5Ed6ZBR6cc5tZ4yx9M","title":"Reports permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/dashboards-and-reports-permissions/reports-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for reports, report templates, object access, and security data visibility.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Dashboards and Reports permissions"}]},{"id":"QcGk13pYnddVEJuc3AtL","title":"Command Center Dashboard permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/dashboards-and-reports-permissions/command-center-dashboard-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex Command Center Dashboard access and required permissions for dashboards, cases, and playbooks in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Dashboards and Reports permissions"}]},{"id":"gqXapx9oPbwGl3jddS11","title":"Cases and Issues permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/cases-and-issues-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for case and issue triage, investigation, playbook response, and security operations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"uwYI5DmzbVYyn4rwyomI","title":"Investigation and Response permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions","siteSpaceId":"sitesp_RfNNx","description":"Explore Cortex AgentiX permissions for investigation, response, automation, threat intelligence, and related workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"7Xc0kwRY4PqkRylH0nLn","title":"Query Library permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions/query-library-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Query Library permissions for saving, sharing, reusing, running, and scheduling XQL queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Investigation and Response permissions"}]},{"id":"W2xEl6pS3v2YmVBqfCUR","title":"Query Center permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions/query-center-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Query Center permissions for writing, running, scheduling, and exporting XQL queries with scoped data access.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Investigation and Response permissions"}]},{"id":"cpXwZGEBt9lKpAU8GYDK","title":"Playbook permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions/playbook-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for accessing, building, sharing, and running automated response playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Investigation and Response permissions"}]},{"id":"zq4Qzne9KnWyA41f2zAn","title":"Script permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions/script-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for accessing, creating, sharing, and running automation scripts, including elevated scripts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Investigation and Response permissions"}]},{"id":"hMa7YKcuYV2xXfuIZRVK","title":"Jobs permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions/jobs-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for viewing, managing, and running scheduled automation jobs and playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Investigation and Response permissions"}]},{"id":"qCMembhHrawmQLurlQxr","title":"Playground permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions/playground-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX Playground permissions for testing automation commands, scripts, playbooks, and integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Investigation and Response permissions"}]},{"id":"DgnfUIJbllr3bGwmVWJi","title":"Automation Exclusion Center permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/investigation-and-response-permissions/automation-exclusion-center-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Automation Exclusion Center permissions for managing remediation exclusions, assets, policies, and automation controls.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Investigation and Response permissions"}]},{"id":"yzhSIuhd1B7r5n6wr2F0","title":"Threat Management permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/threat-management-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for detection rules, threat intelligence, Marketplace content, and exception workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"lN9lev3fSuvGH5UTHAJa","title":"Detection Rules permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/threat-management-permissions/detection-rules-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for viewing and managing correlation and indicator detection rules.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Threat Management permissions"}]},{"id":"4FAGt3CQJch9IGzRT1ne","title":"Threat Intelligence permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/threat-management-permissions/threat-intelligence-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for indicators, threat intelligence feeds, TIM, and Extended Threat Intelligence.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Threat Management permissions"}]},{"id":"Ipb6M6LyFH9TlOgyrJFV","title":"Marketplace permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/marketplace-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX Marketplace permissions for browsing, installing, updating, and managing automation content packs.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"96mGxbAxhJhRimV0DS9Z","title":"Exceptions Configuration permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/exceptions-configuration-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for issue suppression, exception rules, and exception approval workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"ba3gmFQjqAFJBCqg4wqc","title":"Exception Management Admin permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/exceptions-configuration-permissions/exception-management-admin-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Exception Management Admin permissions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Exceptions Configuration permissions"}]},{"id":"Z64WL6z7pOi0UjSRb0pX","title":"Exception Approver Admin permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/exceptions-configuration-permissions/exception-approver-admin-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Exception Approver Admin permissions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Exceptions Configuration permissions"}]},{"id":"oZtzxBzge5U8lRBGbLr3","title":"Configuration permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions","siteSpaceId":"sitesp_RfNNx","description":"Explore Cortex AgentiX role permissions for configuration, administration, data, integrations, and platform settings.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"2OywC9D2SQKmPPhSarTT","title":"Auditing permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/auditing-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX management audit logs.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"D4fNlx8klSYHaA5GkQr0","title":"Alert Notifications permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/alert-notifications-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX alert notification settings and forwarding.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"LMVT2pkS2CjRUkCk9gKk","title":"General Configuration permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/general-configuration-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX tenant-wide server and configuration settings.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"d9Bp764P1iTI7u4WRw77","title":"Access management permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/access-management-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX users, roles, groups, and authentication settings.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"5k9sfRddcgYjOqSa8IvY","title":"Data Sources permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/data-sources-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX cloud and third-party data source integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"8A1E3yu4cSpO4IYHdBZj","title":"Integrations - instance permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/integrations-instance-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX data collection integration instances.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"F0zDrSiTlXRLX8pg5NU7","title":"Data Management permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/data-management-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX dataset configuration and data lifecycle management.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"HIgTxS9TbDtDroIAsvCH","title":"Public API","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/public-api","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX API keys and compute unit usage.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"gNC3NCGsc4kwAjGHRtGT","title":"Threat Intelligence permission - API configuration","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/threat-intelligence-permission-api-configuration","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX external threat intelligence API configuration.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"Mt1c2q6YIykgik70OGJm","title":"Integrations Permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/integrations-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control Cortex AgentiX role-based access to integration commands.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"dUUVWrG5BK701xWI9Fsy","title":"Credentials permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/credentials-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX credentials for integrations and automation.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"HubsEJznxPLck6X2U8jq","title":"Case Properties permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/case-properties-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX case domains, statuses, and properties.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"Izu2IzEA9p4T9t95eMyv","title":"Exclusion list permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/exclusion-list-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX indicator exclusion list configuration.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"toMMd7dBOapHSPocAXTM","title":"Fields and Types permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/fields-and-types-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX custom fields and indicator types.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"jLAenbF7CvlwuSfs7G6n","title":"Layout permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/layout-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX case and issue layout configuration.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"VtxdS8EaiogcUT531WHg","title":"Sync Profile permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/configuration-permissions/sync-profile-permissions","siteSpaceId":"sitesp_RfNNx","description":"Control access to Cortex AgentiX case mirroring sync profile configuration.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Configuration permissions"}]},{"id":"nsxwQH0skLinwqE7Z9PO","title":"Help permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/help-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX permissions for creating support cases, attaching troubleshooting artifacts, and contacting support.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"YYP3EnyDZTSlS6zdJzI4","title":"Cortex Agentic Assistant permissions","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/cortex-agentic-assistant-permissions","siteSpaceId":"sitesp_RfNNx","description":"Configure Agentic Assistant permissions for AI prompts, agents, natural-language investigations, and automated actions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"}]},{"id":"l8vF2CEwEFfg5qkets2d","title":"AI Prompts","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/cortex-agentic-assistant-permissions/ai-prompts","siteSpaceId":"sitesp_RfNNx","description":"Configure AI Prompt Library permissions for creating reusable prompts and managing AI tasks in Cortex AgentiX playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Cortex Agentic Assistant permissions"}]},{"id":"EtW6wICURwpz1B5jLzJm","title":"Cortex Agentic Assistant Agents","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/roles-management/role-permissions-by-component/cortex-agentic-assistant-permissions/cortex-agentic-assistant-agents","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX Agentic Assistant permissions for agent interactions, actions, custom agents, and administrator controls.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Roles management"},{"label":"Role permissions by component"},{"label":"Cortex Agentic Assistant permissions"}]},{"id":"M5vhiZHpjTQrHfkRlmD6","title":"User group management","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/user-group-management","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX user groups, role assignments, nested groups, SAML mapping, and scoped access.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"}]},{"id":"DWCeDkjqQNWZRrXQHI8j","title":"User management","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/user-management","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX user accounts, roles, groups, SSO access, scopes, and user status in Gateway or tenants.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"}]},{"id":"aas9we1KyvVNH78DISKR","title":"Manage users in the Cortex AgentiX tenant","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/user-management/manage-users-in-the-cortex-agentix-tenant","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX tenant users, roles, groups, scoped access, deactivation, and bulk role assignments.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"User management"}]},{"id":"VAnokg2Jo9X4s87ClFYZ","title":"Manage user scope","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/user-management/manage-user-scope","siteSpaceId":"sitesp_RfNNx","description":"Configure Scope-Based Access Control in Cortex AgentiX to apply granular case and issue access alongside RBAC.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"User management"}]},{"id":"uXZYBzb5RjdH9RYMBwwd","title":"Manage access to objects","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/manage-access-to-objects","siteSpaceId":"sitesp_RfNNx","description":"Learn more about managing access to objects in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"}]},{"id":"gJ9nYCbCF8JxIeTiGYJh","title":"Manage access to custom dashboards","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/manage-access-to-objects/manage-access-to-custom-dashboards","siteSpaceId":"sitesp_RfNNx","description":"Manage custom dashboard sharing, role permissions, ownership, widget visibility, and data access in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Manage access to objects"}]},{"id":"3jIprMk0WbgifVmVMCTQ","title":"Manage access to report templates","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/manage-access-to-objects/manage-access-to-report-templates","siteSpaceId":"sitesp_RfNNx","description":"Manage report template sharing, role permissions, ownership, generated report access, and scoped data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Manage access to objects"}]},{"id":"XnN4MP12cYX1nFoMexjC","title":"Manage access to playbooks and scripts","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/manage-access-to-objects/manage-access-to-playbooks-and-scripts","siteSpaceId":"sitesp_RfNNx","description":"Manage playbook and script sharing, role permissions, ownership, imports, and automation execution access in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Manage access to objects"}]},{"id":"fcIujx0niJApVZe5FHMb","title":"Manage access to saved queries","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/manage-access-to-objects/manage-access-to-saved-queries","siteSpaceId":"sitesp_RfNNx","description":"Manage saved XQL query sharing, role permissions, ownership, and public or restricted visibility in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Manage access to objects"}]},{"id":"O8kKNArAd1A6ZpTi8ulv","title":"Set up authentication","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/set-up-authentication","siteSpaceId":"sitesp_RfNNx","description":"Authenticate Cortex AgentiX users using SAML 2.0 or Customer Support Portal (CSP).","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"}]},{"id":"2GLpAw3iqLlRkZZaCGP5","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_RfNNx","description":"Authenticate Cortex AgentiX users through the Customer Support Portal and assign roles for Gateway and tenant access.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Set up authentication"}]},{"id":"xrD2jcvduzMzj89PiUDg","title":"Authenticate users using SSO","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_RfNNx","description":"Configure SAML 2.0 SSO for Cortex AgentiX with identity provider mapping, user groups, roles, and tenant access.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Set up authentication"}]},{"id":"Z0BBonmzmD2mG7mbyijI","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_RfNNx","description":"Configure Okta SAML 2.0 SSO for Cortex AgentiX with user attributes, group mapping, and authentication testing.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Set up authentication"}]},{"id":"WtOQxgj7Y278dUIBcIbA","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-agentix/configure-cortex-agentix/users-and-roles-management/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_RfNNx","description":"Configure Microsoft Entra ID SAML 2.0 SSO for Cortex AgentiX with group claims, mappings, and authentication testing.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Users and roles management"},{"label":"Set up authentication"}]},{"id":"6c5xAD8qQBcP27BrIMtZ","title":"Engines","pathname":"/cortex-agentix/configure-cortex-agentix/engines","siteSpaceId":"sitesp_RfNNx","description":"Install, configure, manage, and troubleshoot Cortex AgentiX engines for remote network connectivity.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"zf5rX7RApx6GseQMdvge","title":"What is an engine?","pathname":"/cortex-agentix/configure-cortex-agentix/engines/what-is-an-engine","siteSpaceId":"sitesp_RfNNx","description":"Understand Cortex AgentiX engines and how they securely connect remote networks to integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"9iXawbyDSLCoJUKc6PBF","title":"Engine requirements","pathname":"/cortex-agentix/configure-cortex-agentix/engines/engine-requirements","siteSpaceId":"sitesp_RfNNx","description":"Review hardware, operating system, and network requirements for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"weilj38XkVnhKK4YuEFk","title":"Install an engine","pathname":"/cortex-agentix/configure-cortex-agentix/engines/install-an-engine","siteSpaceId":"sitesp_RfNNx","description":"Install and configure a Cortex AgentiX engine for secure remote network connectivity.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"viRC18OwG1WbfPYAuDxc","title":"Docker","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker","siteSpaceId":"sitesp_RfNNx","description":"Install, configure, secure, and troubleshoot Docker for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"J4uEjUC7cjiDtAOzb1wD","title":"Install Docker","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/install-docker","siteSpaceId":"sitesp_RfNNx","description":"Install Docker and verify required user permissions for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"MjlC39jITjHkYh7CLRAU","title":"Install Docker distribution for Red Hat on an engine server","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/install-docker-distribution-for-red-hat","siteSpaceId":"sitesp_RfNNx","description":"Install Docker and configure SELinux on Red Hat servers for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"UmTSurhu9eQanh7Ux5Iw","title":"Docker image security","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-image-security","siteSpaceId":"sitesp_RfNNx","description":"Secure and harden Docker images and containers used by Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"tsrlQ4hoNa4OyPyNJuEH","title":"Docker FAQs","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-faqs","siteSpaceId":"sitesp_RfNNx","description":"Find answers to common Docker setup and operation questions for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"e0QNYYziJSxc3Dy10SNd","title":"Troubleshoot Docker Issues","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_RfNNx","description":"Troubleshoot Docker installation, configuration, and runtime issues for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"UwDks34xIkGBlFy0RTuY","title":"Configure Docker pull rate limit","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_RfNNx","description":"Configure Docker pull rate limits for reliable Cortex AgentiX engine image downloads.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"TCRS5ZFiTNCBim1BdnIB","title":"Change the Docker Installation folder","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_RfNNx","description":"Change the Docker installation folder on servers that host Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"xouDsPtCz7t41adMgfcy","title":"Docker hardening guide","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide","siteSpaceId":"sitesp_RfNNx","description":"Harden Docker deployments that support Cortex AgentiX engines with security configuration guidance.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"}]},{"id":"lfuei1mVvcr9URCmoGQf","title":"Docker network hardening","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_RfNNx","description":"Harden Docker network settings for secure Cortex AgentiX engine deployments.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"4K1MDJjtXLKAHekGkQAI","title":"Configure Docker images","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide/configure-docker-images","siteSpaceId":"sitesp_RfNNx","description":"Configure secure Docker images for Cortex AgentiX engine deployments.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"IcYZYBvNzfxvbdQtbj6n","title":"Run Docker with non-root internal users","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_RfNNx","description":"Run Docker with non-root internal users for secure Cortex AgentiX engine operations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"rLgj60hQnzNCkaX5VD0B","title":"Configure the memory limit support without swap capabilities","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide/configure-the-memory-limit-support-without-swap-capabilities","siteSpaceId":"sitesp_RfNNx","description":"Configure Docker memory limits without swap support for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"vDS4v6bAXQ0QZYODB1N5","title":"Configure the memory limitation","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_RfNNx","description":"Configure Docker memory limits for reliable Cortex AgentiX engine performance.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"lttglOeTfw93VYmLShY2","title":"Configure the CPU, PIDs, and open the file descriptors limit","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide/configure-the-cpu-pids-and-open-the-file-descriptors-limit","siteSpaceId":"sitesp_RfNNx","description":"Configure CPU, PID, and file descriptor limits for Cortex AgentiX engine Docker containers.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"uUa1mljo9HRYyylnKhl4","title":"Check Docker hardening configurations","pathname":"/cortex-agentix/configure-cortex-agentix/engines/docker/docker-hardening-guide/check-docker-hardening-configurations","siteSpaceId":"sitesp_RfNNx","description":"Verify Docker hardening settings for secure Cortex AgentiX engine deployments.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Docker"},{"label":"Docker hardening guide"}]},{"id":"sd8Kwbk6TYdY4a5jZUWg","title":"Podman","pathname":"/cortex-agentix/configure-cortex-agentix/engines/podman","siteSpaceId":"sitesp_RfNNx","description":"Install, configure, and troubleshoot Podman for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"FUjZQIR89TAGQvzdsoU9","title":"Change the Container storage","pathname":"/cortex-agentix/configure-cortex-agentix/engines/podman/change-the-container-storage","siteSpaceId":"sitesp_RfNNx","description":"Configure Podman container storage for Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Podman"}]},{"id":"95G4oZftid9Dsc7CAH6O","title":"Install Podman","pathname":"/cortex-agentix/configure-cortex-agentix/engines/podman/install-podman","siteSpaceId":"sitesp_RfNNx","description":"Install and configure Podman to run Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Podman"}]},{"id":"xRcnHx4pF5O7Fd3fl76M","title":"Migrate from Docker to Podman","pathname":"/cortex-agentix/configure-cortex-agentix/engines/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_RfNNx","description":"Migrate a Cortex AgentiX engine from Docker to Podman.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Podman"}]},{"id":"6hXYHESS81MsvCwJzgrE","title":"Troubleshoot Podman","pathname":"/cortex-agentix/configure-cortex-agentix/engines/podman/troubleshoot-podman","siteSpaceId":"sitesp_RfNNx","description":"Resolve common Podman issues that affect Cortex AgentiX engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Podman"}]},{"id":"nAxmzUwdxW2tQB5cpcwF","title":"Manage engines","pathname":"/cortex-agentix/configure-cortex-agentix/engines/manage-engines","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX engines and load-balancing groups for remote integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"Kq2M8koXUNyX7p3hrVWn","title":"Upgrade an engine","pathname":"/cortex-agentix/configure-cortex-agentix/engines/upgrade-an-engine","siteSpaceId":"sitesp_RfNNx","description":"Upgrade Cortex AgentiX engines from the tenant or a remote machine.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"PfDhYRSzpTfN2vD2m3cz","title":"Remove an engine","pathname":"/cortex-agentix/configure-cortex-agentix/engines/remove-an-engine","siteSpaceId":"sitesp_RfNNx","description":"Remove a Cortex AgentiX engine from a remote machine.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"F4Y1e1VngzC9ZDfNiXLC","title":"Configure engines","pathname":"/cortex-agentix/configure-cortex-agentix/engines/configure-engines","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX engines using d1.conf or tenant settings.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"0mtL3iTfJ4BSodP8Xx6d","title":"Configure the engine to use a web proxy","pathname":"/cortex-agentix/configure-cortex-agentix/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_RfNNx","description":"Configure a web proxy for Cortex AgentiX engine connectivity.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"eKlQCQYzsps0LDjBWaGO","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-agentix/configure-cortex-agentix/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_RfNNx","description":"Configure a Cortex AgentiX engine to connect to the server without a proxy.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"rm7Dv6j3I2pcZuqGGG9X","title":"Use NGINX as a reverse proxy","pathname":"/cortex-agentix/configure-cortex-agentix/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_RfNNx","description":"Use NGINX as a reverse proxy for Cortex AgentiX engine server connectivity.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"},{"label":"Configure the engine to call the server without using a proxy"}]},{"id":"ERWxe0ppCFxZGNm7lFVp","title":"Configure an engine to use custom certificates","pathname":"/cortex-agentix/configure-cortex-agentix/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_RfNNx","description":"Configure custom certificates for secure Cortex AgentiX engine communication.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"XmNzP7RkiM0O5JmNm8yR","title":"Use an engine in an integration","pathname":"/cortex-agentix/configure-cortex-agentix/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_RfNNx","description":"Use Cortex AgentiX engines and load-balancing groups with integration instances.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"pkEDFYfSYdDCUGC9YZm3","title":"Run a script using an engine","pathname":"/cortex-agentix/configure-cortex-agentix/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_RfNNx","description":"Run Cortex AgentiX automation scripts on engines and load-balancing groups.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"eQiNAoYV9Kwpq6Exhtlq","title":"Troubleshoot engines","pathname":"/cortex-agentix/configure-cortex-agentix/engines/troubleshoot-engines","siteSpaceId":"sitesp_RfNNx","description":"Troubleshoot Cortex AgentiX engines using logs, errors, and diagnostics.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"ZCqHgnJckjSM9Ij8jx8N","title":"Troubleshoot integrations running on engines","pathname":"/cortex-agentix/configure-cortex-agentix/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_RfNNx","description":"Troubleshoot Cortex AgentiX integrations that run on engines.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Engines"}]},{"id":"Fl7jsZwMLp64dr0wUOb6","title":"Cases and issues configuration","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration","siteSpaceId":"sitesp_RfNNx","description":"Configure cases and issues in Cortex AgentiX including domains, fields, and layouts. Set up correlation rules and configure an external dynamic list.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"3Xg4Oj5uEPuNVQ8jZqU0","title":"Case and issue lifecycle","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/case-and-issue-lifecycle","siteSpaceId":"sitesp_RfNNx","description":"Cases and issues go through various processes in Cortex AgentiX including ingestion, case/issue creation, planning, investigation, and response.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"QWVWP2VGxQJra6JOo6Oa","title":"Customize your cases","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-your-cases","siteSpaceId":"sitesp_RfNNx","description":"Customize Cortex AgentiX cases with external threat intelligence integrations and verification sources.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"itzfJ4xzXM4tgcZrmkHI","title":"Create a case domain","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-your-cases/create-a-case-domain","siteSpaceId":"sitesp_RfNNx","description":"Create custom case domains in Cortex AgentiX to organize workflows and control access.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize your cases"}]},{"id":"Ri9vOXndxv2wN4vdNDB5","title":"Create a starring configuration","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-your-cases/create-a-starring-configuration","siteSpaceId":"sitesp_RfNNx","description":"Create Cortex AgentiX case starring configurations that identify and prioritize matching issues.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize your cases"}]},{"id":"3nci9YiK4K37FoPvMenp","title":"Set up case scoring","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-your-cases/set-up-case-scoring","siteSpaceId":"sitesp_RfNNx","description":"Set up Cortex AgentiX case scoring rules to prioritize issues based on defined criteria.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize your cases"}]},{"id":"Vq3PlNoZkz8JAY7lomGy","title":"Create custom case statuses and resolution reasons","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-your-cases/create-custom-case-statuses-and-resolution-reasons","siteSpaceId":"sitesp_RfNNx","description":"Create custom Cortex AgentiX case statuses and resolution reasons for your workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize your cases"}]},{"id":"GrdzMg4DnLecXK0eQr9N","title":"Customize issue fields and layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts","siteSpaceId":"sitesp_RfNNx","description":"Customize Cortex AgentiX issue fields and layouts for system and custom issue data.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"N0gwMKeyTWWhfInA80DO","title":"Issue fields","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX issue fields, including system, content-pack, and custom fields for detection workflows and issue layouts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"}]},{"id":"xFHAKPUJUEfHDJ5nO6lC","title":"Issue field types","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/issue-field-types","siteSpaceId":"sitesp_RfNNx","description":"Learn about available Cortex AgentiX issue field types and their behaviors.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"}]},{"id":"RRyzd5hpbU1bL3S3dBjO","title":"Create custom issue fields","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields","siteSpaceId":"sitesp_RfNNx","description":"Create custom Cortex AgentiX issue fields for mappings, correlations, and issue layouts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"}]},{"id":"5wvGkSMJ7RLqJf7B5Yl9","title":"Create a grid field for an issue","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields/create-a-grid-field-for-an-issue","siteSpaceId":"sitesp_RfNNx","description":"Create a Cortex AgentiX grid field to capture and edit tabular issue data.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"},{"label":"Create custom issue fields"}]},{"id":"wMPgwO4DJFn03kBKnQIv","title":"Issue field triggered scripts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields/issue-field-triggered-scripts","siteSpaceId":"sitesp_RfNNx","description":"Automate Cortex AgentiX issue workflows with scripts triggered by issue field changes.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"},{"label":"Create custom issue fields"}]},{"id":"KlAhVQY2KbO0LbaVK3Gn","title":"Issue timer fields","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields/issue-timer-fields","siteSpaceId":"sitesp_RfNNx","description":"Use Cortex AgentiX issue timer fields to track response times and issue metrics.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"},{"label":"Create custom issue fields"}]},{"id":"55IPi5LdiRy6j9lCUkK9","title":"Configure issue timer fields","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields/issue-timer-fields/configure-issue-timer-fields","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX issue timer fields with targets, risk thresholds, and timeout scripts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"},{"label":"Create custom issue fields"},{"label":"Issue timer fields"}]},{"id":"LWmEQGeBVAMgwnR2V9ct","title":"Configure a playbook to run timers","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields/issue-timer-fields/configure-a-playbook-to-run-timers","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX playbooks to start, pause, and stop issue timers.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"},{"label":"Create custom issue fields"},{"label":"Issue timer fields"}]},{"id":"mk3L75QQVtJhVgaqXgkn","title":"Automate changes to issue fields using timer scripts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields/issue-timer-fields/automate-changes-to-issue-fields-using-timer-scripts","siteSpaceId":"sitesp_RfNNx","description":"Automate Cortex AgentiX issue field updates with scripts triggered by timer timeouts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"},{"label":"Create custom issue fields"},{"label":"Issue timer fields"}]},{"id":"KmJsmyWlhUNAEqJdS0ST","title":"Use issue timer field commands manually in the CLI","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-fields/create-custom-issue-fields/issue-timer-fields/use-issue-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX issue timer fields manually with CLI commands.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue fields"},{"label":"Create custom issue fields"},{"label":"Issue timer fields"}]},{"id":"xbvaVtiLeHlYGl9SScfC","title":"Issue layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-layouts","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX issue layouts to control data displayed during issue investigations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"}]},{"id":"5ye7MVZHa6vq9oDEDy4r","title":"Create custom issue layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-layouts/create-custom-issue-layouts","siteSpaceId":"sitesp_RfNNx","description":"Create custom Cortex AgentiX issue layouts with tailored fields, sections, and action buttons.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue layouts"}]},{"id":"fdtvnAjA3n5XIHutGOTf","title":"Add a custom widget to an issue layout","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-layouts/add-a-custom-widget-to-an-issue-layout","siteSpaceId":"sitesp_RfNNx","description":"Add custom widgets to Cortex AgentiX issue layouts with dynamic sections and automation scripts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue layouts"}]},{"id":"NBUDmy36NZR99WiXX4pi","title":"Create rules for issue layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-issue-fields-and-layouts/issue-layouts/create-rules-for-issue-layouts","siteSpaceId":"sitesp_RfNNx","description":"Create Cortex AgentiX issue layout rules to assign layouts by issue criteria.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize issue fields and layouts"},{"label":"Issue layouts"}]},{"id":"gyJ8miIHQhSBhPQ1WMuN","title":"Customize case fields and layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts","siteSpaceId":"sitesp_RfNNx","description":"Customize Cortex AgentiX case fields and layouts for system and custom case data.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"GytnWfV92JEAGYb3Nw5z","title":"Case fields","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-fields","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX system, content-pack, and custom case fields for case layouts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"}]},{"id":"XarqWDiGKu4Nprqz1bz2","title":"Case field types","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-fields/case-field-types","siteSpaceId":"sitesp_RfNNx","description":"Learn about Cortex AgentiX case field types, including timer and SLA fields.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"},{"label":"Case fields"}]},{"id":"J97nYnGkokI1AO1HkiZM","title":"Create custom case fields","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-fields/create-custom-case-fields","siteSpaceId":"sitesp_RfNNx","description":"Create custom Cortex AgentiX case fields for mappings, correlations, and case layouts.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"},{"label":"Case fields"}]},{"id":"aN6gYQhqKsKkVnL5BhIW","title":"Create a grid field for a case","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-fields/create-custom-case-fields/create-a-grid-field-for-a-case","siteSpaceId":"sitesp_RfNNx","description":"Create a Cortex AgentiX grid field to capture and edit tabular case data.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"},{"label":"Case fields"},{"label":"Create custom case fields"}]},{"id":"2RcTEvh3AEzNp8x5wBJk","title":"Update case fields","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-fields/create-custom-case-fields/update-case-fields","siteSpaceId":"sitesp_RfNNx","description":"Update Cortex AgentiX case fields with CLI commands, scripts, and playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"},{"label":"Case fields"},{"label":"Create custom case fields"}]},{"id":"I6TnPezdLXSyATTWZhEb","title":"Create case timers and SLAs","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-fields/create-case-timers-and-slas","siteSpaceId":"sitesp_RfNNx","description":"Create Cortex AgentiX case timers and SLAs to track performance and response goals.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"},{"label":"Case fields"}]},{"id":"3xOGWCjXjUmApPp2MAlT","title":"Case layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-layouts","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX default and custom case layouts for case investigation data.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"}]},{"id":"DK5FTdUNl1cgmCt1kfGQ","title":"Create custom case layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-layouts/create-custom-case-layouts","siteSpaceId":"sitesp_RfNNx","description":"Create custom Cortex AgentiX case layouts with tailored fields, sections, and action buttons.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"},{"label":"Case layouts"}]},{"id":"KN3mLdqtdN6HpVxMmlrM","title":"Create rules for case layouts","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/customize-case-fields-and-layouts/case-layouts/create-rules-for-case-layouts","siteSpaceId":"sitesp_RfNNx","description":"Create Cortex AgentiX case layout rules to assign layouts by case criteria.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Customize case fields and layouts"},{"label":"Case layouts"}]},{"id":"V7U1WlCDUpqhqd5Oi8tx","title":"Issue syncing","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/issue-syncing","siteSpaceId":"sitesp_RfNNx","description":"Sync Cortex AgentiX issues with external applications using inbound, outbound, or bi-directional synchronization.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"2hmT2Ey1Jo7DQF4AHYOK","title":"Create a sync profile","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/issue-syncing/create-a-sync-profile","siteSpaceId":"sitesp_RfNNx","description":"Create inbound and outbound sync profiles to map fields between Cortex AgentiX issues and external applications.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Issue syncing"}]},{"id":"5WzTWH4qM3rUrTtXuUu9","title":"Create issue exceptions","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/create-issue-exceptions","siteSpaceId":"sitesp_RfNNx","description":"Manage Cortex AgentiX issue exceptions to defer remediation and pause issue SLA timers.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"rn8MttwPWLXdsmrxsXZF","title":"Configure the issue exception approval workflow","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/create-issue-exceptions/configure-the-issue-exception-approval-workflow","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX issue exception approval workflows and approvers.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Create issue exceptions"}]},{"id":"JleXe6C1GiwCmykfnYiY","title":"Create an issue exception rule","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/create-issue-exceptions/create-an-issue-exception-rule","siteSpaceId":"sitesp_RfNNx","description":"Create Cortex AgentiX issue exception rules to defer remediation for matching issues.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Create issue exceptions"}]},{"id":"O7zSFtr7nBCyzJSc6kZG","title":"Create an exception rule from an issue","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/create-issue-exceptions/create-an-exception-rule-from-an-issue","siteSpaceId":"sitesp_RfNNx","description":"Create a Cortex AgentiX issue exception rule directly from an issue.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Create issue exceptions"}]},{"id":"HqmFFIeEawzpc4foAtcD","title":"View issue Exception Rules","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/create-issue-exceptions/view-issue-exception-rules","siteSpaceId":"sitesp_RfNNx","description":"View Cortex AgentiX issue exception rules, statuses, and impacted issues.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Create issue exceptions"}]},{"id":"kDdA5LHwa8iqUrHdG9nN","title":"Disable issue exception rules","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/create-issue-exceptions/disable-issue-exception-rules","siteSpaceId":"sitesp_RfNNx","description":"Disable Cortex AgentiX issue exception rules to stop creating issue exceptions.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Create issue exceptions"}]},{"id":"bhnZxNYMBul2dzxU5fMH","title":"View excepted issues","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/create-issue-exceptions/view-excepted-issues","siteSpaceId":"sitesp_RfNNx","description":"View Cortex AgentiX excepted issues and track remaining exception periods.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"Create issue exceptions"}]},{"id":"PILrwBkjED234CG2ej8U","title":"What's a correlation rule?","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/whats-a-correlation-rule","siteSpaceId":"sitesp_RfNNx","description":"Use correlation rules and XQL to detect event patterns and generate issues in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"sDuoPlTkIixfhbciitq5","title":"Correlation rule details","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/whats-a-correlation-rule/correlation-rule-details","siteSpaceId":"sitesp_RfNNx","description":"Review correlation rule fields, execution status, and error details in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"What's a correlation rule?"}]},{"id":"q1EGwz9KkDhARgiNYCbI","title":"Create a correlation rule","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/whats-a-correlation-rule/create-a-correlation-rule","siteSpaceId":"sitesp_RfNNx","description":"Create correlation rules with XQL queries, schedules, suppression, and actions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"What's a correlation rule?"}]},{"id":"ahqZvU4ok33qVWEBzZWs","title":"Manage correlation rules","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/whats-a-correlation-rule/manage-correlation-rules","siteSpaceId":"sitesp_RfNNx","description":"Manage correlation rules, including execution, editing, and import or export in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"},{"label":"What's a correlation rule?"}]},{"id":"u45fEiiAmFdcjwJBvyMH","title":"Optimize case grouping in correlations","pathname":"/cortex-agentix/configure-cortex-agentix/cases-and-issues-configuration/optimize-case-grouping-in-correlations","siteSpaceId":"sitesp_RfNNx","description":"Map correlation rule fields in Cortex AgentiX to improve case grouping, reduce issue fragmentation, and support ML-based prioritization.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Cases and issues configuration"}]},{"id":"8jV4a6IHoYkmezgBXLgV","title":"Automations","pathname":"/cortex-agentix/configure-cortex-agentix/automations","siteSpaceId":"sitesp_RfNNx","description":"Build and manage automated security workflows with playbooks, scripts, context data, and jobs in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"SSgX3nT1awyWxqnm5Tl5","title":"Automation in Cortex AgentiX","pathname":"/cortex-agentix/configure-cortex-agentix/automations/automation-in-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Automate issue response with playbooks, Quick Actions, and automation rules in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"oYWYURwhxycGTatSll5B","title":"Quick Actions","pathname":"/cortex-agentix/configure-cortex-agentix/automations/quick-actions","siteSpaceId":"sitesp_RfNNx","description":"Use Quick Actions in Cortex AgentiX to run manual security investigation and response workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"4uiXeuzTeLj1y1O3S9Pm","title":"Automation Exclusion Center","pathname":"/cortex-agentix/configure-cortex-agentix/automations/automation-exclusion-center","siteSpaceId":"sitesp_RfNNx","description":"Manage automation exclusion policies in Cortex AgentiX to protect critical assets from remediation.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"xIX3Wir0KyRpFGRYYjuj","title":"Manage automation exclusion policies","pathname":"/cortex-agentix/configure-cortex-agentix/automations/automation-exclusion-center/manage-automation-exclusion-policies","siteSpaceId":"sitesp_RfNNx","description":"Create and manage automation exclusion policies in Cortex AgentiX to control remediation actions.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Automation Exclusion Center"}]},{"id":"Q8Xbn67FBSptXKVhOot4","title":"Playbooks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks","siteSpaceId":"sitesp_RfNNx","description":"Build and manage playbooks in Cortex AgentiX to automate security response workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"qW2ZeDMPORXGxr18gDP7","title":"Playbooks overview","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/playbooks-overview","siteSpaceId":"sitesp_RfNNx","description":"Learn how playbooks automate investigation and response workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"AA9pLW8q7yDp3F24M0iq","title":"Access to playbooks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/access-to-playbooks","siteSpaceId":"sitesp_RfNNx","description":"Manage access to playbooks with object-level roles in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"0Wk6WddBFCHklWNAZSHo","title":"Playbook development checklist","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_RfNNx","description":"Plan, build, customize, and test playbooks in Cortex AgentiX with this development checklist.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"WqAuiRjXWsXGqNLVv2Gq","title":"Plan your playbook","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/plan-your-playbook","siteSpaceId":"sitesp_RfNNx","description":"Plan automated security workflows before building a playbook in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"aVHC8xT0z8ImxTALjFqh","title":"Manage playbooks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/manage-playbooks","siteSpaceId":"sitesp_RfNNx","description":"View, manage, and adopt organization and Marketplace playbooks in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"LkYYKCdaQYf3LcPejoGp","title":"Build your playbook","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook","siteSpaceId":"sitesp_RfNNx","description":"Build automated security response playbooks in Cortex AgentiX with tasks, logic, and integrations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"yaEAGLXt3eURu5FpVo2M","title":"Choose from existing playbooks or create your own","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_RfNNx","description":"Choose an existing playbook or create a custom playbook in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"bahycjL8Ce2JYQ77Vfrr","title":"Configure playbook settings","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/configure-playbook-settings","siteSpaceId":"sitesp_RfNNx","description":"Configure playbook settings, inputs, and properties in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"3GTcNzg0DYSomgY5gktQ","title":"Add objects from the Task Library","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library","siteSpaceId":"sitesp_RfNNx","description":"Add tasks and automation objects from the Task Library in Cortex AgentiX playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"hgppxRx7w5NdgEleNH67","title":"Add commands and scripts","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-commands-and-scripts","siteSpaceId":"sitesp_RfNNx","description":"Add commands and scripts to automate tasks in Cortex AgentiX playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"RhLBz7SXtwfpPFeHXqms","title":"Add sub-playbooks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-sub-playbooks","siteSpaceId":"sitesp_RfNNx","description":"Add sub-playbooks to reuse automated workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"wgBGtcHFcQmVCAMrSnor","title":"Add AI Prompt tasks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-ai-prompt-tasks","siteSpaceId":"sitesp_RfNNx","description":"Add AI Prompt tasks to automate AI-assisted workflows in Cortex AgentiX playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"aURL4wg1EFwN5I48Newf","title":"Add manual tasks and blank tasks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks","siteSpaceId":"sitesp_RfNNx","description":"Add manual and blank tasks to guide playbook workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"}]},{"id":"ZkcFPyA67IKU6FzlRLPg","title":"Create a standard task","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-standard-task","siteSpaceId":"sitesp_RfNNx","description":"Create standard tasks to run automated actions in Cortex AgentiX playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"M3cRLZ6TKSrbwV5znLdW","title":"Create a conditional task","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-conditional-task","siteSpaceId":"sitesp_RfNNx","description":"Create conditional tasks to control playbook logic in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"MeZ5LcdPRA54ZbXrPw8k","title":"Create a communication task","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/add-objects-from-the-task-library/add-manual-tasks-and-blank-tasks/create-a-communication-task","siteSpaceId":"sitesp_RfNNx","description":"Create communication tasks in Cortex AgentiX playbooks to gather data and send surveys.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Add objects from the Task Library"},{"label":"Add manual tasks and blank tasks"}]},{"id":"KxtqjQZ8ZNDjNvDgn5rz","title":"Create a section header","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/create-a-section-header","siteSpaceId":"sitesp_RfNNx","description":"Create section headers to organize tasks and workflows in Cortex AgentiX playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"wDVdrzIRtSQeSMQJWSto","title":"Configure script error handling in a playbook","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_RfNNx","description":"Configure script error handling to manage failures in Cortex AgentiX playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"KolhzsDwlPwiE51Kjlsl","title":"Customize your playbook","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook","siteSpaceId":"sitesp_RfNNx","description":"Customize Cortex AgentiX playbooks with loops, filters, transformers, and context updates.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"hKdApGhQkHS3qfzXK7Q7","title":"Configure a sub-playbook loop","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_RfNNx","description":"Configure sub-playbook loops to repeat automated workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"rpKOmKO280QjAOzybnmm","title":"Filter and Transform data","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_RfNNx","description":"Filter and transform data for playbook workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"ZLOsvM3TCnPgH33Ppuyl","title":"Create custom filter and transformers","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/create-custom-filter-and-transformers","siteSpaceId":"sitesp_RfNNx","description":"Create custom filters and transformers for playbook data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"wz63kBvaOtt8fHSCon0W","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_RfNNx","description":"Understand filter categories, considerations, and built-in filters in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"D8j1pgdWJyHn4P9yX3K9","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_RfNNx","description":"Understand transformer categories, considerations, and built-in transformers in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"PdXSjFJsK2r2QmFsGLQN","title":"Extend context","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/extend-context","siteSpaceId":"sitesp_RfNNx","description":"Extend context data for automated playbook workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"WaCKGX9vgFNrYVdhYfBu","title":"Extract Indicators","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_RfNNx","description":"Extract indicators from playbook data to enrich investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"GsPkkY6JHm0cwfPUoNzh","title":"Update issue fields with playbook tasks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/customize-your-playbook/update-issue-fields-with-playbook-tasks","siteSpaceId":"sitesp_RfNNx","description":"Update issue fields with automated playbook tasks in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Customize your playbook"}]},{"id":"pgyuQi2lcIHm2rhVdKbB","title":"Test your playbook","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/test-your-playbook","siteSpaceId":"sitesp_RfNNx","description":"Test and debug Cortex AgentiX playbooks with breakpoints, skips, and overrides.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"ptz15iC1EL6AkyCfvXS9","title":"Troubleshoot playbook performance","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/test-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_RfNNx","description":"Troubleshoot playbook performance and execution delays in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"},{"label":"Test your playbook"}]},{"id":"Hj3c2ijWX0pUXle4Cprs","title":"Manage playbook content","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/build-your-playbook/manage-playbook-content","siteSpaceId":"sitesp_RfNNx","description":"Manage playbook content, versions, and dependencies in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"},{"label":"Build your playbook"}]},{"id":"UBbmyzNz1459r6QZ65mx","title":"Best practices for playbooks","pathname":"/cortex-agentix/configure-cortex-agentix/automations/playbooks/best-practices-for-playbooks","siteSpaceId":"sitesp_RfNNx","description":"Apply playbook design and maintenance best practices in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Playbooks"}]},{"id":"wZdqu9RNVPN3m8fEmTvw","title":"AI Prompts","pathname":"/cortex-agentix/configure-cortex-agentix/automations/ai-prompts","siteSpaceId":"sitesp_RfNNx","description":"Create, manage, and use AI prompts in Cortex AgentiX automation and playbooks.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"RVX5KobZqNTzQZq57oUJ","title":"AI prompts role-based access control","pathname":"/cortex-agentix/configure-cortex-agentix/automations/ai-prompts/ai-prompts-role-based-access-control","siteSpaceId":"sitesp_RfNNx","description":"Manage AI prompt permissions with role-based access control in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"95TNXC3ePa5l37kfnsTS","title":"Use existing prompts","pathname":"/cortex-agentix/configure-cortex-agentix/automations/ai-prompts/use-existing-prompts","siteSpaceId":"sitesp_RfNNx","description":"Find, duplicate, and edit reusable AI prompts in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"nWkhEIfVnz6AxSWhp4TU","title":"Create a prompt","pathname":"/cortex-agentix/configure-cortex-agentix/automations/ai-prompts/create-a-prompt","siteSpaceId":"sitesp_RfNNx","description":"Create and configure AI prompts for agents and playbooks in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"7MT6UVHgHPBgrRePaidI","title":"Write effective prompts","pathname":"/cortex-agentix/configure-cortex-agentix/automations/ai-prompts/write-effective-prompts","siteSpaceId":"sitesp_RfNNx","description":"Write effective AI prompts for reliable automation results in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"AI Prompts"}]},{"id":"wda0GjPMGP9OAPCjrKza","title":"Agentic Response (Preview)","pathname":"/cortex-agentix/configure-cortex-agentix/automations/agentic-response-preview","siteSpaceId":"sitesp_RfNNx","description":"Use Agentic Response in Cortex AgentiX to trigger AI agents from automation rules.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"Vr9N6BaAsS9Zlb8vKlFk","title":"Create an automation rule","pathname":"/cortex-agentix/configure-cortex-agentix/automations/create-an-automation-rule","siteSpaceId":"sitesp_RfNNx","description":"Create automation rules in Cortex AgentiX to trigger actions for matching issues.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"06ZwgFiqipqUvwqF5VYv","title":"Scripts","pathname":"/cortex-agentix/configure-cortex-agentix/automations/scripts","siteSpaceId":"sitesp_RfNNx","description":"Create, manage, and run automation scripts in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"e5O8mWf14HOcJXlzbiKi","title":"Access to scripts","pathname":"/cortex-agentix/configure-cortex-agentix/automations/scripts/access-to-scripts","siteSpaceId":"sitesp_RfNNx","description":"Manage access to automation scripts with object-level roles in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"odwZbwWwWWHbvzqhuy5z","title":"Use existing scripts","pathname":"/cortex-agentix/configure-cortex-agentix/automations/scripts/use-exisiting-scripts","siteSpaceId":"sitesp_RfNNx","description":"Find, review, and reuse automation scripts in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"4151RzSNQ2IHcgjXNhtQ","title":"Create a Script","pathname":"/cortex-agentix/configure-cortex-agentix/automations/scripts/create-a-script","siteSpaceId":"sitesp_RfNNx","description":"Create automation scripts in Cortex AgentiX to run custom security workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"EFZ61SO8VZkZ64DFNMmX","title":"Accelerate script development using the Automation Engineer agent","pathname":"/cortex-agentix/configure-cortex-agentix/automations/scripts/accelerate-script-development-using-the-automation-engineer-agent","siteSpaceId":"sitesp_RfNNx","description":"Use the Automation Engineer agent to accelerate script development in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"45HgxAYDUY4JXZU0CQA3","title":"Change the Docker image","pathname":"/cortex-agentix/configure-cortex-agentix/automations/scripts/change-the-docker-image","siteSpaceId":"sitesp_RfNNx","description":"Select Docker images for automation scripts and integrations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Scripts"}]},{"id":"wrlnXpeQeWz72pdAbaU4","title":"Context data","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data","siteSpaceId":"sitesp_RfNNx","description":"Use context data in Cortex AgentiX to support investigation, remediation, and automation workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"Z5fxgJlvA9w36pGq5j19","title":"Issue context data","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data/issue-context-data","siteSpaceId":"sitesp_RfNNx","description":"View and manage issue context data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"wKqqHlkh4wNdJC1KXjMA","title":"Case context data","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data/case-context-data","siteSpaceId":"sitesp_RfNNx","description":"View and manage case context data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"gN2q93oa38aMdwhtt5v8","title":"Search context data","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data/search-context-data","siteSpaceId":"sitesp_RfNNx","description":"Search context data to investigate automation results in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"r4aBhQjDy3IZAqMfmgp2","title":"Add context data to an issue","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data/add-context-data-to-an-issue","siteSpaceId":"sitesp_RfNNx","description":"Add context data to issues for automation workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"Fp7KGNDe4htjr9u5zFy9","title":"Add context data to a case","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data/add-context-data-to-a-case","siteSpaceId":"sitesp_RfNNx","description":"Add context data to cases for automation workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"KXTbAWZfxjU8WHzH8wOC","title":"Delete context data from a case","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data/delete-context-data-from-a-case","siteSpaceId":"sitesp_RfNNx","description":"Delete case context data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"LQOFoBOmM67a3z6IXC1h","title":"Use context data in a playbook","pathname":"/cortex-agentix/configure-cortex-agentix/automations/context-data/use-context-data-in-a-playbook","siteSpaceId":"sitesp_RfNNx","description":"Use context data to pass information between playbook tasks in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Context data"}]},{"id":"nmhqguBjpenC8yqis295","title":"Lists","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists","siteSpaceId":"sitesp_RfNNx","description":"Create and manage lists in Cortex AgentiX for playbooks, scripts, and automation workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"iCh3L1X1G0ao3zcLtcBu","title":"Create a list","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists/create-a-list","siteSpaceId":"sitesp_RfNNx","description":"Create lists to store reusable automation data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"3QLUzcR2wCMc00tuyX6Q","title":"List commands","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists/list-commands","siteSpaceId":"sitesp_RfNNx","description":"Use list commands to manage automation data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"Vz6pQkTmadDE4jdmUJMW","title":"Use cases: JSON lists","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists/use-cases-json-lists","siteSpaceId":"sitesp_RfNNx","description":"Use JSON lists to store and process structured automation data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"ZNKHRVEvMv5iKWv2RmoV","title":"Extract data from a JSON object","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists/use-cases-json-lists/extract-data-from-a-json-object","siteSpaceId":"sitesp_RfNNx","description":"Extract data from JSON objects stored in Cortex AgentiX lists.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Lists"},{"label":"Use cases: JSON lists"}]},{"id":"leslSeAA0PanhE8szwUO","title":"Extract a subset of the data","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists/use-cases-json-lists/extract-a-subset-of-the-data","siteSpaceId":"sitesp_RfNNx","description":"Extract selected data from JSON lists in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Lists"},{"label":"Use cases: JSON lists"}]},{"id":"HmWAm5IXzMgrhaRT17Hg","title":"Filter extracted data","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists/use-cases-json-lists/filter-extracted-data","siteSpaceId":"sitesp_RfNNx","description":"Filter extracted JSON list data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Lists"},{"label":"Use cases: JSON lists"}]},{"id":"B0k0sambbZ6WEGxoAXI1","title":"Transform a list into an array","pathname":"/cortex-agentix/configure-cortex-agentix/automations/lists/transform-a-list-into-an-array-1","siteSpaceId":"sitesp_RfNNx","description":"Transform a Cortex AgentiX list into an array for automation workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Lists"}]},{"id":"NbbgrUeHDze1uU7EWpqD","title":"Jobs","pathname":"/cortex-agentix/configure-cortex-agentix/automations/jobs","siteSpaceId":"sitesp_RfNNx","description":"Create and manage scheduled and event-triggered automation jobs in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"}]},{"id":"b7oq6lDutovJSuGaN6js","title":"Access to Jobs","pathname":"/cortex-agentix/configure-cortex-agentix/automations/jobs/access-to-jobs","siteSpaceId":"sitesp_RfNNx","description":"Manage access to automation jobs with object-level roles in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"uDSQFRpxfnbS3Vbdh66L","title":"Manage jobs","pathname":"/cortex-agentix/configure-cortex-agentix/automations/jobs/manage-jobs","siteSpaceId":"sitesp_RfNNx","description":"Create, manage, and schedule playbook jobs in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"ZH4dw4kLnN87Iz19pwa6","title":"Create a time-triggered job","pathname":"/cortex-agentix/configure-cortex-agentix/automations/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_RfNNx","description":"Create time-triggered jobs to run playbooks on a schedule in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"qd5YjT5pFwPHrNi4iXWN","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-agentix/configure-cortex-agentix/automations/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_RfNNx","description":"Create jobs that trigger playbooks when feed data changes in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Automations"},{"label":"Jobs"}]},{"id":"Huyk7B75hHEvNwHHjLSm","title":"Data management","pathname":"/cortex-agentix/configure-cortex-agentix/data-management","siteSpaceId":"sitesp_RfNNx","description":"Manage datasets, data models, parsing rules, and data workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"}]},{"id":"Itr1dGMTNGwE5bI0NMJJ","title":"Dataset management","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/dataset-management","siteSpaceId":"sitesp_RfNNx","description":"Manage datasets, data storage, and retention settings in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"}]},{"id":"ca7jmkNlq9tckwZgdUpZ","title":"What are datasets?","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/dataset-management/what-are-datasets","siteSpaceId":"sitesp_RfNNx","description":"Learn how datasets store, organize, and retain security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"QgaRpV29pURs5EokpC1W","title":"Lookup datasets","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/dataset-management/lookup-datasets","siteSpaceId":"sitesp_RfNNx","description":"Create and manage lookup datasets for reference data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"p57VIk9h8OF217SYGSFH","title":"Import a lookup dataset","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/dataset-management/lookup-datasets/import-a-lookup-dataset","siteSpaceId":"sitesp_RfNNx","description":"Import a lookup dataset to use reference data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"cgtTIQd7dYXWXKcq5udw","title":"Download JSON file of lookup dataset","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/dataset-management/lookup-datasets/download-json-file-of-lookup-dataset","siteSpaceId":"sitesp_RfNNx","description":"Download lookup dataset data as a JSON file in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"My8iDs8xIZhYcJjASNrM","title":"Set time to live for lookup datasets","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/dataset-management/lookup-datasets/set-time-to-live-for-lookup-datasets","siteSpaceId":"sitesp_RfNNx","description":"Set a time to live for lookup datasets in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"svXySnM6Z5pyRhXGw3DE","title":"Monitor datasets and dataset views activity","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/dataset-management/monitor-datasets-and-dataset-views-activity","siteSpaceId":"sitesp_RfNNx","description":"Monitor dataset and dataset view activity in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"WEw8i9gX3wLrn4ngRIEx","title":"Manage compute units","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/manage-compute-units","siteSpaceId":"sitesp_RfNNx","description":"Manage and monitor compute unit usage in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"}]},{"id":"GDWDNOy1G73mVMoWF9Ky","title":"Manage Event Forwarding","pathname":"/cortex-agentix/configure-cortex-agentix/data-management/manage-event-forwarding","siteSpaceId":"sitesp_RfNNx","description":"Forward ingested event data from Cortex AgentiX to external storage.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Configure Cortex AgentiX","icon":"sliders"},{"label":"Data management"}]},{"id":"mtGyLU2LuWtYcFqtOVXT","title":"Monitor dashboards and reports","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports","siteSpaceId":"sitesp_RfNNx","description":"Monitor security dashboards and reports in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"}]},{"id":"0og8TdKlQIrwDUOyqkA8","title":"Overview of dashboards and reports","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports","siteSpaceId":"sitesp_RfNNx","description":"Learn how dashboards, reports, and widgets visualize security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"}]},{"id":"mwMoAyZgrHK3k3oH0tDe","title":"Dashboard interface basics","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-interface-basics","siteSpaceId":"sitesp_RfNNx","description":"Learn the dashboard interface and navigation controls in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"764Deaw7IYKeGZLUETzs","title":"Dashboard types","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-types","siteSpaceId":"sitesp_RfNNx","description":"Understand dashboard types and their uses in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"HIrruxFdAa1IWabF3027","title":"Report basics","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/report-basics","siteSpaceId":"sitesp_RfNNx","description":"Learn how reports summarize and deliver security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"7GyrlchHPA4nvuUG7JP3","title":"Widget Library","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/overview-of-dashboards-and-reports/widget-library","siteSpaceId":"sitesp_RfNNx","description":"Explore the Widget Library for dashboards and reports in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"pVJ4aQwAgGn7j8RMOq7T","title":"Access and visibility for dashboards and reports","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports","siteSpaceId":"sitesp_RfNNx","description":"Manage dashboard and report access, visibility, and sharing in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"}]},{"id":"5GJz1d3GR9Q0wxrdgbRg","title":"Visibility settings","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/visibility-settings","siteSpaceId":"sitesp_RfNNx","description":"Configure visibility settings for dashboards and reports in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"yijZ5HbaABdAJPrEwXmH","title":"Access to widgets","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-to-widgets","siteSpaceId":"sitesp_RfNNx","description":"Control user access to dashboard widgets in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"pEQ4QI2Uo354iWUKyV6N","title":"Sharing icons","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/sharing-icons","siteSpaceId":"sitesp_RfNNx","description":"Understand dashboard and report sharing icons in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"yf0SYIn6Wh0GYmYsETAc","title":"Access and sharing cheat sheet","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-and-sharing-cheat-sheet","siteSpaceId":"sitesp_RfNNx","description":"Use this cheat sheet to manage dashboard and report access in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"UfEavEMcDXlDPOmlaT69","title":"Manage dashboards and reports","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports","siteSpaceId":"sitesp_RfNNx","description":"Manage dashboards, reports, templates, ownership, and content in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"}]},{"id":"IYQdenCLucAve8SJW6cU","title":"Dashboard Manager","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/dashboard-manager","siteSpaceId":"sitesp_RfNNx","description":"Use Dashboard Manager to organize and manage dashboards in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"9dERDLlzLIxFU8JLHUTz","title":"Reports","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/reports","siteSpaceId":"sitesp_RfNNx","description":"Manage reports and report templates in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"6jS596BfIW6HpHxvyFis","title":"Duplicate dashboards and reports","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/duplicate-dashboards-and-reports","siteSpaceId":"sitesp_RfNNx","description":"Duplicate dashboards and reports to reuse security visualizations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"m5gGD1SFVpkNmiT0RMtr","title":"Share custom dashboards and report templates","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/share-custom-dashboards-and-report-templates","siteSpaceId":"sitesp_RfNNx","description":"Share custom dashboards and report templates in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"zIlt4QEP7ATenSlv0qjC","title":"Change ownership to dashboards and report templates","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/change-ownership-to-dashboards-and-report-templates","siteSpaceId":"sitesp_RfNNx","description":"Change dashboard and report template ownership in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"zWExr3OQVlsVtyXeTugo","title":"Import and export dashboards and report templates","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/import-and-export-dashboards-and-report-templates","siteSpaceId":"sitesp_RfNNx","description":"Import and export dashboards and report templates in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"6SZdWyBs9QpMbwRDIrvz","title":"Configure the notification rule for a failed report","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/configure-the-notification-rule-for-a-failed-report","siteSpaceId":"sitesp_RfNNx","description":"Configure notifications for failed reports in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"iKwILzYEhAX5lDoyFsJt","title":"Deleted content","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/manage-dashboards-and-reports/deleted-content","siteSpaceId":"sitesp_RfNNx","description":"Restore or permanently remove deleted dashboard and report content in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"Eu0xT9sASy2Cj4X62paJ","title":"Create dashboards","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-dashboards","siteSpaceId":"sitesp_RfNNx","description":"Create dashboards to visualize security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"}]},{"id":"lhFo4u5ngKp10qBGo8kq","title":"Create a dashboard","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-dashboards/create-a-dashboard","siteSpaceId":"sitesp_RfNNx","description":"Create a custom dashboard to monitor security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Create dashboards"}]},{"id":"02xv4JFt0mya56OWUH0p","title":"Create reports","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-reports","siteSpaceId":"sitesp_RfNNx","description":"Create reports to share security insights in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"}]},{"id":"q6R884HntOsDfcWDM9ye","title":"Create a report template from scratch","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/create-reports/create-a-report-template-from-scratch","siteSpaceId":"sitesp_RfNNx","description":"Create a custom report template from scratch in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Create reports"}]},{"id":"bmWlNkTL8dOxz6D5GeCf","title":"Advanced configuration","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration","siteSpaceId":"sitesp_RfNNx","description":"Configure advanced dashboard and report features in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"}]},{"id":"esep0qktDO5wck2kv6na","title":"Create custom widgets","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets","siteSpaceId":"sitesp_RfNNx","description":"Create custom widgets for dashboards and reports in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"nmdUpaLH52zUjbgFqyBt","title":"Create widgets using AI","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-widgets-using-ai","siteSpaceId":"sitesp_RfNNx","description":"Create dashboard widgets using AI in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"FQlvyqCThwseizjufr9m","title":"Create XQL widgets","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-xql-widgets","siteSpaceId":"sitesp_RfNNx","description":"Create XQL widgets to visualize query data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"pzpHw12TQDqAVvTZj8Hu","title":"Add parameters to a custom XQL widget","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/add-parameters-to-a-custom-xql-widget","siteSpaceId":"sitesp_RfNNx","description":"Add parameters to custom XQL widgets in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"vLhS8C9KZDfSeGmvsf2M","title":"Create script-based widgets","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/create-custom-widgets/create-script-based-widgets","siteSpaceId":"sitesp_RfNNx","description":"Create script-based widgets for dashboards in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"K4fz5sixBic1eKi8osYD","title":"Configure global filters","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/configure-global-filters","siteSpaceId":"sitesp_RfNNx","description":"Configure global filters for dashboards in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"6N1KN9MZlUQYgmAvAHju","title":"Configure drilldowns","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/advanced-configuration/configure-drilldowns","siteSpaceId":"sitesp_RfNNx","description":"Configure dashboard drilldowns for deeper investigation in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"tgFIhkcDA0tyXsQib5vx","title":"Dashboard reference","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference","siteSpaceId":"sitesp_RfNNx","description":"Reference system dashboards and Command Center dashboards in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"}]},{"id":"YHmbkupFRxaa53q9BiSh","title":"Command Center reference","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference","siteSpaceId":"sitesp_RfNNx","description":"Reference Command Center dashboards for security operations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"Rb31yKmn85YVHEyBluMu","title":"Cortex Agentic Assistant dashboard","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-agentic-assistant-dashboard","siteSpaceId":"sitesp_RfNNx","description":"Monitor Agentic Assistant activity with its dashboard in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"pHNFYgyTD4vU3n7Z6gtw","title":"Cortex Cloud Command Center","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-cloud-command-center","siteSpaceId":"sitesp_RfNNx","description":"Use Cortex Cloud Command Center dashboards in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"Command Center reference"}]},{"id":"ELzndwpxqkDP2BSeQ5Kt","title":"System dashboards","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards","siteSpaceId":"sitesp_RfNNx","description":"Reference system dashboards available in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"}]},{"id":"ahUpOwcgelDyXKHOU8i6","title":"Cortex Cloud Consumption","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cortex-cloud-consumption","siteSpaceId":"sitesp_RfNNx","description":"Monitor Cortex Cloud consumption with this system dashboard in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"0G9ijMI4HcEF8waHyyEz","title":"Cloud Security Operations","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cloud-security-operations","siteSpaceId":"sitesp_RfNNx","description":"Monitor cloud security operations with this system dashboard in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Monitor dashboards and reports"},{"label":"Dashboard reference"},{"label":"System dashboards"}]},{"id":"cHQMifB9krlBUCKEc9jy","title":"Investigation and Response","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response","siteSpaceId":"sitesp_RfNNx","description":"Investigate cases and issues, run XQL queries, and respond to threats in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"}]},{"id":"cCcbL4EnQejZtUOlUp7F","title":"Overview of cases","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases","siteSpaceId":"sitesp_RfNNx","description":"Understand case investigation, triage, and response workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"}]},{"id":"pQcZD77ptekkDdXRz2nG","title":"What are cases?","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/what-are-cases","siteSpaceId":"sitesp_RfNNx","description":"A case provides the full contextual story of a problem that impacts your organization's security, giving you an end-to-end view of the problem and streamlining your understanding of what needs to be s","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Overview of cases"}]},{"id":"8riRUgw68zOd8zDrplCN","title":"Resolving cases with AI","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/resolving-cases-with-ai","siteSpaceId":"sitesp_RfNNx","description":"Use AI to analyze, investigate, and resolve security cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Overview of cases"}]},{"id":"F6gcMrtlzM0atf3uiEBE","title":"Case lifecycle","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-lifecycle","siteSpaceId":"sitesp_RfNNx","description":"Understand case lifecycle stages from creation through resolution in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Overview of cases"}]},{"id":"bgsZ642NI1S9vtHvz3c6","title":"Case thresholds","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-thresholds","siteSpaceId":"sitesp_RfNNx","description":"Configure case grouping thresholds to keep investigations manageable in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Overview of cases"}]},{"id":"3J74lKvNNdgB6g2drSqo","title":"Case scope and impact","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-scope-and-impact","siteSpaceId":"sitesp_RfNNx","description":"Assess case scope, impact, severity, score, and domain in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Overview of cases"}]},{"id":"SIeqVjeiT4V3sd64Evff","title":"Case and issue domains","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/case-and-issue-domains","siteSpaceId":"sitesp_RfNNx","description":"Organize cases and issues with domains in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Overview of cases"}]},{"id":"bVWMA2WR0jz6tR4IlLdn","title":"Overview of case teams and roles","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/overview-of-cases/overview-of-case-teams-and-roles","siteSpaceId":"sitesp_RfNNx","description":"Understand case teams and roles for collaborative investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Overview of cases"}]},{"id":"b9hVQBLPS8gKe0hOBqU4","title":"Case concepts","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts","siteSpaceId":"sitesp_RfNNx","description":"Learn core case concepts for managing investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"}]},{"id":"Q0dIQvjW4MaHohJ37dD6","title":"Issues","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/issues","siteSpaceId":"sitesp_RfNNx","description":"Understand how issues identify security risks within Cortex AgentiX cases.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Case concepts"}]},{"id":"u2yyL99WpU6Jn4N0Ah1y","title":"Case grouping","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/case-grouping","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX groups related issues into cases.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Case concepts"}]},{"id":"KP5JGDjd3Li5Zw5EH2OA","title":"Case scoring","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/case-scoring","siteSpaceId":"sitesp_RfNNx","description":"Understand case scoring methods for prioritizing investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Case concepts"}]},{"id":"xI2Q8xdoqYIflmKVs17t","title":"Case starring","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/case-starring","siteSpaceId":"sitesp_RfNNx","description":"Star and filter important cases to prioritize work in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Case concepts"}]},{"id":"oWml6MkwfFvDCGnenIDn","title":"SLAs and tracking","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/case-concepts/slas-and-tracking","siteSpaceId":"sitesp_RfNNx","description":"You can set up Service Level Agreements (SLAs) to track your cases against SLA targets.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Case concepts"}]},{"id":"DK3WwnpsmkCGC1g9y59v","title":"Analyze and resolve cases","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases","siteSpaceId":"sitesp_RfNNx","description":"Review, analyze, and resolve security cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"}]},{"id":"tsIRn75YOogoY8OqE8dv","title":"Review all cases","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/review-all-cases","siteSpaceId":"sitesp_RfNNx","description":"Review and prioritize open security cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"}]},{"id":"9Fz5JYcWejEaaFvwNdv1","title":"Start case analysis","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/start-case-analysis","siteSpaceId":"sitesp_RfNNx","description":"Start case analysis and resolution workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"}]},{"id":"OQVGMaxyhQoXMrYmHEKG","title":"Agentic Assistant - Case Investigation agent","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/start-case-analysis/agentic-assistant-case-investigation-agent","siteSpaceId":"sitesp_RfNNx","description":"Use the Case Investigation agent to analyze cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Start case analysis"}]},{"id":"GyRKMAPar5iYQ9GDSMul","title":"Establish case context","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/establish-case-context","siteSpaceId":"sitesp_RfNNx","description":"Establish investigation context for a security case in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"}]},{"id":"kRN4PzAzfQIjRiX6xwC4","title":"Analyze case details","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details","siteSpaceId":"sitesp_RfNNx","description":"You can analyze detailed information about the case in the Overview section of the Case card.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"}]},{"id":"KLAgkcOphPsW8kPiM9YO","title":"Grouping graph","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/grouping-graph","siteSpaceId":"sitesp_RfNNx","description":"Use the grouping graph to analyze related case activity in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"M9afZlfyHQjvNHVhKULW","title":"Evidence","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/evidence","siteSpaceId":"sitesp_RfNNx","description":"Review case evidence to support investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"QA8O2tW3SKP6269YMvGp","title":"Issue feed","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/issue-feed","siteSpaceId":"sitesp_RfNNx","description":"Analyze the issue feed for case investigation context in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"s3uQGvHQrPzyH3x4CAO8","title":"Associated assets and artifacts","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/associated-assets-and-artifacts","siteSpaceId":"sitesp_RfNNx","description":"Investigate assets and artifacts associated with a case in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"Id39aYyjvaIJ0MAie89r","title":"MITRE ATT&CK tactics and techniques","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/mitre-att-and-ck-tactics-and-techniques","siteSpaceId":"sitesp_RfNNx","description":"Review MITRE ATT&CK tactics and techniques for cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"6IyNuoheddDeIYi5kBKE","title":"Case timeline","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/case-timeline","siteSpaceId":"sitesp_RfNNx","description":"Use the case timeline to review investigation activity in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"zSFmXXL9lPDnkOsUmNbm","title":"Detailed view","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/analyze-case-details/detailed-view","siteSpaceId":"sitesp_RfNNx","description":"Use the detailed view to investigate case information in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Analyze case details"}]},{"id":"cBDYGd0ajQPOunTotu2L","title":"Resolve the case","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case","siteSpaceId":"sitesp_RfNNx","description":"You can start remediating a case by reviewing the actions in the Resolution Center.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"}]},{"id":"l9J1lmEfRaFuHs7IfHcE","title":"Resolution Center","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/resolution-center","siteSpaceId":"sitesp_RfNNx","description":"Use Resolution Center to plan and execute case remediation in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"m5UR9UmggYto8nA8FPOA","title":"Collaborative notes and comments","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/collaborative-notes-and-comments","siteSpaceId":"sitesp_RfNNx","description":"Add collaborative notes and comments to cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"ZIHPYp6FwhAAQhrVsLb5","title":"How to resolve a case","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/resolve-a-case","siteSpaceId":"sitesp_RfNNx","description":"Resolve a security case using guided response actions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"pAxETNk2zoZsh0J03aez","title":"Resolution reasons for cases and issues","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/resolve-the-case/resolution-reasons-for-cases-and-issues","siteSpaceId":"sitesp_RfNNx","description":"Configure resolution reasons for cases and issues in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Resolve the case"}]},{"id":"HqvwBcF63UHgwCpIb27W","title":"Additional case actions","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions","siteSpaceId":"sitesp_RfNNx","description":"Perform additional case management actions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"}]},{"id":"at6IIx1kowZqr8Nssonq","title":"Create a case","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/create-a-case","siteSpaceId":"sitesp_RfNNx","description":"You can manually create a new case, assign it to a specific domain, and define custom fields for the case.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"U96hTrXc49D0jzC8jNYy","title":"Merge a case","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/merge-a-case","siteSpaceId":"sitesp_RfNNx","description":"Merge related cases to streamline investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"XpsuaVadG7LKl3Kv4Dlm","title":"Assign a case team and restrict access","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access","siteSpaceId":"sitesp_RfNNx","description":"Assign case teams and restrict case access in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"}]},{"id":"ZICOiXOmjRNeFtm4dse2","title":"Playbook examples","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/analyze-and-resolve-cases/additional-case-actions/assign-a-case-team-and-restrict-access/playbook-examples","siteSpaceId":"sitesp_RfNNx","description":"Use playbook examples to manage case teams in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Analyze and resolve cases"},{"label":"Additional case actions"},{"label":"Assign a case team and restrict access"}]},{"id":"uq2MDdhMszxTVEczN4qR","title":"Investigate issues","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues","siteSpaceId":"sitesp_RfNNx","description":"Cortex AgentiX generates issues to bring your attention to security risks in your framework.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"}]},{"id":"FDI5lwN7PQdAaCDZ1S07","title":"Overview of the Issues page","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/overview-of-the-issues-page","siteSpaceId":"sitesp_RfNNx","description":"The Issues page consolidates all non-informational issues from your detection sources.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"HKRei8XHsvOHPFjNjtfA","title":"Issue card","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-card","siteSpaceId":"sitesp_RfNNx","description":"On the Issue card, you can see details of the selected issue and take actions on an issue.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"10e1GyP4aU9wKxjeGB46","title":"Resolution actions","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/resolution-actions","siteSpaceId":"sitesp_RfNNx","description":"See all recommended remediation actions for an issue on the Resolution tab.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"4ZwD9eHX5BUzOko2xD2k","title":"Link or unlink issues from a case","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/link-or-unlink-issues-from-a-case","siteSpaceId":"sitesp_RfNNx","description":"Link or unlink issues from cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"6Z5YPwq89dpyEAUnZDoO","title":"Run an automation on an issue","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/run-an-automation-on-an-issue","siteSpaceId":"sitesp_RfNNx","description":"Save time and expense by using playbooks and Quick Actions to automatically investigate and take remedial action on issues.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"TdLltokhEYamuEiRw6pH","title":"Use the War Room in an investigation","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_RfNNx","description":"Use the War Room for real-time investigation into a case, to filter war room entries, and to disable indicator notifications.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"grq6gfQss19YmrTqfmgV","title":"Use the Work Plan in an investigation","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_RfNNx","description":"A Work Plan is a visual representation of the running playbook that is assigned to a case. Use it to monitor and manage a playbook workflow.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"hblnuFwFUSN8Ne31TTPy","title":"Manage synced tickets in issues","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/manage-synced-tickets-in-issues","siteSpaceId":"sitesp_RfNNx","description":"Manage synced external tickets for issues in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"6BW7oyDIpFozb21lMHlW","title":"Issue investigation actions","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions","siteSpaceId":"sitesp_RfNNx","description":"Perform issue investigation and management actions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"}]},{"id":"tkzGH6KqzZzcf5YFqDdd","title":"Copy issues","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/copy-issues","siteSpaceId":"sitesp_RfNNx","description":"Copy issues to support investigation workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"W1zW5L51ZPrj3jbaHZ19","title":"Investigate contributing events","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/investigate-contributing-events","siteSpaceId":"sitesp_RfNNx","description":"Investigate contributing events for an issue in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"XxbEKP1f9T6SuFisvALl","title":"Export issue details to a file","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/export-issue-details-to-a-file","siteSpaceId":"sitesp_RfNNx","description":"Export issue details to a file from Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"6CtyxRmRYlY7gbdaROwi","title":"Exclude an issue","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/exclude-an-issue","siteSpaceId":"sitesp_RfNNx","description":"Exclude an issue from investigation workflows in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"cef5zfAz0USzfTNkQ2Jw","title":"Query case and issue data","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/query-case-and-issue-data","siteSpaceId":"sitesp_RfNNx","description":"Query case and issue data with XQL in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"cgk67URVtMOOc3Ipr2aS","title":"Run indicator extraction in the CLI","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_RfNNx","description":"Run indicator extraction from the CLI in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"MOkNwysSiIemHOBvOYQd","title":"Update issue fields","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/update-issue-fields","siteSpaceId":"sitesp_RfNNx","description":"Update issue fields during investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"GWK3idtjP4WJ5VJMhNDF","title":"Close an issue","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-issues/issue-investigation-actions/close-an-issue","siteSpaceId":"sitesp_RfNNx","description":"Close resolved issues in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate issues"},{"label":"Issue investigation actions"}]},{"id":"I4WxIjj9PJIkzbuZqw4Z","title":"Investigate artifacts and assets","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets","siteSpaceId":"sitesp_RfNNx","description":"Investigate security artifacts and assets in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"}]},{"id":"i2eGIvbDCpZVkIYnTiwU","title":"Investigate an IP address","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets/investigate-an-ip-address","siteSpaceId":"sitesp_RfNNx","description":"Investigate IP address activity, cases, and intelligence in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate artifacts and assets"}]},{"id":"18DVGHMQ9Ekl9oktYEoc","title":"Investigate a file and process hash","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/investigation-and-response/investigate-artifacts-and-assets/investigate-a-file-and-process-hash","siteSpaceId":"sitesp_RfNNx","description":"Investigate file and process hashes in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Investigation and Response"},{"label":"Investigate artifacts and assets"}]},{"id":"kBVQ3F7rfWXH84T1TrrH","title":"Agentic Assistant chat","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat","siteSpaceId":"sitesp_RfNNx","description":"Use natural-language chat with the Cortex Agentic Assistant in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"}]},{"id":"2yoGhKZ1ylo5CZuLlKrT","title":"Get started with Agentic Assistant chat","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/get-started-with-agentic-assistant-chat","siteSpaceId":"sitesp_RfNNx","description":"Enable and access Agentic Assistant chat in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"D9mLEF8iSmSDcErfvZUO","title":"Choose an Agentic Assistant agent","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/choose-an-agentic-assistant-agent","siteSpaceId":"sitesp_RfNNx","description":"Choose a system or custom chat agent in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"dlRVaVqH4FY8kyLca8yH","title":"Chat with an Agentic Assistant agent","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/chat-with-an-agentic-assistant-agent","siteSpaceId":"sitesp_RfNNx","description":"Use effective prompts with Agentic Assistant chat in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"BDbTPAzthnJcbjtAUDfp","title":"Chat with the Agentic Assistant from Slack","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/chat-with-the-agentic-assistant-from-slack","siteSpaceId":"sitesp_RfNNx","description":"Chat with an Agentic Assistant agent from Slack in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"mYfRrYJJugBqkHLcpkrd","title":"Streamline troubleshooting and support with the Help Center agent","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"SfWi9qmNBaRJhfeSjvwf","title":"Help Center agent actions","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/streamline-troubleshooting-and-support-with-the-help-center-agent/help-center-agent-actions","siteSpaceId":"sitesp_RfNNx","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"},{"label":"Streamline troubleshooting and support with the Help Center agent"}]},{"id":"qaTB49psSdcS9WzhHGem","title":"Create and run XQL queries with Agentic Assistant chat","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/create-and-run-xql-queries-with-agentic-assistant-chat","siteSpaceId":"sitesp_RfNNx","description":"Use natural language in Cortex Agentic Assistant Chat to automatically generate and execute Cortex Query Language (XQL) queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"WGYCvEyErpkYLaFElGyM","title":"Use natural language to query and visualize your data","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/use-natural-language-to-query-and-visualize-your-data","siteSpaceId":"sitesp_RfNNx","description":"Prompt Cortex Agentic Assistant agents to create graphs and charts from its findings in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"blSgcoM7JPx1k9lAblLc","title":"Manage chat history","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/agentic-assistant-chat/manage-chat-history","siteSpaceId":"sitesp_RfNNx","description":"Manage and navigate your past chats with the Cortex Agentic Assistant in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Agentic Assistant chat"}]},{"id":"Otb2IfIhgExFwZ32TgMl","title":"Extended Threat Intelligence","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence","siteSpaceId":"sitesp_RfNNx","description":"Research threats, investigate indicators, and apply intelligence across Cortex AgentiX workflows.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"}]},{"id":"66BbMoZZmQm6Te1ZVBZ7","title":"XTI Threat Intel Library","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence/xti-threat-intel-library","siteSpaceId":"sitesp_RfNNx","description":"Research threat actors, malware, vulnerabilities, and reports in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Extended Threat Intelligence"}]},{"id":"nkyBQ7Ov9AQiE9sVFALE","title":"XTI Indicators","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence/xti-indicators","siteSpaceId":"sitesp_RfNNx","description":"Investigate, manage, and enrich threat indicators in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Extended Threat Intelligence"}]},{"id":"ksUBEEA4OyMgDVz4Jy4c","title":"Threat intel context in cases and issues","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence/threat-intel-context-in-cases-and-issues","siteSpaceId":"sitesp_RfNNx","description":"Analyze indicator intelligence and Behavioral Threat Analysis (BTA) findings in Cortex AgentiX cases and issues.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Extended Threat Intelligence"}]},{"id":"TsFKVJFKdynDKUV6CPs1","title":"Threat intel investigation through XQL","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence/threat-intel-investigation-through-xql","siteSpaceId":"sitesp_RfNNx","description":"Query XTI indicators, threat objects, and their relationships using Cortex Query Language in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Extended Threat Intelligence"}]},{"id":"vRhCR8DL79FLM8cg1toJ","title":"Threat Intel Dashboard","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence/threat-intel-dashboard","siteSpaceId":"sitesp_RfNNx","description":"Visualize threat intelligence data to monitor distribution, ingestion health, and emerging trends in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Extended Threat Intelligence"}]},{"id":"joANWaE46Y9tVzqdPJ9o","title":"Using XTI with Threat Intel Agent","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence/using-xti-with-threat-intel-agent","siteSpaceId":"sitesp_RfNNx","description":"Use the Threat Intel Agent to list, enrich, and update XTI indicators in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Extended Threat Intelligence"}]},{"id":"53HF1pZFfUL8WCGDHJvX","title":"Using XTI in playbooks","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/extended-threat-intelligence/using-xti-in-playbooks","siteSpaceId":"sitesp_RfNNx","description":"Automate XTI indicator triage, enrichment, and response with supported playbook commands in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Extended Threat Intelligence"}]},{"id":"G3mqC2VTMZbV31xflzPJ","title":"Threat Intel Management","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management","siteSpaceId":"sitesp_RfNNx","description":"Manage, configure, and investigate threat indicators in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"}]},{"id":"Ud7xlwf1FHbw7ky6CkdD","title":"Get started with Threat Intel Management","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_RfNNx","description":"Get started with Threat Intel Management investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"KerAJjZrq9nBA2fTNuUX","title":"What is Threat Intel Management?","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_RfNNx","description":"Understand Threat Intel Management and its capabilities in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"ectSSvc9e3oZ2Drgjcys","title":"Threat Intel Management use cases","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_RfNNx","description":"Explore Threat Intel Management use cases in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"YmMzBjzdlVz6qScpZ2D3","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_RfNNx","description":"Understand Threat Intel Management roles and responsibilities in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"vICpfb9JhSvyh7fbfKoq","title":"Indicator concepts","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_RfNNx","description":"Understand indicator ingestion, enrichment, merging, and expiration in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"SsxrWGvN3NNE3tc1HYwY","title":"Indicator lifecycle","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_RfNNx","description":"Track indicators through their lifecycle in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"i87AN6VIvKJkjexiCsnz","title":"Indicator configuration","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_RfNNx","description":"Configure indicator types, fields, extraction, reputation, and exclusions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"7VegoGAnQeUlW7F6oDJw","title":"Customize indicator fields and types","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types","siteSpaceId":"sitesp_RfNNx","description":"Customize indicator fields, types, extraction, and expiration in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"FrOKGeb8ztsowvXMi6xz","title":"Create an indicator type","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type","siteSpaceId":"sitesp_RfNNx","description":"Create custom indicator types and configure enrichment behavior in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"}]},{"id":"SUjIXja00HoGpV7PX65i","title":"Indicator type profile","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/indicator-type-profile","siteSpaceId":"sitesp_RfNNx","description":"Configure indicator type profiles, scripts, commands, and expiration in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"oJwlcH7q0WRqEH8xPRMZ","title":"File indicators","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/file-indicators","siteSpaceId":"sitesp_RfNNx","description":"Understand file indicator properties and hash handling in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"vULUNG0Ge7ZHuDKF3GOF","title":"Formatting scripts","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/formatting-scripts","siteSpaceId":"sitesp_RfNNx","description":"Format and validate indicator values with scripts in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"rDW9s4IgLe0qJWEYk5h6","title":"Enhancement scripts","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/enhancement-scripts","siteSpaceId":"sitesp_RfNNx","description":"Use enhancement scripts to enrich indicators in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"gYxmXuRr02vEk8QOVGJH","title":"Reputation scripts","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/reputation-scripts","siteSpaceId":"sitesp_RfNNx","description":"Use reputation scripts to calculate indicator verdicts in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"jRFZTZZ1471Jhs89WKvD","title":"Reputation commands","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/reputation-commands","siteSpaceId":"sitesp_RfNNx","description":"Use reputation commands to retrieve indicator verdicts in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"sFOSBndtEUoVRb23Cym0","title":"Map custom indicator fields","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-type/map-custom-indicator-fields","siteSpaceId":"sitesp_RfNNx","description":"Map enrichment context to custom indicator fields in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator type"}]},{"id":"H3KRGDo9JCfBKwduTriJ","title":"Create an indicator field","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-field","siteSpaceId":"sitesp_RfNNx","description":"Create custom indicator fields for indicator types in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"}]},{"id":"O8GVKBW1Z5K7dNZxyBOC","title":"Indicator field structure","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-field/indicator-field-structure","siteSpaceId":"sitesp_RfNNx","description":"Reference indicator field structures and supported types in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator field"}]},{"id":"hedALj3HqJ0KSIslKeiG","title":"Indicator field trigger scripts","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-fields-and-types/create-an-indicator-field/indicator-field-trigger-scripts","siteSpaceId":"sitesp_RfNNx","description":"Configure scripts that run when indicator fields change in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator fields and types"},{"label":"Create an indicator field"}]},{"id":"f6dk0tMVkGmXqJc6vNsg","title":"Indicator classification and mapping","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_RfNNx","description":"Understand indicator classification and mapping in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"BkPcxyM0daTwIMsj7SoV","title":"Indicator extraction","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_RfNNx","description":"Extract and enrich indicators from issue fields in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"whKO33H0xDQyA4GdiN6S","title":"Set the indicator extraction mode for a playbook task","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/set-the-indicator-extraction-mode-for-a-playbook-task","siteSpaceId":"sitesp_RfNNx","description":"Set indicator extraction modes for playbook tasks in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"KHtc7EUWhOwqnyPfP7UO","title":"Disable indicator extraction for scripts or integrations","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/disable-indicator-extraction-for-scripts-or-integrations","siteSpaceId":"sitesp_RfNNx","description":"Disable automatic indicator extraction for scripts or integrations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"WvAvK95tvpyZTaplGy0o","title":"Configure indicator expiration","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-indicator-expiration","siteSpaceId":"sitesp_RfNNx","description":"Configure default indicator expiration settings in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"RYpLb4U7db0bdPflfloS","title":"Configure Threat Intelligence feed integrations","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intelligence-feed-integrations","siteSpaceId":"sitesp_RfNNx","description":"Configure threat intelligence feed integrations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"2hYhpB72VSvec51nr7ps","title":"Exclude indicators from enrichment","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_RfNNx","description":"Exclude indicators from automated enrichment in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"RWurIoY2M0xgvQbySE2W","title":"Export indicators","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/export-indicators","siteSpaceId":"sitesp_RfNNx","description":"Export indicators and configure external dynamic lists in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"tBYIBn3VTNmFyqJZJvTi","title":"Manage external dynamic lists","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/manage-external-dynamic-lists","siteSpaceId":"sitesp_RfNNx","description":"Manage external dynamic lists in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"hvjw3pwaJlyVf2jEoaYI","title":"Indicator management","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-management","siteSpaceId":"sitesp_RfNNx","description":"Create, edit, search, export, and delete indicators in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"GZZnhJjEApKpCWe0aQst","title":"Indicator investigation","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_RfNNx","description":"Investigate indicators and manage their relationships in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"aElv8P3yfQnsnt35LXoU","title":"Indicator verdict","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_RfNNx","description":"Configure and review indicator verdicts in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"lnK1ZT8t8gjafvoSsh7I","title":"Extract and enrich an indicator","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_RfNNx","description":"Extract and enrich indicators during investigations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"pC7sDTZTTDhURnsJkr46","title":"Expire an indicator","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_RfNNx","description":"Expire indicators through the CLI or UI in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"9r769vXixYH1YuHseiqG","title":"Manage indicator relationships","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_RfNNx","description":"Create and manage indicator relationships in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"JfVpJqa2AawV2JaKzRN5","title":"Delete and exclude indicators","pathname":"/cortex-agentix/detect-investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_RfNNx","description":"Delete indicators and manage indicator exclusions in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Detect, Investigate, and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"DgxM4xjy2buhDqRVgAIp","title":"Cortex AgentiX XQL","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql","siteSpaceId":"sitesp_RfNNx","description":"Learn to query security data with XQL in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"}]},{"id":"mk0YN67hDpWeHL6hPdeP","title":"Get started with XQL","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql","siteSpaceId":"sitesp_RfNNx","description":"Get started with Cortex Query Language (XQL) in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"}]},{"id":"XTlOVNntU44BmpddqGnP","title":"XQL language features","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/xql-language-features","siteSpaceId":"sitesp_RfNNx","description":"Explore Cortex Query Language features for security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"dFT64EzTSIyGEQ2DqlNJ","title":"XQL Language Structure","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/xql-language-structure","siteSpaceId":"sitesp_RfNNx","description":"Understand Cortex Query Language query structure in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"aNYgf3gYYUazKGVyZ6kv","title":"Adding comments in queries","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/xql-language-structure/adding-comments-in-queries","siteSpaceId":"sitesp_RfNNx","description":"Add comments to XQL queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"},{"label":"XQL Language Structure"}]},{"id":"LM0pSO1DRY35BMBNX98p","title":"Supported operators","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/supported-operators","siteSpaceId":"sitesp_RfNNx","description":"Use supported XQL comparison, Boolean, and set operators in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"f1cS8spPXs2e0NFvRGny","title":"Datasets and presets","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/datasets-and-presets","siteSpaceId":"sitesp_RfNNx","description":"Use XQL datasets and presets to query security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"PTtM2p94ymtcTIRvlvbt","title":"About examples","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/about-examples","siteSpaceId":"sitesp_RfNNx","description":"Explore XQL query examples for Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"FdYHLT0OGAuYpwSoSPFM","title":"JSON functions","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/json-functions","siteSpaceId":"sitesp_RfNNx","description":"Use JSON functions in XQL queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"jdqOhP5OUso04YgzsJf8","title":"How to filter for empty values in the results table","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/how-to-filter-for-empty-values-in-the-results-table","siteSpaceId":"sitesp_RfNNx","description":"Filter empty values in XQL query results in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"GVLR5QQjYH1iIvCj6bWB","title":"Understanding string manipulation in XQL","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/get-started-with-xql/understanding-string-manipulation-in-xql","siteSpaceId":"sitesp_RfNNx","description":"Use string manipulation in XQL queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Get started with XQL"}]},{"id":"n6ZozfKn7QQ7VFlmZdqr","title":"Build XQL queries","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries","siteSpaceId":"sitesp_RfNNx","description":"Build and run XQL queries with Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"}]},{"id":"KiUrKe9sEWdCmZ3nKgX5","title":"About the Query Builder","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/about-the-query-builder","siteSpaceId":"sitesp_RfNNx","description":"Use Query Builder for XQL threat detection and analysis in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"Da9MW4iL0HURsgo2r0op","title":"How to build XQL queries","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries","siteSpaceId":"sitesp_RfNNx","description":"Build XQL queries with Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"gHrSI5IP1JF604q5udPf","title":"Get started with XQL queries","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/get-started-with-xql-queries","siteSpaceId":"sitesp_RfNNx","description":"Get started with XQL queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"JS2NpvxpPtGgHaf8c54H","title":"Useful XQL user interface features","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/useful-xql-user-interface-features","siteSpaceId":"sitesp_RfNNx","description":"Use XQL query interface features in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"goldP0nkJQpwf31Enc7m","title":"XQL Query best practices","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/xql-query-best-practices","siteSpaceId":"sitesp_RfNNx","description":"Apply XQL query best practices in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"eZNjmZROwyLM9NbQc3aO","title":"Expected results when querying fields","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/expected-results-when-querying-fields","siteSpaceId":"sitesp_RfNNx","description":"Understand expected field query results in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"pTDeupJTVnYYztYzgJHG","title":"Create XQL query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/create-xql-query","siteSpaceId":"sitesp_RfNNx","description":"Create XQL queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"qY0Y7INfn6Cd3LHP2CPN","title":"Review XQL query results","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/review-xql-query-results","siteSpaceId":"sitesp_RfNNx","description":"Review XQL query results in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"xKqMFGos1iFtaIO75oDD","title":"Translate to XQL","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/translate-to-xql","siteSpaceId":"sitesp_RfNNx","description":"Translate natural-language requests into XQL in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"xcasSsuksgP0Yv6keUQv","title":"Graph query results","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/how-to-build-xql-queries/graph-query-results","siteSpaceId":"sitesp_RfNNx","description":"Graph XQL query results in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"How to build XQL queries"}]},{"id":"3miIZXkQIOqF6tp3VJ0V","title":"Query Builder templates","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates","siteSpaceId":"sitesp_RfNNx","description":"Use Query Builder templates to query security data in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"ZQm11TG5TvQfDeIXKiem","title":"Get started with Query Builder templates","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/get-started-with-query-builder-templates","siteSpaceId":"sitesp_RfNNx","description":"Get started with Query Builder templates in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"OWGAOr4C1tM3hCYSejBh","title":"Considerations for using Query Builder templates","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/considerations-for-using-query-builder-templates","siteSpaceId":"sitesp_RfNNx","description":"Review Query Builder template considerations in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"ZRZUJiSMoBDNeUQDiiGg","title":"Create a query from a template","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/create-a-query-from-a-template","siteSpaceId":"sitesp_RfNNx","description":"Create queries from Query Builder templates in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"iMjXRCAP03sbLwyv5O1J","title":"Run a free text query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/run-a-free-text-query","siteSpaceId":"sitesp_RfNNx","description":"Run free-text queries with Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"P0wgcjiemXfw6UHM7TG4","title":"Query Builder template examples","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/query-builder-templates/query-builder-template-examples","siteSpaceId":"sitesp_RfNNx","description":"Explore Query Builder template examples in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Query Builder templates"}]},{"id":"nbaN02iRomctP9jlMlGD","title":"Overview of the Query Center","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/overview-of-the-query-center","siteSpaceId":"sitesp_RfNNx","description":"Monitor in-progress and completed XQL queries in Query Center in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"AVOO7zzmyQ8xaxzNUUZC","title":"Edit and run queries in Query Center","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center","siteSpaceId":"sitesp_RfNNx","description":"Edit and run XQL queries in Query Center in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"}]},{"id":"PrCU7sUvPnSZpccUS7z5","title":"Query Center reference information","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/overview-of-the-query-center/edit-and-run-queries-in-query-center/query-center-reference-information","siteSpaceId":"sitesp_RfNNx","description":"Reference Query Center features and XQL query controls in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Overview of the Query Center"},{"label":"Edit and run queries in Query Center"}]},{"id":"4XMu89hu0IiAvQtyzqTQ","title":"Manage scheduled queries","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-scheduled-queries","siteSpaceId":"sitesp_RfNNx","description":"Manage scheduled and recurring XQL queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"vvxPcHfL87Zdik9xIFOn","title":"Scheduled Queries reference information","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-scheduled-queries/scheduled-queries-reference-information","siteSpaceId":"sitesp_RfNNx","description":"Reference scheduled XQL query settings in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Manage scheduled queries"}]},{"id":"3GWIw7B5215Bedz7uFAl","title":"Manage your personal query library","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-your-personal-query-library","siteSpaceId":"sitesp_RfNNx","description":"Save and manage personal XQL queries in Cortex AgentiX Query Library.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"8uNbWc1giVgWHFiAkYnW","title":"XQL macros","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/xql-macros","siteSpaceId":"sitesp_RfNNx","description":"Use XQL macros to reuse query logic in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"xzMKbw8Bj0SJV0kJAHOa","title":"Manage your macros","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/manage-your-macros","siteSpaceId":"sitesp_RfNNx","description":"Create and manage XQL macros in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"SlqCzQiIWe75rtx0DAxC","title":"Legacy Query Builder","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder","siteSpaceId":"sitesp_RfNNx","description":"Use the Legacy Query Builder for entity queries in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"}]},{"id":"vewLr6EkIj5HOlsYBtHm","title":"Create authentication query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-authentication-query","siteSpaceId":"sitesp_RfNNx","description":"Create authentication queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"guO8sU7ZCNhr1eS6w6S1","title":"Create event log query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-event-log-query","siteSpaceId":"sitesp_RfNNx","description":"Create event log queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"NSZLoaobpDfnwHrQ4rVh","title":"Create file query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-file-query","siteSpaceId":"sitesp_RfNNx","description":"Create file queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"mQshE1uFZiO9XkrokDp8","title":"Create image load query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-image-load-query","siteSpaceId":"sitesp_RfNNx","description":"Create image load queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"aO1eSj0cnqoZ4rCvxpIR","title":"Create network connections query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-network-connections-query","siteSpaceId":"sitesp_RfNNx","description":"Create network connection queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"klGTbn2pvnU5XQfcI81M","title":"Create network query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-network-query","siteSpaceId":"sitesp_RfNNx","description":"Create network queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"3JYJCUfX06X7cO0WNA0k","title":"Create process query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-process-query","siteSpaceId":"sitesp_RfNNx","description":"Create process queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"6nwqximLtIjWNcrsBkFn","title":"Create registry query","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/create-registry-query","siteSpaceId":"sitesp_RfNNx","description":"Create registry queries with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"fqHhU1SrGrPgWnFizO48","title":"Query across all entities","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/build-xql-queries/legacy-query-builder/query-across-all-entities","siteSpaceId":"sitesp_RfNNx","description":"Query across all entities with Legacy Query Builder in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"},{"label":"Build XQL queries"},{"label":"Legacy Query Builder"}]},{"id":"Yl0nQF9LDGBs7HhZLYQT","title":"Cortex XQL syntax, parameters, and examples","pathname":"/cortex-agentix/reference-and-developer-docs/cortex-agentix-xql/cortex-xql-syntax-parameters-and-examples","siteSpaceId":"sitesp_RfNNx","description":"Reference XQL syntax, parameters, and query examples in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Cortex AgentiX XQL"}]},{"id":"oGEOhlZi9QqJDjwWvJWi","title":"Troubleshoot","pathname":"/cortex-agentix/reference-and-developer-docs/troubleshoot","siteSpaceId":"sitesp_RfNNx","description":"Learn how to troubleshoot Cortex AgentiX, such as sending audit notifications to a Syslog Server.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"}]},{"id":"TiTz43uhv9i1khR4ande","title":"About health issues","pathname":"/cortex-agentix/reference-and-developer-docs/troubleshoot/about-health-issues","siteSpaceId":"sitesp_RfNNx","description":"Monitor Cortex AgentiX health issues for data ingestion, collection, correlation, and event forwarding.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Troubleshoot"}]},{"id":"u3NefakFrV0k2c8iYPAR","title":"Monitor data ingestion health","pathname":"/cortex-agentix/reference-and-developer-docs/troubleshoot/about-health-issues/monitor-data-ingestion-health","siteSpaceId":"sitesp_RfNNx","description":"Monitor data ingestion health and identify issues in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Troubleshoot"},{"label":"About health issues"}]},{"id":"Gy1mWmxQNIHniilQPp0M","title":"Monitor correlation rules","pathname":"/cortex-agentix/reference-and-developer-docs/troubleshoot/about-health-issues/monitor-correlation-rules","siteSpaceId":"sitesp_RfNNx","description":"Monitor correlation rule execution and health in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Troubleshoot"},{"label":"About health issues"}]},{"id":"JoDtn9m7dDKC35Wnf9hJ","title":"Investigate and resolve health issues","pathname":"/cortex-agentix/reference-and-developer-docs/troubleshoot/about-health-issues/investigate-and-resolve-health-issues","siteSpaceId":"sitesp_RfNNx","description":"Investigate and resolve health issues in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Troubleshoot"},{"label":"About health issues"}]},{"id":"hgLyBu5PmFAbMpQM6xvp","title":"In-product support ticket creation","pathname":"/cortex-agentix/reference-and-developer-docs/troubleshoot/in-product-support-case-creation","siteSpaceId":"sitesp_RfNNx","description":"Open a support ticket directly in Cortex AgentiX and record your console to capture your issues and have the ticket handled efficiently.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Troubleshoot"}]},{"id":"XrBJ9uYMRaFYuoN5yjFr","title":"Reference","pathname":"/cortex-agentix/reference-and-developer-docs/reference","siteSpaceId":"sitesp_RfNNx","description":"Access Cortex AgentiX API documentation, reference resources, and fair usage policy information.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"}]},{"id":"m1RmC4qfvchee4PIaLQF","title":"Cortex AgentiX API","pathname":"/cortex-agentix/reference-and-developer-docs/reference/cortex-agentix-api","siteSpaceId":"sitesp_RfNNx","description":"Generate API keys and make API calls in Cortex AgentiX.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Reference"}]},{"id":"mqCBwCyfeANfTDLVNqA8","title":"Fair Usage policy for Cortex AgentiX","pathname":"/cortex-agentix/reference-and-developer-docs/reference/fair-usage-policy-for-cortex-agentix","siteSpaceId":"sitesp_RfNNx","description":"Understand the fair usage policy for Cortex AgentiX services and capabilities.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Reference and Developer Docs","icon":"code"},{"label":"Reference"}]},{"id":"ocTC5GqJECEMCmjyeDoR","title":"Access control and authentication","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/access-control-and-authentication","siteSpaceId":"sitesp_RfNNx","description":"Configure Cortex AgentiX role-based access, scope controls, SAML SSO, and tenant security restrictions.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"}]},{"id":"WsWA8G7a9wojOyNlMYaD","title":"Threat intel management","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/threat-intel-management","siteSpaceId":"sitesp_RfNNx","description":"Use Cortex AgentiX Threat Intel Management to aggregate indicators from feeds, enrichment, and investigations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"}]},{"id":"Ei5jPxkrbJ77xAytOKdo","title":"Investigation and case management","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/investigation-and-case-management","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX supports case investigation and lifecycle management.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"}]},{"id":"hi5iJxbHSuCO1J0D6vqE","title":"War Room and evidence","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/investigation-and-case-management/war-room-and-evidence","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX War Rooms record investigation activity and centralize case evidence, notes, and procedures.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"},{"label":"Investigation and case management"}]},{"id":"395ZKd8KG6vNxErsyD7B","title":"Categorize cases and assets","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/investigation-and-case-management/categorize-cases-and-assets","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX categorizes cases, issues, assets, endpoints, and indicators using domains, fields, groups, and tags.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"},{"label":"Investigation and case management"}]},{"id":"7dwJThIrB7TVAnHEcn8w","title":"Case lifecycle and grouping","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/investigation-and-case-management/case-lifecycle-and-grouping","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX groups issues into cases, manages lifecycle stages, retains investigation history, and supports reporting.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"},{"label":"Investigation and case management"}]},{"id":"mqKK69xMX3jSs9KeCQMa","title":"SLA timers","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/investigation-and-case-management/sla-timers","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX uses timer fields and playbooks to measure SLA phases and escalate breached timers.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"},{"label":"Investigation and case management"}]},{"id":"BmzxJzt1i1opRmtP0AxR","title":"Automation and integrations","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/automation-and-integrations","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX uses integrations, playbooks, and automated workflows to connect tools and streamline security operations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"}]},{"id":"0t6dKaBPTmfxycJXVHrq","title":"ITSM and collaboration integrations","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/automation-and-integrations/itsm-and-collaboration-integrations","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX connects IT Service Management (ITSM), collaboration, enrichment, and custom tools to automate tickets, alerts, and investigations.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"},{"label":"Automation and integrations"}]},{"id":"W39c4ic8x8UDdz6f8kxH","title":"Playbook capabilities","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/automation-and-integrations/playbook-capabilities","siteSpaceId":"sitesp_RfNNx","description":"Explore Cortex AgentiX playbook capabilities, including visual workflows, custom code, approvals, loops, AI tasks, and execution tracking.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"},{"label":"Automation and integrations"}]},{"id":"C6X4ZJLephH3UxCaz43z","title":"Playbook versioning and promotion","pathname":"/cortex-agentix/insights-and-tips-cortex-agentix/automation-and-integrations/playbook-versioning-and-promotion","siteSpaceId":"sitesp_RfNNx","description":"Learn how Cortex AgentiX versions, tests, and promotes playbooks and custom content across development and production tenants.","breadcrumbs":[{"label":"Cortex AgentiX","icon":"user-robot"},{"label":"Cortex AgentiX Documentation","icon":"head-side-circuit"},{"label":"Insights & tips - Cortex AgentiX"},{"label":"Automation and integrations"}]},{"id":"CTSCrQQL7lcRbdbOep5d","title":"Cortex XDR Agent Documentation","pathname":"/cortex-xdr-agent","siteSpaceId":"sitesp_svj1L","description":"Start here to choose the right Cortex XDR Agent version.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"1NJFBNM6ZiKtXBOvoAPi","title":"Introduction","pathname":"/cortex-xdr-agent/9.3","siteSpaceId":"sitesp_svEEE","description":"Learn about the Cortex XDR Agent installation procedures.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"kHy01SwrBIbpTUPi1SxJ","title":"Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_svEEE","description":"To install, use, upgrade, and uninstall the Cortex XDR agent on Windows endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"rg3q0z3hL3hEWIHDpILP","title":"Cortex XDR agent for Windows requirements","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-windows-requirements","siteSpaceId":"sitesp_svEEE","description":"Windows endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"Ls9q30mDqEzzVQlVkjZN","title":"Install the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_svEEE","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"cqDTYobll0CYp9X1PMLe","title":"Install the Cortex XDR Agent with Installer and Content Update Package","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-with-installer-and-content-update-package","siteSpaceId":"sitesp_svEEE","description":"Deploy the Cortex XDR agent on Windows endpoints using the latest content and installer package.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"7NBbkNVhEKg6BiSmUfmr","title":"Cortex XDR agent for virtual environments and desktops","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-virtual-environments-and-desktops","siteSpaceId":"sitesp_svEEE","description":"Learn about the Cortex XDR agent virtual installation options and use the provided workflows to install the Cortex XDR agent on virtual Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"8s6p1kXUut2gdwNM1r5r","title":"Use Cortex XDR Agent for Windows","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/use-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_svEEE","description":"Learn how to effectively use the Cortex XDR agent for Windows by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"LiKFLnhGngThcFMaWjSU","title":"Upgrade the Cortex XDR Agent","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/upgrade-the-cortex-xdr-agent","siteSpaceId":"sitesp_svEEE","description":"How to upgrade the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"EilTptj4B2KcT4h5FhYn","title":"Uninstall the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/uninstall-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_svEEE","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"A7sqmMh0fBvUFkgM4tCU","title":"Troubleshooting resources for Windows","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows","siteSpaceId":"sitesp_svEEE","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Windows.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"qtVCYNgfdrife9v2TtsK","title":"Cytool for Windows","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cytool-for-windows","siteSpaceId":"sitesp_svEEE","description":"To manage Traps functions from the command line on Windows endpoints, use Cytool.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"3c4tgBi5Tur1lXmCCThz","title":"Cortex XDR Agents Deployed in Advertise Mode","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cortex-xdr-agents-deployed-in-advertise-mode","siteSpaceId":"sitesp_svEEE","description":"Depending on your Cortex XDR agent release, you can install or upgrade the agent in Advertise mode.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"UfCzB92mx68twV16tlSz","title":"Cortex XDR Agent for MacOS","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos","siteSpaceId":"sitesp_svEEE","description":"To install, use, and uninstall the Cortex XDR agent on MacOS endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"HLmEDtXaPQvfOxBLunJv","title":"Cortex XDR Agent for Mac Requirements","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/cortex-xdr-agent-for-mac-requirements","siteSpaceId":"sitesp_svEEE","description":"Mac (macOS) endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"7JajhKxYnd6B3hdAwZLO","title":"Install the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_svEEE","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"7cdIsCFrl9kr3aDeihcR","title":"Install with a unified configuration profile for MDMs","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-with-a-unified-configuration-profile-for-mdms","siteSpaceId":"sitesp_svEEE","description":"Use the Palo Alto Networks unified configuration profile for MDMs to seamlessly install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"RJGfhrXLbJmdHq0SHLQS","title":"macOS 15 Sequoia system extensions configuration file","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-15-sequoia-system-extensions-configuration-file","siteSpaceId":"sitesp_svEEE","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"BrZkjYYqlHTQyFHnDxNt","title":"MacOS Bluetooth MDM profile","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-bluetooth-mdm-profile","siteSpaceId":"sitesp_svEEE","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"CaWMZudJQnxFEECdztXn","title":"Install the Cortex XDR Agent Using JAMF","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-using-jamf","siteSpaceId":"sitesp_svEEE","description":"Step-by-step instructions to configure a JAMF installation profile for the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"QkH1PWwUrS2HJRULWxz3","title":"Install the Cortex XDR Agent Manually","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-manually","siteSpaceId":"sitesp_svEEE","description":"Learn how to install the Cortex XDR agent manually on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"OPkHRBLEAQh4YxPDv9fo","title":"Configure Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/configure-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_svEEE","description":"Run the wizard to guide you through the settings to enable the agent to run on the macOS endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"TMUWFAVqEwwiZJPtHN19","title":"Use the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/use-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_svEEE","description":"Learn how to effectively use the Cortex XDR agent for Mac by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"wWEO0ZKBeerlIGvzDS7l","title":"Uninstall the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/uninstall-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_svEEE","description":"Learn how to uninstall the Cortex XDR agent from a Mac endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"oFhOS2eUUpHZYQst1GtG","title":"Manage the Agent Deployment Notifications for Mac","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/manage-the-agent-deployment-notifications-for-mac","siteSpaceId":"sitesp_svEEE","description":"An overview of user notifications for the Cortex XDR agent during installation, upgrade, and removal on a Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"dJFtS4DRM0cj7tRz8VqS","title":"Troubleshooting Resources for Mac","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac","siteSpaceId":"sitesp_svEEE","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"tueG6AszWvkDb2MUjrQD","title":"Cytool for Mac","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac/cytool-for-mac","siteSpaceId":"sitesp_svEEE","description":"In addition to being available for Windows and Linux endpoints, Cytool is also available for Mac endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Troubleshooting Resources for Mac"}]},{"id":"gUMd4CU595Ilryi61rmu","title":"Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_svEEE","description":"To install, use, and uninstall the Cortex XDR agent on Linux endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"oLc8BksdzdYywKq72cGp","title":"Cortex XDR supported Kernel Module versions by distribution","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/cortex-xdr-supported-kernel-module-versions-by-distribution","siteSpaceId":"sitesp_svEEE","description":"To enable full endpoint protection features on Linux endpoints, you must use a supported Linux Kernel version.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"grEowoTRQXPyMGnOiqFW","title":"Cortex XDR Agent for Linux Requirements","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/cortex-xdr-agent-for-linux-requirements","siteSpaceId":"sitesp_svEEE","description":"Linux endpoints must meet the following requirements to install the Cortex XDR agent","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"2IV8WqEU4oe0e236PVEs","title":"Install the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_svEEE","description":"Learn how to install the Cortex XDR agent on a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"VZQBP8XDvWOXumnZvn5U","title":"Install the Cortex XDR Agent for Kubernetes Hosts","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-kubernetes-hosts","siteSpaceId":"sitesp_svEEE","description":"How to install the Cortex XDR agent on a Kubernetes host.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"WAuvDSUQM7NiTPmOuuUC","title":"Use the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/use-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_svEEE","description":"Learn how to effectively use the Cortex XDR agent for Linux by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"3tr8afcrgAa7hPs7vJyQ","title":"Uninstall the Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/uninstall-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_svEEE","description":"Learn how to uninstall the Cortex XDR agent from a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"chMgusLM68XxmfsivecN","title":"Troubleshooting Resources for Linux","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux","siteSpaceId":"sitesp_svEEE","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Linux.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"TKUhWSMLChjgmPhLlO3p","title":"Cytool for Linux","pathname":"/cortex-xdr-agent/9.3/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux/cytool-for-linux","siteSpaceId":"sitesp_svEEE","description":"Cytool is a command-line tool integrated into the Cortex XDR agent that enables you to query and manage both basic and advanced functions of the agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"},{"label":"Troubleshooting Resources for Linux"}]},{"id":"adyqksKwz7H6xsEr9d2F","title":"Introduction","pathname":"/cortex-xdr-agent/9.2","siteSpaceId":"sitesp_r5Jly","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"cC7xjx1t7v9pOKsY5sLJ","title":"Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_r5Jly","description":"To install, use, upgrade, and uninstall the Cortex XDR agent 9.2 on Windows endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"F3jEirU4wH46t6Krl3pC","title":"Cortex XDR agent for Windows requirements","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-windows-requirements","siteSpaceId":"sitesp_r5Jly","description":"Windows endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"UARvGVG82uCvfGklMyUk","title":"Install the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_r5Jly","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"lBKYxFi9v1JxMmCbgasl","title":"Install the Cortex XDR Agent with Installer and Content Update Package","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-with-installer-and-content-update-package","siteSpaceId":"sitesp_r5Jly","description":"Deploy the Cortex XDR agent on Windows endpoints using the latest content and installer package.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"7nESk7DhyDYg2oalQNA8","title":"Cortex XDR agent for virtual environments and desktops","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-virtual-environments-and-desktops","siteSpaceId":"sitesp_r5Jly","description":"Learn about the Cortex XDR agent virtual installation options and use the provided workflows to install the Cortex XDR agent on virtual Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"JbAWpmveYBbbeO3rp5Fw","title":"Use Cortex XDR Agent for Windows","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/use-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_r5Jly","description":"Learn how to effectively use the Cortex XDR agent for Windows by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"jw4onlNt2gbpjHV2eAg4","title":"Upgrade the Cortex XDR Agent","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/upgrade-the-cortex-xdr-agent","siteSpaceId":"sitesp_r5Jly","description":"How to upgrade the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"hyzXTFVaMipPFSPJBJYD","title":"Uninstall the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/uninstall-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_r5Jly","description":"Learn how to uninstall the Cortex XDR agent from a Windows endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"YutWjz2DbbTO1vPftb4U","title":"Troubleshooting resources for Windows","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows","siteSpaceId":"sitesp_r5Jly","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Windows.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"pj4MZTRxj2Q2oRSRPCPK","title":"Cytool for Windows","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cytool-for-windows","siteSpaceId":"sitesp_r5Jly","description":"To manage Traps functions from the command line on Windows endpoints, use Cytool.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"aJZvODpveqiGd6vHZa5n","title":"Cortex XDR Agents Deployed in Advertise Mode","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cortex-xdr-agents-deployed-in-advertise-mode","siteSpaceId":"sitesp_r5Jly","description":"Depending on your Cortex XDR agent release, you can install or upgrade the agent in Advertise mode.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"KEtwKQanyjytVtM7P2nT","title":"Cortex XDR Agent for MacOS","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos","siteSpaceId":"sitesp_r5Jly","description":"To install, use, and uninstall the Cortex XDR agent on MacOS endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"XXMQm9GBpBuxxNK0mFG0","title":"Cortex XDR Agent for Mac Requirements","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/cortex-xdr-agent-for-mac-requirements","siteSpaceId":"sitesp_r5Jly","description":"Mac (macOS) endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"sd8irUMSMjR6t1b4zy9V","title":"Install the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_r5Jly","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"KX7WVi3SMms46r5hAmwU","title":"Install with a unified configuration profile for MDMs","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-with-a-unified-configuration-profile-for-mdms","siteSpaceId":"sitesp_r5Jly","description":"Use the Palo Alto Networks unified configuration profile for MDMs to seamlessly install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"jpTeARLGH7cftKYs4oH0","title":"macOS 15 Sequoia system extensions configuration file","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-15-sequoia-system-extensions-configuration-file","siteSpaceId":"sitesp_r5Jly","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"U1h0zDr0stlavuod1QGc","title":"MacOS Bluetooth MDM profile","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-bluetooth-mdm-profile","siteSpaceId":"sitesp_r5Jly","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"MoH2hEqADe4CvmkqgTn7","title":"Install the Cortex XDR Agent Using JAMF","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-using-jamf","siteSpaceId":"sitesp_r5Jly","description":"Step-by-step instructions to configure a JAMF installation profile for the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"ZISnhJc0lsR6hb18BjtQ","title":"Install the Cortex XDR Agent Manually","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-manually","siteSpaceId":"sitesp_r5Jly","description":"Learn how to install the Cortex XDR agent manually on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"r7RFItPQFWuSCEJVQbok","title":"Configure Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/configure-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_r5Jly","description":"Run the wizard to guide you through the settings to enable the agent to run on the macOS endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"9izeFMXL7Vz1cfSvkTiI","title":"Use the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/use-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_r5Jly","description":"Learn how to effectively use the Cortex XDR agent for Mac by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"D4Y4JKdXBWlU66JRnf6D","title":"Uninstall the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/uninstall-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_r5Jly","description":"Learn how to uninstall the Cortex XDR agent from a Mac endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"0hL15FOjy9V2M6ons4eU","title":"Manage the Agent Deployment Notifications for Mac","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/manage-the-agent-deployment-notifications-for-mac","siteSpaceId":"sitesp_r5Jly","description":"An overview of user notifications for the Cortex XDR agent during installation, upgrade, and removal on a Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"kkoG1Z0xCtqaKN641xpq","title":"Troubleshooting Resources for Mac","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac","siteSpaceId":"sitesp_r5Jly","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"kPCpS7UZK2Foeipg72MQ","title":"Cytool for Mac","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac/cytool-for-mac","siteSpaceId":"sitesp_r5Jly","description":"In addition to being available for Windows and Linux endpoints, Cytool is also available for Mac endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Troubleshooting Resources for Mac"}]},{"id":"1DzAY05Lzq2WJaIcOEo1","title":"Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_r5Jly","description":"To install, use, and uninstall the Cortex XDR agent on Linux endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"coIRgYwKQ7c7HLSA9i5K","title":"Cortex XDR supported Kernel Module versions by distribution","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/cortex-xdr-supported-kernel-module-versions-by-distribution","siteSpaceId":"sitesp_r5Jly","description":"To enable full endpoint protection features on Linux endpoints, you must use a supported Linux Kernel version.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"Zsd6Ks8foOMcXN8fAtf4","title":"Cortex XDR Agent for Linux Requirements","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/cortex-xdr-agent-for-linux-requirements","siteSpaceId":"sitesp_r5Jly","description":"Linux endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"jRpQIQPA2P6PncnMc0mW","title":"Install the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_r5Jly","description":"Learn how to install the Cortex XDR agent on a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"OTAQ8mDC9L1mJ74LvcA8","title":"Install the Cortex XDR Agent for Kubernetes Hosts","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-kubernetes-hosts","siteSpaceId":"sitesp_r5Jly","description":"How to install the Cortex XDR agent on a Kubernetes host.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"pZlNyG4bsmJG0TrtJxZv","title":"Use the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/use-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_r5Jly","description":"Learn how to effectively use the Cortex XDR agent for Linux by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"PTJW7ck9Yg4hf616ksvP","title":"Uninstall the Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/uninstall-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_r5Jly","description":"Learn how to uninstall the Cortex XDR agent from a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"lyws2XoQKLbJ3xcOvlZ5","title":"Troubleshooting Resources for Linux","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux","siteSpaceId":"sitesp_r5Jly","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Linux.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"svZh4MvYLZ0GkOFK6Jr7","title":"Cytool for Linux","pathname":"/cortex-xdr-agent/9.2/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux/cytool-for-linux","siteSpaceId":"sitesp_r5Jly","description":"Cytool is a command-line tool integrated into the Cortex XDR agent that enables you to query and manage both basic and advanced functions of the agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"},{"label":"Troubleshooting Resources for Linux"}]},{"id":"IVsigWMKETAW5bqi71C6","title":"Introduction","pathname":"/cortex-xdr-agent/9.1","siteSpaceId":"sitesp_mxrYo","description":"Learn about the Cortex XDR Agent installation procedures.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"0MnyXnyDYKqzSUFOGS2x","title":"Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_mxrYo","description":"To install, use, upgrade, and uninstall the Cortex XDR agent on Windows endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"A297vYw5PkQlodoeE9ql","title":"Cortex XDR agent for Windows requirements","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-windows-requirements","siteSpaceId":"sitesp_mxrYo","description":"Windows endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"Q8Tsj5unoOzWdejoFnPy","title":"Install the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_mxrYo","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"HUvViBp3OLlCP4rlzYdL","title":"Install the Cortex XDR Agent with Installer and Content Update Package","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-with-installer-and-content-update-package","siteSpaceId":"sitesp_mxrYo","description":"Deploy the Cortex XDR agent on Windows endpoints using the latest content and installer package.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"Vrp72Tz0WVbJxtqyArFQ","title":"Cortex XDR agent for virtual environments and desktops","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-virtual-environments-and-desktops","siteSpaceId":"sitesp_mxrYo","description":"Learn about the Cortex XDR agent virtual installation options and use the provided workflows to install the Cortex XDR agent on virtual Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"LJnxS2pN64TCInsrxoLI","title":"Use Cortex XDR Agent for Windows","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/use-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_mxrYo","description":"Learn how to effectively use the Cortex XDR agent for Windows by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"V3rSPtfaBzmdIPEocAhq","title":"Upgrade the Cortex XDR Agent","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/upgrade-the-cortex-xdr-agent","siteSpaceId":"sitesp_mxrYo","description":"How to upgrade the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"1lnB0s7YG6nfknWHclLs","title":"Uninstall the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/uninstall-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_mxrYo","description":"Learn how to uninstall the Cortex XDR agent from a Windows endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"i7qMh29tBuIxrPANyVBp","title":"Troubleshooting resources for Windows","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows","siteSpaceId":"sitesp_mxrYo","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Windows.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"4GlZZmTqMzY44GXoAIBL","title":"Cytool for Windows","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cytool-for-windows","siteSpaceId":"sitesp_mxrYo","description":"To manage Traps functions from the command line on Windows endpoints, use Cytool.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"tYJY9ZE8mnwwl058hrHg","title":"Cortex XDR Agents Deployed in Advertise Mode","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cortex-xdr-agents-deployed-in-advertise-mode","siteSpaceId":"sitesp_mxrYo","description":"Depending on your Cortex XDR agent release, you can install or upgrade the agent in Advertise mode.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"q1fFLLyqKsRLlzWCsWhr","title":"Cortex XDR Agent for MacOS","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos","siteSpaceId":"sitesp_mxrYo","description":"To install, use, and uninstall the Cortex XDR agent on MacOS endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"VH3bO6SY9g8nOurege7p","title":"Cortex XDR Agent for Mac Requirements","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/cortex-xdr-agent-for-mac-requirements","siteSpaceId":"sitesp_mxrYo","description":"Mac (macOS) endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"fGCSzDSGBdyTzJY10Mcu","title":"Install the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_mxrYo","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"GImTBKf8WVFM1R4xxCO2","title":"Install with a unified configuration profile for MDMs","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-with-a-unified-configuration-profile-for-mdms","siteSpaceId":"sitesp_mxrYo","description":"Use the Palo Alto Networks unified configuration profile for MDMs to seamlessly install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"8BIyaLclqyyR2xMhr8lU","title":"macOS 15 Sequoia system extensions configuration file","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-15-sequoia-system-extensions-configuration-file","siteSpaceId":"sitesp_mxrYo","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"uleCwFAhLUn6ylhnffMh","title":"MacOS Bluetooth MDM profile","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-bluetooth-mdm-profile","siteSpaceId":"sitesp_mxrYo","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"hZ0l4AUblolJg6LB4in7","title":"DLP MDM profile for macOS","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/dlp-mdm-profile-for-macos","siteSpaceId":"sitesp_mxrYo","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"esFa2OQgMG7vnt4iojGK","title":"Install the Cortex XDR Agent Using JAMF","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-using-jamf","siteSpaceId":"sitesp_mxrYo","description":"Step-by-step instructions to configure a JAMF installation profile for the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"ghhFSPdV7hSg9tyQdhRd","title":"Install the Cortex XDR Agent Manually","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-manually","siteSpaceId":"sitesp_mxrYo","description":"Learn how to install the Cortex XDR agent manually on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"JUXcSaqgxRvDAZS729NZ","title":"Configure Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/configure-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_mxrYo","description":"Run the wizard to guide you through the settings to enable the agent to run on the macOS endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"VEcWrtWB7pbRCRIMpldk","title":"Use the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/use-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_mxrYo","description":"Learn how to effectively use the Cortex XDR agent for Mac by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"0icJ8O5midhnVidnn27v","title":"Uninstall the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/uninstall-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_mxrYo","description":"Learn how to uninstall the Cortex XDR agent from a Mac endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"svzKx9aaAueZuAaub8a3","title":"Manage the Agent Deployment Notifications for Mac","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/manage-the-agent-deployment-notifications-for-mac","siteSpaceId":"sitesp_mxrYo","description":"An overview of user notifications for the Cortex XDR agent during installation, upgrade, and removal on a Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"f2ESX4BoyCVJsTLZj21R","title":"Troubleshooting Resources for Mac","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac","siteSpaceId":"sitesp_mxrYo","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"z2uQZf55lLs8RDQyVhFg","title":"Cytool for Mac","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac/cytool-for-mac","siteSpaceId":"sitesp_mxrYo","description":"In addition to being available for Windows and Linux endpoints, Cytool is also available for Mac endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Troubleshooting Resources for Mac"}]},{"id":"XbBZtaL8ZxGTHNokrPL9","title":"Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_mxrYo","description":"To install, use, and uninstall the Cortex XDR agent on Linux endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"G3jgpu0iqRg7kvLe8WUk","title":"Cortex XDR supported Kernel Module versions by distribution","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/cortex-xdr-supported-kernel-module-versions-by-distribution","siteSpaceId":"sitesp_mxrYo","description":"To enable full endpoint protection features on Linux endpoints, you must use a supported Linux Kernel version.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"DPBDeqMuXUDlPFFhV1W1","title":"Cortex XDR Agent for Linux Requirements","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/cortex-xdr-agent-for-linux-requirements","siteSpaceId":"sitesp_mxrYo","description":"Linux endpoints must meet the following requirements to install the Cortex XDR agent","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"Jz6MWtGy5NYnZOyWVMJ5","title":"Install the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_mxrYo","description":"Learn how to install the Cortex XDR agent on a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"4vOnSn8ZFqDtOZsn74oH","title":"Install the Cortex XDR Agent for Kubernetes Hosts","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-kubernetes-hosts","siteSpaceId":"sitesp_mxrYo","description":"How to install the Cortex XDR agent on a Kubernetes host.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"zWZKuhKhkfZH8YVsq2RZ","title":"Install the Cortex XDR agent on AWS ECS EC2 Clusters","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-on-aws-ecs-ec2-clusters","siteSpaceId":"sitesp_mxrYo","description":"Learn how to install the Cortex XDR agent on AWS ECS EC2 clusters","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"uGdgRkLiGbMAgBBnPoeq","title":"Use the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/use-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_mxrYo","description":"Learn how to effectively use the Cortex XDR agent for Linux by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"2jc2eQmr5Edf9jCBeIv1","title":"Uninstall the Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/uninstall-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_mxrYo","description":"Learn how to uninstall the Cortex XDR agent from a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"jB1Hs0vs1AnuaUG1gVgi","title":"Troubleshooting Resources for Linux","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux","siteSpaceId":"sitesp_mxrYo","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Linux.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"uUH2ldyMYoxRGCy8qKAM","title":"Cytool for Linux","pathname":"/cortex-xdr-agent/9.1/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux/cytool-for-linux","siteSpaceId":"sitesp_mxrYo","description":"Cytool is a command-line tool integrated into the Cortex XDR agent that enables you to query and manage both basic and advanced functions of the agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"},{"label":"Troubleshooting Resources for Linux"}]},{"id":"UxftCr8QawwDnTKnA7FI","title":"Introduction","pathname":"/cortex-xdr-agent/8.7","siteSpaceId":"sitesp_lL7Lw","description":"Learn about the Cortex XDR Agent installation procedures.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"ZpqT75KGwlgYZjyND9rw","title":"Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_lL7Lw","description":"To install, use, upgrade, and uninstall the Cortex XDR agent on Windows endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"EChjX6kuOoq2Hq6VvVy1","title":"Cortex XDR agent for Windows requirements","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-windows-requirements","siteSpaceId":"sitesp_lL7Lw","description":"Windows endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"jvDJ4z1mhlUx82clqMvO","title":"Install the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_lL7Lw","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"xyuuYypfPFW3uUkxK2dG","title":"Install the Cortex XDR Agent with Installer and Content Update Package","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-with-installer-and-content-update-package","siteSpaceId":"sitesp_lL7Lw","description":"Deploy the Cortex XDR agent on Windows endpoints using the latest content and installer package.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"bRP2qYZo2MDSBg0VFnSs","title":"Cortex XDR agent for virtual environments and desktops","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/cortex-xdr-agent-for-virtual-environments-and-desktops","siteSpaceId":"sitesp_lL7Lw","description":"Learn about the Cortex XDR agent virtual installation options and use the provided workflows to install the Cortex XDR agent on virtual Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"HmivJivD6tvmZQRQiXLH","title":"Use Cortex XDR Agent for Windows","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/use-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to effectively use the Cortex XDR agent for Windows by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"x8dl05hokyACCheiuyen","title":"Upgrade the Cortex XDR Agent","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/upgrade-the-cortex-xdr-agent","siteSpaceId":"sitesp_lL7Lw","description":"How to upgrade the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"y7uK21p5iq0BrlND7UMf","title":"Uninstall the Cortex XDR agent for Windows","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/uninstall-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to uninstall the Cortex XDR agent from a Windows endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"kjNSxy2Tzjy8x6tvzjpU","title":"Troubleshooting resources for Windows","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows","siteSpaceId":"sitesp_lL7Lw","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Windows.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"}]},{"id":"5fDy8pAdRAyPij3wlAKw","title":"Cytool for Windows","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cytool-for-windows","siteSpaceId":"sitesp_lL7Lw","description":"To manage Traps functions from the command line on Windows endpoints, use Cytool.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"ksbJTglujYztCxWBTUQe","title":"Cortex XDR Agents Deployed in Advertise Mode","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-windows/troubleshooting-resources-for-windows/cortex-xdr-agents-deployed-in-advertise-mode","siteSpaceId":"sitesp_lL7Lw","description":"Depending on your Cortex XDR agent release, you can install or upgrade the agent in Advertise mode.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR agent for Windows"},{"label":"Troubleshooting resources for Windows"}]},{"id":"uEqrWaDUmpVB2hKq65py","title":"Cortex XDR Agent for MacOS","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos","siteSpaceId":"sitesp_lL7Lw","description":"To install, use, and uninstall the Cortex XDR agent on MacOS endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"E1r3Go3HcX8xR46on1Dz","title":"Cortex XDR Agent for Mac Requirements","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/cortex-xdr-agent-for-mac-requirements","siteSpaceId":"sitesp_lL7Lw","description":"Mac (macOS) endpoints must meet the following requirements to install the Cortex XDR agent 8.2","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"o6boCUWPNCCc5BqDQMaR","title":"Install the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_lL7Lw","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"CtpflPQIMNgVWltI0t7c","title":"Install with a unified configuration profile for MDMs","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-with-a-unified-configuration-profile-for-mdms","siteSpaceId":"sitesp_lL7Lw","description":"Use the Palo Alto Networks unified configuration profile for MDMs to seamlessly install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"vE6wiNj8ikQg7Q1OMx4O","title":"macOS 15 Sequoia system extensions configuration file","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-15-sequoia-system-extensions-configuration-file","siteSpaceId":"sitesp_lL7Lw","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"9kkdzjKWl6IQtvisr2BE","title":"MacOS Bluetooth MDM profile","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/macos-bluetooth-mdm-profile","siteSpaceId":"sitesp_lL7Lw","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"Lq058zwby11m8GAiIgph","title":"Install the Cortex XDR Agent Using JAMF","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-using-jamf","siteSpaceId":"sitesp_lL7Lw","description":"Step-by-step instructions to configure a JAMF installation profile for the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"zegbnbDEL3xyNmuaC4wk","title":"Install the Cortex XDR Agent Manually","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-manually","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to install the Cortex XDR agent manually on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"QaxgPJ35ObNoSCAXFQdH","title":"Configure Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/configure-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_lL7Lw","description":"Run the wizard to guide you through the settings to enable the agent to run on the macOS endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"cL0ABOAdu7HX63nVkn1n","title":"Use the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/use-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to effectively use the Cortex XDR agent for Mac by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"5hHjJvZoPIl2y3n1CqmA","title":"Uninstall the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/uninstall-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to uninstall the Cortex XDR agent from a Mac endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"78MbXezgbUytzZQfx4hp","title":"Manage the Agent Deployment Notifications for Mac","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/manage-the-agent-deployment-notifications-for-mac","siteSpaceId":"sitesp_lL7Lw","description":"An overview of user notifications for the Cortex XDR agent during installation, upgrade, and removal on a Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"f04N81kpdLIg8RHNfSAx","title":"Troubleshooting Resources for Mac","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac","siteSpaceId":"sitesp_lL7Lw","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"}]},{"id":"pS1SSVSJf6mzxXzUK4Y0","title":"Cytool for Mac","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-macos/troubleshooting-resources-for-mac/cytool-for-mac","siteSpaceId":"sitesp_lL7Lw","description":"In addition to being available for Windows and Linux endpoints, Cytool is also available for Mac endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for MacOS"},{"label":"Troubleshooting Resources for Mac"}]},{"id":"OOtdD2o2HbWb0e8GGlOO","title":"Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_lL7Lw","description":"To install, use, and uninstall the Cortex XDR agent on Linux endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"e7kymPaZE5qkNkZjTmDE","title":"Cortex XDR Agent for Linux Requirements","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux/cortex-xdr-agent-for-linux-requirements","siteSpaceId":"sitesp_lL7Lw","description":"Linux endpoints must meet the following requirements to install the Cortex XDR agent","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"sFPUSwkANatmAEbkM8EE","title":"Install the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to install the Cortex XDR agent on a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"GyGKp0AIMYeAwbGZcMeT","title":"Install the Cortex XDR Agent for Kubernetes Hosts","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux/install-the-cortex-xdr-agent-for-kubernetes-hosts","siteSpaceId":"sitesp_lL7Lw","description":"How to install the Cortex XDR agent on a Kubernetes host.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"Pg41TbczNv8nC0FWuspS","title":"Use the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux/use-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to effectively use the Cortex XDR agent for Linux by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"BjGTCUg24tSVTf4QuNHl","title":"Uninstall the Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux/uninstall-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_lL7Lw","description":"Learn how to uninstall the Cortex XDR agent from a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"FzHcRNABIVZrY6YYDgLU","title":"Troubleshooting Resources for Linux","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux","siteSpaceId":"sitesp_lL7Lw","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Linux.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"}]},{"id":"YoGshjwGHj3qKzI9rxEz","title":"Cytool for Linux","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-for-linux/troubleshooting-resources-for-linux/cytool-for-linux","siteSpaceId":"sitesp_lL7Lw","description":"Cytool is a command-line tool integrated into the Cortex XDR agent that enables you to query and manage both basic and advanced functions of the agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent for Linux"},{"label":"Troubleshooting Resources for Linux"}]},{"id":"N5wOia2tgd9hdsNFeg3L","title":"Cortex XDR Agent and Content upgrades","pathname":"/cortex-xdr-agent/8.7/cortex-xdr-agent-and-content-upgrades","siteSpaceId":"sitesp_lL7Lw","description":"Palo Alto Networks deployment recommendations for Cortex XDR agents.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"8EEPXVkyfVlbyRQmSYE6","title":"Introduction","pathname":"/cortex-xdr-agent/7.9-ce","siteSpaceId":"sitesp_YThHe","description":"Learn about the Cortex XDR Agent installation procedures.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"LLGyINxdO7h89nn4Besc","title":"Cortex XDR Agent 7.9 for Windows","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows","siteSpaceId":"sitesp_YThHe","description":"To install, use, upgrade, and uninstall the Cortex XDR agent 7.9 on Windows endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"NO0UWNxaDWWuJtsmTTzR","title":"Cortex XDR Agent for Windows Requirements","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/cortex-xdr-agent-for-windows-requirements","siteSpaceId":"sitesp_YThHe","description":"Windows endpoints must meet the following requirements to install the Cortex XDR agent.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"ctYJzyRaEby4YU0fREoX","title":"Install the Cortex XDR agent on unsupported-ACS OS versions","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/install-the-cortex-xdr-agent-on-unsupported-acs-os-versions","siteSpaceId":"sitesp_YThHe","description":"To install, use, upgrade, and uninstall the Cortex XDR agent 7.9 on Windows endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"gZ2BJyhpNGL5ym9gWGle","title":"Install the Cortex XDR Agent for Windows","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/install-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_YThHe","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"ZX6UOR7x216OwXpT4W8l","title":"Install the Cortex XDR Agent with Installer and Content Update Package","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/install-the-cortex-xdr-agent-with-installer-and-content-update-package","siteSpaceId":"sitesp_YThHe","description":"Deploy the Cortex XDR agent 8.2 on Windows endpoints using the latest content and installer package.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"TME1KHGgl1XMrvZGI2DQ","title":"Cortex XDR Agent for Virtual Environments and Desktops","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/cortex-xdr-agent-for-virtual-environments-and-desktops","siteSpaceId":"sitesp_YThHe","description":"Learn about the Cortex XDR agent virtual installation options and use the provided workflows to install the Cortex XDR agent on virtual Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"mWfmpmZCkZ9VGWveZCaA","title":"Use Cortex XDR Agent for Windows","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/use-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_YThHe","description":"Learn how to effectively use the Cortex XDR agent for Windows by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"V0kaY8MJBjQPpT5DodmZ","title":"Upgrade the Cortex XDR Agent","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/upgrade-the-cortex-xdr-agent","siteSpaceId":"sitesp_YThHe","description":"How to upgrade the Cortex XDR agent on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"92VssylAL055JLsrHoLD","title":"Uninstall the Cortex XDR Agent for Windows","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/uninstall-the-cortex-xdr-agent-for-windows","siteSpaceId":"sitesp_YThHe","description":"Learn how to uninstall the Cortex XDR agent from a Windows endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"1WqjJdO5vJx2LTVRX6Wm","title":"Troubleshooting Resources for Windows","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/troubleshooting-resources-for-windows","siteSpaceId":"sitesp_YThHe","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Windows.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"}]},{"id":"IyWfasgLzjwPU37RKcKJ","title":"Cytool for Windows","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/troubleshooting-resources-for-windows/cytool-for-windows","siteSpaceId":"sitesp_YThHe","description":"To manage Traps functions from the command line on Windows endpoints, use Cytool.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"},{"label":"Troubleshooting Resources for Windows"}]},{"id":"6ApygQLrfIMUTu4b4cPM","title":"Cortex XDR Agents Deployed in Advertise Mode","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-windows/troubleshooting-resources-for-windows/cortex-xdr-agents-deployed-in-advertise-mode","siteSpaceId":"sitesp_YThHe","description":"Depending on your Cortex XDR agent release, you can install or upgrade the agent in Advertise mode.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Windows"},{"label":"Troubleshooting Resources for Windows"}]},{"id":"9eP7nojSIJIqTEUilZ2j","title":"Cortex XDR Agent 7.9 for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac","siteSpaceId":"sitesp_YThHe","description":"To install, use, and uninstall the Cortex XDR agent 7.8 on Mac endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"4fI3zQyCUiXIn36PvNxF","title":"Cortex XDR Agent for Mac Requirements","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/cortex-xdr-agent-for-mac-requirements","siteSpaceId":"sitesp_YThHe","description":"Mac (macOS) endpoints must meet the following requirements to install the Cortex XDR agent 7.9","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"}]},{"id":"Qwqh5wzAjB0pb82eQvrd","title":"Install the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/install-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_YThHe","description":"Learn about the Cortex XDR agent installation options and use the provided workflows to install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"}]},{"id":"8zjKtoJVJmLoL55tkJg3","title":"Install with a unified configuration profile for MDMs","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/install-the-cortex-xdr-agent-for-mac/install-with-a-unified-configuration-profile-for-mdms","siteSpaceId":"sitesp_YThHe","description":"Use the Palo Alto Networks unified configuration profile for MDMs to seamlessly install the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"g091Jop5UVyNgUhlOgV5","title":"Install the Cortex XDR Agent Using JAMF","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-using-jamf","siteSpaceId":"sitesp_YThHe","description":"Step-by-step instructions to configure a JAMF installation profile for the Cortex XDR agent on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"8lCdGJlsZpc8COCt5M9V","title":"Install the Cortex XDR Agent Manually","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/install-the-cortex-xdr-agent-for-mac/install-the-cortex-xdr-agent-manually","siteSpaceId":"sitesp_YThHe","description":"Learn how to install the Cortex XDR agent manually on macOS endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"9oiRy9dadTnlOZoOFDJg","title":"Configure Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/install-the-cortex-xdr-agent-for-mac/configure-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_YThHe","description":"Run the wizard to guide you through the settings to enable the agent to run on the macOS endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"},{"label":"Install the Cortex XDR Agent for Mac"}]},{"id":"zWS1itWgHa3Z6Y4yISgh","title":"Use the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/use-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_YThHe","description":"Learn how to effectively use the Cortex XDR agent for Mac by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"}]},{"id":"ZjjPx6FpRdDEUHTYllmb","title":"Uninstall the Cortex XDR Agent for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/uninstall-the-cortex-xdr-agent-for-mac","siteSpaceId":"sitesp_YThHe","description":"Learn how to uninstall the Cortex XDR agent from a Mac endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"}]},{"id":"2ZkDWtywQIVMtA4za4S5","title":"Manage the Agent Deployment Notifications for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/manage-the-agent-deployment-notifications-for-mac","siteSpaceId":"sitesp_YThHe","description":"An overview of user notifications for the Cortex XDR agent during installation, upgrade, and removal on a Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"}]},{"id":"uYgTRwa3KkFIEs3eBwdK","title":"Troubleshooting Resources for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/troubleshooting-resources-for-mac","siteSpaceId":"sitesp_YThHe","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"}]},{"id":"JJighWYyctRxEw3QylcC","title":"Cytool for Mac","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-mac/troubleshooting-resources-for-mac/cytool-for-mac","siteSpaceId":"sitesp_YThHe","description":"In addition to being available for Windows and Linux endpoints, Cytool is also available for Mac endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Mac"},{"label":"Troubleshooting Resources for Mac"}]},{"id":"BvS8v95ohw1RbpbD6lLs","title":"Cortex XDR Agent 7.9 for Linux","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-linux","siteSpaceId":"sitesp_YThHe","description":"To install, use, and uninstall the Cortex XDR agent 7.9 on Linux endpoints, see the references in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"cTWKr3YaR6w9w0Z9HyQx","title":"Cortex XDR Agent for Linux Requirements","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-linux/cortex-xdr-agent-for-linux-requirements","siteSpaceId":"sitesp_YThHe","description":"Linux endpoints must meet the following requirements to install the Cortex XDR agent","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Linux"}]},{"id":"l0HIgaMO5RfFinJMfEka","title":"Install the Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-linux/install-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_YThHe","description":"Learn how to install the Cortex XDR agent on a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Linux"}]},{"id":"1LWfla23PlPrKBDns6he","title":"Install the Cortex XDR Agent for Kubernetes Hosts","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-linux/install-the-cortex-xdr-agent-for-kubernetes-hosts","siteSpaceId":"sitesp_YThHe","description":"Learn how to install the Cortex XDR agent for a Kubernetes host.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Linux"}]},{"id":"NwfcuVVAbddSeTepdYyH","title":"Use the Cortex XDR agent for Linux","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-linux/use-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_YThHe","description":"Learn how to effectively use the Cortex XDR agent for Linux by the different options described in this topic.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Linux"}]},{"id":"oXI7NkKdUFD7CQoYdVCz","title":"Uninstall the Cortex XDR Agent for Linux","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-linux/uninstall-the-cortex-xdr-agent-for-linux","siteSpaceId":"sitesp_YThHe","description":"Learn how to uninstall the Cortex XDR agent from a Linux endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Linux"}]},{"id":"P7H20So8sdNFrNDgyEKu","title":"Troubleshooting Resources for Linux","pathname":"/cortex-xdr-agent/7.9-ce/cortex-xdr-agent-7.9-for-linux/troubleshooting-resources-for-linux","siteSpaceId":"sitesp_YThHe","description":"Refer to the following troubleshooting resources for the Cortex XDR agent for Linux.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Cortex XDR Agent 7.9 for Linux"}]},{"id":"fquEQrYiF2xqtgoPyvRb","title":"Traps Agent 5.0 for Windows","pathname":"/cortex-xdr-agent/5.0","siteSpaceId":"sitesp_hu0ID","description":"To uninstall, use, and upgrade the Traps agent 5.0 on Windows endpoints, follow the instructions in this section.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"TAeZ0Mc9mE1I04m7jXmO","title":"Traps Agent for Windows Requirements","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-windows/traps-agent-for-windows-requirements","siteSpaceId":"sitesp_hu0ID","description":"Windows endpoints must meet the following requirements to install the Traps agent 5.0.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Windows"}]},{"id":"PTyoVV1Cuz8GK5QSKwm6","title":"Install Traps Agent for Windows","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-windows/install-traps-agent-for-windows","siteSpaceId":"sitesp_hu0ID","description":"Use the following workflows to install the Traps agent 5.0 on Windows endpoints. This topic provides options to use the MSI, Msiexec, and how to configure on a non-persistent VDI.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Windows"}]},{"id":"QYwMrWbQexPWpOwRxzVl","title":"Use Traps Agent for Windows","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-windows/use-traps-agent-for-windows","siteSpaceId":"sitesp_hu0ID","description":"Use the Traps console to view the agent status, initiate a connection to the server, view and send logs, view security events that occurred on the endpoint, and change the display language of the Trap","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Windows"}]},{"id":"M8AF1OXlLosfYHc07Sco","title":"Uninstall Traps Agent for Windows","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-windows/uninstall-traps-agent-for-windows","siteSpaceId":"sitesp_hu0ID","description":"Use this workflow to uninstall Traps agent 5.0 on a Windows endpoint.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Windows"}]},{"id":"gS7Myn3dxRuSVjdzwwID","title":"Troubleshooting Resources for Traps Agent for Windows","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-windows/troubleshooting-resources-for-traps-agent-for-windows","siteSpaceId":"sitesp_hu0ID","description":"Use the resources in this topic to troubleshoot the Traps agent 5.0 on Windows endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Windows"}]},{"id":"sX3qJdGdIyfkatcAttMF","title":"Cytool for Windows","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-windows/troubleshooting-resources-for-traps-agent-for-windows/cytool-for-windows","siteSpaceId":"sitesp_hu0ID","description":"To manage Traps functions from the command line on Windows endpoints, use Cytool.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Windows"},{"label":"Troubleshooting Resources for Traps Agent for Windows"}]},{"id":"Apg2J8T0ff6ibnkj5wvz","title":"Traps Agent 5.0 for Mac","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-mac","siteSpaceId":"sitesp_hu0ID","description":"To uninstall, use, and upgrade the Traps agent 5.0 on Mac endpoints, follow the instructions in this section.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"dUhfpDfZA5NAjILF9iDP","title":"Traps for Mac Requirements","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-mac/traps-for-mac-requirements","siteSpaceId":"sitesp_hu0ID","description":"Refer to requirements for Traps agent for Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Mac"}]},{"id":"swCZAoaREhEaWJidenm8","title":"Install the Traps Agent for Mac","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-mac/install-the-traps-agent-for-mac","siteSpaceId":"sitesp_hu0ID","description":"Perform steps to install the traps agent for Mac.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Mac"}]},{"id":"XXOZ5khzU2cy3TQ3KVKu","title":"Use the Traps Agent for Mac","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-mac/use-the-traps-agent-for-mac","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Mac"}]},{"id":"CpVded44VG379pNn0k6b","title":"Uninstall the Traps Agent for Mac","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-mac/uninstall-the-traps-agent-for-mac","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Mac"}]},{"id":"aA8prLig3v2ifY9TPkXG","title":"Troubleshooting Resources for the Traps Agent for Mac","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-mac/troubleshooting-resources-for-the-traps-agent-for-mac","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Mac"}]},{"id":"RcIew2mrVtEiSKt7bURA","title":"Cytool for Mac","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-mac/troubleshooting-resources-for-the-traps-agent-for-mac/cytool-for-mac","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Mac"},{"label":"Troubleshooting Resources for the Traps Agent for Mac"}]},{"id":"OfoFPgEqNYWIcUxA1hLI","title":"Traps Agent 5.0 for Linux","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-linux","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"xniLrbo2DB3D1AulX4JZ","title":"Traps for Linux Requirements","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-linux/traps-for-linux-requirements","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Linux"}]},{"id":"IimkT3eJfcLX9xYuvx6r","title":"Traps for Linux Limitations","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-linux/traps-for-linux-requirements/traps-for-linux-limitations","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Linux"},{"label":"Traps for Linux Requirements"}]},{"id":"RtOPZnLkhcdLyXH7RJ1a","title":"Install the Traps Agent for Linux","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-linux/install-the-traps-agent-for-linux","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Linux"}]},{"id":"XOTFIhsBbQMYtuVuclmc","title":"Use the Traps Agent for Linux","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-linux/use-the-traps-agent-for-linux","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Linux"}]},{"id":"qRWJi5MTTp4mirgmwdzQ","title":"Uninstall the Traps Agent for Linux","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-linux/uninstall-the-traps-agent-for-linux","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Linux"}]},{"id":"LAIjVRr2VKOMpKk4wvnb","title":"Troubleshooting Resources for the Traps Agent for Linux","pathname":"/cortex-xdr-agent/5.0/traps-agent-5.0-for-linux/troubleshooting-resources-for-the-traps-agent-for-linux","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps Agent 5.0 for Linux"}]},{"id":"ft0oRuszyfDPPX0UM1Lh","title":"Traps App 5.0 for Android","pathname":"/cortex-xdr-agent/5.0/traps-app-5.0-for-android","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"}]},{"id":"pE1uXKbcB4svMwqKJcvV","title":"Traps for Android Requirements","pathname":"/cortex-xdr-agent/5.0/traps-app-5.0-for-android/traps-for-android-requirements","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps App 5.0 for Android"}]},{"id":"3SJzyUCsp6tY0U8bgnlF","title":"Install Traps App for Android","pathname":"/cortex-xdr-agent/5.0/traps-app-5.0-for-android/install-traps-app-for-android","siteSpaceId":"sitesp_hu0ID","description":"Use this workflow to install Traps 5.0 for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps App 5.0 for Android"}]},{"id":"6WEkr0AGFOqwI1yUfJ1d","title":"Use Traps for Android","pathname":"/cortex-xdr-agent/5.0/traps-app-5.0-for-android/use-traps-for-android","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps App 5.0 for Android"}]},{"id":"dR1mWlVP2otAVZpE9ztB","title":"Troubleshoot Traps for Android","pathname":"/cortex-xdr-agent/5.0/traps-app-5.0-for-android/troubleshoot-traps-for-android","siteSpaceId":"sitesp_hu0ID","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Documentation","icon":"user-robot"},{"label":"Traps App 5.0 for Android"}]},{"id":"8MEMPMTozIxe6Kp08pdJ","title":"Cortex XDR Agent iOS Guides","pathname":"/cortex-xdr-agent-ios-guide","siteSpaceId":"sitesp_5z6JM","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"Q2Seo0cZPnKP8Aud4GCW","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/9.3","siteSpaceId":"sitesp_mxag7","description":"Learn more about the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"uafGTdcf9MsniPChuIGq","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/9.3/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_mxag7","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"aX38TjQCJ6Ht3wRNFYWq","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/9.3/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_mxag7","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"0AKUxucXfG6f5TMYSD5B","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/9.3/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_mxag7","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"MS5X41eOn3iJqXY6498J","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks","siteSpaceId":"sitesp_mxag7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"rMuvJS248nQybgcc96Ja","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_mxag7","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"nliBH4m5ilPxR4ljp0o1","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_mxag7","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"2REURkRudPiH9pY60NN2","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_mxag7","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"h48Cp3cK0zWadpx36Mrm","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_mxag7","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"tMMOXmkpAEgIyXtVPQbU","title":"Configure Network Filtering on Supervised Devices (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/configuration-for-installation-by-mdm-administrator-task/configure-network-filtering-on-supervised-devices-administrator-task","siteSpaceId":"sitesp_mxag7","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"uyMdBhtHQNPaHwbKh4tk","title":"Configuring iOS Network Filter Profile in Workspace ONE UEM","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/configuration-for-installation-by-mdm-administrator-task/configuring-ios-network-filter-profile-in-workspace-one-uem","siteSpaceId":"sitesp_mxag7","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"rwzNdtCZLyjtkI4TZ6Xm","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_mxag7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"ESEURlItQ0oyojBljnpC","title":"Install the Cortex XDR agent app on iOS using Microsoft Intune","pathname":"/cortex-xdr-agent-ios-guide/9.3/administrator-tasks/install-the-cortex-xdr-agent-app-on-ios-using-microsoft-intune","siteSpaceId":"sitesp_mxag7","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"CQUfp1QpWF7PlOUbjXaK","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks","siteSpaceId":"sitesp_mxag7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"tVUmQFMd3sBNL8UvlZ3C","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_mxag7","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"CFlmQYr8Tkx6vs4FZvd6","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_mxag7","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"XA0WPTubCflkZ5SSLMZ0","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_mxag7","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"AWgpRMg96d17yXh5p7jl","title":"Check Links before Clicking or Using Them","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/check-links-before-clicking-or-using-them","siteSpaceId":"sitesp_mxag7","description":"Check that links aren't malicious before clicking or using them.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"HaRABSd6sIpbOAChPxOW","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_mxag7","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"uQeEKOrAkpTQbLx5KxgV","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/check-your-device","siteSpaceId":"sitesp_mxag7","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"dUZfUU0HjxCp4NIGSPUo","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/view-security-events","siteSpaceId":"sitesp_mxag7","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"fHIhOpQ9cIvj02bDIf1Z","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_mxag7","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"37XcVZFITpXPf2w89Dje","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_mxag7","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"51w10NiBGIjXJ4JaAzG4","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_mxag7","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"cSogOn1f2aMVE55yIyaZ","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_mxag7","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"tBxJkpHIdwL91qTxoFbJ","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_mxag7","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"hMk22z9v76BrAoPVmM1Z","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_mxag7","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"uzf1HINhqebXqwtIo9o7","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/9.3/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_mxag7","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"Q2Seo0cZPnKP8Aud4GCW","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/9.2","siteSpaceId":"sitesp_A0U67","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"uafGTdcf9MsniPChuIGq","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/9.2/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_A0U67","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"aX38TjQCJ6Ht3wRNFYWq","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/9.2/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_A0U67","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"0AKUxucXfG6f5TMYSD5B","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/9.2/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_A0U67","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"MS5X41eOn3iJqXY6498J","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks","siteSpaceId":"sitesp_A0U67","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"rMuvJS248nQybgcc96Ja","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_A0U67","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"nliBH4m5ilPxR4ljp0o1","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_A0U67","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"2REURkRudPiH9pY60NN2","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_A0U67","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"h48Cp3cK0zWadpx36Mrm","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_A0U67","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"tMMOXmkpAEgIyXtVPQbU","title":"Configure Network Filtering on Supervised Devices (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task/configure-network-filtering-on-supervised-devices-administrator-task","siteSpaceId":"sitesp_A0U67","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"rwzNdtCZLyjtkI4TZ6Xm","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_A0U67","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"ESEURlItQ0oyojBljnpC","title":"Install the Cortex XDR agent app on iOS using Microsoft Intune","pathname":"/cortex-xdr-agent-ios-guide/9.2/administrator-tasks/prepare-for-installation-administrator-task/install-the-cortex-xdr-agent-app-on-ios-using-microsoft-intune","siteSpaceId":"sitesp_A0U67","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"CQUfp1QpWF7PlOUbjXaK","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks","siteSpaceId":"sitesp_A0U67","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"tVUmQFMd3sBNL8UvlZ3C","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_A0U67","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"CFlmQYr8Tkx6vs4FZvd6","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_A0U67","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"XA0WPTubCflkZ5SSLMZ0","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_A0U67","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"AWgpRMg96d17yXh5p7jl","title":"Check Links before Clicking or Using Them","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/check-links-before-clicking-or-using-them","siteSpaceId":"sitesp_A0U67","description":"Check that links aren't malicious before clicking or using them.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"HaRABSd6sIpbOAChPxOW","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_A0U67","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"uQeEKOrAkpTQbLx5KxgV","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/check-your-device","siteSpaceId":"sitesp_A0U67","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"dUZfUU0HjxCp4NIGSPUo","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/view-security-events","siteSpaceId":"sitesp_A0U67","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"fHIhOpQ9cIvj02bDIf1Z","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_A0U67","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"37XcVZFITpXPf2w89Dje","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_A0U67","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"51w10NiBGIjXJ4JaAzG4","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_A0U67","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"cSogOn1f2aMVE55yIyaZ","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_A0U67","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"tBxJkpHIdwL91qTxoFbJ","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_A0U67","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"hMk22z9v76BrAoPVmM1Z","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_A0U67","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"uzf1HINhqebXqwtIo9o7","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/9.2/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_A0U67","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"a1XMZ26CV2SLSiMVNvzV","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/9.1","siteSpaceId":"sitesp_0bMPH","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"0utnVrLxJgtoAxNG4T1A","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/9.1/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_0bMPH","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"tMUt7LNJUwOk1P8vEyJU","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/9.1/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_0bMPH","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"34qXgkp4x1fltuqY3eHf","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/9.1/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_0bMPH","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"orF0Vcj0hAWItEZuu8X4","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.1/administrator-tasks","siteSpaceId":"sitesp_0bMPH","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"ORJV7D1ApGkwcqCIpxzg","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.1/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_0bMPH","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"Hqn9AV0lOjaRohAKkGhK","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.1/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_0bMPH","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"Kb7QHqeyg7nJtOTQSZT7","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.1/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_0bMPH","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"q4Av51wgMGCgWszo4BRO","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.1/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_0bMPH","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"41cmI42sYlbitHWyMkRk","title":"Install the Cortex XDR agent app on iOS using Microsoft Intune","pathname":"/cortex-xdr-agent-ios-guide/9.1/administrator-tasks/prepare-for-installation-administrator-task/install-the-cortex-xdr-agent-app-on-ios-using-microsoft-intune","siteSpaceId":"sitesp_0bMPH","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"Pxoxcr6QT1TswL8mtCIk","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks","siteSpaceId":"sitesp_0bMPH","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"el5VzP5Q3OblGZwXVbqY","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_0bMPH","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"HXQ3Ps28822Sgwq4nJpt","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_0bMPH","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"lNw3AP9ieL4fvdK3XUNN","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_0bMPH","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"Kse0tiKZvYiv64pPAaVZ","title":"Check Links before Clicking or Using Them","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/check-links-before-clicking-or-using-them","siteSpaceId":"sitesp_0bMPH","description":"Check that links aren't malicious before clicking or using them.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"mRLrBpBQOaXS2g87AaHL","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_0bMPH","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"vwFIay0sD5IjHoDiy5KW","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/check-your-device","siteSpaceId":"sitesp_0bMPH","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"PTkophIuEHL23s9I9raZ","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/view-security-events","siteSpaceId":"sitesp_0bMPH","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"uTblFQTXQXEOfACQojor","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_0bMPH","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"gqPunnYyW3clTJk6iEdH","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_0bMPH","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"Ln0XDTIZfXJem687etl2","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_0bMPH","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"ii8lmSyKz0QF2rPyheGm","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_0bMPH","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"itTp7mEXcKRUIIHPEnk4","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_0bMPH","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"nGRtoglPQ3Uov5BrlI1a","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_0bMPH","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"vhIPxlTKGpcsi3eiuCY9","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/9.1/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_0bMPH","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"HVoS036uEBRxycR10n89","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/9.0","siteSpaceId":"sitesp_xH5a9","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"LMenCWVIBH1lsGucdEuN","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/9.0/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_xH5a9","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"7OBQQ8sNCGvfUhuwMKv1","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/9.0/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_xH5a9","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"vhwUviVYeFTQ9ncOkc4O","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/9.0/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_xH5a9","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"5dmQUOBmx11tqlA5opt3","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.0/administrator-tasks","siteSpaceId":"sitesp_xH5a9","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"mJSzTHJV3JRs1oOmfqmk","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.0/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_xH5a9","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"d3bMFpfgRZd1bNW7Ppsd","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.0/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_xH5a9","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"8j23IWxkir7pjgVdN0Nk","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.0/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_xH5a9","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"qMuJf8ZTC09DxO6BUIuK","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/9.0/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_xH5a9","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"pzvyhWx0J5tKum87T3PJ","title":"Install the Cortex XDR agent app on iOS using Microsoft Intune","pathname":"/cortex-xdr-agent-ios-guide/9.0/administrator-tasks/prepare-for-installation-administrator-task/install-the-cortex-xdr-agent-app-on-ios-using-microsoft-intune","siteSpaceId":"sitesp_xH5a9","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"Y1qrI1HFRjMUCP7S1zIL","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks","siteSpaceId":"sitesp_xH5a9","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"j3mKRCCKNLj1YztNRees","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_xH5a9","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"YDL4wswWWXRiIyWhccqK","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_xH5a9","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"VJUcY47tgWesQatjLLwc","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_xH5a9","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"mni8xqzv6rXR3KwmMAgM","title":"Check Links before Clicking or Using Them","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/check-links-before-clicking-or-using-them","siteSpaceId":"sitesp_xH5a9","description":"Check that links aren't malicious before clicking or using them.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"iGKDboAYHx5yOzmYFJwq","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_xH5a9","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"9EHy83Lqul83FmTfvS81","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/check-your-device","siteSpaceId":"sitesp_xH5a9","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"fsgjT6fzUfxhZAw0pSDN","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/view-security-events","siteSpaceId":"sitesp_xH5a9","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"XzPkyv9WNX5tGhYak8lh","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_xH5a9","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"XFKRCbXtspqWESXwS8d0","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_xH5a9","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"LnipejEQgNu9aeOX5FCh","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_xH5a9","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"8gd5VrPtWiejPFu4SPxp","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_xH5a9","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"R1MnqgQKn6wTokVFdNCJ","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_xH5a9","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"jFJQwkToUTjJrrkJCkJW","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_xH5a9","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"MTVwRRknX71BWEX9Gskv","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/9.0/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_xH5a9","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"PILPQNmSXDJn6HvbwGN4","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide","siteSpaceId":"sitesp_zUQ2i","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"OAmPVQbndDBEZK4wziOO","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_zUQ2i","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"O1SQ4m2UXkWCnJHLveI6","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_zUQ2i","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"nyL9z3oroLIQNfWvjKzR","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_zUQ2i","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"h9q34iEjs5xtq6IdXqMg","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/administrator-tasks","siteSpaceId":"sitesp_zUQ2i","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"Z3hGtX0RjVZ0DkkoD0dS","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_zUQ2i","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"YQ8iBmQX2OuzwecT96Dk","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_zUQ2i","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"sUhK7eGBe7iToh71oVEP","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_zUQ2i","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"IlLhB3Z0tu8hHlSXSRIP","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_zUQ2i","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"8yXOGG5m5a3hJ1NuEIbu","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks","siteSpaceId":"sitesp_zUQ2i","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"x4fHoyujkJsJF64TK2lD","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_zUQ2i","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"sCAHmt2eG7qRuSflPw39","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_zUQ2i","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"fz7uckCLrsbajRXH2FKQ","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_zUQ2i","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"KRIxM48XB4dEOrvkUELG","title":"Check Links before Clicking or Using Them","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/check-links-before-clicking-or-using-them","siteSpaceId":"sitesp_zUQ2i","description":"Check that links aren't malicious before clicking or using them.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"mkS7uvBC4lo7ZT7ubswm","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_zUQ2i","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"9pJh6vkWtDf8rqZ6bav3","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/check-your-device","siteSpaceId":"sitesp_zUQ2i","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"4m66xahmNMa3TpfiXMNx","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/view-security-events","siteSpaceId":"sitesp_zUQ2i","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"aHS7iYanGnuli6oXDy4M","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_zUQ2i","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"19MUcwFgWFr6lovwBukK","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_zUQ2i","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"pHZULKxMq5tS1gFiguVj","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_zUQ2i","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"cOXs6bX70XYo9AepZ8S2","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_zUQ2i","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"5a7x1huSqirlnXub2ly2","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_zUQ2i","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"NbspV6Iz2axUdkothSg4","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_zUQ2i","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"qzaPZe5kZCtrMPgRnSJW","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.9-agent-ios-guide/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_zUQ2i","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"niMl3xxfOD6tuWvm5Uca","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.8","siteSpaceId":"sitesp_TduK0","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"eteQhYKjCTIVjFVAr4Ne","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/8.8/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_TduK0","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"KHGYlnuxUlRtU2yFNjlV","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.8/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_TduK0","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"8HvnDFOKWI77amQ2JLWf","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.8/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_TduK0","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"G3aKNkOsDFQfqp4kSvmS","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.8/administrator-tasks","siteSpaceId":"sitesp_TduK0","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"8n53kpJqNUnPWxNrbBVJ","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.8/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_TduK0","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"1XISmQyPD2H60EptixC3","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.8/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_TduK0","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"p5upQ0ZxEBuwZZdczB7d","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.8/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_TduK0","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"TixFpb4tJOC5lABa82hN","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.8/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_TduK0","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"PbgkDYlgwNSaJ5jCfLqo","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks","siteSpaceId":"sitesp_TduK0","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"ryvTfXzE3kF0fYKecMQa","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_TduK0","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"DiyVizenvzWxyvQbCStD","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_TduK0","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"iP9vGtVayTqWzVgOnphe","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_TduK0","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"BoKdQypFTuXFx8OnWGcM","title":"Check Links before Clicking or Using Them","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/check-links-before-clicking-or-using-them","siteSpaceId":"sitesp_TduK0","description":"Check that links aren't malicious before clicking or using them.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"76OFiVnl6oHPdAJxldHl","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_TduK0","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"ezkNXRxAF8qXCVlXLZNP","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/check-your-device","siteSpaceId":"sitesp_TduK0","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"YY3DV12A84cCUGGHXGmw","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/view-security-events","siteSpaceId":"sitesp_TduK0","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"uis0pLOWGh5pdNVyYPN9","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_TduK0","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"AgPpgJta7REkSiK6fD8k","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_TduK0","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"4t93uOWZDgRx42VtLFxN","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_TduK0","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"1fJskxDuMv95tHAhfmtV","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_TduK0","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"DMMFRbbHncsbvtQBGxOs","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_TduK0","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"oln7ndV6nPyYrwNLig96","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_TduK0","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"pHOc7n3xQZel4EPvrE5e","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.8/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_TduK0","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"hxyX48oP4ITuUIpgLk7G","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.7","siteSpaceId":"sitesp_uRbs9","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"R4LsDrtltVCfcY6qHFyC","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/8.7/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_uRbs9","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"PEtJBqy9uMs639elg6fI","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.7/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_uRbs9","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"jCnHxTGd6pv7cinxJWN8","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.7/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_uRbs9","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"D3sfE2UhL0aktttay7Bs","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.7/administrator-tasks","siteSpaceId":"sitesp_uRbs9","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"IDAXFpoHUKO3A46yLXNI","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.7/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_uRbs9","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"a7nZXeUNByvvyPHQURgD","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.7/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_uRbs9","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"LXjzW6PIk98uFS6vjuGD","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.7/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_uRbs9","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"1Pj526H83ISWcgG4tpC0","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.7/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_uRbs9","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"X3guLKRLuRS7TfWKlvxQ","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks","siteSpaceId":"sitesp_uRbs9","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"jbZztI6ePO2RMZrgPpee","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_uRbs9","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"BkNTBZWNGQGntzT7PqP2","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_uRbs9","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"yHew0n2EcSBc8E3ON3Nz","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_uRbs9","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"iPMhuigrJz2CNxLXOrhs","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_uRbs9","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"DrLIP6VulTDZNMS30W6V","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/check-your-device","siteSpaceId":"sitesp_uRbs9","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"QdJlE0RIPM4PWvySTLVT","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/view-security-events","siteSpaceId":"sitesp_uRbs9","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"Aa6ey0tQjftj3v12Uyz5","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_uRbs9","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"5SlibnRAMutaGKfFvBeO","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_uRbs9","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"8q3orcrv9S5cp61FldSc","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_uRbs9","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"EypC9cT4csH93nk1vUhu","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_uRbs9","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"Pfou2PT25Iquodyj8gN8","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_uRbs9","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"gzqwWa0y1OEo1PllU1HR","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_uRbs9","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"00VNiXgb4YD53hgQ7VCi","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.7/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_uRbs9","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"qkXZmkmKy4mMvYVt3pAX","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.6","siteSpaceId":"sitesp_6Pphj","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"v0qfrol8OX7GRChiDKXq","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/8.6/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_6Pphj","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"9nPUKOpMJ9BX39l7dbNR","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.6/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_6Pphj","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"n5nFUuayPI7HD2qa9DN6","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.6/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_6Pphj","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"CCYkMaFFwUGQsa8JEIdu","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.6/administrator-tasks","siteSpaceId":"sitesp_6Pphj","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"mlF1DOiFlE7g4pgQzlwI","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.6/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_6Pphj","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"oIBFpvrxCa6Gr9VgwnZV","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.6/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_6Pphj","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"lFQL6aaWUNJdtO1EW1SF","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.6/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_6Pphj","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"D8Ak2bvO8F30qjeEEgOx","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.6/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_6Pphj","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"xwIv0W1bsNKNJDY7pzcD","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks","siteSpaceId":"sitesp_6Pphj","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"AiU3bV1UiuIX4v17Vjx6","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_6Pphj","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"Z9EW18n7dgmseZBAbGPy","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_6Pphj","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"luFAGBpFnvXB6urRkiD9","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_6Pphj","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"TCdDRcTwSZ5qo4PL2k8j","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_6Pphj","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"q4RfQFCxDC4yXeuWB6Ow","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/check-your-device","siteSpaceId":"sitesp_6Pphj","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"cTvXIbrYBD7ewongIRk6","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/view-security-events","siteSpaceId":"sitesp_6Pphj","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"HwX4ndze5oScE4p6cXhp","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_6Pphj","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"fc6RWT2jW9R0PwvwlldH","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_6Pphj","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"zcNpauKQPRZISHcP7Es4","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_6Pphj","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"gVABTXMp1dGaLVvr1CNN","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_6Pphj","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"xLJi8OlWCdU4HKyor3hP","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_6Pphj","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"eZAlCK05Cba0ll5i2e7y","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_6Pphj","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"tS5zhf1n7k31RNPhu6ql","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.6/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_6Pphj","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"vnFwlQ0Mtebn9zULQsUn","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.5","siteSpaceId":"sitesp_cwxN9","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"KY4gCttAGOjaRzh534GM","title":"Cortex XDR Agent App for iOS Overview","pathname":"/cortex-xdr-agent-ios-guide/8.5/get-started/cortex-xdr-agent-app-for-ios-overview","siteSpaceId":"sitesp_cwxN9","description":"Learn about deploying and configuring the Cortex XDR agent app for iOS on iOS-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"au6AS5CRrpwcKsLKrWiR","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.5/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_cwxN9","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"1SpmoVUB0WwiPFPsLB23","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.5/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_cwxN9","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"sPoTYK7tSAq0BqI5JWX2","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.5/administrator-tasks","siteSpaceId":"sitesp_cwxN9","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"0jVgvaGJ4ryNFt7WHvqi","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.5/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_cwxN9","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"q3rFrTnU9pC89qqguqt1","title":"Add a Malware Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.5/administrator-tasks/prepare-for-installation-administrator-task/add-a-malware-prevention-profile-administrator-task","siteSpaceId":"sitesp_cwxN9","description":"From the Cortex XDR or XSIAM tenant, you can configure the action that Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers. You can also configure granular control and moni","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"CjjC7wrm3RKyPOJbCua4","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.5/administrator-tasks/prepare-for-installation-administrator-task/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_cwxN9","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"u6m1sS1SJdcOEqnFL1QM","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.5/administrator-tasks/prepare-for-installation-administrator-task/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_cwxN9","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Prepare for Installation (Administrator Task)"}]},{"id":"cmse0YJbZKY1Sphmy7qr","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks","siteSpaceId":"sitesp_cwxN9","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"hWgU6FuRn5m8M0tIsQY1","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_cwxN9","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"oTjkGaiuckRGmfucSEVd","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_cwxN9","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"zOCTZvglw29XMdduATH3","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_cwxN9","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"SRZkuHPM34N3GDLMYO8n","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_cwxN9","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"tFbL2fzywzs9x14PZ0te","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/check-your-device","siteSpaceId":"sitesp_cwxN9","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"4w7TF6ltkoyEpre4ut0o","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/view-security-events","siteSpaceId":"sitesp_cwxN9","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"lwPkFzAT2IdbdoVjXGjz","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_cwxN9","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"tdrSydLV74RDzNwqOfbU","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_cwxN9","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"zF4YP5m4bg6XNQsCfHL6","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_cwxN9","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"EwncHL1ZyxeOrF3m08n0","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_cwxN9","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"PQeIx3iIxzSGKHX76upL","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_cwxN9","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"ThUt5QoOgQ6zB6eTWwho","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_cwxN9","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"gnNusuAgZkokSrJvejjV","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.5/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_cwxN9","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"s4kC3AWHio9IsNnSKxCM","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.4","siteSpaceId":"sitesp_GXgxp","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"KiiNo83Ono65lmUQrTNq","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.4/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_GXgxp","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"6PwutYD96ywzLa5CqJaH","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.4/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_GXgxp","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"ySewKjXuMXiW6ygS7vaT","title":"Administrator Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.4/administrator-tasks","siteSpaceId":"sitesp_GXgxp","description":"The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"Qf8BqqlwDSoDGx5iKCht","title":"Add a Malware Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.4/administrator-tasks/add-a-malware-security-profile-administrator-task","siteSpaceId":"sitesp_GXgxp","description":"From the Cortex XDR or Cortex XSIAM tenant, administrators can configure what action Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"tcZuJ5Ibl8gkljtjp2Du","title":"Add an Agent Settings Prevention Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.4/administrator-tasks/add-an-agent-settings-prevention-profile-administrator-task","siteSpaceId":"sitesp_GXgxp","description":"You can use Agent Settings prevention profiles to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"s5wKqR0sEsqmIInpWwQj","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.4/administrator-tasks/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_GXgxp","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"0g04z7yvMpt9xNlssjAw","title":"Configure Network Filtering on Supervised Devices (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.4/administrator-tasks/configuration-for-installation-by-mdm-administrator-task/configure-network-filtering-on-supervised-devices-administrator-task","siteSpaceId":"sitesp_GXgxp","description":"When your organization manages iOS devices, the administrator can set up the Network Shield feature to block network activity for specific URLs.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"IKtTR0etx2iGUiAEYI8S","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.4/administrator-tasks/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_GXgxp","description":"Instructions to configure Cortex XDR iOS app by JAMF MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"E871R1PGcsQGmHgaIf5A","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.4/administrator-tasks/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_GXgxp","description":"Learn about the Administrator’s tasks required to prepare for installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Administrator Tasks"}]},{"id":"oP22urxSrZCmqhvgSuMI","title":"Device User Tasks","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks","siteSpaceId":"sitesp_GXgxp","description":"The tasks in this section are performed by the iOS device user.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"u6vscG20Q95SrFcHm70u","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_GXgxp","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"wycCGYmUzaV4VsnLOJlW","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/configure-phone-call-blocking","siteSpaceId":"sitesp_GXgxp","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"f9BLy3o6dzEzIlkI2H2k","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/configure-message-and-call-reporting","siteSpaceId":"sitesp_GXgxp","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"erGbqLvsJZlIfVSr2ErU","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/report-spam-messages","siteSpaceId":"sitesp_GXgxp","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"ZwkoClxa6fpKY3edWRN7","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/check-your-device","siteSpaceId":"sitesp_GXgxp","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"ScSXLphTCz7eUEnjmsWw","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/view-security-events","siteSpaceId":"sitesp_GXgxp","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"Qdj01F26hOUyNZBWSjvN","title":"View and Modify Use of Security Modules","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/view-and-modify-use-of-security-modules","siteSpaceId":"sitesp_GXgxp","description":"View and modify the use of security modules used by your device's Cortex XDR app.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"oofg8BUpVJvrhDz3r6Th","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/view-device-and-app-status-and-information","siteSpaceId":"sitesp_GXgxp","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"2w2Vt7i02zflNSFjLM3m","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_GXgxp","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"cg8iIkwkw3lup66A6cA7","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_GXgxp","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"P4ruKpRLMR8RKHJ4cail","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_GXgxp","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"View Device and App Status and Information"}]},{"id":"8JGipM4SmKBQmCGRQJUd","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/troubleshooting","siteSpaceId":"sitesp_GXgxp","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"}]},{"id":"DUGHbfmFokEcpyoJz3RG","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.4/device-user-tasks/troubleshooting/send-logs","siteSpaceId":"sitesp_GXgxp","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Device User Tasks"},{"label":"Troubleshooting"}]},{"id":"Ut9s32Eh7ezhibY5dhPf","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.3","siteSpaceId":"sitesp_p1yBe","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"jrApE8IeOEgiqjEfYuQb","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.3/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_p1yBe","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"wIuwebl37dkvRwz8UswZ","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.3/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_p1yBe","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"U2NTGmglxzFSZEVJZhay","title":"Install and Connect Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.3/install-and-connect-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_p1yBe","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"Mp8Ww1ktheP798klbuPk","title":"Add a Malware Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.3/install-and-connect-cortex-xdr-agent-app-for-ios/add-a-malware-security-profile-administrator-task","siteSpaceId":"sitesp_p1yBe","description":"From the Cortex XDR management console, administrators can configure what action Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"eh5Dz5RGOZuuZ3Smcj0H","title":"Add an Agent Settings Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.3/install-and-connect-cortex-xdr-agent-app-for-ios/add-an-agent-settings-security-profile-administrator-task","siteSpaceId":"sitesp_p1yBe","description":"Agent Settings profiles enable you to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"dTZGn8JNTTvvNBLjOKB2","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.3/install-and-connect-cortex-xdr-agent-app-for-ios/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_p1yBe","description":"Learn about the Administrator’s tasks required prior to installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"V2HPCrCtiAaZ6GL25rSo","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.3/install-and-connect-cortex-xdr-agent-app-for-ios/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_p1yBe","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"8nm4M1T97zcIYeAFtJJq","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.3/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_p1yBe","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"JsCJWFcuiWBgOOfo3OEd","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.3/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_p1yBe","description":"Instructions to configure Cortex XDR iOS app by JAMF MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"IriPVNK8lhN5qhytY3mv","title":"Configure Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.3/configure-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_p1yBe","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"cRmkDxi4kyENvGBRMrXr","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.3/configure-cortex-xdr-agent-app-for-ios/configure-phone-call-blocking","siteSpaceId":"sitesp_p1yBe","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"Uvva76yeztWxxhGInY5Z","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.3/configure-cortex-xdr-agent-app-for-ios/configure-message-and-call-reporting","siteSpaceId":"sitesp_p1yBe","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"6Iow1afxlssleSZkL90s","title":"Configure Network Filtering on Supervised Devices (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.3/configure-cortex-xdr-agent-app-for-ios/configure-network-filtering-on-supervised-devices-administrator-task","siteSpaceId":"sitesp_p1yBe","description":"When your organization supervises iOS devices, the administrator can set up network filtering to block network activity for specific URLs.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"wpDp7VYp3Eh2MoLsM1tK","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.3/configure-cortex-xdr-agent-app-for-ios/report-spam-messages","siteSpaceId":"sitesp_p1yBe","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"YlVUHmiF04DXqO52pnF7","title":"Manage Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.3/manage-security-events","siteSpaceId":"sitesp_p1yBe","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"2lLYCawrS1e5DVoQAAJp","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.3/manage-security-events/check-your-device","siteSpaceId":"sitesp_p1yBe","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"JCGr3glCFVyVwVm7HuNU","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.3/manage-security-events/view-security-events","siteSpaceId":"sitesp_p1yBe","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"5btrpJzoUUdIKwVuAVHf","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.3/view-device-and-app-status-and-information","siteSpaceId":"sitesp_p1yBe","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"KppCFLHHzrIIyIynUnH1","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.3/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_p1yBe","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"lnW9uLrUV0MHYPOvrn2i","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.3/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_p1yBe","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"Wg7L01UVT4BVE1HixV4e","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.3/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_p1yBe","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"SxaEFppOvLu1ADom00V9","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.3/troubleshooting","siteSpaceId":"sitesp_p1yBe","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"XhV4xwAPWAhZoNhkRhtz","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.3/troubleshooting/send-logs","siteSpaceId":"sitesp_p1yBe","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Troubleshooting"}]},{"id":"rnnIQSo5MbdtAVgNXUbI","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.2","siteSpaceId":"sitesp_eO6x4","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"SkI5LjfUyRMQ8xkbhS27","title":"Release Notes for Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.2/get-started/release-notes-for-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_eO6x4","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"f2Dm0AV20hT6NfjRlfjp","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.2/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_eO6x4","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"XdJAkWXYBLo6xuCGEdFp","title":"Install and Connect Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.2/install-and-connect-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_eO6x4","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"hHdhJAHO542kutLrXw0E","title":"Add a Malware Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.2/install-and-connect-cortex-xdr-agent-app-for-ios/add-a-malware-security-profile-administrator-task","siteSpaceId":"sitesp_eO6x4","description":"From the Cortex XDR management console, administrators can configure what action Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"YIJt7VYdj7MAeRR4bSXA","title":"Add an Agent Settings Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.2/install-and-connect-cortex-xdr-agent-app-for-ios/add-an-agent-settings-security-profile-administrator-task","siteSpaceId":"sitesp_eO6x4","description":"Agent Settings profiles enable you to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"6FxsEqcsi6FDpI4Hq6Dz","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.2/install-and-connect-cortex-xdr-agent-app-for-ios/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_eO6x4","description":"Learn about the Administrator’s tasks required prior to installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"BZgcXKDuDxeEXeVPmj3W","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.2/install-and-connect-cortex-xdr-agent-app-for-ios/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_eO6x4","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"Uo11q0Cr0zEVwwDom87B","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.2/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_eO6x4","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"zRjllqryrvQRgcJdNg2f","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.2/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_eO6x4","description":"Instructions to configure Cortex XDR iOS app by JAMF MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"Nc4jNPyiucCIwNdOE1Gn","title":"Configure Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.2/configure-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_eO6x4","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"Ps8Hiqh9xQ7UVJlVZp75","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.2/configure-cortex-xdr-agent-app-for-ios/configure-phone-call-blocking","siteSpaceId":"sitesp_eO6x4","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"GqvNLiVj3Lv7pt6FGPLu","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.2/configure-cortex-xdr-agent-app-for-ios/configure-message-and-call-reporting","siteSpaceId":"sitesp_eO6x4","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"lBLDNChJFmv9OdqmCdbs","title":"Configure Network Filtering on Supervised Devices (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.2/configure-cortex-xdr-agent-app-for-ios/configure-network-filtering-on-supervised-devices-administrator-task","siteSpaceId":"sitesp_eO6x4","description":"When your organization supervises iOS devices, the administrator can set up network filtering to block network activity for specific URLs.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"5j5ZbuDMShI4V0comFTS","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.2/configure-cortex-xdr-agent-app-for-ios/report-spam-messages","siteSpaceId":"sitesp_eO6x4","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"wRf5XeNsqpOewreKfC9P","title":"Manage Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.2/manage-security-events","siteSpaceId":"sitesp_eO6x4","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"yRquWwxvuIOts34e0Zet","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.2/manage-security-events/check-your-device","siteSpaceId":"sitesp_eO6x4","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"LNHiVgF2iLJxuhYISbvV","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.2/manage-security-events/view-security-events","siteSpaceId":"sitesp_eO6x4","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"BVrmSmjEGKZZOjmUlNRH","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.2/view-device-and-app-status-and-information","siteSpaceId":"sitesp_eO6x4","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"4Vntht5UVvHdakqyQVzf","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.2/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_eO6x4","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"uiZmm3K6wQjI5BuYzsJV","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.2/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_eO6x4","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"35FAmz7zTWny4LwLUS2F","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.2/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_eO6x4","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"SOAOSsrkGlgvCyT1jWQc","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.2/troubleshooting","siteSpaceId":"sitesp_eO6x4","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"uvUK8f1IGaaTkPxjPjGL","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.2/troubleshooting/send-logs","siteSpaceId":"sitesp_eO6x4","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Troubleshooting"}]},{"id":"Gyd0MTVNE46CrjmuwEIS","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide","siteSpaceId":"sitesp_WST3R","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"3YfixTklfmFHIeukjtV5","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_WST3R","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"VeKsP3dTsAR6svEcPFPE","title":"Release Notes","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/get-started/release-notes","siteSpaceId":"sitesp_WST3R","description":"Learn about new features added to Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"ff4eGhk5wUXTzhA7B3NL","title":"Install and Connect Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/install-and-connect-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_WST3R","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"yU6s3j1Sq8ic8rLuYiY0","title":"Add a Malware Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/install-and-connect-cortex-xdr-agent-app-for-ios/add-a-malware-security-profile-administrator-task","siteSpaceId":"sitesp_WST3R","description":"From the Cortex XDR management console, administrators can configure what action Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"erQ0KIwjk3wHd1bdxDVZ","title":"Add an Agent Settings Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/install-and-connect-cortex-xdr-agent-app-for-ios/add-an-agent-settings-security-profile-administrator-task","siteSpaceId":"sitesp_WST3R","description":"Agent Settings profiles enable you to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"GWVm5mC9DPGkBDQfdRZC","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/install-and-connect-cortex-xdr-agent-app-for-ios/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_WST3R","description":"Learn about the Administrator’s tasks required prior to installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"xnnP5pmYtrN5cqxQbKDA","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/install-and-connect-cortex-xdr-agent-app-for-ios/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_WST3R","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"k7Lqb0pSf9x9rJ9DBKxk","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_WST3R","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"j72m1B43UnYkVKqwQF3m","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_WST3R","description":"Instructions to configure Cortex XDR iOS app by JAMF MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"yzMl6eHoUYWtE2QEADfQ","title":"Configure Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/configure-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_WST3R","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"cGhvnAGLEePmu39jpkrD","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/configure-cortex-xdr-agent-app-for-ios/configure-phone-call-blocking","siteSpaceId":"sitesp_WST3R","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"uUssdiO9pcJlimqKHJH7","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/configure-cortex-xdr-agent-app-for-ios/configure-message-and-call-reporting","siteSpaceId":"sitesp_WST3R","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"R41eiEWletNKflyIHR8w","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/configure-cortex-xdr-agent-app-for-ios/report-spam-messages","siteSpaceId":"sitesp_WST3R","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"ma8pQde3nUB4uSb0JdOP","title":"Manage Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/manage-security-events","siteSpaceId":"sitesp_WST3R","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"yrWvwe2bkBngxpGwny12","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/manage-security-events/check-your-device","siteSpaceId":"sitesp_WST3R","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"yc6DwO1OemlhKACoUbb1","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/manage-security-events/view-security-events","siteSpaceId":"sitesp_WST3R","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"T6ewyx44TQDNGNl0IBIR","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/view-device-and-app-status-and-information","siteSpaceId":"sitesp_WST3R","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"jTuLRVFlmBSQ2EeR2JkG","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_WST3R","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"Tg8ABdxS4QuYcogITcJr","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_WST3R","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"Pr4xRmCDEPbiKiJ6Nc7g","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_WST3R","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"7dTVBTxwdq9YAorF2WqR","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/troubleshooting","siteSpaceId":"sitesp_WST3R","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"McmbFcPJd8dconfWIRyy","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.1-agent-ios-guide/troubleshooting/send-logs","siteSpaceId":"sitesp_WST3R","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Troubleshooting"}]},{"id":"DwbNQovASgNj44NPPlLj","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/8.0","siteSpaceId":"sitesp_xH5li","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"}]},{"id":"XhhOYnUOwbwdpdzmR7fl","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/readme/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_xH5li","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Get Started"}]},{"id":"IXbeU1wZUkr7DPdesdLu","title":"Release Notes","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/readme/release-notes","siteSpaceId":"sitesp_xH5li","description":"Learn about new features added to Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Get Started"}]},{"id":"tUx5TW6UlJuxzB9oFo06","title":"Install and Connect Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/install-and-connect-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_xH5li","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"}]},{"id":"NgUN5EZYzmVUAZ462zrr","title":"Add a Malware Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/install-and-connect-cortex-xdr-agent-app-for-ios/add-a-malware-security-profile-administrator-task","siteSpaceId":"sitesp_xH5li","description":"From the Cortex XDR management console, administrators can configure what action Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"NLUgodlhyqcf9o8PHCcM","title":"Add an Agent Settings Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/install-and-connect-cortex-xdr-agent-app-for-ios/add-an-agent-settings-security-profile-administrator-task","siteSpaceId":"sitesp_xH5li","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"BeVyBTRanlHjP0NjEsVE","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/install-and-connect-cortex-xdr-agent-app-for-ios/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_xH5li","description":"Learn about the Administrator’s tasks required prior to installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"2jwhwx30t3WutStREn1E","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/install-and-connect-cortex-xdr-agent-app-for-ios/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_xH5li","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"EcO8bQCM1XGRbE3ry5KC","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_xH5li","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"}]},{"id":"P79SJrYOKuAJXEOagpi1","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_xH5li","description":"Instructions to configure Cortex XDR iOS app by JAMF MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"E0T8VoGkCFjfxAFamTgQ","title":"Configure Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/configure-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_xH5li","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"}]},{"id":"VrDB8Pd8qodK13lPhAip","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/configure-cortex-xdr-agent-app-for-ios/configure-phone-call-blocking","siteSpaceId":"sitesp_xH5li","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"BdZC5bL9LIMv199YXa5F","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/configure-cortex-xdr-agent-app-for-ios/configure-message-and-call-reporting","siteSpaceId":"sitesp_xH5li","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"xlebdVlrerfbAGmwv2fd","title":"Report Spam Messages","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/configure-cortex-xdr-agent-app-for-ios/report-spam-messages","siteSpaceId":"sitesp_xH5li","description":"Learn how to enable your device to report spam messages from unknown senders.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"C69K7BegbqU5QRfqCIUV","title":"Manage Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/manage-security-events","siteSpaceId":"sitesp_xH5li","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"}]},{"id":"mAVsa6YvE6MbjpCnXJ3H","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/manage-security-events/check-your-device","siteSpaceId":"sitesp_xH5li","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Manage Security Events"}]},{"id":"Cq6S8KV8qH4VXFDs65bh","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/manage-security-events/view-security-events","siteSpaceId":"sitesp_xH5li","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Manage Security Events"}]},{"id":"5Ylr5DCvcCrfRZwcTutP","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/view-device-and-app-status-and-information","siteSpaceId":"sitesp_xH5li","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"}]},{"id":"MXFLAA1vSWQJNbLZHP86","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_xH5li","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"View Device and App Status and Information"}]},{"id":"TUh4q4Kmer9O3I39cYpU","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_xH5li","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"View Device and App Status and Information"}]},{"id":"sBNCYLmfR1RHvLYShVIG","title":"Using the Cortex XDR iOS Widgets","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/view-device-and-app-status-and-information/using-the-cortex-xdr-ios-widgets","siteSpaceId":"sitesp_xH5li","description":"Learn how to use the Cortex XDR widgets on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"View Device and App Status and Information"}]},{"id":"H9ZM5yQWuvAOSMtCWg7P","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/troubleshooting","siteSpaceId":"sitesp_xH5li","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"}]},{"id":"WU51WmWDMVk6WQDdrpOE","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/8.0/cortex-xdr-agent-ios-app/troubleshooting/send-logs","siteSpaceId":"sitesp_xH5li","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Cortex XDR Agent iOS App"},{"label":"Troubleshooting"}]},{"id":"FV7cVT4Nj4ZdfDWT0MZt","title":"Get Started","pathname":"/cortex-xdr-agent-ios-guide/7.9","siteSpaceId":"sitesp_vIN0w","description":"Learn more about the Cortex XDR Agent app for iOS. The Cortex XDR Agent app enforces your organization’s security policy on iOS-based endpoints, as defined in Cortex XDR or Cortex XSIAM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"QY4Qjdj251izxqhzr8uf","title":"Cortex XDR Agent App for iOS Requirements","pathname":"/cortex-xdr-agent-ios-guide/7.9/get-started/cortex-xdr-agent-app-for-ios-requirements","siteSpaceId":"sitesp_vIN0w","description":"Learn about requirements for the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"SQvairCtKHeO0UtQCDco","title":"Release Notes","pathname":"/cortex-xdr-agent-ios-guide/7.9/get-started/release-notes","siteSpaceId":"sitesp_vIN0w","description":"Learn about new features added to Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Get Started"}]},{"id":"kfkvkYDs6xudECy3nLmV","title":"Install and Connect Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/7.9/install-and-connect-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_vIN0w","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"U6mwoUclFxigFWzIUgh1","title":"Add a Malware Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/7.9/install-and-connect-cortex-xdr-agent-app-for-ios/add-a-malware-security-profile-administrator-task","siteSpaceId":"sitesp_vIN0w","description":"From the Cortex XDR management console, administrators can configure what action Cortex XDR agents on iOS devices take for known malicious URLs and spam numbers.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"JVPvxwcZl56nl88efmcD","title":"Add an Agent Settings Security Profile (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/7.9/install-and-connect-cortex-xdr-agent-app-for-ios/add-an-agent-settings-security-profile-administrator-task","siteSpaceId":"sitesp_vIN0w","description":"Agent Settings profiles enable you to customize Cortex XDR agent settings for different platforms and groups of users.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"jOvxu82uHGM3khZ3zGpu","title":"Prepare for Installation (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/7.9/install-and-connect-cortex-xdr-agent-app-for-ios/prepare-for-installation-administrator-task","siteSpaceId":"sitesp_vIN0w","description":"Learn about the Administrator’s tasks required prior to installation of the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"mWD7iyNMYaaQ6tBPpmnT","title":"Install Cortex XDR Agent iOS App on the iOS Device","pathname":"/cortex-xdr-agent-ios-guide/7.9/install-and-connect-cortex-xdr-agent-app-for-ios/install-cortex-xdr-agent-ios-app-on-the-ios-device","siteSpaceId":"sitesp_vIN0w","description":"Use this workflow to install Cortex XDR Agent for iOS on your device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Install and Connect Cortex XDR Agent App for iOS"}]},{"id":"bsebdaLSiEB98DBLGepF","title":"Configuration for Installation by MDM (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/7.9/configuration-for-installation-by-mdm-administrator-task","siteSpaceId":"sitesp_vIN0w","description":"Instructions to configure the Cortex XDR iOS app by MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"iAkyaNue6xHiDjwskOLf","title":"Configuration for Installation by JAMF (Administrator Task)","pathname":"/cortex-xdr-agent-ios-guide/7.9/configuration-for-installation-by-mdm-administrator-task/configuration-for-installation-by-jamf-administrator-task","siteSpaceId":"sitesp_vIN0w","description":"Instructions to configure Cortex XDR iOS app by JAMF MDM.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configuration for Installation by MDM (Administrator Task)"}]},{"id":"GeEyXwM6jzI0Kcsothx6","title":"Configure Cortex XDR Agent App for iOS","pathname":"/cortex-xdr-agent-ios-guide/7.9/configure-cortex-xdr-agent-app-for-ios","siteSpaceId":"sitesp_vIN0w","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"sTAHvO6BRiOTNQBQUsk8","title":"Configure Phone Call Blocking","pathname":"/cortex-xdr-agent-ios-guide/7.9/configure-cortex-xdr-agent-app-for-ios/configure-phone-call-blocking","siteSpaceId":"sitesp_vIN0w","description":"Learn how to configure phone call blocking on iPhones, using the Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"nWFx6MJxcErLdglVDLAt","title":"Configure Message and Call Reporting","pathname":"/cortex-xdr-agent-ios-guide/7.9/configure-cortex-xdr-agent-app-for-ios/configure-message-and-call-reporting","siteSpaceId":"sitesp_vIN0w","description":"Learn how to enable your iPhone to report spam messages.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Configure Cortex XDR Agent App for iOS"}]},{"id":"QlCX8BwJd1qrHYu8V34U","title":"Manage Security Events","pathname":"/cortex-xdr-agent-ios-guide/7.9/manage-security-events","siteSpaceId":"sitesp_vIN0w","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"sPuO36vorZQOyT4s7P8E","title":"Check Your Device","pathname":"/cortex-xdr-agent-ios-guide/7.9/manage-security-events/check-your-device","siteSpaceId":"sitesp_vIN0w","description":"Learn about checking Cortex XDR agent app activity on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"3FuavLFkuQRPY8aJmIK8","title":"View Security Events","pathname":"/cortex-xdr-agent-ios-guide/7.9/manage-security-events/view-security-events","siteSpaceId":"sitesp_vIN0w","description":"Learn how to view the security events identified by the Cortex XDR Agent app installed on your iOS device.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Manage Security Events"}]},{"id":"R3sMcVjmcjOqrnrLLGnR","title":"View Device and App Status and Information","pathname":"/cortex-xdr-agent-ios-guide/7.9/view-device-and-app-status-and-information","siteSpaceId":"sitesp_vIN0w","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"YqfFazUsjgV7D9oNKrEb","title":"View Device Information","pathname":"/cortex-xdr-agent-ios-guide/7.9/view-device-and-app-status-and-information/view-device-information","siteSpaceId":"sitesp_vIN0w","description":"Learn how to view Cortex XDR agent app for iOS device endpoint information.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"sWCelETr4ThMhi1HDAxz","title":"View Connection","pathname":"/cortex-xdr-agent-ios-guide/7.9/view-device-and-app-status-and-information/view-connection","siteSpaceId":"sitesp_vIN0w","description":"View general and connection information for your Cortex XDR agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"View Device and App Status and Information"}]},{"id":"Oazon9LvTDeqthwwWWEH","title":"Troubleshooting","pathname":"/cortex-xdr-agent-ios-guide/7.9/troubleshooting","siteSpaceId":"sitesp_vIN0w","description":"Learn about troubleshooting issues with the Cortex XDR Agent app for iOS.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"}]},{"id":"w96GnmrqXjbxEOrmVbPM","title":"Send Logs","pathname":"/cortex-xdr-agent-ios-guide/7.9/troubleshooting/send-logs","siteSpaceId":"sitesp_vIN0w","description":"Learn how to send logs from the Cortex XDR Agent app for iOS to Palo Alto Networks for analysis.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent iOS Guides","icon":"user-robot"},{"label":"Troubleshooting"}]},{"id":"9wOgTR6l49g7WNSLhK6k","title":"Cortex XDR Agent Android Guides","pathname":"/cortex-xdr-agent-android-guide","siteSpaceId":"sitesp_ChKtG","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"222126a2886c74ef02d3c490e6b9412bc6af4451","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.3","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"53295c08cdec03f3bd121dc56d0f3c48534e5736","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/9.3/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"f60882ffc50486cd83a0665337e301107ecd8dba","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/9.3/android-requirements","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"f3bf9723da254d2739efa850414b43b5de344183","title":"Install the Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.3/install-the-agent-app-for-android","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"5b20a9bc8f3039122e381ee117e1c0f7c221422c","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/9.3/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"e86f61a1827e1ac3d02b813910e37b9b63c459c1","title":"Deploy Cortex XDR Agent App for Android with zero-touch installation","pathname":"/cortex-xdr-agent-android-guide/9.3/deploy-cortex-xdr-agent-app-for-android-using-an-mdm/deploy-cortex-xdr-agent-app-for-android-with-zero-touch-installation","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Deploy Cortex XDR Agent App for Android Using an MDM"}]},{"id":"7db7b9f333ce4b39ee32dbd0dff986c128be9ce1","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.3/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"f5f5dbea35541ac6fbd2fa9168dd0833f955e6e4","title":"Configure and View Settings for the Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.3/configure-and-view-settings-for-the-agent-app-for-android","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"dd6340f1b721829d8f16012cf9d34ba4850b6d59","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/9.3/troubleshooting","siteSpaceId":"sitesp_6Pu9a","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"gO9FxD8ADrLQLrsOm8mM","title":"Create a Cortex XDR agent tag","pathname":"/cortex-xdr-agent-android-guide/9.3/create-a-cortex-xdr-agent-tag","siteSpaceId":"sitesp_6Pu9a","description":"Create tags to identify and manage groups of Cortex XDR agents.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"222126a2886c74ef02d3c490e6b9412bc6af4451","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.2","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"53295c08cdec03f3bd121dc56d0f3c48534e5736","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/9.2/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"f60882ffc50486cd83a0665337e301107ecd8dba","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/9.2/android-requirements","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"f3bf9723da254d2739efa850414b43b5de344183","title":"Install the Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.2/install-the-agent-app-for-android","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"5b20a9bc8f3039122e381ee117e1c0f7c221422c","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/9.2/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"e86f61a1827e1ac3d02b813910e37b9b63c459c1","title":"Deploy Cortex XDR Agent App for Android with zero-touch installation","pathname":"/cortex-xdr-agent-android-guide/9.2/deploy-cortex-xdr-agent-app-for-android-using-an-mdm/deploy-cortex-xdr-agent-app-for-android-with-zero-touch-installation","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Deploy Cortex XDR Agent App for Android Using an MDM"}]},{"id":"7db7b9f333ce4b39ee32dbd0dff986c128be9ce1","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.2/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"f5f5dbea35541ac6fbd2fa9168dd0833f955e6e4","title":"Configure and View Settings for the Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.2/configure-and-view-settings-for-the-agent-app-for-android","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"dd6340f1b721829d8f16012cf9d34ba4850b6d59","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/9.2/troubleshooting","siteSpaceId":"sitesp_IoPAj","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"nSfWtTfUpy2xsftphjeY","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.1","siteSpaceId":"sitesp_kF4ZB","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"FQrJ06mglc1TmU6TMfkd","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/9.1/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_kF4ZB","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"UpsQbNg02dFQqrRCrpT2","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/9.1/android-requirements","siteSpaceId":"sitesp_kF4ZB","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"S56XeTaxnLDN9LZBhCo7","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.1/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_kF4ZB","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"kaKRLVxt0Zo7xB1xRmXy","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/9.1/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_kF4ZB","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"0CwPrDhdlQ3Qiff7ZzHy","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.1/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_kF4ZB","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"g1OtyzHp5GVbYLAz9GNw","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.1/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_kF4ZB","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"9h1aOCdhnA6Les31QDpl","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/9.1/troubleshooting","siteSpaceId":"sitesp_kF4ZB","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"PXnKEytE1SAfO7dtyhqA","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.0","siteSpaceId":"sitesp_yil9L","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"f7OXMPcmDLYJeXf4Ogly","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/9.0/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_yil9L","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"Tbdrv3iKd9hHU2KXCeOq","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/9.0/android-requirements","siteSpaceId":"sitesp_yil9L","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"PwDUfNCuzaiaqdjU0kG9","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.0/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_yil9L","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"eAToywiGh5kWcx9BhR1a","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/9.0/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_yil9L","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"a5x7HVNCiVcT4kEWNnO8","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.0/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_yil9L","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"xCHn11BEf6GehGRn6mxg","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/9.0/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_yil9L","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"TadreaaRlFq6Z0iJapiG","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/9.0/troubleshooting","siteSpaceId":"sitesp_yil9L","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"BZX2PJUxeaec2gBLyLbn","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.9","siteSpaceId":"sitesp_ZNVUl","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"aaHWWcCHUWm79SqsreeB","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.9/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_ZNVUl","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"uXrS5GRbKcyZlr01APYO","title":"Features Introduced in Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.9/release-notes-for-cortex-xdr-app-for-android/features-introduced-in-cortex-xdr-app-for-android","siteSpaceId":"sitesp_ZNVUl","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Release Notes for Cortex XDR App for Android"}]},{"id":"RTHmIjFi8UOnrocQtEZQ","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.9/android-requirements","siteSpaceId":"sitesp_ZNVUl","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"HYcShxKkYT0QXgjIb0Ew","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.9/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_ZNVUl","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"Xbe8KpJ54nRXvw6GVPfr","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.9/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_ZNVUl","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"twW1Qknxp1QYI9EbxFOj","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.9/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_ZNVUl","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"gE1SiSeUBPYC5VxHGK1k","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.9/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_ZNVUl","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"szaQDQ9G7MB5TFbvBYSL","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.9/troubleshooting","siteSpaceId":"sitesp_ZNVUl","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"PXXthZDLaDNRTuAK34mF","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.8","siteSpaceId":"sitesp_QDK4R","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"5557mYICPMP2pZzQRj8T","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.8/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_QDK4R","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"7yeO1a7SOvgazyJc3Pnu","title":"Features Introduced in Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.8/release-notes-for-cortex-xdr-app-for-android/features-introduced-in-cortex-xdr-app-for-android","siteSpaceId":"sitesp_QDK4R","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Release Notes for Cortex XDR App for Android"}]},{"id":"DrQxbPKHydlI2vTLbHSg","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.8/android-requirements","siteSpaceId":"sitesp_QDK4R","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"VmPU91x9PIEqPh31904M","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.8/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_QDK4R","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"Tc0ioY3YiLwkgBovmkEo","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.8/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_QDK4R","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"i3HldwhUd0E3HVXN0SkT","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.8/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_QDK4R","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"5uZatZUHUBCSSEqYnuhp","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.8/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_QDK4R","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"kVIvY3e34rb5LfVbdxfs","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.8/troubleshooting","siteSpaceId":"sitesp_QDK4R","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"7ndGff8s0yeLw5RMyFkk","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.7","siteSpaceId":"sitesp_d7R6l","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"5hPn97nrKuuZpDHP5vDN","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.7/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_d7R6l","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"tP1NzeKOPFtFbPhNKHpR","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.7/android-requirements","siteSpaceId":"sitesp_d7R6l","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"xGuSz1FBIXOT0p4lbLjG","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.7/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_d7R6l","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"fubXnPcMBXEVyceqbnHD","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.7/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_d7R6l","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"YxxxZ9splOFpPDzWXB3s","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.7/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_d7R6l","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"sTz80YH1BwKCQfrvwK7N","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.7/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_d7R6l","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"AVs7l1ioQN1E8rHfTvhc","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.7/troubleshooting","siteSpaceId":"sitesp_d7R6l","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"NlFXUN8bl3zHxfRkIOhO","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.6","siteSpaceId":"sitesp_r5JdS","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"i3sFbVEnPhuslJkCV3Pk","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.6/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_r5JdS","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"d5r8zaJyyD8ILiKA10jo","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.6/android-requirements","siteSpaceId":"sitesp_r5JdS","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"yNq4UpnRKDbe8y9WDHMf","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.6/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_r5JdS","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"aGitXtRpRoGLIwDSmjMS","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.6/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_r5JdS","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"q1UJUKcBV1JeeaPx5A9L","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.6/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_r5JdS","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"8ZtWurhF7uPt3JQK5gq3","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.6/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_r5JdS","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"ozlPa6ScvxIbJIZMldmu","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.6/troubleshooting","siteSpaceId":"sitesp_r5JdS","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"6p8tKzLHf0nnx6h1ArJG","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.5","siteSpaceId":"sitesp_hu07E","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"iPDQ9CULEaFwEmAz09Mb","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.5/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_hu07E","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"LcuDKp0FASBIMbBOrdpi","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.5/android-requirements","siteSpaceId":"sitesp_hu07E","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"8jwP2ZnhKWKlw48qLMNK","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.5/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_hu07E","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"mxSL8p7IWwytHsyb093K","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.5/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_hu07E","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"3PTl0QMrXiFdiLfyq3D0","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.5/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_hu07E","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"KVC5wZ6ACWHSjGkMt0GM","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.5/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_hu07E","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"BrXD7xeCoATTiQmNzJhd","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.5/troubleshooting","siteSpaceId":"sitesp_hu07E","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"Hn8SxnK4sMl3miQOCgvp","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.4","siteSpaceId":"sitesp_WSTiU","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"Cuwi0vWtJXceb57D6GH9","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.4/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_WSTiU","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"hCg9T9s670EXIJbs3aWE","title":"Features and Enhancements Introduced in Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.4/release-notes-for-cortex-xdr-app-for-android/features-and-enhancements-introduced-in-cortex-xdr-app-for-android","siteSpaceId":"sitesp_WSTiU","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Release Notes for Cortex XDR App for Android"}]},{"id":"wJEI6i4yVG6lcf1zCJyi","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.4/android-requirements","siteSpaceId":"sitesp_WSTiU","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"2RSgQqVxG20iaZnpjJPi","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.4/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_WSTiU","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"QZwEQlybuJVvwJrxRnqG","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.4/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_WSTiU","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"0k9fhlhnHfD4eMzaCway","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.4/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_WSTiU","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"W6JlLk0MoWYggV2iLZ7H","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.4/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_WSTiU","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"0MNZ4h43EsE1HRiPa8IN","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.4/troubleshooting","siteSpaceId":"sitesp_WSTiU","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"NspW565SmPRt700m7ca6","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.3","siteSpaceId":"sitesp_o9eDv","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"vVS3p9gcsNUy0rm1mjUR","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.3/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_o9eDv","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"QxUhf1ek1ag213uVkIpH","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.3/android-requirements","siteSpaceId":"sitesp_o9eDv","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"WnJd287P1yBqZs7j2UBa","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.3/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_o9eDv","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"7lWHMvuSmcU2tZPeDKBK","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.3/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_o9eDv","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"qNeOlY0jq9va4vLhzU7U","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.3/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_o9eDv","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"as24YR4HZjHQJkvWrxvR","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.3/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_o9eDv","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"BnKI1sYFZpR676chXjdy","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.3/troubleshooting","siteSpaceId":"sitesp_o9eDv","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"a2hvbCzXmvAxbMrvI8U0","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.2","siteSpaceId":"sitesp_KqsrV","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"ST81kFL6AWR0jmyC5fqe","title":"Release Notes for Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.2/release-notes-for-cortex-xdr-app-for-android","siteSpaceId":"sitesp_KqsrV","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"uNL1RlKF9iH6vsJDCyBe","title":"Features and Enhancements Introduced in Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.2/release-notes-for-cortex-xdr-app-for-android/features-and-enhancements-introduced-in-cortex-xdr-app-for-android","siteSpaceId":"sitesp_KqsrV","description":"Release notes for Cortex XDR agent app for this Android release.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Release Notes for Cortex XDR App for Android"}]},{"id":"68RuZpK8M1A3FXRFWrlw","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.2/android-requirements","siteSpaceId":"sitesp_KqsrV","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"b1Zipw68fRNLDw7CE10I","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.2/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_KqsrV","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"IQSlkMFtqMfU2S9EDjPs","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.2/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_KqsrV","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"khh2M9lFSutXlJ5FAg8B","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.2/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_KqsrV","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"913QjDjMna1HttzUByPG","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.2/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_KqsrV","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"rN4IAfL3cdBiqwVnA5pC","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.2/troubleshooting","siteSpaceId":"sitesp_KqsrV","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"eB9CK7tWmARGCdQ0TgvU","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.1","siteSpaceId":"sitesp_xH5hl","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"RaTnfIGyHB3EDilqRBJy","title":"Release Notes","pathname":"/cortex-xdr-agent-android-guide/8.1/release-notes","siteSpaceId":"sitesp_xH5hl","description":"Release notes for Cortex XDR agent app for Android releases.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"Q3ZVB507Rhmw81n9zHij","title":"Features Introduced in Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.1/release-notes/features-introduced-in-cortex-xdr-app-for-android","siteSpaceId":"sitesp_xH5hl","description":"Release notes for Cortex XDR agent app for Android releases.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Release Notes"}]},{"id":"92UHHWeTTNV8ZCSWWVLS","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.1/android-requirements","siteSpaceId":"sitesp_xH5hl","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"jsgfofoScdUDFFiDXRdX","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.1/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_xH5hl","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"3rA7nqgBrUEzhd4DdyL5","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.1/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_xH5hl","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE, to deploy Cortex XDR agent on your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"9EUb1Yv8UNId3XheeeQD","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.1/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_xH5hl","description":"Learn about using Cortex XDR agent app for Android after you have installed it.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"xNgpJg25h2wrHLbm0OvV","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.1/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_xH5hl","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"8FYKoXhh4klWevFEMoVP","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.1/troubleshooting","siteSpaceId":"sitesp_xH5hl","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"1RGh6LprAPdw4O6NnB1N","title":"Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.0","siteSpaceId":"sitesp_SldGJ","description":"Learn about the Cortex XDR agent app for Android-based endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"JLegVTjEL6dk1kJEZWD1","title":"Release Notes","pathname":"/cortex-xdr-agent-android-guide/8.0/release-notes","siteSpaceId":"sitesp_SldGJ","description":"Release notes for Cortex XDR agent app for Android releases.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"k4EdLCaoNZf7YSPOvhiA","title":"Features Introduced in Cortex XDR App for Android","pathname":"/cortex-xdr-agent-android-guide/8.0/release-notes/features-introduced-in-cortex-xdr-app-for-android","siteSpaceId":"sitesp_SldGJ","description":"Release notes for Cortex XDR agent app for Android releases.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"},{"label":"Release Notes"}]},{"id":"SDZNZXJaqa4h4X6gwuAi","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/8.0/android-requirements","siteSpaceId":"sitesp_SldGJ","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"iWoWrzOZWb6NZSeoxNxl","title":"Install the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.0/install-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_SldGJ","description":"Learn about the tasks required prior to and during installation of the Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"k5V87SjdBXcVYQWsCcNe","title":"Deploy Cortex XDR Agent App for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/8.0/deploy-cortex-xdr-agent-app-for-android-using-an-mdm","siteSpaceId":"sitesp_SldGJ","description":"For ease of deployment, you can use a mobile device management (MDM) system such as Workspace ONE (formerly AirWatch), to deploy the Cortex XDR agent app to your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"GXQp8UG181t3ds7D4AA2","title":"Use the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.0/use-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_SldGJ","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"xEFRCxS67y1jqZDp3htV","title":"Configure and View Settings for the Cortex XDR Agent App for Android","pathname":"/cortex-xdr-agent-android-guide/8.0/configure-and-view-settings-for-the-cortex-xdr-agent-app-for-android","siteSpaceId":"sitesp_SldGJ","description":"Learn how to configure and view device settings.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"jMcCPygUuO0O8tStHFC2","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/8.0/troubleshooting","siteSpaceId":"sitesp_SldGJ","description":"Learn how to troubleshoot Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"PkolCOcLqDuXkNK2D83J","title":"Cortex XDR Agent App 7.1.3 for Android","pathname":"/cortex-xdr-agent-android-guide/7.1.3","siteSpaceId":"sitesp_Lgk2f","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"ao68HZhwALy479tM3mgo","title":"Release Notes","pathname":"/cortex-xdr-agent-android-guide/7.1.3/release-notes","siteSpaceId":"sitesp_Lgk2f","description":"Release notes for Cortex XDR app 7.1 for Android releases.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"eXrQriXh0gCX82hXe4FG","title":"Android Requirements","pathname":"/cortex-xdr-agent-android-guide/7.1.3/android-requirements","siteSpaceId":"sitesp_Lgk2f","description":"Learn about requirements for installing Cortex XDR agent app for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"e1cxkZDIjeXARiAhoXGm","title":"Install Cortex XDR Agent App 7.1 for Android","pathname":"/cortex-xdr-agent-android-guide/7.1.3/install-cortex-xdr-agent-app-7.1-for-android","siteSpaceId":"sitesp_Lgk2f","description":"Use this workflow to install Cortex XDR 7.1 for Android.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"54H9JjEMviOh8RFE21zH","title":"Deploy Cortex XDR Agent App 7.1 for Android Using an MDM","pathname":"/cortex-xdr-agent-android-guide/7.1.3/deploy-cortex-xdr-agent-app-7.1-for-android-using-an-mdm","siteSpaceId":"sitesp_Lgk2f","description":"For ease of deployment, you can use a mobile device management (MDM) system such as AirWatch, to deploy the Cortex XDR app to your managed Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"OJoKWYxL0Vf7cDEuwR8p","title":"Use the Cortex XDR Agent App 7.1 for Android","pathname":"/cortex-xdr-agent-android-guide/7.1.3/use-the-cortex-xdr-agent-app-7.1-for-android","siteSpaceId":"sitesp_Lgk2f","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"UNdyEQxUlaJRFRybQpaw","title":"Troubleshooting","pathname":"/cortex-xdr-agent-android-guide/7.1.3/troubleshooting","siteSpaceId":"sitesp_Lgk2f","description":"","breadcrumbs":[{"label":"Cortex XDR Agent","icon":"user-hat-tie"},{"label":"Cortex XDR Agent Android Guides","icon":"user-robot"}]},{"id":"cd5hIMf9SGZoMUpjOCF9","title":"Navigate the Cortex XSOAR 8 SaaS docs","pathname":"/cortex-xsoar-8-saas","siteSpaceId":"sitesp_5uP8u","description":"Start here for a visual overview of the main Cortex XSOAR 8 SaaS documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"Ks2GGxnzRSXwwXju7DwO","title":"Get Started with Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/learn-about-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"View information about how to get started with Cortex XSOAR 8 SaaS, such as service limits, data retention policy, and licenses.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"mT9RQQJYXmlTkufThpQJ","title":"What is Cortex XSOAR?","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/what-is-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Learn about Cortex XSOAR 8 SaaS features.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"bxdYzt0hnPUIO2OEMsu0","title":"Cortex XSOAR architecture","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/cortex-xsoar-architecture","siteSpaceId":"sitesp_5uP8u","description":"Describes the Cortex XSOAR 8 SaaS architecture.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"6Fkb3NH9nOlfIF1JSWa8","title":"Cortex XSOAR use cases","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/cortex-xsoar-use-cases","siteSpaceId":"sitesp_5uP8u","description":"Recommended ways to automate your SOC in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"03b74HJng88g8doUvTJJ","title":"Understand Cortex XSOAR licenses","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/understand-cortex-xsoar-licenses","siteSpaceId":"sitesp_5uP8u","description":"The Cortex XSOAR 8 SaaS license is downloaded from Cortex Gateway and determines which components users can use and how many users can access the tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"4TdyMrzct8dqkzOd1FeG","title":"Roles and responsibilities","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/roles-and-responsibilities","siteSpaceId":"sitesp_5uP8u","description":"Learn about the typical core roles that make up a SOC team.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"jH3riCsUdOPFR3UM4qoK","title":"Cortex XSOAR service limits","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/cortex-xsoar-service-limits","siteSpaceId":"sitesp_5uP8u","description":"Describes the service limits for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"pXNJKm32wD9ZCJ2kvkmv","title":"Data retention policy","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/data-retention-policy","siteSpaceId":"sitesp_5uP8u","description":"Cortex XSOAR 8 SaaS retention policy and enforcement","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"G9lq4NPeQ2sy88SzdKZv","title":"Cortex service-level agreement","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/cortex-service-level-agreement","siteSpaceId":"sitesp_5uP8u","description":"Describes the SLA agreement for all Cortex products including Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"2h6TGywWeWnUfQdPtyYi","title":"Supported ciphers","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/supported-ciphers","siteSpaceId":"sitesp_5uP8u","description":"Supported TLS 1.2 and TLS 1.3 cipher suites for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"ilfb6kaVpJk0r8y3g07S","title":"Supported web browsers","pathname":"/cortex-xsoar-8-saas/learn-about-cortex-xsoar/supported-web-browsers","siteSpaceId":"sitesp_5uP8u","description":"Supported browser versions for Cortex XSOAR 8 SaaS and HTTP/2 performance requirements.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"l2da9Ciw6wcGbywGu1Ae","title":"How to onboard XSOAR","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Follow the steps to successfully onboard and configure Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"jcRVBYQh3Cec6wSYZI8M","title":"Plan and prepare your deployment","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/plan-and-prepare-your-deployment","siteSpaceId":"sitesp_5uP8u","description":"Before deploying your tenant, consider your use case and what you need to optimize your tenant for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"6YmJpcFW1LQu6m2Kur8x","title":"Deployment Steps","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps","siteSpaceId":"sitesp_5uP8u","description":"Review the plan and prepare considerations, and then follow the steps in the onboarding checklist to successfully deploy and onboard Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"eLFo1sDSi7Oe0E2g0iOX","title":"Onboarding checklist","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/onboarding-checklist","siteSpaceId":"sitesp_5uP8u","description":"Activate, provision, grant access, and configure Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"}]},{"id":"nusIR2kKyveJyG1MFaDj","title":"Step 1: Activate Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-1-activate-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Learn how to activate your Cortex XSOAR 8 SaaS tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"}]},{"id":"7hShluWXP9m3K1KJqutM","title":"Supported host regions","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-1-activate-cortex-xsoar/supported-host-regions","siteSpaceId":"sitesp_5uP8u","description":"View Cortex XSOAR 8 SaaS host regions and data residency locations for stored data.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"},{"label":"Step 1: Activate Cortex XSOAR"}]},{"id":"eDBacQALhNvA64lC6JkO","title":"Enable access to Palo Alto Networks resources","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-1-activate-cortex-xsoar/enable-access-to-palo-alto-networks-resources","siteSpaceId":"sitesp_5uP8u","description":"Enable network access to Cortex XSOAR 8 SaaS resources for your environment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"},{"label":"Step 1: Activate Cortex XSOAR"}]},{"id":"OWkRbpzr3MqBaQ0JAgAr","title":"Step 2. Set up an engine","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-2.-set-up-an-engine","siteSpaceId":"sitesp_5uP8u","description":"Set up a Cortex XSOAR 8 SaaS engine on a remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"}]},{"id":"LkBBlkiHCFoVPdVt8Tno","title":"Step 3. Set up a remote repository","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-3.-set-up-a-remote-repository","siteSpaceId":"sitesp_5uP8u","description":"Set up Cortex XSOAR 8 SaaS content management for development and production environments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"}]},{"id":"K3uYUzCcbNfVZFXAwGBv","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_5uP8u","description":"Set up Cortex XSOAR 8 SaaS roles, user groups, authentication, and users.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"}]},{"id":"8D9EB2KfFEXxz1JLH4ZA","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content","siteSpaceId":"sitesp_5uP8u","description":"Learn what content includes in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"}]},{"id":"2YT6IUoUdpIKRLmMAg0i","title":"Install content packs","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/install-content-packs","siteSpaceId":"sitesp_5uP8u","description":"Install a content pack in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"},{"label":"Step 5. Install and configure content"}]},{"id":"vMiyWVyFpeKzupKnRBhD","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_5uP8u","description":"Use the Cortex XSOAR 8 SaaS Deployment Wizard to adopt your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment Steps"},{"label":"Step 5. Install and configure content"}]},{"id":"H7duNt6X0uMhMBhEg5xc","title":"Post deployment","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/post-deployment","siteSpaceId":"sitesp_5uP8u","description":"Configure optional Cortex XSOAR 8 SaaS communication and system settings after onboarding.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"7mG4U418P5pOit6FbsEm","title":"User communication","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/post-deployment/user-communication","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS notifications and system emails.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"}]},{"id":"Fe8obmnBPUrL37eEMFas","title":"Configure notifications in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/post-deployment/user-communication/configure-notifications-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Configure email and message notifications in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"AWmIsj0Ywfj6srYmvDZk","title":"Customize system emails","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/post-deployment/user-communication/customize-system-emails","siteSpaceId":"sitesp_5uP8u","description":"Customize system email subjects and content in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"Lxm0iWWyvwWFrgPNFCWE","title":"Configure system settings","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/post-deployment/configure-system-settings","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS security and server settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"}]},{"id":"Hzgoeh9I1gDD3eYoQ2ei","title":"Configure security settings","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/post-deployment/configure-system-settings/configure-security-settings","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS session, access, and user security settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"Configure system settings"}]},{"id":"NP1Bu0eILtZ6HNgVzjVj","title":"Configure server settings","pathname":"/cortex-xsoar-8-saas/onboard-cortex-xsoar/post-deployment/configure-system-settings/configure-server-settings","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS server settings and user preferences.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"Configure system settings"}]},{"id":"DJmAhqDvycpqw1LpOxJg","title":"Engines","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines","siteSpaceId":"sitesp_5uP8u","description":"Install, manage, configure, and troubleshoot Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"Ll6BKrhnRD32s0eHIr3j","title":"What is an engine?","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/what-is-an-engine","siteSpaceId":"sitesp_5uP8u","description":"Learn how an engine connects Cortex XSOAR 8 SaaS to remote resources.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"a2RjYYERJLFB7iCOvIwe","title":"Engine requirements","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/engine-requirements","siteSpaceId":"sitesp_5uP8u","description":"Review hardware, operating system, and URL requirements for Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"E5wjzNHqseJw44OLbVjt","title":"Install an engine","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine","siteSpaceId":"sitesp_5uP8u","description":"Install, deploy, and configure Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"wtDXCTP5vuQkSNVX81iE","title":"Docker","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker","siteSpaceId":"sitesp_5uP8u","description":"Install, configure, secure, and troubleshoot Docker for Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"qUJGirFVoNfyeafOlnTK","title":"Install Docker","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_5uP8u","description":"Install Docker for a Cortex XSOAR 8 SaaS engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"VE9XTu5wDPcCbS63ZzrW","title":"Install Docker distribution for Red Hat on an engine server","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker-distribution-for-red-hat-on-an-engine-server","siteSpaceId":"sitesp_5uP8u","description":"Install Docker on a Red Hat Cortex XSOAR 8 SaaS engine server.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"Mi6jBz7H4OQb9HXotYVB","title":"Docker image security","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_5uP8u","description":"Secure Docker images used by Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"4qnD23zX7okoVqUcxPVz","title":"Use the Cortex XSOAR Container Registry","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_5uP8u","description":"Use the Cortex XSOAR 8 SaaS Container Registry for engine images.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"oVBgNeoHeW32BtjIeiAW","title":"Docker FAQs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_5uP8u","description":"Find Docker answers for Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"2cIYaNJ4AAhzPN9MNmHR","title":"Troubleshoot Docker issues","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot Docker issues on Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"XhMisPJYRbcjMIxDLsPy","title":"Configure Docker pull rate limit","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_5uP8u","description":"Configure Docker pull rate limits for Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"4WKG3WPzDYioDQpybIF0","title":"Change the Docker installation folder","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_5uP8u","description":"Change the Docker installation folder on a Cortex XSOAR 8 SaaS engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"MPwZejpNN4EHcn7Mz9IO","title":"Configure Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_5uP8u","description":"Configure Docker integrations to trust custom certificates in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"5niHS331ueWd5FmapxCh","title":"Docker hardening guide","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_5uP8u","description":"Harden Docker for Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"W8kFCp0mvaJ3xUEx1ncO","title":"Podman","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/podman","siteSpaceId":"sitesp_5uP8u","description":"Run Podman containers instead of Docker for Cortex XSOAR 8 SaaS engines on RHEL 8.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"0I9l5qMR8zxl7SCIqymx","title":"Change container storage directory","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/podman/change-container-storage-directory","siteSpaceId":"sitesp_5uP8u","description":"Change the container storage directory for a Cortex XSOAR 8 SaaS engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"g14STr7YRiVBTQKDxS04","title":"Install Podman","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_5uP8u","description":"Install Podman for a Cortex XSOAR 8 SaaS engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"8rwBeBSimyZzvuJ1Q85X","title":"Migrate From Docker to Podman","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_5uP8u","description":"Migrate a Cortex XSOAR 8 SaaS engine from Docker to Podman.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"O3Q5VkcgIbNku0c9xbfa","title":"Troubleshoot Podman","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot Podman on Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"UPvzuIzmH9VZrqkA35PZ","title":"Manage engines","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS engines and load-balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"9Q4PlAhiGWMtSWQCDLhK","title":"Upgrade an engine","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/upgrade-an-engine","siteSpaceId":"sitesp_5uP8u","description":"Upgrade a Cortex XSOAR 8 SaaS engine on a remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"KoZ69Zzx9laI40FUIYZc","title":"Remove an engine","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_5uP8u","description":"Remove a Cortex XSOAR 8 SaaS engine using the operating system command.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"Rc4FXWwfAnCoNDKZbL6L","title":"Configure engines","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS engines through d1.conf or the UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"1FNpRVucjnt1mNp2quao","title":"Configure the engine to use a web proxy","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_5uP8u","description":"Configure a Cortex XSOAR 8 SaaS engine to use a web proxy.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"RCeeJhVPL2svCdIm9qU4","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_5uP8u","description":"Configure a Cortex XSOAR 8 SaaS engine to call the server without a proxy.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"BMDg3MzWxAW5IClDSJ88","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_5uP8u","description":"Use NGINX as a reverse proxy for a Cortex XSOAR 8 SaaS engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"},{"label":"Configure the engine to call the server without using a proxy"}]},{"id":"XIx7ID1SEF33UcCBZMJ1","title":"Configure an engine to use custom certificates","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_5uP8u","description":"Configure custom CA certificates for Cortex XSOAR 8 SaaS engine communication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"YRWWXyzpGLz3aHmZSpdW","title":"Use an engine in an integration","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_5uP8u","description":"Use Cortex XSOAR 8 SaaS engines to fetch alerts and run integration commands.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"Bf3W8NaKh572g4aW8S7Z","title":"Run a script using an engine","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_5uP8u","description":"Run scripts on Cortex XSOAR 8 SaaS engines or load-balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"o9frM5QIUsvaFXTmGCKl","title":"Troubleshoot engines","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/troubleshoot-engines","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot Cortex XSOAR 8 SaaS engines through logs and errors.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"peOkchLPiJIZKk078jel","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot integrations running on Cortex XSOAR 8 SaaS engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"2EGCKmfLOYaSBG3LB8En","title":"Remote Repository Management","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management","siteSpaceId":"sitesp_5uP8u","description":"Configure and manage remote repositories for Cortex XSOAR 8 SaaS dev/prod tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"PeXFG9a9D6mtHK74KDlc","title":"Content management in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Learn how remote repositories work in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"RMgrfpfrWKi5KDGCZH0z","title":"Set up a remote repository","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management/set-up-a-remote-repository","siteSpaceId":"sitesp_5uP8u","description":"Set up a remote repository for Cortex XSOAR 8 SaaS development and production tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"8XZeAFYptViDIgktyI3N","title":"Set up a built-in remote repository","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management/set-up-a-remote-repository/set-up-a-built-in-remote-repository","siteSpaceId":"sitesp_5uP8u","description":"Set up the built-in repository for Cortex XSOAR 8 SaaS production and development tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"},{"label":"Set up a remote repository"}]},{"id":"zggADRzrlCWZCuEUF1We","title":"Set up a private remote repository","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management/set-up-a-remote-repository/set-up-a-private-remote-repository","siteSpaceId":"sitesp_5uP8u","description":"Set up a private remote repository for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"},{"label":"Set up a remote repository"}]},{"id":"TGRVlKNqxS5K9Df3rI5k","title":"Push content from a development tenant","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management/push-content-from-a-development-tenant","siteSpaceId":"sitesp_5uP8u","description":"Push content from a Cortex XSOAR 8 SaaS development tenant to a remote repository.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"qG22aR6fTsg2jcrWJhlr","title":"Install content on a production tenant","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management/install-content-on-a-production-tenant","siteSpaceId":"sitesp_5uP8u","description":"Install remote repository content on a Cortex XSOAR 8 SaaS production tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"CSifk8PwMoqwBm05l6V0","title":"Remote repository troubleshooting","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot remote repository content management in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"X8JKVZrVs7nqK5EwebWc","title":"Users and Roles Management","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS roles, users, groups, and authentication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"rOwH0hEVNXVSU7NNY8D0","title":"Users and roles in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/users-and-roles-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS roles, user groups, authentication, and users.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"uvubNOWynEmw6M0OHTC8","title":"Roles management","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/roles-management","siteSpaceId":"sitesp_5uP8u","description":"Configure roles in Cortex XSOAR 8 SaaS tenants and Cortex Gateway.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"DTaSjV90OFScwlYEoAiz","title":"Role-based permissions in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/roles-management/role-based-permissions-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Review role-based permissions available in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"Nf0Ax41SG9Cuaff0O0no","title":"Manage roles in Cortex Gateway","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/roles-management/manage-roles-in-cortex-gateway","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex Gateway roles for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"1u1DzXM4sTJNL4sEjaMf","title":"Manage roles in the Cortex XSOAR tenant","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/roles-management/manage-roles-in-the-cortex-xsoar-tenant","siteSpaceId":"sitesp_5uP8u","description":"Manage roles in a Cortex XSOAR 8 SaaS tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"HCsllgvNW0NsMjo4zpBd","title":"User group management","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/user-group-management","siteSpaceId":"sitesp_5uP8u","description":"Create Cortex XSOAR 8 SaaS user groups and assign roles and users.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"wqrkwJnuzJQ6WQVuDHw2","title":"Set up authentication","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/set-up-authentication","siteSpaceId":"sitesp_5uP8u","description":"Authenticate Cortex XSOAR 8 SaaS users using SAML 2.0 or Cortex Gateway.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"Akz8WsuZRleJDSm9gRoL","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_5uP8u","description":"Authenticate Cortex XSOAR 8 SaaS users through the Customer Support Portal.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"5q7yxzKM7Apdbw4c3ZMG","title":"Authenticate users using SSO","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_5uP8u","description":"Set up SSO authentication for a Cortex XSOAR 8 SaaS tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"vyrdyuKBCoONA4jicdrW","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_5uP8u","description":"Set up Okta SAML 2.0 authentication for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"Soeudev7IHBG54RZhXsy","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_5uP8u","description":"Set up Microsoft Entra ID SAML 2.0 authentication for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"R0YNw2T4RXzQuG55vZ6x","title":"User management","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/user-management","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS users in Cortex Gateway or the tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"lEhbNdOVVRXp7YAZxAmZ","title":"Manage users in Cortex Gateway","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/user-management/manage-users-in-cortex-gateway","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex Gateway users for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"User management"}]},{"id":"JbNyhY0m8E651UVqALqv","title":"Manage users in the Cortex XSOAR tenant","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/users-and-roles-management/user-management/manage-users-in-the-cortex-xsoar-tenant","siteSpaceId":"sitesp_5uP8u","description":"View and edit users and roles in a Cortex XSOAR 8 SaaS tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"User management"}]},{"id":"bM5BVO6pxuFcj38RB3zC","title":"Marketplace","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace","siteSpaceId":"sitesp_5uP8u","description":"Download content packs for your Cortex XSOAR 8 SaaS use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"1djyC5RiHZwwcEanGkyH","title":"Cortex Marketplace","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/cortex-marketplace","siteSpaceId":"sitesp_5uP8u","description":"Search Cortex Marketplace content for Cortex XSOAR 8 SaaS use cases.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"HG7s7XWvYRuHkvocthF9","title":"Content packs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-packs","siteSpaceId":"sitesp_5uP8u","description":"Download Cortex XSOAR 8 SaaS content packs from Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"G9QYwlDWgQQeAeQ0JqFC","title":"Content Pack Support Types","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-pack-support-types","siteSpaceId":"sitesp_5uP8u","description":"Review Cortex XSOAR 8 SaaS content pack support types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"1ppjVye785tK36sTnEue","title":"Manage content packs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/manage-content-packs","siteSpaceId":"sitesp_5uP8u","description":"Install, delete, update, and revert Cortex XSOAR 8 SaaS content packs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"YLvE6MPULSLd1iw9KOfO","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_5uP8u","description":"Use the Deployment Wizard to adopt a Cortex XSOAR 8 SaaS use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"p1IAw9gcmeDaWWXSeoIq","title":"Marketplace FAQs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_5uP8u","description":"Find answers about Cortex XSOAR 8 SaaS Marketplace content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"CO6cIUHIT7K1GCOJLAUU","title":"Content pack update notifications","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_5uP8u","description":"Enable update notifications for Cortex XSOAR 8 SaaS content packs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"F3hwJ9yU8gR3lgx6UJH5","title":"Customize content pack notifications","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_5uP8u","description":"Customize Cortex XSOAR 8 SaaS content pack update notifications.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack update notifications"}]},{"id":"eGotfMe1XvtIBgWFuNwE","title":"Content changes when upgrading Cortex XSOAR versions","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-changes-when-upgrading-cortex-xsoar-versions","siteSpaceId":"sitesp_5uP8u","description":"Review content changes when upgrading Cortex XSOAR 8 SaaS versions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"H7akZsoTKrdtPPkaihbm","title":"Content pack contributions","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_5uP8u","description":"Create Cortex XSOAR 8 SaaS content packs for Marketplace submission.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"iI8OebHwJuh9nOw2csBY","title":"Create a content pack","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_5uP8u","description":"Create and submit a Cortex XSOAR 8 SaaS content pack to Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"3At1jgA0YpUN4sOacKE8","title":"Resubmit a content pack","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_5uP8u","description":"Resubmit an updated Cortex XSOAR 8 SaaS content pack from the UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"h3DgbOHllGrhgcJjJlBH","title":"Integrations","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations","siteSpaceId":"sitesp_5uP8u","description":"Configure and troubleshoot integrations in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"sM9ILwc3hf251olMn511","title":"Integration use cases","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/integration-use-cases","siteSpaceId":"sitesp_5uP8u","description":"Explore integration use cases for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"1pwMOCwukVc61OGK1Doh","title":"Configure integrations","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/configure-integrations","siteSpaceId":"sitesp_5uP8u","description":"Configure or create an integration for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"N2FGCBoGmFADyXaotXk4","title":"Change the Docker image in an integration or script","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_5uP8u","description":"Change Docker images for Cortex XSOAR 8 SaaS integrations and scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"2zkVHMlmlsNcns3EDp6X","title":"Connect an engine to an image registry","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/connect-an-engine-to-an-image-registry","siteSpaceId":"sitesp_5uP8u","description":"Connect a Cortex XSOAR 8 SaaS engine to an image registry.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"8pCwzm2gJJ4pGw1pBgJs","title":"Pull images from a private image registry","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/pull-images-from-a-private-image-registry","siteSpaceId":"sitesp_5uP8u","description":"Pull private registry images for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"tTKpSNmdcJ3vR24HQ1Ya","title":"Manage credentials","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/manage-credentials","siteSpaceId":"sitesp_5uP8u","description":"Manage credentials for Cortex XSOAR 8 SaaS integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"G7z3ZGjvBmz9zkRM9zpI","title":"Add an integration instance","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/add-an-integration-instance","siteSpaceId":"sitesp_5uP8u","description":"Set up a Cortex XSOAR 8 SaaS integration instance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"9n7WrmFQuXFOYSY17lCa","title":"Fetch incidents from an integration instance","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/add-an-integration-instance/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_5uP8u","description":"Fetch incidents into Cortex XSOAR 8 SaaS from an integration instance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"ywZjcadAwdl8HK1qBYf5","title":"Receive notifications on an incident fetch error","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/add-an-integration-instance/receive-notifications-on-an-incident-fetch-error","siteSpaceId":"sitesp_5uP8u","description":"Receive Cortex XSOAR 8 SaaS notifications for incident fetch errors.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"G6i4C1egYZuoTeVH8HIi","title":"Configure integration permissions","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/add-an-integration-instance/configure-integration-permissions","siteSpaceId":"sitesp_5uP8u","description":"Configure permissions for Cortex XSOAR 8 SaaS integration commands.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"ZcXUZtMN1uwzTjsp5A9n","title":"Troubleshoot Integrations","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/add-an-integration-instance/troubleshoot-integrations","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot integrations in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"bUybu4OdxXgu6lQLiqcd","title":"Integration commands in the CLI","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/integration-commands-in-the-cli","siteSpaceId":"sitesp_5uP8u","description":"Run Cortex XSOAR 8 SaaS integration commands in the CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"qwJD01XMNkofSgsK06UV","title":"Forward Requests to Long-Running Integrations","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_5uP8u","description":"Forward requests to long-running Cortex XSOAR 8 SaaS integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"EaaWU1HdB76vGbt1wm4V","title":"Incident configuration","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration","siteSpaceId":"sitesp_5uP8u","description":"Configure incidents, fields, and workflows in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"I39nARTnH6bKNyfjNOsg","title":"Incident lifecycle","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-lifecycle","siteSpaceId":"sitesp_5uP8u","description":"Learn the incident lifecycle in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"JThtyhFSGnlbVvWCG5KM","title":"Incident Customization","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization","siteSpaceId":"sitesp_5uP8u","description":"Customize incident types, fields, and layouts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"SREvvEI4Azot890NXgAg","title":"Use incident context data","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization/use-incident-context-data","siteSpaceId":"sitesp_5uP8u","description":"Use context data to customize Cortex XSOAR 8 SaaS incident layouts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"qs3NAWqWraLiaz1i53Fr","title":"Create an incident type","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_5uP8u","description":"Create and edit incident types in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"Gg1pDOIQDFEmIfoCJyQg","title":"Create an incident field","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field","siteSpaceId":"sitesp_5uP8u","description":"Create custom incident fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"9384vz6i1g9xucSuDOxz","title":"Incident field trigger scripts","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/incident-field-trigger-scripts","siteSpaceId":"sitesp_5uP8u","description":"Configure incident field trigger scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"jZVp8J8qCxfk5XFggAW6","title":"Create dynamic fields","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/create-dynamic-fields","siteSpaceId":"sitesp_5uP8u","description":"Create dynamic incident fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"6RzepVKGdAyuJRwv6o44","title":"Troubleshoot incident fields","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/troubleshoot-incident-fields","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot incident fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"ZpfTtQs4gJt1CKdsLPyf","title":"Incident layout customization","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization","siteSpaceId":"sitesp_5uP8u","description":"Customize incident layouts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"bhMwYfH9Bn5IuDGnV0Bo","title":"Create an evidence field","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/create-an-evidence-field","siteSpaceId":"sitesp_5uP8u","description":"Create custom evidence fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"9lvCyvzpXCvlFEBHWUCW","title":"Classification and mapping","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/classification-and-mapping","siteSpaceId":"sitesp_5uP8u","description":"Classify and map integration data in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"p8o3bgdV21OdCzZc2QzI","title":"Create an incident classifier","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-classifier","siteSpaceId":"sitesp_5uP8u","description":"Create incident classifiers in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"bakaROQD5sc0jwa4UZPd","title":"Create an incident mapper","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-mapper","siteSpaceId":"sitesp_5uP8u","description":"Create incident mappers in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"1doHBPkMKf1xXgMpiAMK","title":"Set up incident mirroring","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/set-up-incident-mirroring","siteSpaceId":"sitesp_5uP8u","description":"Set up incident mirroring in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"46tlVdm3BGchI4FfY6iR","title":"Incident deduplication in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/incident-deduplication-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Deduplicate incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"Ep0lAXwjRnw10DEKVynz","title":"Pre-process rules","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/pre-process-rules","siteSpaceId":"sitesp_5uP8u","description":"Create incident pre-process rules in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"cSC4TCWRkBw33nE5NUq3","title":"Use post-processing scripts in an incident","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/use-post-processing-scripts-in-an-incident","siteSpaceId":"sitesp_5uP8u","description":"Use incident post-processing scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"qzI9f32pWBsJG1OclphM","title":"Customize incident close reasons","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/customize-incident-close-reasons","siteSpaceId":"sitesp_5uP8u","description":"Customize incident close reasons in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"WqSKpwLtqGStzYPlNKHW","title":"Configure inline value fields","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/configure-inline-value-fields","siteSpaceId":"sitesp_5uP8u","description":"Configure inline value fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"5eVRnZlOPFMGXQq9vLDH","title":"Export an incident to CSV using the UTF8-BOM format","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_5uP8u","description":"Export Cortex XSOAR 8 SaaS incidents to UTF8-BOM CSV files.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"ifDRFI2EBhm1AZMwI7Zv","title":"Export Cortex XSOAR incidents to cloud storage","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/export-cortex-xsoar-incidents-to-cloud-storage","siteSpaceId":"sitesp_5uP8u","description":"Export Cortex XSOAR 8 SaaS incidents as JSON files to Amazon S3, S3-compatible storage, or Azure Blob Storage.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"Y3kKczKFQRYYifJpG7dI","title":"Configure access to external storage","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/export-cortex-xsoar-incidents-to-cloud-storage/configure-access-to-external-storage","siteSpaceId":"sitesp_5uP8u","description":"Configure Azure Blob, Amazon S3, or S3-compatible storage for Cortex XSOAR 8 SaaS incident exports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Export Cortex XSOAR incidents to cloud storage"}]},{"id":"IaR98uQH8NXgNDlNbEK6","title":"Schedule incident export","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/export-cortex-xsoar-incidents-to-cloud-storage/schedule-incident-export","siteSpaceId":"sitesp_5uP8u","description":"Schedule automated incident exports to Amazon S3, Azure Blob Storage, or S3-compatible cloud storage in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Export Cortex XSOAR incidents to cloud storage"}]},{"id":"Ddaw0YXWigSm6WBaULU9","title":"Amazon S3 configuration example","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/incident-configuration/export-cortex-xsoar-incidents-to-cloud-storage/amazon-s3-configuration-example","siteSpaceId":"sitesp_5uP8u","description":"Configure an Amazon S3 bucket, IAM credentials, and permissions for Cortex XSOAR 8 SaaS incident exports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Export Cortex XSOAR incidents to cloud storage"}]},{"id":"r2cDoGfopfmnkfOk3drI","title":"Lists","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/lists","siteSpaceId":"sitesp_5uP8u","description":"Create and manage lists in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"Sm4ZCXwdVMMnmXXkBFgz","title":"What is a list?","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/lists/what-is-a-list","siteSpaceId":"sitesp_5uP8u","description":"Learn about lists in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"VrngjVmRgWoyUqHCfj1K","title":"Create a list","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_5uP8u","description":"Create a list, set permissions, add content, and save versions in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"6YZxPXyZrn22QjP1lIzH","title":"List commands","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/lists/list-commands","siteSpaceId":"sitesp_5uP8u","description":"Use list commands in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"A14pHHlQ6gpDqqWZGrFO","title":"Use cases: JSON lists","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/lists/use-cases-json-lists","siteSpaceId":"sitesp_5uP8u","description":"Manage JSON lists in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"ByrIJdgsuw1iPq8YBWM0","title":"Transform a list into an array","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_5uP8u","description":"Transform lists into arrays in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"sspkPSc5mEqwGZICE6cS","title":"Jobs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_5uP8u","description":"Create time-triggered and event-triggered jobs in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"1l4bHzy9fzO7y27D2R8W","title":"Manage jobs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/jobs/manage-jobs","siteSpaceId":"sitesp_5uP8u","description":"Manage time-triggered and event-triggered Cortex XSOAR 8 SaaS jobs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"9ki9m8iRg1VL7Fbenb1G","title":"Create a time triggered job","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_5uP8u","description":"Create a time-triggered job in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"fyXh4Fo1DEuY7TiNTpri","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_5uP8u","description":"Create feed-delta jobs in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"FGKvD8Dtdx4TavXdZCy3","title":"Create jobs to process indicators example","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/jobs/create-jobs-to-process-indicators-example","siteSpaceId":"sitesp_5uP8u","description":"Create Cortex XSOAR 8 SaaS jobs to process indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"8ZTAi9QtxtiV3aglJRyK","title":"Playbooks","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_5uP8u","description":"Build automated workflows with Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"qPf2pnQ5dNRDsWKC4zhC","title":"What is a playbook?","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/what-is-a-playbook","siteSpaceId":"sitesp_5uP8u","description":"Learn about playbooks in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"Y30LgvD4UeZ3iWjEZYcH","title":"Playbook development checklist","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_5uP8u","description":"Follow the Cortex XSOAR 8 SaaS playbook development checklist.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"zaO8Km0AddlBXYaaFvqA","title":"Plan your playbook","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/plan-your-playbook","siteSpaceId":"sitesp_5uP8u","description":"Plan a Cortex XSOAR 8 SaaS playbook.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"AFUWZnVbORd77q3vcFkN","title":"Develop your playbook","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook","siteSpaceId":"sitesp_5uP8u","description":"Develop and customize Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"Vl4GoKCSe7rp9DV6rOp6","title":"Task 1. Choose from existing playbooks or create your own","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-1.-choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_5uP8u","description":"Choose or create a Cortex XSOAR 8 SaaS playbook.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"N2kF3qt0xknxo4E75qkJ","title":"Task 2. Configure playbook settings","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-2.-configure-playbook-settings","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS playbook settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"tagM9ABsjiR7CnJrfA8u","title":"Task 3. Add tasks","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks","siteSpaceId":"sitesp_5uP8u","description":"Add tasks to a Cortex XSOAR 8 SaaS playbook.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"qX8G4w6lI1xqQHesK7G9","title":"Set playbook inputs and outputs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/set-playbook-inputs-and-outputs","siteSpaceId":"sitesp_5uP8u","description":"Set Cortex XSOAR 8 SaaS playbook inputs and outputs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"KdK3ywI23gV42yPZNf0z","title":"Create a section header","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-section-header","siteSpaceId":"sitesp_5uP8u","description":"Create Cortex XSOAR 8 SaaS playbook section headers.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"myq3TxejxecWELqWvrer","title":"Create a standard task","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-standard-task","siteSpaceId":"sitesp_5uP8u","description":"Create standard tasks in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"CAyEaYztoXnbpd3wq7pa","title":"Create a conditional task","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-conditional-task","siteSpaceId":"sitesp_5uP8u","description":"Create conditional tasks in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"XGPSYgYzvI7rOMrIq3nb","title":"Create a communication task","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-communication-task","siteSpaceId":"sitesp_5uP8u","description":"Create communication tasks in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"80ax0qxfbPnuWgPQL678","title":"Configure script error handling in a playbook","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_5uP8u","description":"Configure script error handling in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"H6EfTsRxVaBXq6zQKd99","title":"Task 4. Add inline documentation","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-4.-add-inline-documentation","siteSpaceId":"sitesp_5uP8u","description":"Add inline documentation to Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"BJ7jGO9BayrSbleRAevq","title":"Task 5. Add custom playbook features","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-5.-add-custom-playbook-features","siteSpaceId":"sitesp_5uP8u","description":"Add custom features to Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"lxQsd3NdjwZzu50a2Vpn","title":"Task 6. Test and debug the playbook","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-6.-test-and-debug-the-playbook","siteSpaceId":"sitesp_5uP8u","description":"Test and debug Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"kIaJmCgf7SROzOzOxwxg","title":"Task 7. Manage playbook content","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/task-7.-manage-playbook-content","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS playbook content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"JGse0YatytszrNFOopvY","title":"Customize a playbook for a phishing use case example","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/develop-your-playbook/customize-a-playbook-for-a-phishing-use-case-example","siteSpaceId":"sitesp_5uP8u","description":"Customize a phishing playbook in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"hXhmGTZPRpBeNA7omOS5","title":"Customize your playbook","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook","siteSpaceId":"sitesp_5uP8u","description":"Customize Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"w6RR5Du9fbEQc8CYbwcn","title":"Customize the SOC Name","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/customize-the-soc-name","siteSpaceId":"sitesp_5uP8u","description":"Customize the SOC name in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"QD3nPlbqNEJEJpHq1Ed0","title":"Configure a sub-playbook","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/configure-a-sub-playbook","siteSpaceId":"sitesp_5uP8u","description":"Configure sub-playbooks in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"1LZDfGcOunY8W3grQjLa","title":"Filter and transform data","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_5uP8u","description":"Filter and transform data in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"L4pcddAioV00DkuGzfQd","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_5uP8u","description":"Use filters in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"},{"label":"Filter and transform data"}]},{"id":"sAk6joE13eTNi4lrl4dz","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_5uP8u","description":"Use transformers in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"},{"label":"Filter and transform data"}]},{"id":"jSsgtbjXvKjg2EEFjqaQ","title":"Extract indicators","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_5uP8u","description":"Extract indicators in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"AWD2gLkRYtbEC8MglwSV","title":"Extend context","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/extend-context","siteSpaceId":"sitesp_5uP8u","description":"Extend context in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"RidRU0pJDzRLcJUI5MIf","title":"Set and update incident fields","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/set-and-update-incident-fields","siteSpaceId":"sitesp_5uP8u","description":"Set and update incident fields in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"jymigvJpUX0fUO8qpRqU","title":"Playbook polling","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/customize-your-playbook/playbook-polling","siteSpaceId":"sitesp_5uP8u","description":"Configure polling in Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"bORoSpyM0SwC6pRXggj6","title":"Scripts","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/scripts","siteSpaceId":"sitesp_5uP8u","description":"Create and manage Cortex XSOAR 8 SaaS scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"NDO59tD1F3R8XgOSihI2","title":"Use existing scripts","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/scripts/use-existing-scripts","siteSpaceId":"sitesp_5uP8u","description":"Use existing scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"DX2X0lDoXRmc4R8gw2KO","title":"Create a script","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/scripts/create-a-script","siteSpaceId":"sitesp_5uP8u","description":"Create scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"2Cao1pbd8BWHz3HFldzo","title":"Debug your playbook","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/debug-your-playbook","siteSpaceId":"sitesp_5uP8u","description":"Debug Cortex XSOAR 8 SaaS playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"RJMIooBt64ZpielWcB6R","title":"Troubleshoot playbook performance","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/debug-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot Cortex XSOAR 8 SaaS playbook performance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Debug your playbook"}]},{"id":"7CPS9q0zEk7OsIX3DfGs","title":"Manage playbook content","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/manage-playbook-content","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS playbook content and versions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"aEn5DjlrbzyxKJK5J7e4","title":"Playbook best practices","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_5uP8u","description":"Follow Cortex XSOAR 8 SaaS playbook best practices.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"Zg7FSrIgxJ8xpab0LNVD","title":"SLAs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas","siteSpaceId":"sitesp_5uP8u","description":"Configure service-level agreements in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"n3MjGVDmzUUoYOcAeUHO","title":"SLAs in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/slas-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Learn about SLAs in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"8V8ryc7dJdMUWGJ9b38w","title":"Configure an SLA in an incident type","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/configure-an-sla-in-an-incident-type","siteSpaceId":"sitesp_5uP8u","description":"Configure SLAs for incident types in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"HA26NFdoQ5bw9BpFJ9lB","title":"Configure Timer/SLA fields","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/configure-timersla-fields","siteSpaceId":"sitesp_5uP8u","description":"Configure timer and SLA fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"1owKiN5HeuMKVmF7efeL","title":"Configure a playbook to run Timers/SLAs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/configure-a-playbook-to-run-timersslas","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS playbooks to run SLA timers.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"vM809L2ZSd6xY0pcx5nh","title":"Automate changes to incident fields using SLA scripts","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/automate-changes-to-incident-fields-using-sla-scripts","siteSpaceId":"sitesp_5uP8u","description":"Automate incident field changes using Cortex XSOAR 8 SaaS SLA scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"F2efgZJVOtEAY5ZHsk6J","title":"Create SLA scripts","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/create-sla-scripts","siteSpaceId":"sitesp_5uP8u","description":"Create SLA scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"gnYqiWeoVzCBqx1geiWS","title":"Use SLA and Timer field commands manually in the CLI","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/use-sla-and-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_5uP8u","description":"Use SLA and timer commands in the Cortex XSOAR 8 SaaS CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"9ZrHMtLTx48SI5mZvpIf","title":"Configure the Global Risk Threshold","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_5uP8u","description":"Configure the global SLA risk threshold in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"6cwbfNNEGd04xQ6vvemM","title":"Search incidents for Timer/SLAs","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/slas/search-incidents-for-timerslas","siteSpaceId":"sitesp_5uP8u","description":"Search Cortex XSOAR 8 SaaS incidents by SLA or timer status.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"486wmfYaTOlLdylrSVgV","title":"Dashboards and Reports","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports","siteSpaceId":"sitesp_5uP8u","description":"Create dashboards, reports, and widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"Y3AXN2w6c84qwUNj0xi8","title":"Dashboards","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/dashboards","siteSpaceId":"sitesp_5uP8u","description":"Create and manage dashboards in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"XmipIuM3JUmEOuJedFSL","title":"Dashboard actions","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/dashboards/dashboard-actions","siteSpaceId":"sitesp_5uP8u","description":"Manage dashboard actions in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"a3yXGXs3nnaB7lE4i2Uw","title":"Manage dashboards","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/dashboards/manage-dashboards","siteSpaceId":"sitesp_5uP8u","description":"Create and customize dashboards in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"jQwlKQqVGJ45uvONW9jL","title":"Reports","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/reports","siteSpaceId":"sitesp_5uP8u","description":"Create and manage reports in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"gsrB03n3Q30BQjkl6djh","title":"Manage reports","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/reports/manage-reports","siteSpaceId":"sitesp_5uP8u","description":"Create, customize, and schedule Cortex XSOAR 8 SaaS reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"G0NX75NiDeTKKP6eXaIk","title":"Configure the timezone in a report","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/reports/configure-the-timezone-in-a-report","siteSpaceId":"sitesp_5uP8u","description":"Configure report timezones in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"j97UbaTXtFcKJKjbUKPK","title":"Troubleshoot script timeout for reports","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-script-timeout-for-reports","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot report script timeouts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"dMQmIgEvT4kd9UvV4pva","title":"Troubleshoot Overlapping Text and Extra Pages","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-overlapping-text-and-extra-pages","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot PDF report layout issues in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"qyQenLD91Kz0S4ZZ6mwQ","title":"Widgets","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets","siteSpaceId":"sitesp_5uP8u","description":"Create and manage widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"xD3BvPoUS8ksHdvWncd5","title":"Widget customization","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/widget-customization","siteSpaceId":"sitesp_5uP8u","description":"Customize widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"W6FRkPjUUi4bu7gKvttx","title":"Create a widget using the widget builder","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_5uP8u","description":"Create widgets with the Cortex XSOAR 8 SaaS widget builder.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"sPTfcIbviZp1S6Gdr3jW","title":"Create a custom widget using a JSON file","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_5uP8u","description":"Create JSON widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"aKfW4Euz5hF44woeUlpt","title":"Create a custom widget using a script","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-script","siteSpaceId":"sitesp_5uP8u","description":"Create script-based widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"I2Rqm3zRaDhAC5HgZ0Qq","title":"Create a widget from an incident","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-incident","siteSpaceId":"sitesp_5uP8u","description":"Create incident widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"5dbwwTY6gvENW0KOGfX6","title":"Create a widget from an indicator","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-indicator","siteSpaceId":"sitesp_5uP8u","description":"Create indicator widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"9TUg4YenbhNlkSP4DBsK","title":"Edit a widget","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/edit-a-widget","siteSpaceId":"sitesp_5uP8u","description":"Edit widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"FoCOkyNUbFNVwKDEXnlV","title":"Add a widget in the War Room","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/add-a-widget-in-the-war-room","siteSpaceId":"sitesp_5uP8u","description":"Add War Room widgets in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"dfKVI1rqBDSDIc8jbIhi","title":"Saved By Dbot (ROI) Widget","pathname":"/cortex-xsoar-8-saas/configure-cortex-xsoar/dashboards-and-reports/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_5uP8u","description":"Customize the Saved By Dbot ROI widget in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"ynEoX54VUDEx0RsJQOc7","title":"Incidents and indicators investigation","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation","siteSpaceId":"sitesp_5uP8u","description":"Investigate incidents and indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"}]},{"id":"tDZimzQ6iRLu7xASLCEn","title":"Incidents","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incidents","siteSpaceId":"sitesp_5uP8u","description":"Learn about incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"IqKsl3hid4NKjCpxmhNS","title":"Incident management","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management","siteSpaceId":"sitesp_5uP8u","description":"View and manage incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"0Ro3bGSmcTM1FObgIVpq","title":"Search for incidents","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/search-for-incidents","siteSpaceId":"sitesp_5uP8u","description":"Search for incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"YoUElXaTIXP8BdcU1s9k","title":"Create an incident","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/create-an-incident","siteSpaceId":"sitesp_5uP8u","description":"Create incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"Se7FEHX4qRq9IE2U4TBF","title":"Export incidents","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents","siteSpaceId":"sitesp_5uP8u","description":"Export Cortex XSOAR 8 SaaS incidents.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"4izVIC1SSr07Zy55YAJi","title":"Export incidents from the Incidents table","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-from-the-incidents-table","siteSpaceId":"sitesp_5uP8u","description":"Export selected Cortex XSOAR 8 SaaS incidents to CSV or Excel files.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"4JA1CvI4EzaZNvq6a61e","title":"Export incidents on demand","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-on-demand","siteSpaceId":"sitesp_5uP8u","description":"Export Cortex XSOAR 8 SaaS incidents to cloud storage on demand.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"qV2GJlnpSLNULczSDSK1","title":"Investigate an incident","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident","siteSpaceId":"sitesp_5uP8u","description":"Investigate and remediate incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"prou325LLGQyyf6UkX3X","title":"Retain incidents","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/retain-incidents","siteSpaceId":"sitesp_5uP8u","description":"Retain incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"Z6xOThOMHZXxuu8lgGaD","title":"Limit access to investigations using access control","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/limit-access-to-investigations-using-access-control","siteSpaceId":"sitesp_5uP8u","description":"Limit investigation access in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"RExt1TraVjmoO2dHSIoZ","title":"Incident Tasks","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/incident-tasks","siteSpaceId":"sitesp_5uP8u","description":"Manage incident tasks in Cortex XSOAR 8 SaaS investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"TBBSwZfuzE1glkZqTbs7","title":"Use the War Room in an investigation","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_5uP8u","description":"Use the War Room for Cortex XSOAR 8 SaaS investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"VzJxQ1ujCubVfqbMRzwk","title":"Run commands in the CLI","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/run-commands-in-the-cli","siteSpaceId":"sitesp_5uP8u","description":"Run commands in the Cortex XSOAR 8 SaaS CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"FphMUVyp94reVViu1oJy","title":"Schedule a command in the War Room","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/schedule-a-command-in-the-war-room","siteSpaceId":"sitesp_5uP8u","description":"Schedule War Room commands in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"dk1eJh1zSmp3gz5Njk4y","title":"Evidence Handling","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/appsec-policies-migrated-with-the-new-trigger-and-finding-type-format.","siteSpaceId":"sitesp_5uP8u","description":"Manage investigation evidence in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"MjkRyVnB48emvSxn1Nlr","title":"Use the Work Plan in an investigation","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_5uP8u","description":"Use Work Plans in Cortex XSOAR 8 SaaS investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"4BqadcLj66riNDNAQNjm","title":"Add ad-hoc tasks to a Work Plan as part of your investigation","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation/add-ad-hoc-tasks-to-a-work-plan-as-part-of-your-investigation","siteSpaceId":"sitesp_5uP8u","description":"Add ad-hoc Work Plan tasks in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"},{"label":"Use the Work Plan in an investigation"}]},{"id":"CeBixGyCpF79QUSKIswe","title":"Investigate an incident using the canvas","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_5uP8u","description":"Investigate incidents with the Cortex XSOAR 8 SaaS canvas.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"LAM5b6BnY8z25GIGcvs9","title":"Link incidents","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/link-incidents","siteSpaceId":"sitesp_5uP8u","description":"Link incidents in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"7UrOpZeE9QultnqM4CtI","title":"Create an incident summary report","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/create-an-incident-summary-report","siteSpaceId":"sitesp_5uP8u","description":"Create incident summary reports in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"4CIdZ2TfP3j5JCWjShu9","title":"Manage indicators","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators","siteSpaceId":"sitesp_5uP8u","description":"Manage indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"aYepqbQuG33OIQbUNkqq","title":"Query indicators","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/query-indicators","siteSpaceId":"sitesp_5uP8u","description":"Query indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"wbosZwmIshMEk494jIHZ","title":"View indicator relationships in an investigation","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/view-indicator-relationships-in-an-investigation","siteSpaceId":"sitesp_5uP8u","description":"View indicator relationships in Cortex XSOAR 8 SaaS investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"Bpuj1sPlYbjcBc0V59C0","title":"Threat Intel Management","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management","siteSpaceId":"sitesp_5uP8u","description":"Manage threat intelligence in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"}]},{"id":"5ZSM4XfVfSDn36bNAfCq","title":"Get started with Threat Intel Management","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_5uP8u","description":"Get started with Threat Intel Management in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"NgbHzWZFPTxHTvApdbsy","title":"What is Threat Intel Management?","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_5uP8u","description":"Learn about Threat Intel Management in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"WzvNVrzOpGdczggfKJOV","title":"Threat Intel Management use cases","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_5uP8u","description":"Explore Threat Intel Management use cases in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"wL79WedIBY9ylavduWp2","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_5uP8u","description":"Review Threat Intel Management roles in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"kKOMw5WzYpom6Syh5oPw","title":"Indicator concepts","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_5uP8u","description":"Learn about indicators in Cortex XSOAR 8 SaaS Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"K2eUFLvYUskQHMmWHyUw","title":"Indicator lifecycle","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_5uP8u","description":"Learn about the indicator lifecycle in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"lauAvMyGEiLgu3FG7S75","title":"Understand Cortex XSOAR licenses","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/understand-cortex-xsoar-licenses","siteSpaceId":"sitesp_5uP8u","description":"Understand licenses for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"EZfsoYzRNHhHCXNa3r8i","title":"Indicator configuration","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_5uP8u","description":"Configure indicators in Cortex XSOAR 8 SaaS Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"6uI9qlQbrGHGIG4O1rgz","title":"Customize indicator types, fields, and layouts","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts","siteSpaceId":"sitesp_5uP8u","description":"Customize indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"9KLiMyfbZBN02Xkgchrd","title":"Create an indicator type","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type","siteSpaceId":"sitesp_5uP8u","description":"Create indicator types in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"dsk2OjMDzIg1v3pFzvAf","title":"Indicator type profile","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-type-profile","siteSpaceId":"sitesp_5uP8u","description":"Configure indicator type profiles in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"PqrBUS7mAh34i7iTj6CU","title":"File indicators","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/file-indicators","siteSpaceId":"sitesp_5uP8u","description":"Manage file indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"C2o2QFAnCfSj70j52UL0","title":"Formatting scripts","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/formatting-scripts","siteSpaceId":"sitesp_5uP8u","description":"Use indicator formatting scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"8reYSwvJxYCodQvHHmcx","title":"Enhancement scripts","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/enhancement-scripts","siteSpaceId":"sitesp_5uP8u","description":"Use indicator enhancement scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"p8wSVZ5ySTJHHHxCesRd","title":"Reputation scripts","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/reputation-scripts","siteSpaceId":"sitesp_5uP8u","description":"Use indicator reputation scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"huFFHnT9dyHsNGlfwlho","title":"Reputation commands","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/reputation-commands","siteSpaceId":"sitesp_5uP8u","description":"Run indicator reputation commands in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"aq79bjWJaJ7jEv4zk5fN","title":"Map custom indicator fields","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/map-custom-indicator-fields","siteSpaceId":"sitesp_5uP8u","description":"Map custom indicator fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"Wv9MBoG3efvhpMjTghCW","title":"Create an indicator field","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field","siteSpaceId":"sitesp_5uP8u","description":"Create indicator fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"TPorOQwo2ne2CyROWeJO","title":"Indicator fields structure","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-fields-structure","siteSpaceId":"sitesp_5uP8u","description":"Understand indicator field structures in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"HyCuKcQShsUFwqXbtcvF","title":"Indicator field trigger scripts","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-field-trigger-scripts","siteSpaceId":"sitesp_5uP8u","description":"Configure indicator field trigger scripts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"tEHh72XMbVyrf6KKhBQZ","title":"Indicator layout customization","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-layout-customization","siteSpaceId":"sitesp_5uP8u","description":"Customize indicator layouts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"WLZ4HkEVPDTIvk9nJOVr","title":"Indicator classification and mapping","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_5uP8u","description":"Classify and map indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"IkC0ZCaykoL7j4lO3EyC","title":"Indicator extraction","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_5uP8u","description":"Extract and enrich indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"jdO1ZDXcvrB6eBkW4nv3","title":"Indicator extraction modes","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_5uP8u","description":"Configure indicator extraction modes in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"Lv6JdFtJJntKQFj5EzKD","title":"Create indicator extraction rules for an incident type","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_5uP8u","description":"Create indicator extraction rules in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"zufzuN1sY3dtuvNLsYQB","title":"Set the indicator extraction mode for a playbook task","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/set-the-indicator-extraction-mode-for-a-playbook-task","siteSpaceId":"sitesp_5uP8u","description":"Set playbook indicator extraction modes in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"EjIGYn3tQQ7pHd6pjqJJ","title":"Disable indicator extraction for scripts or integrations","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/disable-indicator-extraction-for-scripts-or-integrations","siteSpaceId":"sitesp_5uP8u","description":"Disable indicator extraction in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"G9uzgkrAlPyfgZe4d5m4","title":"Troubleshoot indicator extraction","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/troubleshoot-indicator-extraction","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot indicator extraction in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"14f9qjeLwKzy66N3BPx5","title":"Configure indicator expiration","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-indicator-expiration","siteSpaceId":"sitesp_5uP8u","description":"Configure indicator expiration in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"QrTFY6zCyCejlbmvRjjx","title":"Configure the indicator timeline","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-the-indicator-timeline","siteSpaceId":"sitesp_5uP8u","description":"Configure the indicator timeline in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"q12IYSjv8AivTngaxD17","title":"Configure Threat Intel feed integrations","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intel-feed-integrations","siteSpaceId":"sitesp_5uP8u","description":"Configure Threat Intel feeds in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"gxvXHY3qBJRopyKUuzpa","title":"Exclude indicators from enrichment","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_5uP8u","description":"Exclude indicators from enrichment in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"w7kwPy5d5IVBFD5swvnA","title":"Configure Threat Intelligence Management playbooks to process indicators","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intelligence-management-playbooks-to-process-indicators","siteSpaceId":"sitesp_5uP8u","description":"Configure indicator-processing playbooks in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"OXsIQxCVRuwWaGA65Rvt","title":"Export indicators","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/export-indicators","siteSpaceId":"sitesp_5uP8u","description":"Export indicators from Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"hySvEHsC6Gse7IEyHEsY","title":"Customize Threat Intel Reports","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports","siteSpaceId":"sitesp_5uP8u","description":"Customize Threat Intel Reports in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"OZ848plPrcZVNQFPSHNV","title":"Create a Threat Intel Report type","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-type","siteSpaceId":"sitesp_5uP8u","description":"Create Threat Intel Report types in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"i3J3wGGtyqlhKy2Ei8XJ","title":"Create a Threat Intel Report field","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-field","siteSpaceId":"sitesp_5uP8u","description":"Create Threat Intel Report fields in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"H9DEuQZRZ24tPIjF7dg1","title":"Create a Threat Intel Report layout","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-layout","siteSpaceId":"sitesp_5uP8u","description":"Create Threat Intel Report layouts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"ZRAClNpb7zDggwETdxNZ","title":"Indicator management","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-management","siteSpaceId":"sitesp_5uP8u","description":"Manage indicators in Cortex XSOAR 8 SaaS Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"6812rdb0poTqckv4MCLS","title":"Query indicators","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-management/query-indicators","siteSpaceId":"sitesp_5uP8u","description":"Query indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator management"}]},{"id":"NQQsbccvbE0exwX1ld7v","title":"Indicator investigation","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_5uP8u","description":"Investigate indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"AW42LcWy0enGCy1eEhDN","title":"Indicator verdict","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_5uP8u","description":"Manage indicator verdicts in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"ELuS0bRagBHprdMM4vit","title":"Extract and enrich an indicator","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_5uP8u","description":"Extract and enrich indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"lMAvr0W5eZZCwKPMoTTE","title":"Expire an indicator","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_5uP8u","description":"Expire indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"jJOS4TOwtVnuzHAYyS2X","title":"Manage indicator relationships","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_5uP8u","description":"Manage indicator relationships in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"cxt4YSbV1OuuD502lad9","title":"Delete and exclude indicators","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_5uP8u","description":"Delete and exclude indicators in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"C6sl2a2m4C4SW0UlolXN","title":"Manage Threat Intel Reports","pathname":"/cortex-xsoar-8-saas/investigate-and-respond-to-threats/threat-intel-management/manage-threat-intel-reports","siteSpaceId":"sitesp_5uP8u","description":"Manage Threat Intel Reports in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"efe8mN7iLtPxPddtmi6q","title":"Troubleshoot","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/troubleshoot","siteSpaceId":"sitesp_5uP8u","description":"Troubleshoot errors in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"Cjuhv2MJAm6OBL8RBer1","title":"Logs","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/troubleshoot/logs","siteSpaceId":"sitesp_5uP8u","description":"View and troubleshoot logs in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"qUFArTkGETqy5Ssvlifs","title":"Management audit logs","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/troubleshoot/management-audit-logs","siteSpaceId":"sitesp_5uP8u","description":"Manage audit logs in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"dXmfKOYjgKYvONfAiOJy","title":"Syslog server management","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/troubleshoot/syslog-server-management","siteSpaceId":"sitesp_5uP8u","description":"Configure syslog servers in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"Jkq5sLOJ3803bPnAWNEL","title":"Configure log and notification forwarding","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/troubleshoot/configure-log-and-notification-forwarding","siteSpaceId":"sitesp_5uP8u","description":"Forward logs and notifications from Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"qwYQFWjZvJqiNmrFEExI","title":"Integration logs","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/troubleshoot/integration-logs","siteSpaceId":"sitesp_5uP8u","description":"View and export integration logs in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"wWhqZdJQwVBNNY63eIX2","title":"View Guard Rails warnings and errors","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/troubleshoot/view-guard-rails-warnings-and-errors","siteSpaceId":"sitesp_5uP8u","description":"View Guard Rails warnings and errors in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"pZI6wqkBjqTl9PGfAPO4","title":"Reference","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference","siteSpaceId":"sitesp_5uP8u","description":"Reference topics for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"bodDQR7nS8Hx8UnoeiAM","title":"Product support lifecycle","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/product-support-lifecycle","siteSpaceId":"sitesp_5uP8u","description":"Cortex XSOAR 8 SaaS product support lifecycle.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"06ObYHLlQajCevV7fMx0","title":"Cortex XSOAR concepts","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/cortex-xsoar-concepts","siteSpaceId":"sitesp_5uP8u","description":"Common Cortex XSOAR 8 SaaS concepts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"XgdR153cZcL9WdF7dsip","title":"How to search in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/how-to-search-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Search Cortex XSOAR 8 SaaS with Lucene syntax and search tools.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"toxkCOsdutLjIkQ0a4Pi","title":"How to use markdown in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/how-to-use-markdown-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Use markdown in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"bDbsdACrx8EdC1CvzVsL","title":"User preferences","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/user-preferences","siteSpaceId":"sitesp_5uP8u","description":"Set user preferences in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"7cRH9JCfJmfd8wJZci92","title":"Server configurations","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/server-configurations","siteSpaceId":"sitesp_5uP8u","description":"Configure and troubleshoot Cortex XSOAR 8 SaaS server settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"QMurBpe93hFfii0fjzZu","title":"Cortex XSOAR API","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/cortex-xsoar-api","siteSpaceId":"sitesp_5uP8u","description":"Generate API keys and make API calls in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"pyDZF8nVzTKMcsy3kYVK","title":"New user FAQ","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/new-user-faq","siteSpaceId":"sitesp_5uP8u","description":"New user FAQ for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"bre2x7lew9mpRchhjBDw","title":"Telemetry in Cortex XSOAR","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/telemetry-in-cortex-xsoar","siteSpaceId":"sitesp_5uP8u","description":"Telemetry collects usage data to improve Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"ZtTKaZz8qEoWku7RevQR","title":"Cortex XSOAR navigation cheat sheet","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/cortex-xsoar-navigation-cheat-sheet","siteSpaceId":"sitesp_5uP8u","description":"Common Cortex XSOAR 8 SaaS features and navigation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"SEZii6JL4et0DTetdsop","title":"Keyboard shortcuts","pathname":"/cortex-xsoar-8-saas/troubleshoot-and-reference/reference/keyboard-shortcuts","siteSpaceId":"sitesp_5uP8u","description":"Keyboard shortcuts for Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"GCjInVBzORwKZAHW5nVh","title":"What is Cortex XSOAR multi-tenant?","pathname":"/cortex-xsoar-8-saas/multi-tenant/what-is-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_5uP8u","description":"Learn about Cortex XSOAR 8 SaaS multi-tenant deployments that provide data segregation and centralized tenant management.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"1hrF3hyKoDxIGuTrDTCt","title":"Onboard Cortex XSOAR multi-tenant","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_5uP8u","description":"Onboard Cortex XSOAR 8 SaaS multi-tenant deployments by activating and managing main and child tenants, users, and single sign-on.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"7BI5151MGo0KIpkP13ki","title":"Onboarding checklist for multi-tenant deployments","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/onboarding-checklist-for-multi-tenant-deployments","siteSpaceId":"sitesp_5uP8u","description":"Use this checklist to deploy and onboard a Cortex XSOAR 8 SaaS multi-tenant or MSSP environment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"owy94TA4FGsqoESw2QYI","title":"Step 1. Activate Cortex XSOAR (Main Tenant)","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-1.-activate-cortex-xsoar-main-tenant","siteSpaceId":"sitesp_5uP8u","description":"Activate the Cortex XSOAR 8 SaaS main tenant in Cortex Gateway for a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"hZdu2Y7Bh5EtrvX5L0tA","title":"Step 2. Create a child tenant","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-2.-create-a-child-tenant","siteSpaceId":"sitesp_5uP8u","description":"Create and activate Cortex XSOAR 8 SaaS child tenants in Cortex Gateway for a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"dv3dAocWdMzjJnbfN9Kt","title":"Step 3. Allocate incident retention licenses","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-3.-allocate-incident-retention-licenses","siteSpaceId":"sitesp_5uP8u","description":"Allocate incident retention licenses to Cortex XSOAR 8 SaaS child tenants in a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"nyEOyAGJJ9MmIpXiKiLv","title":"Step 4. Set up an engine","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-4.-set-up-an-engine","siteSpaceId":"sitesp_5uP8u","description":"Set up and propagate Cortex XSOAR 8 SaaS engines across tenants in a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"wbZ5XqyrPrqD3H6I7Cdw","title":"Step 5. Set up a remote repository","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-5.-set-up-a-remote-repository","siteSpaceId":"sitesp_5uP8u","description":"Configure remote repositories for Cortex XSOAR 8 SaaS multi-tenant content development and deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"XKLn40P6MNjB4Fu5WsMK","title":"Step 6. Set up users and roles","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-6.-set-up-users-and-roles","siteSpaceId":"sitesp_5uP8u","description":"Configure Cortex XSOAR 8 SaaS multi-tenant users, roles, user groups, and SAML authentication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"w7QnzFDKOrs5oYFrZe40","title":"Step 7. Install and configure content","pathname":"/cortex-xsoar-8-saas/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-7.-install-and-configure-content","siteSpaceId":"sitesp_5uP8u","description":"Install and configure Cortex XSOAR 8 SaaS content for multi-tenant and MSSP environments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"juqyDgkPxnDEykUEKlIS","title":"Child tenant management","pathname":"/cortex-xsoar-8-saas/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS multi-tenant child tenants, access, retention licenses, and content propagation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"t64aNlWU7hpePJdKHk6l","title":"Content management in multi-tenant","pathname":"/cortex-xsoar-8-saas/multi-tenant/child-tenant-management/content-management-in-multi-tenant","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS multi-tenant content using propagation labels and dependency-aware synchronization.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"}]},{"id":"Ed39ec44AR5zxzCOynXx","title":"Add propagation labels to content","pathname":"/cortex-xsoar-8-saas/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-content","siteSpaceId":"sitesp_5uP8u","description":"Add propagation labels to Cortex XSOAR 8 SaaS content for selective synchronization to child tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"bEsKmflFShcrbqOiL1LK","title":"Add propagation labels to a child tenant","pathname":"/cortex-xsoar-8-saas/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-a-child-tenant","siteSpaceId":"sitesp_5uP8u","description":"Add propagation labels to Cortex XSOAR 8 SaaS child tenants to control synchronized content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"z77gcvug6xoPwJajEje3","title":"Sync content to child tenants","pathname":"/cortex-xsoar-8-saas/multi-tenant/child-tenant-management/content-management-in-multi-tenant/sync-content-to-child-tenants","siteSpaceId":"sitesp_5uP8u","description":"Synchronize Cortex XSOAR 8 SaaS content from the main tenant to child tenants in a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"OUgIs6GJUjQwatlHSdgB","title":"Manage content using a remote repository","pathname":"/cortex-xsoar-8-saas/multi-tenant/child-tenant-management/content-management-in-multi-tenant/manage-content-using-a-remote-repository","siteSpaceId":"sitesp_5uP8u","description":"Use a remote repository to manage and propagate Cortex XSOAR 8 SaaS multi-tenant content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"CVdCLnA3fJNd2aqjPyQj","title":"Incident management on the Main Tenant","pathname":"/cortex-xsoar-8-saas/multi-tenant/incident-management-on-the-main-tenant","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS incidents across child tenants from the main tenant in a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"1mu70o8zln1D2gn9WsQL","title":"Manage main tenant users in an investigation","pathname":"/cortex-xsoar-8-saas/multi-tenant/incident-management-on-the-main-tenant/manage-main-tenant-users-in-an-investigation","siteSpaceId":"sitesp_5uP8u","description":"Manage Cortex XSOAR 8 SaaS main and child tenant users during multi-tenant incident investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Incident management on the Main Tenant"}]},{"id":"1KtUQo5UxN7LBfpVNFpp","title":"Run a command on multiple tenants","pathname":"/cortex-xsoar-8-saas/multi-tenant/incident-management-on-the-main-tenant/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_5uP8u","description":"Run Cortex XSOAR 8 SaaS commands across incidents in multiple child tenants from the main tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Incident management on the Main Tenant"}]},{"id":"3hEViCghvVRHcKHdAk5Z","title":"Indicator management on the Main Tenant","pathname":"/cortex-xsoar-8-saas/multi-tenant/indicator-management-on-the-main-tenant","siteSpaceId":"sitesp_5uP8u","description":"View and take action on indicators on the Main Tenant in Cortex XSOAR 8 SaaS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 SaaS Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"CbPc2Ku3Ma6qmu4c903P","title":"Cortex XSOAR 8 On-prem Documentation","pathname":"/cortex-xsoar-8-on-prem","siteSpaceId":"sitesp_q8p5W","description":"Start here to choose the right Cortex XSOAR 8 on-prem version.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"}]},{"id":"0TaKeyZAHxjBGVY71jqd","title":"Navigate the Cortex XSOAR 8 On-prem docs","pathname":"/cortex-xsoar-8-on-prem/8.14","siteSpaceId":"sitesp_lLNpD","description":"Explore the main Cortex XSOAR 8.14 On-prem documentation areas, including deployment, configuration, and threat response.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"PfziZCgA0vx2hpe5dSNS","title":"Get Started with Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/learn-about-cortex-xsoar/get-started-with-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Get started with Cortex XSOAR 8.14 On-prem. Review its architecture, roles, responsibilities, and licensing.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"lNSCQF7PBkMsdw1LjosK","title":"What is Cortex XSOAR?","pathname":"/cortex-xsoar-8-on-prem/8.14/learn-about-cortex-xsoar/what-is-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Learn how Cortex XSOAR 8.14 On-prem unifies security orchestration, automation, case management, and threat intelligence.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"IPDu5IXq352bTjk52Lmu","title":"Cortex XSOAR architecture","pathname":"/cortex-xsoar-8-on-prem/8.14/learn-about-cortex-xsoar/cortex-xsoar-architecture","siteSpaceId":"sitesp_lLNpD","description":"Understand the Cortex XSOAR 8.14 On-prem architecture, including its components, services, and deployment model.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"1g7w7koNoTJdcepyw3ek","title":"Cortex XSOAR use cases","pathname":"/cortex-xsoar-8-on-prem/8.14/learn-about-cortex-xsoar/cortex-xsoar-use-cases","siteSpaceId":"sitesp_lLNpD","description":"Explore Cortex XSOAR 8.14 On-prem use cases for automating SOC investigations, incident response, and threat intelligence workflows.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"bmv8yFvq3pNipslq5YOV","title":"Understand Cortex XSOAR licenses","pathname":"/cortex-xsoar-8-on-prem/8.14/learn-about-cortex-xsoar/understand-cortex-xsoar-licenses","siteSpaceId":"sitesp_lLNpD","description":"Understand Cortex XSOAR 8.14 On-prem licenses, available components, and tenant user access limits.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"LXFMX8wniTLKpa0LkwKc","title":"Roles and responsibilities","pathname":"/cortex-xsoar-8-on-prem/8.14/learn-about-cortex-xsoar/roles-and-responsibilities","siteSpaceId":"sitesp_lLNpD","description":"Learn about the core SOC roles and responsibilities for operating Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"OwLpDH9GNnEc9GjIHzTW","title":"Supported web browsers","pathname":"/cortex-xsoar-8-on-prem/8.14/learn-about-cortex-xsoar/supported-web-browsers","siteSpaceId":"sitesp_lLNpD","description":"Review the supported web browsers for accessing Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"VFiZqWSFLiYRhsgqKOer","title":"How to onboard Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Learn how to onboard, deploy, and configure Cortex XSOAR 8.14 On-prem for your security operations environment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"EOPQ1b2EgSRhbJZGMbm9","title":"Plan your deployment","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/plan-your-deployment","siteSpaceId":"sitesp_lLNpD","description":"Plan your Cortex XSOAR 8.14 On-prem deployment. Review deployment considerations, requirements, and onboarding steps.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"Xqv9JcU0h4oXRMwwSkcc","title":"Deployment steps","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps","siteSpaceId":"sitesp_lLNpD","description":"Follow the deployment steps and onboarding checklist for a successful Cortex XSOAR 8.14 On-prem deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"jH8VPkfVcbbGTSqWQkDO","title":"Onboarding checklist","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/onboarding-checklist","siteSpaceId":"sitesp_lLNpD","description":"Use the Cortex XSOAR 8.14 On-prem onboarding checklist to activate, provision, grant access, and configure your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"FsmsinrWpLv3DHgHA3Mj","title":"Step 1. Install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/step-1.-install-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem. Review system requirements, installation steps, and license setup.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"eql99Ik2LLdJTvD5iQp7","title":"Step 2. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/step-2.-set-up-an-engine","siteSpaceId":"sitesp_lLNpD","description":"Set up a Cortex XSOAR 8.14 On-prem engine on a remote machine for integrations and automation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"yLsQu4ZqeVoJMd4d5iGg","title":"Step 3. Set up a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/step-3.-set-up-a-remote-repository","siteSpaceId":"sitesp_lLNpD","description":"Set up a remote repository for Cortex XSOAR 8.14 On-prem content development, testing, and production deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"HLN3PxaPPHOXvjoUlbve","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_lLNpD","description":"Set up users, permissions, and predefined roles in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"o9Ce56Pe4TylbLa0goJA","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content","siteSpaceId":"sitesp_lLNpD","description":"Learn what Cortex XSOAR 8.14 On-prem content includes and how to install and configure it.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"Vg1Qtzuud7hKL0vcDNPO","title":"Install content packs","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/install-content-packs","siteSpaceId":"sitesp_lLNpD","description":"Install content packs in Cortex XSOAR 8.14 On-prem to add integrations, playbooks, and automation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Step 5. Install and configure content"}]},{"id":"Dp1xIKsEui36tcXNK5jp","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_lLNpD","description":"Use the Deployment Wizard in Cortex XSOAR 8.14 On-prem to configure and adopt a security use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Step 5. Install and configure content"}]},{"id":"9qi5chCpvccdnYNT1SYM","title":"Post deployment","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/post-deployment","siteSpaceId":"sitesp_lLNpD","description":"Complete post-deployment configuration tasks for Cortex XSOAR 8.14 On-prem, including communications and system settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"5WTtH7647RITrxwVr80R","title":"User communication","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/post-deployment/user-communication","siteSpaceId":"sitesp_lLNpD","description":"Configure user communications, email messages, and notifications in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"}]},{"id":"E8p7NnVu7mikW0EcMRyo","title":"Configure user notifications in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/post-deployment/user-communication/configure-user-notifications-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Configure user notifications in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"1kAnRVL0abKGspTUOnP1","title":"Customize system emails","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/post-deployment/user-communication/customize-system-emails","siteSpaceId":"sitesp_lLNpD","description":"Customize system email messages in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"g9br7EKU1dVGmi9EfY91","title":"Configure system settings","pathname":"/cortex-xsoar-8-on-prem/8.14/onboard-cortex-xsoar/post-deployment/configure-system-settings","siteSpaceId":"sitesp_lLNpD","description":"Configure system settings for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"}]},{"id":"NwcpVs30XgvgqYzlosrG","title":"How to install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/installation-overview","siteSpaceId":"sitesp_lLNpD","description":"Learn how to install Cortex XSOAR 8.14 On-prem, including system requirements, deployment options, and license setup.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"vga3dRV9rg5LWPrDOLMZ","title":"High Availability for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/high-availability-for-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Configure High Availability for Cortex XSOAR 8.14 On-prem to support reliable, continuous operation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"dFSTtxgxeIexvCR1rJTM","title":"Load balancing for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/load-balancing-for-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Configure load balancing for Cortex XSOAR 8.14 On-prem to support reliable, continuous operation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"GFXOfjei9DOdpuplJQoH","title":"System Requirements","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/system-requirements","siteSpaceId":"sitesp_lLNpD","description":"Verify that your Cortex XSOAR 8.14 On-prem deployment meets the minimum hardware, network, and system requirements.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"HUF3cLwa6QfqwoxU00He","title":"Hardware requirements","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/system-requirements/hardware-requirements","siteSpaceId":"sitesp_lLNpD","description":"Review hardware requirements for installing and running Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"DMhvCiT7gYmSppOeU7H3","title":"Port requirements for cluster communication","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/system-requirements/port-requirements-for-cluster-communication","siteSpaceId":"sitesp_lLNpD","description":"Review required ports for Cortex XSOAR 8.14 On-prem cluster communication and installation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"t5zKf0kRZdwVqlHjFAkv","title":"URL requirements","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/system-requirements/url-requirements","siteSpaceId":"sitesp_lLNpD","description":"Review the required URLs and network access for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"dHiV1152LSKdNB61PzuC","title":"Bandwidth and NTP requirements","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/system-requirements/bandwidth-and-ntp-requirements","siteSpaceId":"sitesp_lLNpD","description":"Review bandwidth and NTP synchronization requirements for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"A70IHuUnsNi1W5lDIcnd","title":"Install Cortex XSOAR on a VM deployed on AWS","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on a virtual machine deployed on AWS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"kphNiIfLnFajr3Y1VGAj","title":"Task 1. Download the OVA Image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_lLNpD","description":"Download the OVA image and license for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"Wxo9msuoADRZrSA0a3bc","title":"Task 2. Deploy your virtual machine on AWS","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-2.-deploy-your-virtual-machine-on-aws","siteSpaceId":"sitesp_lLNpD","description":"Deploy a virtual machine on AWS for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"KONvqUJHzreFr0JJZjTw","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-3.-validate-tenant-network-and-ip-settings","siteSpaceId":"sitesp_lLNpD","description":"Validate tenant network and IP settings in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"lOYGLsgsosTBsOQMR6BB","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_lLNpD","description":"Configure NTP servers for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"KFe9HgWp7nIkO2lJ5aiS","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_lLNpD","description":"Configure optional proxy settings for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"G4iDPuZ0HlbVAByUBc8K","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_lLNpD","description":"Establish trust between cluster nodes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"YCfzbFG3Kfccq8GtRraC","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"XiENqb5nvMIy0qcZut7s","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Verify access to your Cortex XSOAR 8.14 On-prem deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"QnZb0tGtDzNVFmpB4Js8","title":"Install Cortex XSOAR on a VM deployed on OCI","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on a virtual machine deployed on OCI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"AqsF73YEgJMkf0Tcdkqx","title":"Task 1. Download the OVA image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_lLNpD","description":"Download the OVA image and license for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"SLdytfvr0h2XHPYihdzL","title":"Task 2. Deploy your virtual machine on OCI","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-2.-deploy-your-virtual-machine-on-oci","siteSpaceId":"sitesp_lLNpD","description":"Deploy a virtual machine on OCI for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"Amn23Eb3oh0LjmEkJo6W","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-3.-validate-tenant-network-and-ip-settings","siteSpaceId":"sitesp_lLNpD","description":"Validate tenant network and IP settings in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"FZmMnqDKCSABhB5mXCRB","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_lLNpD","description":"Configure NTP servers for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"ygQcQEH0o95mRlhF1o63","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_lLNpD","description":"Configure optional proxy settings for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"1GmWhaCAiyXLbUalQpb8","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_lLNpD","description":"Establish trust between cluster nodes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"YtgsyxyyTjUarhcAuoCc","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"Bp1NjGovRs4vfOFR5tmT","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Verify access to your Cortex XSOAR 8.14 On-prem deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"lQvuc3GYdfqDNe203yiY","title":"Install Cortex XSOAR on a VM deployed on Hyper-V","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on a virtual machine deployed on Hyper-V.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"DsYQWKxMIO4mtJ1De2Mf","title":"Task 1. Download the VHD image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-1.-download-the-vhd-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_lLNpD","description":"Download the VHD image and license for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"fnBUcLOXZs1jNQ9tUoYw","title":"Task 2. Deploy your virtual machine on Hyper-V","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-2.-deploy-your-virtual-machine-on-hyper-v","siteSpaceId":"sitesp_lLNpD","description":"Deploy a virtual machine on Hyper-V for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"dtme0QZ1gMSTHwgFCtjT","title":"Task 3. Configure tenant network and IP settings for each node","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-3.-configure-tenant-network-and-ip-settings-for-each-node","siteSpaceId":"sitesp_lLNpD","description":"Configure network and IP settings for each Cortex XSOAR 8.14 On-prem node.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"QlO2FUbyVD97K2l5HAZG","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_lLNpD","description":"Configure NTP servers for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"qG1QtvgAQk7yso8h8vVL","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_lLNpD","description":"Configure optional proxy settings for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"EnWMDKTaO6psDHEPOEr1","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_lLNpD","description":"Establish trust between cluster nodes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"4oHDqGttzZ14qiaHQYST","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"7H915KDj4y2t9MCx5RYR","title":"Task 8. Verify you can log in to Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-8.-verify-you-can-log-in-to-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Verify access to your Cortex XSOAR 8.14 On-prem deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"zvjWdHV2a1UJAMtE4LkF","title":"Install Cortex XSOAR on a VM deployed on VSphere","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-vsphere","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on a virtual machine deployed on vSphere.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"zMf7cCem7pDUoO7k3UjV","title":"Install Cortex XSOAR on a VM deployed on KVM","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on a virtual machine deployed on KVM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"OIjJPCJPTKZEZC5wNNt0","title":"Task 1. Download the QCOW2 image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-1.-download-the-qcow2-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_lLNpD","description":"Download the QCOW2 image and license for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"TxM296MfGTSdPfGsjBrL","title":"Task 2. Deploy your virtual machine on KVM","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-2.-deploy-your-virtual-machine-on-kvm","siteSpaceId":"sitesp_lLNpD","description":"Deploy a virtual machine on KVM for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"MDM0rxqmlPzvecKGohW1","title":"Task 3. Configure tenant network and IP settings for each node","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-3.-configure-tenant-network-and-ip-settings-for-each-node","siteSpaceId":"sitesp_lLNpD","description":"Configure network and IP settings for each Cortex XSOAR 8.14 On-prem node.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"Kun2MZsZfmDyMndgAVms","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_lLNpD","description":"Configure NTP servers for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"agbTmWEtGLIjVpr1eqpQ","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_lLNpD","description":"Configure optional proxy settings for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"ZuozFAGmirANJwIlOn7T","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_lLNpD","description":"Establish trust between cluster nodes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"wtwXQdeCsVuM2dxfkRNa","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"tkBOhTdLkma5CZzVNcIg","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Verify access to your Cortex XSOAR 8.14 On-prem deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"flSJUfpsu0xaqsmtJRsw","title":"Post-installation","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation","siteSpaceId":"sitesp_lLNpD","description":"Complete Cortex XSOAR 8.14 On-prem post-installation tasks, including license setup, certificates, and VM maintenance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"Tqk9ppg3U53W8xywU3zp","title":"Add the Cortex XSOAR license","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/add-the-cortex-xsoar-license","siteSpaceId":"sitesp_lLNpD","description":"Download and add a Cortex XSOAR 8.14 On-prem license from Cortex Gateway to enable tenant access and components.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"yWS7f68VapQymjPZZCvi","title":"HTTPS with a signed certificate","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/https-with-a-signed-certificate","siteSpaceId":"sitesp_lLNpD","description":"Configure HTTPS with a signed certificate in Cortex XSOAR 8.14 On-prem and concatenate the certificate chain.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"1TLOYtLnShfI01vfXZEa","title":"Manage your SSH admin password","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/manage-your-ssh-admin-password","siteSpaceId":"sitesp_lLNpD","description":"Manage the SSH administrator password in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"YPPpJ11eAnIxwP9c7jlB","title":"Use a signed certificate instead of SSL verification","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/use-a-signed-certificate-instead-of-ssl-verification","siteSpaceId":"sitesp_lLNpD","description":"Use a signed HTTPS certificate instead of SSL verification in Cortex XSOAR 8.14 On-prem MSSP deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"yjmqScQA842gfmHo5UNM","title":"Manage custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/manage-custom-certificates","siteSpaceId":"sitesp_lLNpD","description":"Manage trusted certificates for Cortex XSOAR 8.14 On-prem outbound integrations and custom certificate authorities.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"QyrwRTzdJUb5j8efiyKk","title":"Optimize performance and robustness from the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui","siteSpaceId":"sitesp_lLNpD","description":"Optimize Cortex XSOAR 8.14 On-prem performance and robustness from the VM textual UI or SSH.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"X9s3fC1iVp5moCWNQe1y","title":"Manage nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/manage-nodes-in-a-cluster","siteSpaceId":"sitesp_lLNpD","description":"Manage cluster nodes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"leQU06mZLicQIvFKwB99","title":"Scale up hardware resources","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/scale-up-hardware-resources","siteSpaceId":"sitesp_lLNpD","description":"Scale hardware resources for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"3mWT05WQlLkScxOL8Dil","title":"Auto expand PVC volumes","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/auto-expand-pvc-volumes","siteSpaceId":"sitesp_lLNpD","description":"Automatically expand PVC volumes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"c8OkcQEOkr6pUvY9iMEU","title":"Troubleshoot your installation","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/troubleshoot-your-installation","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot Cortex XSOAR 8.14 On-prem installation issues from the VM textual UI or SSH.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"l9uK86pV8JEgouNxATuI","title":"Common installation limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/troubleshoot-your-installation/common-installation-limitations-and-fixes","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot common Cortex XSOAR installation issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"GUlnCRLrVTzVvApVMLOc","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/troubleshoot-your-installation/access-logs-and-log-bundles","siteSpaceId":"sitesp_lLNpD","description":"View Cortex XSOAR 8.14 On-prem logs and download log bundles for system monitoring and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"gYiYubxrZClSmsnxGTHK","title":"Open a support session","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/troubleshoot-your-installation/open-a-support-session","siteSpaceId":"sitesp_lLNpD","description":"Open a Cortex XSOAR 8.14 On-prem support session from the VM textual UI or SSH.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"3fvOnfp2kqkC651jtPc7","title":"Upload your license to the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/troubleshoot-your-installation/upload-your-license-to-the-textual-ui","siteSpaceId":"sitesp_lLNpD","description":"Upload your Cortex XSOAR 8.14 On-prem license to the VM textual UI for a support session.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"k2jTv4fYnLS7guzOyyiZ","title":"Shut down Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/troubleshoot-your-installation/shut-down-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Shut down a Cortex XSOAR 8.14 On-prem session from the VM textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"JLtSmKcWJa8QD6NfpoxW","title":"Update Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/install-cortex-xsoar/update-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Upgrade your Cortex XSOAR 8.14 On-prem tenant to the latest supported version.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"KILIS7WAvZsikgc5ob0S","title":"How to back up and restore Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/back-up-and-restore-cortex-xsoar/back-up-and-restore-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Back up and restore Cortex XSOAR 8.14 On-prem clusters using on-demand or scheduled backups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"r4pu7d0FEdySgvhBfsfG","title":"Set up access to an external storage","pathname":"/cortex-xsoar-8-on-prem/8.14/back-up-and-restore-cortex-xsoar/set-up-access-to-an-external-storage","siteSpaceId":"sitesp_lLNpD","description":"Configure Cortex XSOAR 8.14 On-prem access to external storage for backups and restores.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"WT9xASCgzk0pxaD8Aqax","title":"Back up data","pathname":"/cortex-xsoar-8-on-prem/8.14/back-up-and-restore-cortex-xsoar/back-up-data","siteSpaceId":"sitesp_lLNpD","description":"Create scheduled and on-demand backups of Cortex XSOAR 8.14 On-prem data.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"SqE7wiFxIsKB6wdM28BF","title":"Backup guidelines and best practices","pathname":"/cortex-xsoar-8-on-prem/8.14/back-up-and-restore-cortex-xsoar/back-up-data/backup-guidelines-and-best-practices","siteSpaceId":"sitesp_lLNpD","description":"Follow Cortex XSOAR 8.14 On-prem backup guidelines and best practices for reliable data protection.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"},{"label":"Back up data"}]},{"id":"qiR247lKp8VQHNxBPKp9","title":"Restore data","pathname":"/cortex-xsoar-8-on-prem/8.14/back-up-and-restore-cortex-xsoar/restore-data","siteSpaceId":"sitesp_lLNpD","description":"Restore Cortex XSOAR 8.14 On-prem data from an on-demand cluster backup.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"DqqdpUFJnW7c0LEgpi06","title":"End-to-end example of Cortex XSOAR cluster backup and restore","pathname":"/cortex-xsoar-8-on-prem/8.14/back-up-and-restore-cortex-xsoar/end-to-end-example-of-cortex-xsoar-cluster-backup-and-restore","siteSpaceId":"sitesp_lLNpD","description":"Follow an end-to-end Cortex XSOAR 8.14 On-prem cluster backup and restore workflow.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"qo8ur4Zh0sIVAxbxXgou","title":"Common backup and restore limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.14/back-up-and-restore-cortex-xsoar/common-backup-and-restore-limitations-and-fixes","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot common Cortex XSOAR 8.14 On-prem backup and restore issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"uHPjCoPrnUNPxdpMe8FN","title":"Engines","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines","siteSpaceId":"sitesp_lLNpD","description":"Install, manage, configure, and troubleshoot engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"r058QD40iguxRUuoOvo2","title":"What is an engine?","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/what-is-an-engine","siteSpaceId":"sitesp_lLNpD","description":"Learn how engines in Cortex XSOAR 8.14 On-prem connect integrations and services to your tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"Fp2VuEQybcqIrzlemZ1f","title":"Engine requirements","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/engine-requirements","siteSpaceId":"sitesp_lLNpD","description":"Review hardware, operating system, and network URL requirements for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"D1SeOSSGWa07bkr8HwYv","title":"Install an engine","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine","siteSpaceId":"sitesp_lLNpD","description":"Install, deploy, and configure engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"dwDeVpDjr5dCMev0kob5","title":"Engine air gap installation","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/engine-air-gap-installation","siteSpaceId":"sitesp_lLNpD","description":"Install an engine offline without internet access on RHEL 8 on Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"BN6wqRM0cYkonWO2xSgh","title":"Docker","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker","siteSpaceId":"sitesp_lLNpD","description":"Install, configure, secure, and troubleshoot Docker on engines for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"PQSLPVi0RUP2QtriQdid","title":"Install Docker","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_lLNpD","description":"Install Docker on a engine in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"NJdlW4F1sZDRNXAuOtez","title":"Install Docker distribution for Red Hat on an engine server","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker-distribution-for-red-hat-on-an-engine-server","siteSpaceId":"sitesp_lLNpD","description":"Install Docker for Red Hat on a engine server for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"sa0Ru7ExqQkCTEYWAAOV","title":"Docker image security","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_lLNpD","description":"Secure Docker images used by engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"gnQl6BOz3CcDVqOLI3IK","title":"Use the Cortex XSOAR Container Registry","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_lLNpD","description":"Use the Container Registry with your engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"TrXN4FjyuAycLzrHC8t9","title":"Docker FAQs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_lLNpD","description":"Find answers to common Docker questions for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"LoxEmutSqhHSRZcJQfJn","title":"Troubleshoot Docker issues","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot Docker issues on engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"1ZDuAepudW2FDPgpvR1r","title":"Configure Docker pull rate limit","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_lLNpD","description":"Configure Docker image pull rate limits for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"Zu8CNw3kZFua6xA21gQx","title":"Change the Docker installation folder","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_lLNpD","description":"Change the Docker installation folder for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"djid2vfXQRJ0OYNEFV5x","title":"Configure Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_lLNpD","description":"Configure Docker integrations for engines in Cortex XSOAR 8.14 On-prem to trust custom certificates.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"C9TnY4bU95Ki8mu3OeYu","title":"Configure Python Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_lLNpD","description":"Configure custom certificate trust for Python Docker integrations on engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"BVhVypU3XDqY8q4wOs8o","title":"Docker hardening guide","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_lLNpD","description":"Harden Docker deployments for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"KFj2geAEA48r7qXNhWW1","title":"Podman","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/podman","siteSpaceId":"sitesp_lLNpD","description":"Run Podman containers instead of Docker on RHEL 8 engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"NhY4sFgxbOCnzUwO18fZ","title":"Change container storage directory","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/podman/change-container-storage-directory","siteSpaceId":"sitesp_lLNpD","description":"Change Podman container storage for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"HJ9K3xvQHjrc8HkC7raP","title":"Install Podman","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_lLNpD","description":"Install Podman on engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"bMfgem4vReVtEPxOKmg9","title":"Migrate From Docker to Podman","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_lLNpD","description":"Migrate containers on engines in Cortex XSOAR 8.14 On-prem from Docker to Podman.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"OLWBqED4iQ0pxB9bADwD","title":"Troubleshoot Podman","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot Podman on engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"tsYBbuA36VW9UaFMnYLo","title":"Manage engines","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_lLNpD","description":"Manage engines and engine load-balancing groups in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"QfyVl8GFSlND23lj1rAJ","title":"Upgrade an engine","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/upgrade-an-engine","siteSpaceId":"sitesp_lLNpD","description":"Upgrade an engine in Cortex XSOAR 8.14 On-prem from the tenant or remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"6ITyAyVsHVw5npoKvje0","title":"Remove an engine","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_lLNpD","description":"Remove an engine in Cortex XSOAR 8.14 On-prem using your operating system command.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"AJR2gUreYzlbxnMNaul6","title":"Configure engines","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_lLNpD","description":"Configure engines in Cortex XSOAR 8.14 On-prem using d1.conf or the shell UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"IxXk78Vo11puf8wcdFVQ","title":"Configure the engine to use a web proxy","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_lLNpD","description":"Configure an engine in Cortex XSOAR 8.14 On-prem to use a web proxy with d1.conf.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"Iby3gN3rhWTT8vaFYhyi","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_lLNpD","description":"Configure an engine in Cortex XSOAR 8.14 On-prem to call the server without a proxy.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"Mlj5My797N19uwbhJfJz","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_lLNpD","description":"Use NGINX as a reverse proxy for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"},{"label":"Configure the engine to call the server without using a proxy"}]},{"id":"0EjeQka9Soxg122Cx21R","title":"Configure an engine to use custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_lLNpD","description":"Configure custom certificate trust for engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"xrSyp1YBaUGg1hvWGd8R","title":"Use an engine in an integration","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_lLNpD","description":"Use engines in Cortex XSOAR 8.14 On-prem to fetch alerts and run integration commands.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"EqmjxcCsuE5neBhdIbjt","title":"Run a script using an engine","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_lLNpD","description":"Run scripts on engines in Cortex XSOAR 8.14 On-prem to distribute workload and improve performance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"XH4wnXTBFTDhCfWfCZSc","title":"Troubleshoot engines","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/troubleshoot-engines","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot engines in Cortex XSOAR 8.14 On-prem by accessing logs and errors.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"WEZRIjis2g64kWzuFaly","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot integrations running on engines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"eFdPCHpEDuZJ2cYVy8Qu","title":"Remote Repository Management","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/remote-repository-management","siteSpaceId":"sitesp_lLNpD","description":"Manage remote repositories for content development and production deployment in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"u7CPFqTjLFsmLXMLKhbW","title":"Content management in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/remote-repository-management/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Manage content with remote repositories, local versions, or CI/CD in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"UEeFRSeXm3LRGyq4D9hk","title":"Set up a private remote repository","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/remote-repository-management/set-up-a-private-remote-repository","siteSpaceId":"sitesp_lLNpD","description":"Set up a private Git remote repository for content synchronization in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"x03Q6z1gnZS8aDP5xtIw","title":"Push content from a development tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/remote-repository-management/push-content-from-a-development-tenant","siteSpaceId":"sitesp_lLNpD","description":"Push content from a development tenant to a remote repository in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"fMvIFgJ7gpPSN2QLSWAC","title":"Install content on a production tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/remote-repository-management/install-content-on-a-production-tenant","siteSpaceId":"sitesp_lLNpD","description":"Install content from a remote repository on a production tenant in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"is0LC3wrDucGEGfX0h7n","title":"Remote repository troubleshooting","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot remote repository configuration and content synchronization in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"iMkEiMr914HMYKYClVEi","title":"Users and Roles Management","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management","siteSpaceId":"sitesp_lLNpD","description":"Manage users, roles, groups, and authentication in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"ukbdcMmBsd9AiI95HvnG","title":"Users and roles in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/users-and-roles-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Configure users, roles, user groups, and authentication in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"r6WNaF0l6kMqZBCdtuGl","title":"Roles management","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/roles-management","siteSpaceId":"sitesp_lLNpD","description":"Configure predefined and custom roles in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"mVGtB38kTw1C2b1H5sXA","title":"Role-based permissions","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/roles-management/role-based-permissions","siteSpaceId":"sitesp_lLNpD","description":"Review role-based permissions in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"LkoibFEusjr2u9NnT8Th","title":"Manage roles in the Cortex XSOAR tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/roles-management/manage-roles-in-the-cortex-xsoar-tenant","siteSpaceId":"sitesp_lLNpD","description":"Create and manage custom roles in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"MC5vd0wcX7SCy0JNfLo8","title":"User group management","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/user-group-management","siteSpaceId":"sitesp_lLNpD","description":"Create user groups and assign users and roles in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"X755uCDfZUnGhrJkXDuW","title":"Set up authentication","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/set-up-authentication","siteSpaceId":"sitesp_lLNpD","description":"Configure local, SAML SSO, or LDAP authentication in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"5JiimwTvgNft8nJKJj21","title":"Create users in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/create-users-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Create local users with username and password access in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"lTl1d4AMUSDlrTq8Ocqv","title":"Authenticate users using SSO","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_lLNpD","description":"Configure SSO authentication for users in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"OFjFDKPiVoZj15KLluib","title":"Authenticate users using Active Directory or OpenLDAP","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-active-directory-or-openldap","siteSpaceId":"sitesp_lLNpD","description":"Configure Active Directory or OpenLDAP authentication in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"v34IpjKZKLIzz4VwUe6H","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_lLNpD","description":"Configure Okta as a SAML 2.0 identity provider for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"202Ban0gnBqwdV3pRCcc","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_lLNpD","description":"Configure Microsoft Entra ID as a SAML 2.0 identity provider for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"rGTwkHXlbZlxXgRZpshh","title":"User management","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/user-management","siteSpaceId":"sitesp_lLNpD","description":"Invite users and assign roles and groups in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"Acfw2kJTdkAy4VBUSMIS","title":"Configure a password policy","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/users-and-roles-management/configure-a-password-policy","siteSpaceId":"sitesp_lLNpD","description":"Configure password policies in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"r6Ds0cgtHUWe7nlwd0n0","title":"Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace","siteSpaceId":"sitesp_lLNpD","description":"Download content packs for your use case in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"sNuFDAHdE4SS8rkF82XX","title":"Cortex Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/cortex-marketplace","siteSpaceId":"sitesp_lLNpD","description":"Find content packs by use case, integration, and category in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"xysbliMGsxsU6P6m6Fjt","title":"Content packs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/content-packs","siteSpaceId":"sitesp_lLNpD","description":"Browse and download content packs for your use case in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"u9Kjb1sZKjgVIDIxzhLE","title":"Content Pack Support Types","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/content-pack-support-types","siteSpaceId":"sitesp_lLNpD","description":"Understand content pack support types in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"jvMgcIUNpeQhM0CQInJI","title":"Manage content packs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/manage-content-packs","siteSpaceId":"sitesp_lLNpD","description":"Install, update, revert, and delete content packs in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"X6dOqawNP6C8KXCyRHAe","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_lLNpD","description":"Use the Deployment Wizard to configure your use case in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"4rO7WccctgylgMP3v7SM","title":"Marketplace FAQs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_lLNpD","description":"Find answers to common content pack questions in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"GJGkYiRX7kArpM0WRCJd","title":"Content pack update notifications","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_lLNpD","description":"Enable update notifications for content packs in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"9fFnhgK7eE88LyRkm7tE","title":"Customize content pack notifications","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_lLNpD","description":"Customize content pack update notification schedules in Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack update notifications"}]},{"id":"9mrRLtoLL4JwTYx3h0Im","title":"Content pack contributions","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_lLNpD","description":"Create and submit content packs to Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"4WTcf4GfeodUCYmi8ZJ1","title":"Create a content pack","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_lLNpD","description":"Create and submit a content pack to Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"rO261Q9RzCjrbETVRC3l","title":"Resubmit a content pack","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_lLNpD","description":"Resubmit an updated content pack from Cortex XSOAR 8.14 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"qEzLYueybUkC0u4Wnqxz","title":"Integrations","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations","siteSpaceId":"sitesp_lLNpD","description":"Configure, manage, and troubleshoot integrations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"VNUeQ1rtwxPI4IrwqvhS","title":"Integration use cases","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/integration-use-cases","siteSpaceId":"sitesp_lLNpD","description":"Explore integration use cases for security operations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"REqoJXgMXajwoHoTJc1i","title":"Configure integrations","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/configure-integrations","siteSpaceId":"sitesp_lLNpD","description":"Configure integrations and create custom integrations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"qZV7JUWfyekmMqIY6QEA","title":"Change the Docker image in an integration or script","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_lLNpD","description":"Change Docker images for integrations and scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"wLxwzd6WLVcfqdJdG8bA","title":"Connect your engine to an image registry","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/connect-your-engine-to-an-image-registry","siteSpaceId":"sitesp_lLNpD","description":"Connect an engine to an authenticated image registry in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"is2dhqrk7YLEWAXL9V2D","title":"Pull images from a private image registry","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/pull-images-from-a-private-image-registry","siteSpaceId":"sitesp_lLNpD","description":"Pull images from a private registry for Cortex XSOAR 8.14 On-prem integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"Wwtre2vSi4qkWYVtC7wV","title":"Manage credentials","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/manage-credentials","siteSpaceId":"sitesp_lLNpD","description":"Manage credentials for integrations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"GyfawtpHJ5ZjJdLCB1G4","title":"Add an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/add-an-integration-instance","siteSpaceId":"sitesp_lLNpD","description":"Set up an integration instance to ingest incidents and indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"eJupUkVOsVfLJfNMS0Bl","title":"Fetch incidents from an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/add-an-integration-instance/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_lLNpD","description":"Configure an integration instance to fetch incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"nHEMNp4FhyuEevDAJlMK","title":"Receive notifications on an incident fetch error","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/add-an-integration-instance/receive-notifications-on-an-incident-fetch-error","siteSpaceId":"sitesp_lLNpD","description":"Receive incident fetch error notifications from integrations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"dTuuIMda4VGRwiaWFmpq","title":"Configure integration permissions","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/add-an-integration-instance/configure-integration-permissions","siteSpaceId":"sitesp_lLNpD","description":"Restrict integration commands to specific roles in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"UPDaWF0Rp7H6Z7lnKbWf","title":"Troubleshoot integrations","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/add-an-integration-instance/troubleshoot-integrations","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot integration issues in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"2PNWJwKTO40Kdi2tcioT","title":"Integration commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/integration-commands-in-the-cli","siteSpaceId":"sitesp_lLNpD","description":"Run integration commands from the CLI in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"5qoDJyd8nCQBVITk2qfp","title":"Forward requests to long-running integrations","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_lLNpD","description":"Configure long-running integrations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"lC1cBI341j4LQ87DvBWf","title":"Incident configuration","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration","siteSpaceId":"sitesp_lLNpD","description":"Configure incident types, fields, layouts, and workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"qiRcvFzYzkAo6QxmbNpY","title":"Incident lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-lifecycle","siteSpaceId":"sitesp_lLNpD","description":"Understand the incident lifecycle in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"V1EFfZOe8Duqp3JGJBIH","title":"Incident Customization","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization","siteSpaceId":"sitesp_lLNpD","description":"Create and edit incident types, fields, and layouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"DQVc2lym5Q19vGw7SDvG","title":"Use incident context data","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/use-incident-context-data","siteSpaceId":"sitesp_lLNpD","description":"Use context data to customize incident layouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"v7WGvUDpSbejf9dSVt6W","title":"Create an incident type","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_lLNpD","description":"Create and edit incident types in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"ylwiMLgn2NeJ6RRZl6lV","title":"Create an incident field","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field","siteSpaceId":"sitesp_lLNpD","description":"Create custom incident fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"rtsh8SanqLTcWwCFnRoJ","title":"Incident field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/incident-field-trigger-scripts","siteSpaceId":"sitesp_lLNpD","description":"Configure incident field trigger scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"dhtivQZmHcx4J2Zx4Ydv","title":"Create dynamic fields","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/create-dynamic-fields","siteSpaceId":"sitesp_lLNpD","description":"Create dynamic incident fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"J5TkfQUkXQRD4QHWcNHz","title":"Troubleshoot incident fields","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/troubleshoot-incident-fields","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot incident fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"8lIZv6yyO6mWV2n9MI9D","title":"Incident layout customization","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization","siteSpaceId":"sitesp_lLNpD","description":"Customize incident layouts to display relevant data in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"638cjR0QtTWwFh9xHq1H","title":"Examples of using scripts in incident layouts","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization/examples-of-using-scripts-in-incident-layouts","siteSpaceId":"sitesp_lLNpD","description":"Use scripts in incident layouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Incident layout customization"}]},{"id":"DmDcIJO2sSPt6y5PxIWi","title":"Create an evidence field","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/create-an-evidence-field","siteSpaceId":"sitesp_lLNpD","description":"Create custom evidence fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"cMZqEzoa5zeyYoOlasdm","title":"Classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/classification-and-mapping","siteSpaceId":"sitesp_lLNpD","description":"Classify and map integration data in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"8fAp4QPWM01YGxT2vyQz","title":"Create an incident classifier","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-classifier","siteSpaceId":"sitesp_lLNpD","description":"Create incident classifiers for integration events in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"aWKGzvZaiyT3XB9y53B3","title":"Create an incident mapper","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-mapper","siteSpaceId":"sitesp_lLNpD","description":"Create and apply incident mappers to integrations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"o8zGAPo5eqP3mqFeD1Eh","title":"Set up incident mirroring","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/set-up-incident-mirroring","siteSpaceId":"sitesp_lLNpD","description":"Set up integrations to mirror incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"2kw7C5h89nnLkR3gbyPH","title":"Incident deduplication in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/incident-deduplication-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Deduplicate incidents with rules and playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"qF27LDmzlk0s1WAgTvcA","title":"Pre-process rules","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/pre-process-rules","siteSpaceId":"sitesp_lLNpD","description":"Create pre-process rules for incoming incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"LeBqTOSuWr8s4zXkzTTx","title":"Use post-processing scripts in an incident","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/use-post-processing-scripts-in-an-incident","siteSpaceId":"sitesp_lLNpD","description":"Use post-processing scripts before closing incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"lTjsgtacTIf8L9GrsHXU","title":"Customize incident close reasons","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/customize-incident-close-reasons","siteSpaceId":"sitesp_lLNpD","description":"Customize incident close reasons in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"vcwhMBzIQJrYbiBwCgCD","title":"Configure inline value fields","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/configure-inline-value-fields","siteSpaceId":"sitesp_lLNpD","description":"Configure inline value fields in incident layouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"F8TBLq9jZievYiItsA3G","title":"Configure incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete","siteSpaceId":"sitesp_lLNpD","description":"Export and delete incidents using external storage in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"FDVIKwkzIfJEysYVedXV","title":"Configure access to external storage","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/configure-access-to-external-storage","siteSpaceId":"sitesp_lLNpD","description":"Configure external storage for incident exports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"ODzvyrF3di6jxTo4xVRo","title":"Schedule incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/schedule-incident-export-and-delete","siteSpaceId":"sitesp_lLNpD","description":"Schedule incident exports and deletions to external storage in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"Kn0xRRSv5LSYT63FJwEL","title":"Export an incident to CSV using the UTF8-BOM format","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_lLNpD","description":"Export incidents to UTF8-BOM CSV files in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"UWTC6yAA9iKRpO1B8fbB","title":"Amazon S3 configuration example","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/incident-configuration/amazon-s3-configuration-example","siteSpaceId":"sitesp_lLNpD","description":"Configure Amazon S3 storage for incident exports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"P5XjKe3pDbu3cntfBCGU","title":"Playbooks","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_lLNpD","description":"Build automated security workflows with playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"O4Zm72uMT50xcxQO6avc","title":"What is a playbook?","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/what-is-a-playbook","siteSpaceId":"sitesp_lLNpD","description":"Learn how playbooks automate security processes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"e1k7jBOHNQu8svpfyBeF","title":"Playbook development checklist","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_lLNpD","description":"Follow the playbook development checklist in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"qdegEAtcxfTStgsTnWaU","title":"Plan your playbook","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/plan-your-playbook","siteSpaceId":"sitesp_lLNpD","description":"Plan effective security automation workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"P2WjYMM0nEIrX6WF8c0L","title":"Develop your playbook","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook","siteSpaceId":"sitesp_lLNpD","description":"Create and customize playbooks for your workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"RvjG4Rn97FgnnLy9uNe1","title":"Task 1. Choose from existing playbooks or create your own","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-1.-choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_lLNpD","description":"Choose, customize, or create playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"n2FIJfwUQMLfsSpbFj96","title":"Task 2. Configure playbook settings","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-2.-configure-playbook-settings","siteSpaceId":"sitesp_lLNpD","description":"Configure playbook settings for automated workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"3aj7KoDULIIhk95Ayvi7","title":"Task 3. Add tasks","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks","siteSpaceId":"sitesp_lLNpD","description":"Add tasks to playbook workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"GORy1tpzjkBSq9pLWJxt","title":"Set playbook inputs and outputs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/set-playbook-inputs-and-outputs","siteSpaceId":"sitesp_lLNpD","description":"Define task inputs and outputs for playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"ogV6Z30CmG0qfhFw0QEx","title":"Create a section header","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-section-header","siteSpaceId":"sitesp_lLNpD","description":"Organize playbook tasks with section headers in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"zxnvBJnH2KsoSCdJBVsI","title":"Create a standard task","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-standard-task","siteSpaceId":"sitesp_lLNpD","description":"Create standard automated tasks in Cortex XSOAR 8.14 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"KjABqnx5KslsP8jrZqmV","title":"Create a conditional task","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-conditional-task","siteSpaceId":"sitesp_lLNpD","description":"Create conditional tasks for playbook logic in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"rC64nlbutqTRUrDC9swj","title":"Create a communication task","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-communication-task","siteSpaceId":"sitesp_lLNpD","description":"Create communication tasks for playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"oXdsUp4aLyJIWPeirh0X","title":"Configure script error handling in a playbook","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_lLNpD","description":"Configure script error handling for playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"wTQtKNvQpGa3R31KP1VW","title":"Task 4. Add inline documentation","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-4.-add-inline-documentation","siteSpaceId":"sitesp_lLNpD","description":"Add inline documentation to playbook workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"KDDZp2LkZGjUIjUl3Fbf","title":"Task 5. Add custom playbook features","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-5.-add-custom-playbook-features","siteSpaceId":"sitesp_lLNpD","description":"Add custom features to playbook workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"cruh1aeajHRD8evuRDb7","title":"Task 6. Test and debug the playbook","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-6.-test-and-debug-the-playbook","siteSpaceId":"sitesp_lLNpD","description":"Test and debug playbook workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"EYpFR363gCBHzZ2EKuI3","title":"Task 7. Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/task-7.-manage-playbook-content","siteSpaceId":"sitesp_lLNpD","description":"Manage playbook content and versions in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"sjudCBdndUIL3UR7w2UQ","title":"Customize a playbook for a phishing use case example","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/develop-your-playbook/customize-a-playbook-for-a-phishing-use-case-example","siteSpaceId":"sitesp_lLNpD","description":"Customize a phishing response playbook in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"uYvlMVmSK9khjiH25W1p","title":"Customize your playbook","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook","siteSpaceId":"sitesp_lLNpD","description":"Customize playbooks with scripts, data, and automation in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"IxB5RsLXBwSOD8SwHl10","title":"Customize the SOC name","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook/customize-the-soc-name","siteSpaceId":"sitesp_lLNpD","description":"Customize the SOC name for communication tasks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"q40HO27jkA8QMiocL8Jk","title":"Configure a sub-playbook","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook/configure-a-sub-playbook","siteSpaceId":"sitesp_lLNpD","description":"Configure sub-playbooks and loops in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"dVUr04YA2W9YjyfZ94zL","title":"Filter and transform data","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_lLNpD","description":"Filter and transform workflow data in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"jW3dSpfqAU4nqVg2eh4t","title":"Extract indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_lLNpD","description":"Extract and enrich indicators in playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"6d3FYLuXSXeayeNew0nL","title":"Extend context","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook/extend-context","siteSpaceId":"sitesp_lLNpD","description":"Extend playbook context with integration data in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"I8PBUVfZZxz7i0NcoeQA","title":"Set and update incident fields","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook/set-and-update-incident-fields","siteSpaceId":"sitesp_lLNpD","description":"Set and update incident fields with playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"sj8AHptgAfHHNyR74nDK","title":"Playbook polling","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/customize-your-playbook/playbook-polling","siteSpaceId":"sitesp_lLNpD","description":"Configure playbook polling for external processes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"zkAB6xgFcAbIedP19mJm","title":"Scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/scripts","siteSpaceId":"sitesp_lLNpD","description":"Create, edit, and manage automation scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"O11WU1bIPcuELQ63JLLz","title":"Use existing scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/scripts/use-existing-scripts","siteSpaceId":"sitesp_lLNpD","description":"Use and edit scripts in playbooks and the War Room in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"S3wkIo2Qi3KHocQnrM36","title":"Create a script","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/scripts/create-a-script","siteSpaceId":"sitesp_lLNpD","description":"Create and edit automation scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"l79UPml1KpGTvCSSaXz4","title":"Debug your playbook","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/debug-your-playbook","siteSpaceId":"sitesp_lLNpD","description":"Debug playbooks with breakpoints and overrides in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"eqKllee8iLRVjeawr6yK","title":"Troubleshoot playbook performance","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/debug-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot playbook performance in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Debug your playbook"}]},{"id":"MsMlXiHG7IZgAqEUgMKN","title":"Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/manage-playbook-content","siteSpaceId":"sitesp_lLNpD","description":"Manage playbook content with versions and remote repositories in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"CYc5QecS6XRKrbmNFcZn","title":"Playbook best practices","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_lLNpD","description":"Follow playbook development best practices in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"9RjCvk6YTtcTPgUp2Zod","title":"Lists","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/lists","siteSpaceId":"sitesp_lLNpD","description":"Create and manage lists for playbooks and scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"6DA35KpLb3z0SqdOW6wl","title":"What is a list?","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/lists/what-is-a-list","siteSpaceId":"sitesp_lLNpD","description":"Learn how lists store reusable data in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"Ub8pGs0f6LtHD0ewESpz","title":"Create a list","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_lLNpD","description":"Create reusable lists for playbooks, scripts, and the CLI in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"NLN6Mrsp1aAvYR6IT27r","title":"List commands","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/lists/list-commands","siteSpaceId":"sitesp_lLNpD","description":"Use list commands in the CLI, playbooks, and scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"iyMxrbgzo4plyF0h5QiD","title":"Use cases: JSON lists","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/lists/use-cases-json-lists","siteSpaceId":"sitesp_lLNpD","description":"Manage JSON lists for automations and playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"51RGwU4wq8uZfe0pl4tH","title":"Transform a list into an array","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_lLNpD","description":"Transform list values into arrays for tasks and mappings in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"HSBDf4IEQz4NLuoW35Z6","title":"Jobs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_lLNpD","description":"Create scheduled and event-triggered jobs for playbooks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"4c3wMVxDc3wwvUcO6oO3","title":"Manage jobs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/jobs/manage-jobs","siteSpaceId":"sitesp_lLNpD","description":"Manage scheduled and feed-triggered playbook jobs in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"JW5GAdHi7TyfwTuWeenF","title":"Create a time triggered job","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_lLNpD","description":"Create time-triggered and feed-triggered jobs in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"A2OMuOJU79ufi2X3Rnmi","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_lLNpD","description":"Create jobs triggered by feed changes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"RRMPvNdth9O75NBpiWhZ","title":"Create jobs to process indicators example","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/jobs/create-jobs-to-process-indicators-example","siteSpaceId":"sitesp_lLNpD","description":"Create jobs that process indicators and send them to a SIEM in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"NykD189V5P36omRmbC38","title":"SLAs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas","siteSpaceId":"sitesp_lLNpD","description":"Configure service-level agreements for investigations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"YCgYXtaS8g93zyErSTxT","title":"SLAs in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/slas-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Learn how SLA fields track investigation deadlines in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"cSHyBtiN9RYR9x2qjzT3","title":"Configure an SLA in an incident type","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/configure-an-sla-in-an-incident-type","siteSpaceId":"sitesp_lLNpD","description":"Configure SLA deadlines for incident types in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"e2fTqozRevvZq24U4jRq","title":"Configure Timer/SLA fields","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/configure-timersla-fields","siteSpaceId":"sitesp_lLNpD","description":"Create timer and SLA fields with triggered scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"nkpx6kjngmR5F038YBHf","title":"Configure a playbook to run Timers/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/configure-a-playbook-to-run-timersslas","siteSpaceId":"sitesp_lLNpD","description":"Configure playbooks to manage SLA timers in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"KPn7BNkbuMj3VVKjrMpc","title":"Automate changes to incident fields using SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/automate-changes-to-incident-fields-using-sla-scripts","siteSpaceId":"sitesp_lLNpD","description":"Automate incident field updates after SLA breaches in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"MumsrnjBzVuwKi5P9PDa","title":"Create SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/create-sla-scripts","siteSpaceId":"sitesp_lLNpD","description":"Create scripts that respond to SLA breaches in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"AKYPXhzovOH1G3PaupKx","title":"Use SLA and Timer field commands manually in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/use-sla-and-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_lLNpD","description":"Use SLA and timer field commands in the CLI in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"quCcaeIP11omd1Gqryzr","title":"Configure the Global Risk Threshold","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_lLNpD","description":"Configure the global SLA risk threshold in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"WoXdbF0gmVahOtun8H0f","title":"Search incidents for Timer/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/slas/search-incidents-for-timerslas","siteSpaceId":"sitesp_lLNpD","description":"Search incidents by SLA status and timer fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"6JCBXzOzfj5mq9T9Fb8c","title":"Dashboards and Reports","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports","siteSpaceId":"sitesp_lLNpD","description":"Create dashboards, reports, and widgets in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"MuFNVAeWvRkfTiP3SX9o","title":"Dashboards","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/dashboards","siteSpaceId":"sitesp_lLNpD","description":"Create, customize, and share dashboards in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"l0K1lRLFKAtap4lYRjTC","title":"Dashboard actions","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/dashboards/dashboard-actions","siteSpaceId":"sitesp_lLNpD","description":"Create, import, share, and manage dashboards in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"KU4M9irbUedHFuBhxeT0","title":"Manage dashboards","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/dashboards/manage-dashboards","siteSpaceId":"sitesp_lLNpD","description":"Manage dashboard layouts, widgets, and sharing in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"k2N5fZu4Gl9Yxyrbjw9a","title":"Reports","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/reports","siteSpaceId":"sitesp_lLNpD","description":"Create, customize, and schedule reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"YLHJIJzy9ZQ9HdGvJAZr","title":"Manage reports","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/reports/manage-reports","siteSpaceId":"sitesp_lLNpD","description":"Manage report widgets, schedules, timezones, and formats in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"8cZgSKMChxsthJtexSrd","title":"Configure the timezone in a report","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/reports/configure-the-timezone-in-a-report","siteSpaceId":"sitesp_lLNpD","description":"Configure report timezones and time formats in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"q6URcU2aeGGOi24VQQ63","title":"Troubleshoot script timeout for reports","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-script-timeout-for-reports","siteSpaceId":"sitesp_lLNpD","description":"Configure report script timeouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"QjnmusuzARLPpTtU15NO","title":"Troubleshoot overlapping text and extra pages","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-overlapping-text-and-extra-pages","siteSpaceId":"sitesp_lLNpD","description":"Fix overlapping text and extra pages in Cortex XSOAR 8.14 On-prem PDF reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"fAoe557f4E6yOEwPBM8l","title":"Widgets","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets","siteSpaceId":"sitesp_lLNpD","description":"Create and edit widgets for dashboards and reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"TixOVvpI85SdEt3dHxB6","title":"Widget customization","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/widget-customization","siteSpaceId":"sitesp_lLNpD","description":"Customize widgets to analyze and display data in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"PNjgdV6Neb5yMIMVD2zU","title":"Create a widget using the widget builder","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_lLNpD","description":"Create widgets with the Widget Builder in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"qixmhOw0VCP1ziCjphjL","title":"Create a custom widget using a JSON file","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_lLNpD","description":"Create custom JSON widgets for dashboards and reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"TjFbwWhT2FxzKrbdFW5F","title":"Create a custom widget using a script","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-script","siteSpaceId":"sitesp_lLNpD","description":"Create custom script-based widgets in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"QlxgLEDaToyn10M2RLEm","title":"Create a widget from an incident","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-incident","siteSpaceId":"sitesp_lLNpD","description":"Create widgets from incident searches in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"qmCjBTF2Gu4tmSlcJKry","title":"Create a widget from an indicator","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-indicator","siteSpaceId":"sitesp_lLNpD","description":"Create widgets from indicator searches in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"FiqtykAU1DWEupOHY64e","title":"Edit a widget","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/edit-a-widget","siteSpaceId":"sitesp_lLNpD","description":"Edit widgets in the library, dashboards, and reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"0voCcbUa2dUt4lmuPdLO","title":"Add a widget in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/add-a-widget-in-the-war-room","siteSpaceId":"sitesp_lLNpD","description":"Add script-based widgets in the War Room in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"ppXQ1GHArss6FQ8UnLC5","title":"Saved By Dbot (ROI) Widget","pathname":"/cortex-xsoar-8-on-prem/8.14/configure-cortex-xsoar/dashboards-and-reports/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_lLNpD","description":"Customize the Saved by Dbot ROI widget in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"tg2Qctv8DGgMSu7ic5tf","title":"Incidents and indicators investigation","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation","siteSpaceId":"sitesp_lLNpD","description":"Investigate incidents and indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"}]},{"id":"J1ZKTgaj5fc5gnON2wpd","title":"Incidents","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incidents","siteSpaceId":"sitesp_lLNpD","description":"Understand incidents for investigation and remediation in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"HYKFx1z6wwVxSxvvR5YW","title":"Incident management","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management","siteSpaceId":"sitesp_lLNpD","description":"View and manage incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"H45LoKkLuEJtAMerZwtk","title":"Search for incidents","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/search-for-incidents","siteSpaceId":"sitesp_lLNpD","description":"Search for incidents and save search queries in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"FKUVWry0VJedLp4FuJC9","title":"Create an incident","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/create-an-incident","siteSpaceId":"sitesp_lLNpD","description":"Create and ingest incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"dFvtin25MexoCOxBpKmy","title":"Export incidents","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents","siteSpaceId":"sitesp_lLNpD","description":"Export incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"hNlhi3nhwKraXZBvnv9b","title":"Export incidents from the Incidents table","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-from-the-incidents-table","siteSpaceId":"sitesp_lLNpD","description":"Export incidents from the Incidents table as Excel, CSV, or JSON files in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"F202dvakVI2l1hrNNu38","title":"Export incidents on demand","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-on-demand","siteSpaceId":"sitesp_lLNpD","description":"Export incidents on demand to external storage in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"yzhpsyNbaTwUJ6zMVZec","title":"Investigate an incident","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident","siteSpaceId":"sitesp_lLNpD","description":"Investigate incidents and take remediation steps in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"2foYKQBesKYCRh6BbOkE","title":"Retain incidents","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/retain-incidents","siteSpaceId":"sitesp_lLNpD","description":"Retain incidents for investigation in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"lzK2YGTXEpHhVwuqCc2t","title":"Limit access to investigations using access control","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/limit-access-to-investigations-using-access-control","siteSpaceId":"sitesp_lLNpD","description":"Limit access to incidents and investigations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"IYolQgyjUib4Nc1142CY","title":"Incident Tasks","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/incident-tasks","siteSpaceId":"sitesp_lLNpD","description":"Manage playbook and to-do tasks in Cortex XSOAR 8.14 On-prem investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"HmYmKarcdyJMnwXaEuyN","title":"Use the War Room in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_lLNpD","description":"Use the War Room during investigations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"6kUWZuPyMSABkFOOyn4X","title":"Schedule a command in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/schedule-a-command-in-the-war-room","siteSpaceId":"sitesp_lLNpD","description":"Schedule War Room commands in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"iwDc3cwc0mOY5xd1vIoE","title":"Run commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/run-commands-in-the-cli","siteSpaceId":"sitesp_lLNpD","description":"Run system, integration, and script commands from the Cortex XSOAR 8.14 On-prem CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"TyZPLslhxALzCmVvrpPj","title":"Evidence Handling","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/evidence-handling","siteSpaceId":"sitesp_lLNpD","description":"Add and manage investigation evidence in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"WRRRnwGq9Nm1ZNGt9NmR","title":"Use the Work Plan in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_lLNpD","description":"Monitor and manage playbook workflows in Cortex XSOAR 8.14 On-prem Work Plans.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"PSJLuRx4XIfYyB7LafUq","title":"Investigate an incident using the canvas","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_lLNpD","description":"Visually map incidents with the investigation canvas in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"M5EDpu9q5GyA1cxjDhPX","title":"Link incidents","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/link-incidents","siteSpaceId":"sitesp_lLNpD","description":"Link related incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"XDmml60Cgcd3mnf5IH6o","title":"Create an incident summary report","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/create-an-incident-summary-report","siteSpaceId":"sitesp_lLNpD","description":"Create and save incident summary reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"eeS3KykoXQSJGs0QjrcU","title":"Manage indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators","siteSpaceId":"sitesp_lLNpD","description":"Create, manage, and search indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"Hf2Bs5O7uxB49RXggl9Q","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/query-indicators","siteSpaceId":"sitesp_lLNpD","description":"Query indicators in the Cortex XSOAR 8.14 On-prem threat intel library.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"NAtxTr4BRTjNMQr0Hf3u","title":"View indicator relationships in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/view-indicator-relationships-in-an-investigation","siteSpaceId":"sitesp_lLNpD","description":"View and create indicator relationships in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"uvOo8WWuMqmJQe9hobHO","title":"Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management","siteSpaceId":"sitesp_lLNpD","description":"Manage threat intelligence, indicators, and reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"}]},{"id":"aAhzr1Q7fINTBsQvuaBf","title":"Get started with Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_lLNpD","description":"Get started with Threat Intel Management in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"3UwYc2yenB0nlHAT51LM","title":"What is Threat Intel Management?","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_lLNpD","description":"Learn Threat Intel Management concepts and use cases in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"uOFk4cCI3BLAkVVICYjU","title":"Threat Intel Management use cases","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_lLNpD","description":"Explore Threat Intel Management use cases in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"OpkYeWDtcuCXq1scVgfx","title":"Indicator concepts","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_lLNpD","description":"Learn core indicator concepts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"Ui6jO40PoHSKQnghVtiA","title":"Indicator lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_lLNpD","description":"Understand the indicator lifecycle in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"eaM4dAq11j0QWUdwHGpR","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_lLNpD","description":"Understand Threat Intel Management roles in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"JovomoV7yyMmnAvstrhe","title":"Indicator configuration","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_lLNpD","description":"Configure indicator types, fields, layouts, and extraction in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"T9vagC1VONkBvoi9FDmD","title":"Customize indicator types, fields, and layouts","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts","siteSpaceId":"sitesp_lLNpD","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"VqLfAVI5RmRlKMmyXGLy","title":"Create an indicator type","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type","siteSpaceId":"sitesp_lLNpD","description":"Create custom indicator types in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"daEmGJtCbjhOrok7nV5R","title":"Indicator type profile","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-type-profile","siteSpaceId":"sitesp_lLNpD","description":"Configure indicator type profiles in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"4XdHtQ2z6UHQjFgUdGXh","title":"File indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/file-indicators","siteSpaceId":"sitesp_lLNpD","description":"Work with file indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"velIon4a6S1hwDf4OrOR","title":"Formatting scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/formatting-scripts","siteSpaceId":"sitesp_lLNpD","description":"Use indicator formatting scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"tEzXfuNV5eOwbc9uDHSb","title":"Enhancement scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/enhancement-scripts","siteSpaceId":"sitesp_lLNpD","description":"Use indicator enhancement scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"SqfqYeEBLSBF4xhXGugg","title":"Reputation scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/reputation-scripts","siteSpaceId":"sitesp_lLNpD","description":"Use indicator reputation scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"VLTTMx6oschq4XoaNytG","title":"Reputation commands","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/reputation-commands","siteSpaceId":"sitesp_lLNpD","description":"Use indicator reputation commands in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"0ukOO3gUVKQKXsml9raN","title":"Map custom indicator fields","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/map-custom-indicator-fields","siteSpaceId":"sitesp_lLNpD","description":"Map custom indicator fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"s9YqYK56uZZkYf04vjTg","title":"Create an indicator field","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field","siteSpaceId":"sitesp_lLNpD","description":"Create custom indicator fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"6vZCf2LOqbeOvMXe8cKK","title":"Indicator fields structure","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-fields-structure","siteSpaceId":"sitesp_lLNpD","description":"Understand indicator field structure in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"IWTpk4A1SjsiSnSGVIEH","title":"Indicator field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-field-trigger-scripts","siteSpaceId":"sitesp_lLNpD","description":"Configure indicator field trigger scripts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"8kbx82iqBMngUXVeoBoX","title":"Indicator layout customization","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-layout-customization","siteSpaceId":"sitesp_lLNpD","description":"Customize indicator layouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"Owybq20OdxHocwqQHEQE","title":"Indicator classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_lLNpD","description":"Classify and map indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"kaAiz26WOOyaePeb4mpY","title":"Indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_lLNpD","description":"Extract and enrich indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"OeXYcg4a1YzhK0LNnuyc","title":"Indicator extraction modes","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_lLNpD","description":"Choose indicator extraction modes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"cawaGYm5wBe1SXAstDD8","title":"Create indicator extraction rules for an incident type","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_lLNpD","description":"Create indicator extraction rules in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"wAMJtT3Wyz2PA8lfXdkn","title":"Set the indicator extraction mode for a playbook task","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/set-the-indicator-extraction-mode-for-a-playbook-task","siteSpaceId":"sitesp_lLNpD","description":"Set extraction modes for playbook tasks in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"5gJneVvvoutya9ZWgjNN","title":"Disable indicator extraction for scripts or integrations","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/disable-indicator-extraction-for-scripts-or-integrations","siteSpaceId":"sitesp_lLNpD","description":"Disable indicator extraction in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"reCZtYtjUG44WqGAcvNu","title":"Troubleshoot indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/troubleshoot-indicator-extraction","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot indicator extraction in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"A6Wd3Cz01FrcGcyCLYmC","title":"Configure the indicator timeline","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-the-indicator-timeline","siteSpaceId":"sitesp_lLNpD","description":"Configure the indicator timeline in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"azfIatxKlDnl9vntrzhn","title":"Configure indicator expiration","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-indicator-expiration","siteSpaceId":"sitesp_lLNpD","description":"Configure indicator expiration in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"i1jSyX8oe20w6jH9Roj8","title":"Configure Threat Intel feed integrations","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intel-feed-integrations","siteSpaceId":"sitesp_lLNpD","description":"Configure threat intelligence feed integrations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"wgkCqVqBC7ms7iPbyQgN","title":"Exclude indicators from enrichment","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_lLNpD","description":"Exclude indicators from enrichment in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"aH6Eyq3a8f9OBfw9Rtmp","title":"Configure Threat Intelligence Management playbooks to process indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intelligence-management-playbooks-to-process-indicators","siteSpaceId":"sitesp_lLNpD","description":"Configure TIM playbooks to process indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"c2TYPQp0K36L2Yhf7u1L","title":"Export indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/export-indicators","siteSpaceId":"sitesp_lLNpD","description":"Export indicators and configure external dynamic lists in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"x7dvyt1ac8YGkrXhAuVh","title":"Customize Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports","siteSpaceId":"sitesp_lLNpD","description":"Customize threat intel reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"qS7INjkmISMrbZbVCaQa","title":"Create a Threat Intel Report type","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-type","siteSpaceId":"sitesp_lLNpD","description":"Create and manage threat intel report types in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"93f9XNsZwJYWyqf06hXK","title":"Create a Threat Intel Report field","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-field","siteSpaceId":"sitesp_lLNpD","description":"Create threat intel report fields in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"sOeRqsctayGyYT15Towf","title":"Create a Threat Intel Report layout","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-layout","siteSpaceId":"sitesp_lLNpD","description":"Configure threat intel report layouts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"Ee1lcQNZdYvHwAUsdnzg","title":"Indicator management","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-management","siteSpaceId":"sitesp_lLNpD","description":"Create, manage, and search threat intel indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"95rrn6iuASVGUK3BQFPc","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-management/query-indicators","siteSpaceId":"sitesp_lLNpD","description":"Query indicators in the Cortex XSOAR 8.14 On-prem threat intel library.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator management"}]},{"id":"rueVelbZO6KKnWB2zmmi","title":"Indicator investigation","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_lLNpD","description":"Investigate indicators and relationships in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"CPMKDMzpYH0kJpEqgbDC","title":"Indicator verdict","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_lLNpD","description":"Determine indicator verdicts in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"yCUvXnRcNGzkuC3vQjXP","title":"Extract and enrich an indicator","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_lLNpD","description":"Extract and enrich indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"foDUEbNGOCr7ORI6piYc","title":"Expire an indicator","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_lLNpD","description":"Expire indicators in the Cortex XSOAR 8.14 On-prem CLI or UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"2142ckhuKKYCnIFSbGt5","title":"Manage indicator relationships","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_lLNpD","description":"Manage indicator relationships in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"fb8MzQRmB5OPalQzTeiA","title":"Delete and exclude indicators","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_lLNpD","description":"Delete and exclude indicators in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"GPLtkJSZwV7mTVZxJrQL","title":"Manage Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.14/investigate-and-respond-to-threats/threat-intel-management/manage-threat-intel-reports","siteSpaceId":"sitesp_lLNpD","description":"Manage threat intel reports in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"pU5avwzyK0khy4LbV65Z","title":"Troubleshoot","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot","siteSpaceId":"sitesp_lLNpD","description":"Troubleshoot system errors, diagnostics, and logs in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"JyaOqcfbICU1iuvihKiE","title":"View system status in the System Diagnostics page","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot/view-system-status-in-the-system-diagnostics-page","siteSpaceId":"sitesp_lLNpD","description":"Monitor system status, errors, and resource usage in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"PZNleSK2AgSsxqVWJjYF","title":"View Guard Rails warnings and errors","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot/view-guard-rails-warnings-and-errors","siteSpaceId":"sitesp_lLNpD","description":"Review Guard Rails warnings and errors that affect Cortex XSOAR 8.14 On-prem performance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"zQ6aYy5OZ7gtarzgbQBg","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot/access-logs-and-log-bundles","siteSpaceId":"sitesp_lLNpD","description":"View logs and download log bundles for Cortex XSOAR 8.14 On-prem troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"COG60tK08AFvY6w5TLle","title":"Management audit logs","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot/management-audit-logs","siteSpaceId":"sitesp_lLNpD","description":"View, export, and manage administrative audit logs in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"rPNh7w5KgGp5pdM1ou6m","title":"Manage syslog servers","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot/manage-syslog-servers","siteSpaceId":"sitesp_lLNpD","description":"Configure and manage syslog servers for Cortex XSOAR 8.14 On-prem logging.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"InMPVmMpp0bsc0lR8NC4","title":"Configure log and notification forwarding","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot/configure-log-and-notification-forwarding","siteSpaceId":"sitesp_lLNpD","description":"Forward audit, integration, and Guard Rails logs from Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"8zU3iIRxwL8iKstlzjvw","title":"Integration logs","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/troubleshoot/integration-logs","siteSpaceId":"sitesp_lLNpD","description":"View, filter, and export integration logs for Cortex XSOAR 8.14 On-prem troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"zqXP43HZJbZ8YYdoPGu6","title":"Reference","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference","siteSpaceId":"sitesp_lLNpD","description":"Find product concepts, configuration references, and user guidance in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"lCMtOF6ov6YL0GQ1NETz","title":"Cortex XSOAR concepts","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/cortex-xsoar-concepts","siteSpaceId":"sitesp_lLNpD","description":"Learn essential product concepts and terminology in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"I4mlfuthz9j5E1JBKFq3","title":"How to search in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/how-to-search-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Search Cortex XSOAR 8.14 On-prem using Lucene queries and built-in search tools.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"mGp1Rzqq5JKX0B9oKSMt","title":"How to use markdown in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/how-to-use-markdown-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Use Markdown to format text throughout Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"N32sPBlLUAsH1nqWGc49","title":"User details and preferences","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/user-details-and-preferences","siteSpaceId":"sitesp_lLNpD","description":"Manage user details, preferences, and notifications in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"VMVZ5ewjh1tz5uSo5j6b","title":"Server configurations","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/server-configurations","siteSpaceId":"sitesp_lLNpD","description":"Configure and troubleshoot server settings in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"l2uWLNFTPhD3witydGHI","title":"New user FAQ","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/new-user-faq","siteSpaceId":"sitesp_lLNpD","description":"Find answers to common new-user questions for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"IeI4If06FCaDTkhGQhBQ","title":"Cortex XSOAR API","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/cortex-xsoar-api","siteSpaceId":"sitesp_lLNpD","description":"Generate API keys and make API calls in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"cO9JjizSGvjo9AGAlK97","title":"Telemetry in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/telemetry-in-cortex-xsoar","siteSpaceId":"sitesp_lLNpD","description":"Understand telemetry collection and usage data in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"HH031PQ6qY4ji7ex3Zba","title":"Keyboard shortcuts","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/keyboard-shortcuts","siteSpaceId":"sitesp_lLNpD","description":"Use keyboard shortcuts to work efficiently in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"GTWIQdOiBFahVmzHEtoV","title":"Product support lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/product-support-lifecycle","siteSpaceId":"sitesp_lLNpD","description":"Review the product support lifecycle for Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"dp3ZBBpK8G6hQhL4rUGw","title":"Cortex XSOAR navigation cheat sheet","pathname":"/cortex-xsoar-8-on-prem/8.14/troubleshoot-and-reference/reference/cortex-xsoar-navigation-cheat-sheet","siteSpaceId":"sitesp_lLNpD","description":"Navigate commonly used features and workflows in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"1DOFhRr5fLb1jx1NYA2d","title":"What is Cortex XSOAR multi-tenant?","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/what-is-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_lLNpD","description":"Learn about Cortex XSOAR 8.14 On-prem multi-tenant deployments that provide data segregation while enabling you to manage multiple tenants from a main tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"zKk9Y3lV0qk1rMY95q2H","title":"Onboard Cortex XSOAR multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/onboard-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_lLNpD","description":"Onboard and manage main and child tenants in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"iP3EwvyE98VLTwMYtafQ","title":"Onboarding checklist for multi-tenant deployments","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/onboard-cortex-xsoar-multi-tenant/onboarding-checklist-for-multi-tenant-deployments","siteSpaceId":"sitesp_lLNpD","description":"Follow the onboarding checklist for Cortex XSOAR 8.14 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"3dlJic4bYkLvh818pxpL","title":"Step 1. Install Cortex XSOAR for multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-1.-install-cortex-xsoar-for-multi-tenant","siteSpaceId":"sitesp_lLNpD","description":"Install Cortex XSOAR 8.14 On-prem for a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"pruFlIAdHYZeLpAbGgRm","title":"Step 2. Pair child tenant to main tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-2.-pair-child-tenant-to-main-tenant","siteSpaceId":"sitesp_lLNpD","description":"Pair a child tenant with its main tenant in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"zsB9TfHl1ncg2p2OumHv","title":"Step 3. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-3.-set-up-an-engine","siteSpaceId":"sitesp_lLNpD","description":"Set up engines for tenants in Cortex XSOAR 8.14 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"9HthSjnxONpKWpjBDTFm","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_lLNpD","description":"Set up users, roles, and authentication in Cortex XSOAR 8.14 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"8EgOGm7Em7PlAUSZ9jq3","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-5.-install-and-configure-content","siteSpaceId":"sitesp_lLNpD","description":"Install and configure content in Cortex XSOAR 8.14 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"nEzUh5ZspmPuUehmMO7D","title":"Child tenant management","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_lLNpD","description":"Manage child tenants and their content from the main tenant in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"jwyxNoZMF2zp7HaERBkW","title":"Content management in multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/child-tenant-management/content-management-in-multi-tenant","siteSpaceId":"sitesp_lLNpD","description":"Manage and synchronize content between main and child tenants in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"}]},{"id":"dD8MXNKrEcpBqncamAv4","title":"Add propagation labels to content","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-content","siteSpaceId":"sitesp_lLNpD","description":"Add content propagation labels in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"j8vd0IU3boK1w09oW9G8","title":"Add propagation labels to a child tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-a-child-tenant","siteSpaceId":"sitesp_lLNpD","description":"Add child tenant propagation labels in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"8L3lJBFHCv3YcQygpcw1","title":"Sync content to child tenants","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/child-tenant-management/content-management-in-multi-tenant/sync-content-to-child-tenants","siteSpaceId":"sitesp_lLNpD","description":"Sync content to child tenants in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"YkBY0eKUiNmoYrNRIXLG","title":"Manage content using a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/child-tenant-management/content-management-in-multi-tenant/manage-content-using-a-remote-repository","siteSpaceId":"sitesp_lLNpD","description":"Manage multi-tenant content with a remote repository in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"C47EWa8IlAEUdpoXlJJ9","title":"Incident management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/incident-management-on-the-main-tenant","siteSpaceId":"sitesp_lLNpD","description":"Manage incidents and take action across child tenants in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"KegcHKSSLxAbUdSD9k1H","title":"Manage main tenant users in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/incident-management-on-the-main-tenant/manage-main-tenant-users-in-an-investigation","siteSpaceId":"sitesp_lLNpD","description":"Manage main-tenant users during multi-tenant investigations in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Incident management on the main tenant"}]},{"id":"KYFEAE8APMwdz9Rm3o1E","title":"Run a command on multiple tenants","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/incident-management-on-the-main-tenant/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_lLNpD","description":"Run commands across tenants from main-tenant incidents in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Incident management on the main tenant"}]},{"id":"zbWK4lQ5wbv8LbqCarE0","title":"Indicator management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.14/multi-tenant/indicator-management-on-the-main-tenant","siteSpaceId":"sitesp_lLNpD","description":"View and take action on indicators on the main tenant in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"0TaKeyZAHxjBGVY71jqd","title":"Navigate the Cortex XSOAR 8 On-prem docs","pathname":"/cortex-xsoar-8-on-prem/8.13","siteSpaceId":"sitesp_q8HwM","description":"Navigate the Cortex XSOAR 8.13 On-prem documentation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"PfziZCgA0vx2hpe5dSNS","title":"Get Started with Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/learn-about-cortex-xsoar/readme-1","siteSpaceId":"sitesp_q8HwM","description":"Get started with Cortex XSOAR 8.13 On-prem, including architecture, roles, and licenses.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"lNSCQF7PBkMsdw1LjosK","title":"What is Cortex XSOAR?","pathname":"/cortex-xsoar-8-on-prem/8.13/learn-about-cortex-xsoar/what-is-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Learn about Cortex XSOAR 8.13 On-prem features and capabilities.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"IPDu5IXq352bTjk52Lmu","title":"Cortex XSOAR architecture","pathname":"/cortex-xsoar-8-on-prem/8.13/learn-about-cortex-xsoar/cortex-xsoar-architecture","siteSpaceId":"sitesp_q8HwM","description":"Explore the architecture of Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"1g7w7koNoTJdcepyw3ek","title":"Cortex XSOAR use cases","pathname":"/cortex-xsoar-8-on-prem/8.13/learn-about-cortex-xsoar/cortex-xsoar-use-cases","siteSpaceId":"sitesp_q8HwM","description":"Explore security automation use cases with Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"bmv8yFvq3pNipslq5YOV","title":"Understand Cortex XSOAR licenses","pathname":"/cortex-xsoar-8-on-prem/8.13/learn-about-cortex-xsoar/understand-cortex-xsoar-licenses","siteSpaceId":"sitesp_q8HwM","description":"Understand licensing for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"LXFMX8wniTLKpa0LkwKc","title":"Roles and responsibilities","pathname":"/cortex-xsoar-8-on-prem/8.13/learn-about-cortex-xsoar/roles-and-responsibilities","siteSpaceId":"sitesp_q8HwM","description":"Learn about core security operations roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"OwLpDH9GNnEc9GjIHzTW","title":"Supported web browsers","pathname":"/cortex-xsoar-8-on-prem/8.13/learn-about-cortex-xsoar/supported-web-browsers","siteSpaceId":"sitesp_q8HwM","description":"Review supported web browsers for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"VFiZqWSFLiYRhsgqKOer","title":"Onboard and configure Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Onboard and configure Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"EOPQ1b2EgSRhbJZGMbm9","title":"Plan your deployment","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/plan-your-deployment","siteSpaceId":"sitesp_q8HwM","description":"Plan your Cortex XSOAR 8.13 On-prem deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"z7d5vabkXXLBleWemBOe","title":"Deployment steps","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps","siteSpaceId":"sitesp_q8HwM","description":"Follow the Cortex XSOAR 8.13 On-prem deployment steps.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"jH8VPkfVcbbGTSqWQkDO","title":"Onboarding checklist","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/onboarding-checklist","siteSpaceId":"sitesp_q8HwM","description":"Complete the Cortex XSOAR 8.13 On-prem onboarding checklist.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"}]},{"id":"FsmsinrWpLv3DHgHA3Mj","title":"Step 1. Install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/step-1.-install-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"}]},{"id":"eql99Ik2LLdJTvD5iQp7","title":"Step 2. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/step-2.-set-up-an-engine","siteSpaceId":"sitesp_q8HwM","description":"Set up an engine in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"}]},{"id":"yLsQu4ZqeVoJMd4d5iGg","title":"Step 3. Set up a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/step-3.-set-up-a-remote-repository","siteSpaceId":"sitesp_q8HwM","description":"Set up a remote repository in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"}]},{"id":"HLN3PxaPPHOXvjoUlbve","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_q8HwM","description":"Set up users and roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"}]},{"id":"o9Ce56Pe4TylbLa0goJA","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content","siteSpaceId":"sitesp_q8HwM","description":"Install and configure content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"}]},{"id":"Vg1Qtzuud7hKL0vcDNPO","title":"Install content packs","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/install-content-packs","siteSpaceId":"sitesp_q8HwM","description":"Install content packs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"},{"label":"Step 5. Install and configure content"}]},{"id":"Dp1xIKsEui36tcXNK5jp","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_q8HwM","description":"Set up a use case in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Deployment steps"},{"label":"Step 5. Install and configure content"}]},{"id":"9qi5chCpvccdnYNT1SYM","title":"Post deployment","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/post-deployment","siteSpaceId":"sitesp_q8HwM","description":"Complete post-deployment tasks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"5WTtH7647RITrxwVr80R","title":"User communication","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/post-deployment/user-communication","siteSpaceId":"sitesp_q8HwM","description":"Configure user communication in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Post deployment"}]},{"id":"E8p7NnVu7mikW0EcMRyo","title":"Configure user notifications in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/post-deployment/user-communication/configure-user-notifications-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Configure user notifications in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"1kAnRVL0abKGspTUOnP1","title":"Customize system emails","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/post-deployment/user-communication/customize-system-emails","siteSpaceId":"sitesp_q8HwM","description":"Customize system emails in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"g9br7EKU1dVGmi9EfY91","title":"Configure system settings","pathname":"/cortex-xsoar-8-on-prem/8.13/onboard-cortex-xsoar/post-deployment/configure-system-settings","siteSpaceId":"sitesp_q8HwM","description":"Configure system settings in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Post deployment"}]},{"id":"NwcpVs30XgvgqYzlosrG","title":"How to install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/installation-overview","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem and configure your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"vga3dRV9rg5LWPrDOLMZ","title":"High Availability for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/high-availability-for-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Configure high availability in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"dFSTtxgxeIexvCR1rJTM","title":"Load balancing for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/load-balancing-for-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Configure load balancing in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"GFXOfjei9DOdpuplJQoH","title":"System Requirements","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/system-requirements","siteSpaceId":"sitesp_q8HwM","description":"Review system requirements for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"HUF3cLwa6QfqwoxU00He","title":"Hardware requirements","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/system-requirements/hardware-requirements","siteSpaceId":"sitesp_q8HwM","description":"Review hardware requirements for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"System Requirements"}]},{"id":"DMhvCiT7gYmSppOeU7H3","title":"Port requirements for cluster communication","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/system-requirements/port-requirements-for-cluster-communication","siteSpaceId":"sitesp_q8HwM","description":"Review port requirements for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"System Requirements"}]},{"id":"t5zKf0kRZdwVqlHjFAkv","title":"URL requirements","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/system-requirements/url-requirements","siteSpaceId":"sitesp_q8HwM","description":"Review URL requirements for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"System Requirements"}]},{"id":"dHiV1152LSKdNB61PzuC","title":"Bandwidth and NTP requirements","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/system-requirements/bandwidth-and-ntp-requirements","siteSpaceId":"sitesp_q8HwM","description":"Review bandwidth and NTP requirements for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"System Requirements"}]},{"id":"A70IHuUnsNi1W5lDIcnd","title":"Install Cortex XSOAR on a VM deployed on AWS","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on AWS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"kphNiIfLnFajr3Y1VGAj","title":"Task 1. Download the OVA Image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_q8HwM","description":"Download the OVA image and license for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"7I3ny0HkgKXWlmzazXOC","title":"Task 2. Deploy your virtual machine on AWS","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-2.-deploy-your-virtual-machine-on-aws","siteSpaceId":"sitesp_q8HwM","description":"Deploy a virtual machine for Cortex XSOAR 8.13 On-prem on AWS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"KONvqUJHzreFr0JJZjTw","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-3.-validate-tenant-nework-and-ip-settings","siteSpaceId":"sitesp_q8HwM","description":"Validate network and IP settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"lOYGLsgsosTBsOQMR6BB","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_q8HwM","description":"Configure NTP servers for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"KFe9HgWp7nIkO2lJ5aiS","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_q8HwM","description":"Configure proxy settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"j7wzPOO1G5LxzN0o4QDg","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_q8HwM","description":"Establish node trust in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"YCfzbFG3Kfccq8GtRraC","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"XiENqb5nvMIy0qcZut7s","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Verify access to Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"QnZb0tGtDzNVFmpB4Js8","title":"Install Cortex XSOAR on a VM deployed on OCI","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on OCI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"AqsF73YEgJMkf0Tcdkqx","title":"Task 1. Download the OVA image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_q8HwM","description":"Download the OVA image and license for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"SLdytfvr0h2XHPYihdzL","title":"Task 2. Deploy your virtual machine on OCI","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-2.-deploy-your-virtual-machine-on-oci","siteSpaceId":"sitesp_q8HwM","description":"Deploy a virtual machine for Cortex XSOAR 8.13 On-prem on OCI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"Amn23Eb3oh0LjmEkJo6W","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-3.-validate-tenant-network-and-ip-settings","siteSpaceId":"sitesp_q8HwM","description":"Validate network and IP settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"FZmMnqDKCSABhB5mXCRB","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_q8HwM","description":"Configure NTP servers for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"ygQcQEH0o95mRlhF1o63","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_q8HwM","description":"Configure proxy settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"1GmWhaCAiyXLbUalQpb8","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_q8HwM","description":"Establish node trust in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"YtgsyxyyTjUarhcAuoCc","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"Bp1NjGovRs4vfOFR5tmT","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Verify access to Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"lQvuc3GYdfqDNe203yiY","title":"Install Cortex XSOAR on a VM deployed on Hyper-V","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on Hyper-V.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"DsYQWKxMIO4mtJ1De2Mf","title":"Task 1. Download the VHD image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-1.-download-the-vhd-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_q8HwM","description":"Download the VHD image and license for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"fnBUcLOXZs1jNQ9tUoYw","title":"Task 2. Deploy your virtual machine on Hyper-V","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-2.-deploy-your-virtual-machine-on-hyper-v","siteSpaceId":"sitesp_q8HwM","description":"Deploy a virtual machine for Cortex XSOAR 8.13 On-prem on Hyper-V.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"dtme0QZ1gMSTHwgFCtjT","title":"Task 3. Configure tenant network and IP settings for each node","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-3.-configure-tenant-network-and-ip-settings-for-each-node","siteSpaceId":"sitesp_q8HwM","description":"Configure network and IP settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"QlO2FUbyVD97K2l5HAZG","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_q8HwM","description":"Configure NTP servers for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"qG1QtvgAQk7yso8h8vVL","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_q8HwM","description":"Configure proxy settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"EnWMDKTaO6psDHEPOEr1","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_q8HwM","description":"Establish node trust in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"4oHDqGttzZ14qiaHQYST","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"7H915KDj4y2t9MCx5RYR","title":"Task 8. Verify you can log in to Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v/task-8.-verify-you-can-log-in-to-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Verify access to Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on Hyper-V"}]},{"id":"zvjWdHV2a1UJAMtE4LkF","title":"Install Cortex XSOAR on a VM deployed on VSphere","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-vsphere","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on vSphere.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"zMf7cCem7pDUoO7k3UjV","title":"Install Cortex XSOAR on a VM deployed on KVM","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on KVM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"OIjJPCJPTKZEZC5wNNt0","title":"Task 1. Download the QCOW2 image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-1.-download-the-qcow2-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_q8HwM","description":"Download the QCOW2 image and license for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"TxM296MfGTSdPfGsjBrL","title":"Task 2. Deploy your virtual machine on KVM","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-2.-deploy-your-virtual-machine-on-kvm","siteSpaceId":"sitesp_q8HwM","description":"Deploy a virtual machine for Cortex XSOAR 8.13 On-prem on KVM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"MDM0rxqmlPzvecKGohW1","title":"Task 3. Configure tenant network and IP settings for each node","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-3.-configure-tenant-network-and-ip-settings-for-each-node","siteSpaceId":"sitesp_q8HwM","description":"Configure network and IP settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"Kun2MZsZfmDyMndgAVms","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_q8HwM","description":"Configure NTP servers for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"agbTmWEtGLIjVpr1eqpQ","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_q8HwM","description":"Configure proxy settings for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"ZuozFAGmirANJwIlOn7T","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_q8HwM","description":"Establish node trust in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"wtwXQdeCsVuM2dxfkRNa","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_q8HwM","description":"Install Cortex XSOAR 8.13 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"tkBOhTdLkma5CZzVNcIg","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Verify access to Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"flSJUfpsu0xaqsmtJRsw","title":"Post-installation","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation","siteSpaceId":"sitesp_q8HwM","description":"Complete post-installation tasks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"Tqk9ppg3U53W8xywU3zp","title":"Add the Cortex XSOAR license","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/add-the-cortex-xsoar-license","siteSpaceId":"sitesp_q8HwM","description":"Add a license to Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"}]},{"id":"yWS7f68VapQymjPZZCvi","title":"HTTPS with a signed certificate","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/https-with-a-signed-certificate","siteSpaceId":"sitesp_q8HwM","description":"Configure HTTPS in Cortex XSOAR 8.13 On-prem with a signed certificate.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"}]},{"id":"1TLOYtLnShfI01vfXZEa","title":"Manage your SSH admin password","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/manage-your-ssh-admin-password","siteSpaceId":"sitesp_q8HwM","description":"Manage the SSH admin password for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"}]},{"id":"YPPpJ11eAnIxwP9c7jlB","title":"Use a signed certificate instead of SSL verification","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/use-a-signed-certificate-instead-of-ssl-verification","siteSpaceId":"sitesp_q8HwM","description":"Configure certificate verification in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"}]},{"id":"yjmqScQA842gfmHo5UNM","title":"Manage custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/manage-custom-certificates","siteSpaceId":"sitesp_q8HwM","description":"Manage trusted certificates in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"}]},{"id":"QyrwRTzdJUb5j8efiyKk","title":"Optimize performance and robustness from the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui","siteSpaceId":"sitesp_q8HwM","description":"Optimize Cortex XSOAR 8.13 On-prem from the textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"}]},{"id":"X9s3fC1iVp5moCWNQe1y","title":"Manage nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/manage-nodes-in-a-cluster","siteSpaceId":"sitesp_q8HwM","description":"Manage cluster nodes in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"leQU06mZLicQIvFKwB99","title":"Scale up hardware resources","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/scale-up-hardware-resources","siteSpaceId":"sitesp_q8HwM","description":"Scale hardware resources in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"3mWT05WQlLkScxOL8Dil","title":"Auto expand PVC volumes","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/auto-expand-pvc-volumes","siteSpaceId":"sitesp_q8HwM","description":"Expand PVC volumes in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"c8OkcQEOkr6pUvY9iMEU","title":"Troubleshoot your installation","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/troubleshoot-your-installation","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot installation issues in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"l9uK86pV8JEgouNxATuI","title":"Common installation limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/troubleshoot-your-installation/common-installation-limitations-and-fixes","siteSpaceId":"sitesp_q8HwM","description":"Resolve installation limitations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Troubleshoot your installation"}]},{"id":"GUlnCRLrVTzVvApVMLOc","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/troubleshoot-your-installation/access-logs-and-log-bundles","siteSpaceId":"sitesp_q8HwM","description":"Access logs and bundles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Troubleshoot your installation"}]},{"id":"gYiYubxrZClSmsnxGTHK","title":"Open a support session","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/troubleshoot-your-installation/open-a-support-session","siteSpaceId":"sitesp_q8HwM","description":"Open a support session for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Troubleshoot your installation"}]},{"id":"3fvOnfp2kqkC651jtPc7","title":"Upload your license to the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/troubleshoot-your-installation/upload-your-license-to-the-textual-ui","siteSpaceId":"sitesp_q8HwM","description":"Upload a license from the Cortex XSOAR 8.13 On-prem textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Troubleshoot your installation"}]},{"id":"k2jTv4fYnLS7guzOyyiZ","title":"Shut down Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/troubleshoot-your-installation/shut-down-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Shut down Cortex XSOAR 8.13 On-prem from the textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"},{"label":"Troubleshoot your installation"}]},{"id":"JLtSmKcWJa8QD6NfpoxW","title":"Update Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/install-cortex-xsoar/update-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Update your Cortex XSOAR 8.13 On-prem tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR"}]},{"id":"KILIS7WAvZsikgc5ob0S","title":"How to back up and restore Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/back-up-and-restore-cortex-xsoar/back-up-and-restore-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Back up and restore Cortex XSOAR 8.13 On-prem data.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"r4pu7d0FEdySgvhBfsfG","title":"Set up access to an external storage","pathname":"/cortex-xsoar-8-on-prem/8.13/back-up-and-restore-cortex-xsoar/set-up-access-to-an-external-storage","siteSpaceId":"sitesp_q8HwM","description":"Set up external storage in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"WT9xASCgzk0pxaD8Aqax","title":"Back up data","pathname":"/cortex-xsoar-8-on-prem/8.13/back-up-and-restore-cortex-xsoar/back-up-data","siteSpaceId":"sitesp_q8HwM","description":"Back up data in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"GAB5nHfMQg9YthXoxIb7","title":"Backup guidelines and best practices","pathname":"/cortex-xsoar-8-on-prem/8.13/back-up-and-restore-cortex-xsoar/back-up-data/backup-guidelines-and-best-practices","siteSpaceId":"sitesp_q8HwM","description":"Review backup guidance for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR"},{"label":"Back up data"}]},{"id":"qiR247lKp8VQHNxBPKp9","title":"Restore data","pathname":"/cortex-xsoar-8-on-prem/8.13/back-up-and-restore-cortex-xsoar/restore-data","siteSpaceId":"sitesp_q8HwM","description":"Restore data in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"DqqdpUFJnW7c0LEgpi06","title":"End-to-end example of Cortex XSOAR cluster backup and restore","pathname":"/cortex-xsoar-8-on-prem/8.13/back-up-and-restore-cortex-xsoar/end-to-end-example-of-cortex-xsoar-cluster-backup-and-restore","siteSpaceId":"sitesp_q8HwM","description":"Follow a backup and restore example in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"qo8ur4Zh0sIVAxbxXgou","title":"Common backup and restore limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.13/back-up-and-restore-cortex-xsoar/common-backup-and-restore-limitations-and-fixes","siteSpaceId":"sitesp_q8HwM","description":"Resolve backup and restore issues in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"uHPjCoPrnUNPxdpMe8FN","title":"Engines","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines","siteSpaceId":"sitesp_q8HwM","description":"Manage engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"r058QD40iguxRUuoOvo2","title":"What is an engine?","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/what-is-an-engine","siteSpaceId":"sitesp_q8HwM","description":"Learn about engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"Fp2VuEQybcqIrzlemZ1f","title":"Engine requirements","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/engine-requirements","siteSpaceId":"sitesp_q8HwM","description":"Review engine requirements in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"D1SeOSSGWa07bkr8HwYv","title":"Install an engine","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine","siteSpaceId":"sitesp_q8HwM","description":"Install an engine in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"dwDeVpDjr5dCMev0kob5","title":"Engine air gap installation","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/engine-air-gap-installation","siteSpaceId":"sitesp_q8HwM","description":"Install an engine offline in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"BN6wqRM0cYkonWO2xSgh","title":"Docker","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker","siteSpaceId":"sitesp_q8HwM","description":"Manage Docker for engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"PQSLPVi0RUP2QtriQdid","title":"Install Docker","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_q8HwM","description":"Install Docker for Cortex XSOAR 8.13 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"NJdlW4F1sZDRNXAuOtez","title":"Install Docker distribution for Red Hat on an engine server","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker-distribution-for-red-hat-on-an-engine-server","siteSpaceId":"sitesp_q8HwM","description":"Install Docker on a Cortex XSOAR 8.13 On-prem engine server.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"sa0Ru7ExqQkCTEYWAAOV","title":"Docker image security","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_q8HwM","description":"Secure Docker images in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"gnQl6BOz3CcDVqOLI3IK","title":"Use the Cortex XSOAR Container Registry","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_q8HwM","description":"Use the container registry in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"TrXN4FjyuAycLzrHC8t9","title":"Docker FAQs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_q8HwM","description":"Review Docker FAQs for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"LoxEmutSqhHSRZcJQfJn","title":"Troubleshoot Docker issues","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot Docker issues in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"1ZDuAepudW2FDPgpvR1r","title":"Configure Docker pull rate limit","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_q8HwM","description":"Configure Docker pull limits in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"Zu8CNw3kZFua6xA21gQx","title":"Change the Docker installation folder","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_q8HwM","description":"Change the Docker folder in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"djid2vfXQRJ0OYNEFV5x","title":"Configure Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_q8HwM","description":"Configure Docker certificates in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"C9TnY4bU95Ki8mu3OeYu","title":"Configure Python Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_q8HwM","description":"Configure Python Docker certificates in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"BVhVypU3XDqY8q4wOs8o","title":"Docker hardening guide","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_q8HwM","description":"Harden Docker in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"KFj2geAEA48r7qXNhWW1","title":"Podman","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/podman","siteSpaceId":"sitesp_q8HwM","description":"Use Podman for engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"NhY4sFgxbOCnzUwO18fZ","title":"Change container storage directory","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/podman/change-container-storage-directory","siteSpaceId":"sitesp_q8HwM","description":"Change container storage in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"HJ9K3xvQHjrc8HkC7raP","title":"Install Podman","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_q8HwM","description":"Install Podman for Cortex XSOAR 8.13 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"bMfgem4vReVtEPxOKmg9","title":"Migrate From Docker to Podman","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_q8HwM","description":"Migrate engines to Podman in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"OLWBqED4iQ0pxB9bADwD","title":"Troubleshoot Podman","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot Podman in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"tsYBbuA36VW9UaFMnYLo","title":"Manage engines","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_q8HwM","description":"Manage engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"QfyVl8GFSlND23lj1rAJ","title":"Upgrade an engine","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/upgrade-an-engine","siteSpaceId":"sitesp_q8HwM","description":"Upgrade an engine in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"6ITyAyVsHVw5npoKvje0","title":"Remove an engine","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_q8HwM","description":"Remove an engine in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"AJR2gUreYzlbxnMNaul6","title":"Configure engines","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_q8HwM","description":"Configure engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"IxXk78Vo11puf8wcdFVQ","title":"Configure the engine to use a web proxy","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_q8HwM","description":"Configure an engine proxy in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"Iby3gN3rhWTT8vaFYhyi","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_q8HwM","description":"Configure direct engine calls in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"Mlj5My797N19uwbhJfJz","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_q8HwM","description":"Use NGINX with Cortex XSOAR 8.13 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"},{"label":"Configure the engine to call the server without using a proxy"}]},{"id":"0EjeQka9Soxg122Cx21R","title":"Configure an engine to use custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_q8HwM","description":"Configure engine certificates in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"xrSyp1YBaUGg1hvWGd8R","title":"Use an engine in an integration","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_q8HwM","description":"Use an engine with integrations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"EqmjxcCsuE5neBhdIbjt","title":"Run a script using an engine","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_q8HwM","description":"Run scripts using engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"XH4wnXTBFTDhCfWfCZSc","title":"Troubleshoot engines","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/troubleshoot-engines","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot engines in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"WEZRIjis2g64kWzuFaly","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot engine integrations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"eFdPCHpEDuZJ2cYVy8Qu","title":"Remote Repository Management","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/remote-repository-management","siteSpaceId":"sitesp_q8HwM","description":"Manage remote repositories in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"u7CPFqTjLFsmLXMLKhbW","title":"Content management in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/remote-repository-management/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Manage remote repository content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"UEeFRSeXm3LRGyq4D9hk","title":"Set up a private remote repository","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/remote-repository-management/set-up-a-private-remote-repository","siteSpaceId":"sitesp_q8HwM","description":"Set up a private repository in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"x03Q6z1gnZS8aDP5xtIw","title":"Push content from a development tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/remote-repository-management/push-content-from-a-development-tenant","siteSpaceId":"sitesp_q8HwM","description":"Push content from development in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"fMvIFgJ7gpPSN2QLSWAC","title":"Install content on a production tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/remote-repository-management/install-content-on-a-production-tenant","siteSpaceId":"sitesp_q8HwM","description":"Install production content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"is0LC3wrDucGEGfX0h7n","title":"Remote repository troubleshooting","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot remote repositories in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"iMkEiMr914HMYKYClVEi","title":"Users and Roles Management","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management","siteSpaceId":"sitesp_q8HwM","description":"Manage users and roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"ukbdcMmBsd9AiI95HvnG","title":"Users and roles in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/users-and-roles-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Configure users and roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"r6WNaF0l6kMqZBCdtuGl","title":"Roles management","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/roles-management","siteSpaceId":"sitesp_q8HwM","description":"Manage roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"mVGtB38kTw1C2b1H5sXA","title":"Role-based permissions","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/roles-management/role-based-permissions","siteSpaceId":"sitesp_q8HwM","description":"Configure role permissions in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"LkoibFEusjr2u9NnT8Th","title":"Manage roles in the Cortex XSOAR tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/roles-management/manage-roles-in-the-cortex-xsoar-tenant","siteSpaceId":"sitesp_q8HwM","description":"Manage tenant roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"MC5vd0wcX7SCy0JNfLo8","title":"User group management","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/user-group-management","siteSpaceId":"sitesp_q8HwM","description":"Manage user groups in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"X755uCDfZUnGhrJkXDuW","title":"Set up authentication","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/set-up-authentication","siteSpaceId":"sitesp_q8HwM","description":"Set up authentication in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"5JiimwTvgNft8nJKJj21","title":"Create users in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/create-users-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Create users in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"lTl1d4AMUSDlrTq8Ocqv","title":"Authenticate users using SSO","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_q8HwM","description":"Set up SSO in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"OFjFDKPiVoZj15KLluib","title":"Authenticate users using Active Directory or OpenLDAP","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-active-directory-or-openldap","siteSpaceId":"sitesp_q8HwM","description":"Use directory authentication in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"v34IpjKZKLIzz4VwUe6H","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_q8HwM","description":"Set up Okta SAML in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"202Ban0gnBqwdV3pRCcc","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_q8HwM","description":"Set up Microsoft Entra ID in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"rGTwkHXlbZlxXgRZpshh","title":"User management","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/user-management","siteSpaceId":"sitesp_q8HwM","description":"Manage users in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"Acfw2kJTdkAy4VBUSMIS","title":"Configure a password policy","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/users-and-roles-management/configure-a-password-policy","siteSpaceId":"sitesp_q8HwM","description":"Configure password policies in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"r6Ds0cgtHUWe7nlwd0n0","title":"Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace","siteSpaceId":"sitesp_q8HwM","description":"Use Marketplace in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"sNuFDAHdE4SS8rkF82XX","title":"Cortex Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/cortex-marketplace","siteSpaceId":"sitesp_q8HwM","description":"Find content in Cortex XSOAR 8.13 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"xysbliMGsxsU6P6m6Fjt","title":"Content packs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/content-packs","siteSpaceId":"sitesp_q8HwM","description":"Use content packs in Cortex XSOAR 8.13 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"u9Kjb1sZKjgVIDIxzhLE","title":"Content Pack Support Types","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/content-pack-support-types","siteSpaceId":"sitesp_q8HwM","description":"Review content pack support types in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"jvMgcIUNpeQhM0CQInJI","title":"Manage content packs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/manage-content-packs","siteSpaceId":"sitesp_q8HwM","description":"Manage content packs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"X6dOqawNP6C8KXCyRHAe","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_q8HwM","description":"Use the Deployment Wizard in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"4rO7WccctgylgMP3v7SM","title":"Marketplace FAQs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_q8HwM","description":"Review Marketplace FAQs for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"GJGkYiRX7kArpM0WRCJd","title":"Content pack update notifications","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_q8HwM","description":"Configure content updates in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"9fFnhgK7eE88LyRkm7tE","title":"Customize content pack notifications","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_q8HwM","description":"Customize content notifications in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack update notifications"}]},{"id":"9mrRLtoLL4JwTYx3h0Im","title":"Content pack contributions","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_q8HwM","description":"Contribute content packs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"4WTcf4GfeodUCYmi8ZJ1","title":"Create a content pack","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_q8HwM","description":"Create content packs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"rO261Q9RzCjrbETVRC3l","title":"Resubmit a content pack","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_q8HwM","description":"Resubmit content packs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"qEzLYueybUkC0u4Wnqxz","title":"Integrations","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations","siteSpaceId":"sitesp_q8HwM","description":"Configure integrations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"VNUeQ1rtwxPI4IrwqvhS","title":"Integration use cases","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/integration-use-cases","siteSpaceId":"sitesp_q8HwM","description":"Explore integration use cases in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"REqoJXgMXajwoHoTJc1i","title":"Configure integrations","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/configure-integrations","siteSpaceId":"sitesp_q8HwM","description":"Configure integrations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"qZV7JUWfyekmMqIY6QEA","title":"Change the Docker image in an integration or script","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_q8HwM","description":"Change Docker images in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"wLxwzd6WLVcfqdJdG8bA","title":"Connect your engine to an image registry","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/connect-your-engine-to-an-image-registry","siteSpaceId":"sitesp_q8HwM","description":"Connect engines to registries in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"is2dhqrk7YLEWAXL9V2D","title":"Pull images from a private image registry","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/pull-images-from-a-private-image-registry","siteSpaceId":"sitesp_q8HwM","description":"Pull private images in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"Wwtre2vSi4qkWYVtC7wV","title":"Manage credentials","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/manage-credentials","siteSpaceId":"sitesp_q8HwM","description":"Manage credentials in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"GyfawtpHJ5ZjJdLCB1G4","title":"Add an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/add-an-integration-instance","siteSpaceId":"sitesp_q8HwM","description":"Add integration instances in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"eJupUkVOsVfLJfNMS0Bl","title":"Fetch incidents from an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/add-an-integration-instance/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_q8HwM","description":"Fetch incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"nHEMNp4FhyuEevDAJlMK","title":"Receive notifications on an incident fetch error","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/add-an-integration-instance/receive-notifications-on-an-incident-fetch-error","siteSpaceId":"sitesp_q8HwM","description":"Configure fetch error notifications in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"dTuuIMda4VGRwiaWFmpq","title":"Configure integration permissions","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/add-an-integration-instance/configure-integration-permissions","siteSpaceId":"sitesp_q8HwM","description":"Configure integration permissions in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"UPDaWF0Rp7H6Z7lnKbWf","title":"Troubleshoot integrations","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/add-an-integration-instance/troubleshoot-integrations","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot integrations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"2PNWJwKTO40Kdi2tcioT","title":"Integration commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/integration-commands-in-the-cli","siteSpaceId":"sitesp_q8HwM","description":"Run integration commands in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"5qoDJyd8nCQBVITk2qfp","title":"Forward requests to long-running integrations","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_q8HwM","description":"Forward integration requests in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"lC1cBI341j4LQ87DvBWf","title":"Incident configuration","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration","siteSpaceId":"sitesp_q8HwM","description":"Configure incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"qiRcvFzYzkAo6QxmbNpY","title":"Incident lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-lifecycle","siteSpaceId":"sitesp_q8HwM","description":"Manage the incident lifecycle in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"V1EFfZOe8Duqp3JGJBIH","title":"Incident Customization","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization","siteSpaceId":"sitesp_q8HwM","description":"Customize incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"DQVc2lym5Q19vGw7SDvG","title":"Use incident context data","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/use-incident-context-data","siteSpaceId":"sitesp_q8HwM","description":"Use incident context data in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"v7WGvUDpSbejf9dSVt6W","title":"Create an incident type","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_q8HwM","description":"Create incident types in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"ylwiMLgn2NeJ6RRZl6lV","title":"Create an incident field","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field","siteSpaceId":"sitesp_q8HwM","description":"Create incident fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"rtsh8SanqLTcWwCFnRoJ","title":"Incident field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/incident-field-trigger-scripts","siteSpaceId":"sitesp_q8HwM","description":"Configure incident field triggers in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"dhtivQZmHcx4J2Zx4Ydv","title":"Create dynamic fields","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/create-dynamic-fields","siteSpaceId":"sitesp_q8HwM","description":"Create dynamic fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"J5TkfQUkXQRD4QHWcNHz","title":"Troubleshoot incident fields","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/troubleshoot-incident-fields","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot incident fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"8lIZv6yyO6mWV2n9MI9D","title":"Incident layout customization","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization","siteSpaceId":"sitesp_q8HwM","description":"Customize incident layouts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"638cjR0QtTWwFh9xHq1H","title":"Examples of using scripts in incident layouts","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization/examples-of-using-scripts-in-incident-layouts","siteSpaceId":"sitesp_q8HwM","description":"Use scripts in incident layouts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Incident layout customization"}]},{"id":"DmDcIJO2sSPt6y5PxIWi","title":"Create an evidence field","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/create-an-evidence-field","siteSpaceId":"sitesp_q8HwM","description":"Create evidence fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"cMZqEzoa5zeyYoOlasdm","title":"Classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/classification-and-mapping","siteSpaceId":"sitesp_q8HwM","description":"Classify and map incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"8fAp4QPWM01YGxT2vyQz","title":"Create an incident classifier","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-classifier","siteSpaceId":"sitesp_q8HwM","description":"Create incident classifiers in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"aWKGzvZaiyT3XB9y53B3","title":"Create an incident mapper","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-mapper","siteSpaceId":"sitesp_q8HwM","description":"Create incident mappers in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"o8zGAPo5eqP3mqFeD1Eh","title":"Set up incident mirroring","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/set-up-incident-mirroring","siteSpaceId":"sitesp_q8HwM","description":"Set up incident mirroring in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"2kw7C5h89nnLkR3gbyPH","title":"Incident deduplication in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/incident-deduplication-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Deduplicate incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"qF27LDmzlk0s1WAgTvcA","title":"Pre-process rules","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/pre-process-rules","siteSpaceId":"sitesp_q8HwM","description":"Create pre-process rules in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"LeBqTOSuWr8s4zXkzTTx","title":"Use post-processing scripts in an incident","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/use-post-processing-scripts-in-an-incident","siteSpaceId":"sitesp_q8HwM","description":"Use post-processing scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"lTjsgtacTIf8L9GrsHXU","title":"Customize incident close reasons","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/customize-incident-close-reasons","siteSpaceId":"sitesp_q8HwM","description":"Customize incident close reasons in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"vcwhMBzIQJrYbiBwCgCD","title":"Configure inline value fields","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/configure-inline-value-fields","siteSpaceId":"sitesp_q8HwM","description":"Configure inline value fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"F8TBLq9jZievYiItsA3G","title":"Configure incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete","siteSpaceId":"sitesp_q8HwM","description":"Export and delete incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"FDVIKwkzIfJEysYVedXV","title":"Configure access to external storage","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/configure-access-to-external-storage","siteSpaceId":"sitesp_q8HwM","description":"Configure external storage in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"ODzvyrF3di6jxTo4xVRo","title":"Schedule incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/schedule-incident-export-and-delete","siteSpaceId":"sitesp_q8HwM","description":"Schedule incident exports and deletions to external storage in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"Kn0xRRSv5LSYT63FJwEL","title":"Export an incident to CSV using the UTF8-BOM format","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_q8HwM","description":"Export incidents as UTF8-BOM CSV in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"UWTC6yAA9iKRpO1B8fbB","title":"Amazon S3 configuration example","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/incident-configuration/amazon-s3-configuration-example","siteSpaceId":"sitesp_q8HwM","description":"Configure Amazon S3 storage in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"P5XjKe3pDbu3cntfBCGU","title":"Playbooks","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_q8HwM","description":"Create and manage playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"O4Zm72uMT50xcxQO6avc","title":"What is a playbook?","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/what-is-a-playbook","siteSpaceId":"sitesp_q8HwM","description":"Learn about playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"e1k7jBOHNQu8svpfyBeF","title":"Playbook development checklist","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_q8HwM","description":"Follow the playbook development checklist in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"qdegEAtcxfTStgsTnWaU","title":"Plan your playbook","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/plan-your-playbook","siteSpaceId":"sitesp_q8HwM","description":"Plan playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"P2WjYMM0nEIrX6WF8c0L","title":"Develop your playbook","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook","siteSpaceId":"sitesp_q8HwM","description":"Develop playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"RvjG4Rn97FgnnLy9uNe1","title":"Task 1. Choose from existing playbooks or create your own","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-1.-choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_q8HwM","description":"Choose or create playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"n2FIJfwUQMLfsSpbFj96","title":"Task 2. Configure playbook settings","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-2.-configure-playbook-settings","siteSpaceId":"sitesp_q8HwM","description":"Configure playbook settings in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"3aj7KoDULIIhk95Ayvi7","title":"Task 3. Add tasks","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks","siteSpaceId":"sitesp_q8HwM","description":"Add tasks in Cortex XSOAR 8.13 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"GORy1tpzjkBSq9pLWJxt","title":"Set playbook inputs and outputs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/set-playbook-inputs-and-outputs","siteSpaceId":"sitesp_q8HwM","description":"Set playbook inputs and outputs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"ogV6Z30CmG0qfhFw0QEx","title":"Create a section header","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-section-header","siteSpaceId":"sitesp_q8HwM","description":"Create section headers in Cortex XSOAR 8.13 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"zxnvBJnH2KsoSCdJBVsI","title":"Create a standard task","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-standard-task","siteSpaceId":"sitesp_q8HwM","description":"Create standard tasks in Cortex XSOAR 8.13 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"KjABqnx5KslsP8jrZqmV","title":"Create a conditional task","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-conditional-task","siteSpaceId":"sitesp_q8HwM","description":"Create conditional tasks in Cortex XSOAR 8.13 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"rC64nlbutqTRUrDC9swj","title":"Create a communication task","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-communication-task","siteSpaceId":"sitesp_q8HwM","description":"Create communication tasks in Cortex XSOAR 8.13 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"oXdsUp4aLyJIWPeirh0X","title":"Configure script error handling in a playbook","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_q8HwM","description":"Configure script error handling in Cortex XSOAR 8.13 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"wTQtKNvQpGa3R31KP1VW","title":"Task 4. Add inline documentation","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-4.-add-inline-documentation","siteSpaceId":"sitesp_q8HwM","description":"Add inline documentation in Cortex XSOAR 8.13 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"KDDZp2LkZGjUIjUl3Fbf","title":"Task 5. Add custom playbook features","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-5.-add-custom-playbook-features","siteSpaceId":"sitesp_q8HwM","description":"Add custom playbook features in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"cruh1aeajHRD8evuRDb7","title":"Task 6. Test and debug the playbook","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-6.-test-and-debug-the-playbook","siteSpaceId":"sitesp_q8HwM","description":"Test and debug playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"EYpFR363gCBHzZ2EKuI3","title":"Task 7. Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/task-7.-manage-playbook-content","siteSpaceId":"sitesp_q8HwM","description":"Manage playbook content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"sjudCBdndUIL3UR7w2UQ","title":"Customize a playbook for a phishing use case example","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/develop-your-playbook/customize-a-playbook-for-a-phishing-use-case-example","siteSpaceId":"sitesp_q8HwM","description":"Customize phishing playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"uYvlMVmSK9khjiH25W1p","title":"Customize your playbook","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook","siteSpaceId":"sitesp_q8HwM","description":"Customize playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"IxB5RsLXBwSOD8SwHl10","title":"Customize the SOC name","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/customize-the-soc-name","siteSpaceId":"sitesp_q8HwM","description":"Customize the SOC name in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"q40HO27jkA8QMiocL8Jk","title":"Configure a sub-playbook","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/configure-a-sub-playbook","siteSpaceId":"sitesp_q8HwM","description":"Configure sub-playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"dVUr04YA2W9YjyfZ94zL","title":"Filter and transform data","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_q8HwM","description":"Filter and transform data in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"ccpOJfqkC4LJxGLGtQmD","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_q8HwM","description":"Use built-in filters in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"},{"label":"Filter and transform data"}]},{"id":"nb2KPrtnX5aBDdTeXPgA","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_q8HwM","description":"Use built-in transformers in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"},{"label":"Filter and transform data"}]},{"id":"jW3dSpfqAU4nqVg2eh4t","title":"Extract indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_q8HwM","description":"Extract indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"6d3FYLuXSXeayeNew0nL","title":"Extend context","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/extend-context","siteSpaceId":"sitesp_q8HwM","description":"Extend context in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"I8PBUVfZZxz7i0NcoeQA","title":"Set and update incident fields","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/set-and-update-incident-fields","siteSpaceId":"sitesp_q8HwM","description":"Set and update incident fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"sj8AHptgAfHHNyR74nDK","title":"Playbook polling","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/customize-your-playbook/playbook-polling","siteSpaceId":"sitesp_q8HwM","description":"Configure playbook polling in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"zkAB6xgFcAbIedP19mJm","title":"Scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/scripts","siteSpaceId":"sitesp_q8HwM","description":"Create and manage scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"O11WU1bIPcuELQ63JLLz","title":"Use existing scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/scripts/use-existing-scripts","siteSpaceId":"sitesp_q8HwM","description":"Use existing scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"S3wkIo2Qi3KHocQnrM36","title":"Create a script","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/scripts/create-a-script","siteSpaceId":"sitesp_q8HwM","description":"Create scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"l79UPml1KpGTvCSSaXz4","title":"Debug your playbook","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/debug-your-playbook","siteSpaceId":"sitesp_q8HwM","description":"Debug playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"eqKllee8iLRVjeawr6yK","title":"Troubleshoot playbook performance","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/debug-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot playbook performance in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Debug your playbook"}]},{"id":"MsMlXiHG7IZgAqEUgMKN","title":"Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/manage-playbook-content","siteSpaceId":"sitesp_q8HwM","description":"Manage playbook content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"CYc5QecS6XRKrbmNFcZn","title":"Best practices","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_q8HwM","description":"Use playbook best practices in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"9RjCvk6YTtcTPgUp2Zod","title":"Lists","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/lists","siteSpaceId":"sitesp_q8HwM","description":"Create and manage lists in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"6DA35KpLb3z0SqdOW6wl","title":"What is a list?","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/lists/what-is-a-list","siteSpaceId":"sitesp_q8HwM","description":"Learn about lists in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"Ub8pGs0f6LtHD0ewESpz","title":"Create a list","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_q8HwM","description":"Create lists in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"NLN6Mrsp1aAvYR6IT27r","title":"List commands","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/lists/list-commands","siteSpaceId":"sitesp_q8HwM","description":"Use list commands in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"iyMxrbgzo4plyF0h5QiD","title":"Use cases: JSON lists","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/lists/use-cases-json-lists","siteSpaceId":"sitesp_q8HwM","description":"Manage JSON lists in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"51RGwU4wq8uZfe0pl4tH","title":"Transform a list into an array","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_q8HwM","description":"Transform lists into arrays in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"HSBDf4IEQz4NLuoW35Z6","title":"Jobs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_q8HwM","description":"Configure scheduled jobs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"4c3wMVxDc3wwvUcO6oO3","title":"Manage jobs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/jobs/manage-jobs","siteSpaceId":"sitesp_q8HwM","description":"Manage jobs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"JW5GAdHi7TyfwTuWeenF","title":"Create a time triggered job","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_q8HwM","description":"Create time-triggered jobs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"A2OMuOJU79ufi2X3Rnmi","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_q8HwM","description":"Create feed-triggered jobs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"RRMPvNdth9O75NBpiWhZ","title":"Create jobs to process indicators example","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/jobs/create-jobs-to-process-indicators-example","siteSpaceId":"sitesp_q8HwM","description":"Process indicators with jobs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"NykD189V5P36omRmbC38","title":"SLAs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas","siteSpaceId":"sitesp_q8HwM","description":"Configure SLAs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"YCgYXtaS8g93zyErSTxT","title":"SLAs in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/slas-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Learn about SLAs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"cSHyBtiN9RYR9x2qjzT3","title":"Configure an SLA in an incident type","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/configure-an-sla-in-an-incident-type","siteSpaceId":"sitesp_q8HwM","description":"Configure SLAs for incident types in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"e2fTqozRevvZq24U4jRq","title":"Configure Timer/SLA fields","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/configure-timersla-fields","siteSpaceId":"sitesp_q8HwM","description":"Configure timer and SLA fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"nkpx6kjngmR5F038YBHf","title":"Configure a playbook to run Timers/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/configure-a-playbook-to-run-timersslas","siteSpaceId":"sitesp_q8HwM","description":"Configure playbooks to run SLA timers in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"KPn7BNkbuMj3VVKjrMpc","title":"Automate changes to incident fields using SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/automate-changes-to-incident-fields-using-sla-scripts","siteSpaceId":"sitesp_q8HwM","description":"Automate incident fields with SLA scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"MumsrnjBzVuwKi5P9PDa","title":"Create SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/create-sla-scripts","siteSpaceId":"sitesp_q8HwM","description":"Create SLA scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"AKYPXhzovOH1G3PaupKx","title":"Use SLA and Timer field commands manually in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/use-sla-and-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_q8HwM","description":"Use SLA and timer commands in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"quCcaeIP11omd1Gqryzr","title":"Configure the Global Risk Threshold","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_q8HwM","description":"Configure the global risk threshold in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"WoXdbF0gmVahOtun8H0f","title":"Search incidents for Timer/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/slas/search-incidents-for-timerslas","siteSpaceId":"sitesp_q8HwM","description":"Search incidents by SLA and timer fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"6JCBXzOzfj5mq9T9Fb8c","title":"Dashboards and Reports","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports","siteSpaceId":"sitesp_q8HwM","description":"Create dashboards and reports in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"MuFNVAeWvRkfTiP3SX9o","title":"Dashboards","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/dashboards","siteSpaceId":"sitesp_q8HwM","description":"Create and manage dashboards in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"l0K1lRLFKAtap4lYRjTC","title":"Dashboard actions","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/dashboards/dashboard-actions","siteSpaceId":"sitesp_q8HwM","description":"Manage dashboard actions in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"KU4M9irbUedHFuBhxeT0","title":"Manage dashboards","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/dashboards/manage-dashboards","siteSpaceId":"sitesp_q8HwM","description":"Manage dashboards in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"k2N5fZu4Gl9Yxyrbjw9a","title":"Reports","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/reports","siteSpaceId":"sitesp_q8HwM","description":"Create and manage reports in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"YLHJIJzy9ZQ9HdGvJAZr","title":"Manage reports","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/reports/manage-reports","siteSpaceId":"sitesp_q8HwM","description":"Manage reports in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"8cZgSKMChxsthJtexSrd","title":"Configure the timezone in a report","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/reports/configure-the-timezone-in-a-report","siteSpaceId":"sitesp_q8HwM","description":"Configure report time settings in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"q6URcU2aeGGOi24VQQ63","title":"Troubleshoot script timeout for reports","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-script-timeout-for-reports","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot report script timeouts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"QjnmusuzARLPpTtU15NO","title":"Troubleshoot overlapping text and extra pages","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-overlapping-text-and-extra-pages","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot PDF reports in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"fAoe557f4E6yOEwPBM8l","title":"Widgets","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets","siteSpaceId":"sitesp_q8HwM","description":"Create and manage widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"TixOVvpI85SdEt3dHxB6","title":"Widget customization","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/widget-customization","siteSpaceId":"sitesp_q8HwM","description":"Customize widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"zlptj5FOLUyOb3DFCaoV","title":"Create a widget using the widget builder","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_q8HwM","description":"Create widgets with the widget builder in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"D00aY3GBQ7wUBrTx8cSB","title":"Create a custom widget using a JSON file","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_q8HwM","description":"Create JSON widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"TjFbwWhT2FxzKrbdFW5F","title":"Create a custom widget using a script","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-script","siteSpaceId":"sitesp_q8HwM","description":"Create script-based widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"QlxgLEDaToyn10M2RLEm","title":"Create a widget from an incident","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-incident","siteSpaceId":"sitesp_q8HwM","description":"Create incident widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"qmCjBTF2Gu4tmSlcJKry","title":"Create a widget from an indicator","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-indicator","siteSpaceId":"sitesp_q8HwM","description":"Create indicator widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"FiqtykAU1DWEupOHY64e","title":"Edit a widget","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/edit-a-widget","siteSpaceId":"sitesp_q8HwM","description":"Edit widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"0voCcbUa2dUt4lmuPdLO","title":"Add a widget in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/add-a-widget-in-the-war-room","siteSpaceId":"sitesp_q8HwM","description":"Add War Room widgets in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"ppXQ1GHArss6FQ8UnLC5","title":"Saved By Dbot (ROI) Widget","pathname":"/cortex-xsoar-8-on-prem/8.13/configure-cortex-xsoar/dashboards-and-reports/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_q8HwM","description":"Customize the Saved By Dbot widget in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"tg2Qctv8DGgMSu7ic5tf","title":"Incidents and indicators investigation","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation","siteSpaceId":"sitesp_q8HwM","description":"Investigate incidents and indicators ingested into Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"}]},{"id":"J1ZKTgaj5fc5gnON2wpd","title":"Incidents","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incidents","siteSpaceId":"sitesp_q8HwM","description":"Incidents are potential security data threats ingested or created in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"}]},{"id":"HYKFx1z6wwVxSxvvR5YW","title":"Incident management","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management","siteSpaceId":"sitesp_q8HwM","description":"Manage incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"}]},{"id":"H45LoKkLuEJtAMerZwtk","title":"Search for incidents","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/search-for-incidents","siteSpaceId":"sitesp_q8HwM","description":"Search incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"FKUVWry0VJedLp4FuJC9","title":"Create an incident","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/create-an-incident","siteSpaceId":"sitesp_q8HwM","description":"Create incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"dFvtin25MexoCOxBpKmy","title":"Export incidents","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents","siteSpaceId":"sitesp_q8HwM","description":"Export incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"GH4pozWGKevmODI9fg2k","title":"Export incidents from the Incidents table","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-from-the-incidents-table","siteSpaceId":"sitesp_q8HwM","description":"Export incidents from the Incidents table as Excel, CSV, or JSON files in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"F202dvakVI2l1hrNNu38","title":"Export incidents on demand","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-on-demand","siteSpaceId":"sitesp_q8HwM","description":"Export incidents on demand to external storage in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"yzhpsyNbaTwUJ6zMVZec","title":"Investigate an incident","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident","siteSpaceId":"sitesp_q8HwM","description":"Investigate incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"}]},{"id":"2foYKQBesKYCRh6BbOkE","title":"Retain incidents","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/retain-incidents","siteSpaceId":"sitesp_q8HwM","description":"Retain incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"lzK2YGTXEpHhVwuqCc2t","title":"Limit access to investigations using access control","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/limit-access-to-investigations-using-access-control","siteSpaceId":"sitesp_q8HwM","description":"Control investigation access in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"IYolQgyjUib4Nc1142CY","title":"Incident Tasks","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/incident-tasks","siteSpaceId":"sitesp_q8HwM","description":"Manage incident tasks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"HmYmKarcdyJMnwXaEuyN","title":"Use the War Room in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_q8HwM","description":"Use the War Room for investigations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"6kUWZuPyMSABkFOOyn4X","title":"Schedule a command in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/schedule-a-command-in-the-war-room","siteSpaceId":"sitesp_q8HwM","description":"Schedule War Room commands in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"iwDc3cwc0mOY5xd1vIoE","title":"Run commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/run-commands-in-the-cli","siteSpaceId":"sitesp_q8HwM","description":"Run CLI commands in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"TyZPLslhxALzCmVvrpPj","title":"Evidence Handling","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/evidence-handling","siteSpaceId":"sitesp_q8HwM","description":"Manage investigation evidence in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"WRRRnwGq9Nm1ZNGt9NmR","title":"Use the Work Plan in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_q8HwM","description":"Use the Work Plan in Cortex XSOAR 8.13 On-prem investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"PSJLuRx4XIfYyB7LafUq","title":"Investigate an incident using the canvas","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_q8HwM","description":"Investigate incidents with the canvas in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"M5EDpu9q5GyA1cxjDhPX","title":"Link incidents","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/link-incidents","siteSpaceId":"sitesp_q8HwM","description":"Link incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"XDmml60Cgcd3mnf5IH6o","title":"Create an incident summary report","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/create-an-incident-summary-report","siteSpaceId":"sitesp_q8HwM","description":"Create incident summary reports in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"eeS3KykoXQSJGs0QjrcU","title":"Manage indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators","siteSpaceId":"sitesp_q8HwM","description":"Manage indicators in Cortex XSOAR 8.13 On-prem without a TIM license.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"}]},{"id":"Hf2Bs5O7uxB49RXggl9Q","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/query-indicators","siteSpaceId":"sitesp_q8HwM","description":"Query indicators in Cortex XSOAR 8.13 On-prem without a TIM license.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"NAtxTr4BRTjNMQr0Hf3u","title":"View indicator relationships in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/view-indicator-relationships-in-an-investigation","siteSpaceId":"sitesp_q8HwM","description":"View indicator relationships in Cortex XSOAR 8.13 On-prem investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"uvOo8WWuMqmJQe9hobHO","title":"Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management","siteSpaceId":"sitesp_q8HwM","description":"Manage threat intelligence in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"}]},{"id":"aAhzr1Q7fINTBsQvuaBf","title":"Get started with Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_q8HwM","description":"Get started with Threat Intel Management in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"}]},{"id":"3UwYc2yenB0nlHAT51LM","title":"What is Threat Intel Management?","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_q8HwM","description":"Learn about Threat Intel Management in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"uOFk4cCI3BLAkVVICYjU","title":"Threat Intel Management use cases","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_q8HwM","description":"Explore Threat Intel Management use cases in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"OpkYeWDtcuCXq1scVgfx","title":"Indicator concepts","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_q8HwM","description":"Learn about indicator concepts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"Ui6jO40PoHSKQnghVtiA","title":"Indicator lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_q8HwM","description":"Manage the indicator lifecycle in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"eaM4dAq11j0QWUdwHGpR","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_q8HwM","description":"Define Threat Intel Management roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"JovomoV7yyMmnAvstrhe","title":"Indicator configuration","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_q8HwM","description":"Configure indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"}]},{"id":"T9vagC1VONkBvoi9FDmD","title":"Customize indicator types, fields, and layouts","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts","siteSpaceId":"sitesp_q8HwM","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"VqLfAVI5RmRlKMmyXGLy","title":"Create an indicator type","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type","siteSpaceId":"sitesp_q8HwM","description":"Create indicator types in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"daEmGJtCbjhOrok7nV5R","title":"Indicator type profile","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-type-profile","siteSpaceId":"sitesp_q8HwM","description":"Configure indicator type profiles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"4XdHtQ2z6UHQjFgUdGXh","title":"File indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/file-indicators","siteSpaceId":"sitesp_q8HwM","description":"Manage file indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"velIon4a6S1hwDf4OrOR","title":"Formatting scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/formatting-scripts","siteSpaceId":"sitesp_q8HwM","description":"Use indicator formatting scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"tEzXfuNV5eOwbc9uDHSb","title":"Enhancement scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/enhancement-scripts","siteSpaceId":"sitesp_q8HwM","description":"Use indicator enhancement scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"SqfqYeEBLSBF4xhXGugg","title":"Reputation scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/reputation-scripts","siteSpaceId":"sitesp_q8HwM","description":"Use indicator reputation scripts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"VLTTMx6oschq4XoaNytG","title":"Reputation commands","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/reputation-commands","siteSpaceId":"sitesp_q8HwM","description":"Use indicator reputation commands in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"0ukOO3gUVKQKXsml9raN","title":"Map custom indicator fields","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/map-custom-indicator-fields","siteSpaceId":"sitesp_q8HwM","description":"Map custom indicator fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"s9YqYK56uZZkYf04vjTg","title":"Create an indicator field","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field","siteSpaceId":"sitesp_q8HwM","description":"Create indicator fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"6vZCf2LOqbeOvMXe8cKK","title":"Indicator fields structure","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field/indicator-fields-structure","siteSpaceId":"sitesp_q8HwM","description":"Understand indicator field structure in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator field"}]},{"id":"IWTpk4A1SjsiSnSGVIEH","title":"Indicator field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field/indicator-field-trigger-scripts","siteSpaceId":"sitesp_q8HwM","description":"Configure indicator field triggers in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator field"}]},{"id":"8kbx82iqBMngUXVeoBoX","title":"Indicator layout customization","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-layout-customization","siteSpaceId":"sitesp_q8HwM","description":"Customize indicator layouts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"Owybq20OdxHocwqQHEQE","title":"Indicator classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_q8HwM","description":"Classify and map indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"kaAiz26WOOyaePeb4mpY","title":"Indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_q8HwM","description":"Extract indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"OeXYcg4a1YzhK0LNnuyc","title":"Indicator extraction modes","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_q8HwM","description":"Configure indicator extraction modes in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"cawaGYm5wBe1SXAstDD8","title":"Create indicator extraction rules for an incident type","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_q8HwM","description":"Create indicator extraction rules in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"wAMJtT3Wyz2PA8lfXdkn","title":"Set the indicator extraction mode for a playbook task","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/set-the-indicator-extraction-mode-for-a-playbook-task","siteSpaceId":"sitesp_q8HwM","description":"Set indicator extraction modes in Cortex XSOAR 8.13 On-prem playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"5gJneVvvoutya9ZWgjNN","title":"Disable indicator extraction for scripts or integrations","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/disable-indicator-extraction-for-scripts-or-integrations","siteSpaceId":"sitesp_q8HwM","description":"Disable indicator extraction in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"reCZtYtjUG44WqGAcvNu","title":"Troubleshoot indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/troubleshoot-indicator-extraction","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot indicator extraction in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"A6Wd3Cz01FrcGcyCLYmC","title":"Configure the indicator timeline","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-the-indicator-timeline","siteSpaceId":"sitesp_q8HwM","description":"Configure the indicator timeline in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"azfIatxKlDnl9vntrzhn","title":"Configure indicator expiration","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-indicator-expiration","siteSpaceId":"sitesp_q8HwM","description":"Configure indicator expiration in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"i1jSyX8oe20w6jH9Roj8","title":"Configure Threat Intel feed integrations","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intel-feed-integrations","siteSpaceId":"sitesp_q8HwM","description":"Configure Threat Intel feed integrations in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"wgkCqVqBC7ms7iPbyQgN","title":"Exclude indicators from enrichment","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_q8HwM","description":"Exclude indicators from enrichment in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"aH6Eyq3a8f9OBfw9Rtmp","title":"Configure Threat Intelligence Management playbooks to process indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intelligence-management-playbooks-to-process-indicators","siteSpaceId":"sitesp_q8HwM","description":"Configure Threat Intel playbooks in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"c2TYPQp0K36L2Yhf7u1L","title":"Export indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/export-indicators","siteSpaceId":"sitesp_q8HwM","description":"Export indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"}]},{"id":"x7dvyt1ac8YGkrXhAuVh","title":"Customize Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports","siteSpaceId":"sitesp_q8HwM","description":"Customize Threat Intel Reports in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"}]},{"id":"qS7INjkmISMrbZbVCaQa","title":"Create a Threat Intel Report type","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-type","siteSpaceId":"sitesp_q8HwM","description":"Create Threat Intel Report types in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"93f9XNsZwJYWyqf06hXK","title":"Create a Threat Intel Report field","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-field","siteSpaceId":"sitesp_q8HwM","description":"Create Threat Intel Report fields in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"sOeRqsctayGyYT15Towf","title":"Create a Threat Intel Report layout","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-layout","siteSpaceId":"sitesp_q8HwM","description":"Create Threat Intel Report layouts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"Ee1lcQNZdYvHwAUsdnzg","title":"Indicator management","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-management","siteSpaceId":"sitesp_q8HwM","description":"Manage indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"}]},{"id":"95rrn6iuASVGUK3BQFPc","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-management/query-indicators","siteSpaceId":"sitesp_q8HwM","description":"Query indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator management"}]},{"id":"rueVelbZO6KKnWB2zmmi","title":"Indicator investigation","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_q8HwM","description":"Investigate indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"}]},{"id":"CPMKDMzpYH0kJpEqgbDC","title":"Indicator verdict","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_q8HwM","description":"Review indicator verdicts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"yCUvXnRcNGzkuC3vQjXP","title":"Extract and enrich an indicator","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_q8HwM","description":"Extract and enrich indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"foDUEbNGOCr7ORI6piYc","title":"Expire an indicator","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_q8HwM","description":"Expire indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"2142ckhuKKYCnIFSbGt5","title":"Manage indicator relationships","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_q8HwM","description":"Manage indicator relationships in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"fb8MzQRmB5OPalQzTeiA","title":"Delete and exclude indicators","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_q8HwM","description":"Delete and exclude indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"GPLtkJSZwV7mTVZxJrQL","title":"Manage Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.13/investigate-and-respond-to-threats/threat-intel-management/manage-threat-intel-reports","siteSpaceId":"sitesp_q8HwM","description":"Manage Threat Intel Reports in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"face-monocle"},{"label":"Threat Intel Management"}]},{"id":"pU5avwzyK0khy4LbV65Z","title":"Troubleshoot","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot","siteSpaceId":"sitesp_q8HwM","description":"Troubleshoot errors in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"JyaOqcfbICU1iuvihKiE","title":"View system status in the System Diagnostics page","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot/view-system-status-in-the-system-diagnostics-page","siteSpaceId":"sitesp_q8HwM","description":"View system diagnostics in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"PZNleSK2AgSsxqVWJjYF","title":"View Guard Rails warnings and errors","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot/view-guard-rails-warnings-and-errors","siteSpaceId":"sitesp_q8HwM","description":"View Guard Rails warnings in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"zQ6aYy5OZ7gtarzgbQBg","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot/access-logs-and-log-bundles","siteSpaceId":"sitesp_q8HwM","description":"Access logs and log bundles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"COG60tK08AFvY6w5TLle","title":"Management audit logs","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot/management-audit-logs","siteSpaceId":"sitesp_q8HwM","description":"Manage audit logs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"rPNh7w5KgGp5pdM1ou6m","title":"Manage syslog servers","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot/manage-syslog-servers","siteSpaceId":"sitesp_q8HwM","description":"Manage syslog servers in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"InMPVmMpp0bsc0lR8NC4","title":"Configure log and notification forwarding","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot/configure-log-and-notification-forwarding","siteSpaceId":"sitesp_q8HwM","description":"Configure log forwarding in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"8zU3iIRxwL8iKstlzjvw","title":"Integration logs","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/troubleshoot/integration-logs","siteSpaceId":"sitesp_q8HwM","description":"View integration logs in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"zqXP43HZJbZ8YYdoPGu6","title":"Reference","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference","siteSpaceId":"sitesp_q8HwM","description":"Reference Cortex XSOAR 8.13 On-prem features and settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"lCMtOF6ov6YL0GQ1NETz","title":"Cortex XSOAR concepts","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/cortex-xsoar-concepts","siteSpaceId":"sitesp_q8HwM","description":"Learn core concepts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"I4mlfuthz9j5E1JBKFq3","title":"How to search in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/how-to-search-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Search in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"mGp1Rzqq5JKX0B9oKSMt","title":"How to use markdown in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/how-to-use-markdown-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Use markdown in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"N32sPBlLUAsH1nqWGc49","title":"User details and preferences","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/user-details-and-preferences","siteSpaceId":"sitesp_q8HwM","description":"Manage user details and preferences in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"VMVZ5ewjh1tz5uSo5j6b","title":"Server configurations","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/server-configurations","siteSpaceId":"sitesp_q8HwM","description":"Configure server settings in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"l2uWLNFTPhD3witydGHI","title":"New user FAQ","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/new-user-faq","siteSpaceId":"sitesp_q8HwM","description":"Review new user FAQs for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"IeI4If06FCaDTkhGQhBQ","title":"Cortex XSOAR API","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/cortex-xsoar-api","siteSpaceId":"sitesp_q8HwM","description":"Use the API in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"cO9JjizSGvjo9AGAlK97","title":"Telemetry in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/telemetry-in-cortex-xsoar","siteSpaceId":"sitesp_q8HwM","description":"Manage telemetry in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"HH031PQ6qY4ji7ex3Zba","title":"Keyboard shortcuts","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/keyboard-shortcuts","siteSpaceId":"sitesp_q8HwM","description":"Use keyboard shortcuts in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"GTWIQdOiBFahVmzHEtoV","title":"Product support lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/product-support-lifecycle","siteSpaceId":"sitesp_q8HwM","description":"Review the product support lifecycle for Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"dp3ZBBpK8G6hQhL4rUGw","title":"Cortex XSOAR navigation cheat sheet","pathname":"/cortex-xsoar-8-on-prem/8.13/troubleshoot-and-reference/reference/cortex-xsoar-navigation-cheat-sheet","siteSpaceId":"sitesp_q8HwM","description":"Navigate Cortex XSOAR 8.13 On-prem features.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"1DOFhRr5fLb1jx1NYA2d","title":"What is Cortex XSOAR multi-tenant?","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/what-is-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_q8HwM","description":"Learn about multi-tenant deployments in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"zKk9Y3lV0qk1rMY95q2H","title":"Onboard Cortex XSOAR multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/onboard-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_q8HwM","description":"Onboard multi-tenant deployments in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"iP3EwvyE98VLTwMYtafQ","title":"Onboarding checklist for multi-tenant deployments","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/onboard-cortex-xsoar-multi-tenant/onboarding-checklist-for-multi-tenant-deployments","siteSpaceId":"sitesp_q8HwM","description":"Complete multi-tenant onboarding in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"3dlJic4bYkLvh818pxpL","title":"Step 1. Install Cortex XSOAR for multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-1.-install-cortex-xsoar-for-multi-tenant","siteSpaceId":"sitesp_q8HwM","description":"Install multi-tenant deployments in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"pruFlIAdHYZeLpAbGgRm","title":"Step 2. Pair child tenant to main tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-2.-pair-child-tenant-to-main-tenant","siteSpaceId":"sitesp_q8HwM","description":"Pair child tenants in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"zsB9TfHl1ncg2p2OumHv","title":"Step 3. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-3.-set-up-an-engine","siteSpaceId":"sitesp_q8HwM","description":"Set up engines in Cortex XSOAR 8.13 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"9HthSjnxONpKWpjBDTFm","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_q8HwM","description":"Set up multi-tenant users and roles in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"8EgOGm7Em7PlAUSZ9jq3","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-5.-install-and-configure-content","siteSpaceId":"sitesp_q8HwM","description":"Configure multi-tenant content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"nEzUh5ZspmPuUehmMO7D","title":"Child tenant management","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_q8HwM","description":"Manage child tenants in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"jwyxNoZMF2zp7HaERBkW","title":"Content management in multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/child-tenant-management/content-management-in-multi-tenant","siteSpaceId":"sitesp_q8HwM","description":"Manage multi-tenant content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"}]},{"id":"dD8MXNKrEcpBqncamAv4","title":"Add propagation labels to content","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-content","siteSpaceId":"sitesp_q8HwM","description":"Add content propagation labels in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"j8vd0IU3boK1w09oW9G8","title":"Add propagation labels to a child tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-a-child-tenant","siteSpaceId":"sitesp_q8HwM","description":"Add child tenant propagation labels in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"8L3lJBFHCv3YcQygpcw1","title":"Sync content to child tenants","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/child-tenant-management/content-management-in-multi-tenant/sync-content-to-child-tenants","siteSpaceId":"sitesp_q8HwM","description":"Sync content to child tenants in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"YkBY0eKUiNmoYrNRIXLG","title":"Manage content using a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/child-tenant-management/content-management-in-multi-tenant/manage-content-using-a-remote-repository","siteSpaceId":"sitesp_q8HwM","description":"Manage remote repository content in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"C47EWa8IlAEUdpoXlJJ9","title":"Incident management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/incident-management-on-the-main-tenant","siteSpaceId":"sitesp_q8HwM","description":"Manage main tenant incidents in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"KegcHKSSLxAbUdSD9k1H","title":"Manage main tenant users in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/incident-management-on-the-main-tenant/manage-main-tenant-users-in-an-investigation","siteSpaceId":"sitesp_q8HwM","description":"Manage main tenant users in Cortex XSOAR 8.13 On-prem investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Incident management on the main tenant"}]},{"id":"KYFEAE8APMwdz9Rm3o1E","title":"Run a command on multiple tenants","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/incident-management-on-the-main-tenant/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_q8HwM","description":"Run commands across tenants in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Incident management on the main tenant"}]},{"id":"zbWK4lQ5wbv8LbqCarE0","title":"Indicator management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.13/multi-tenant/indicator-management-on-the-main-tenant","siteSpaceId":"sitesp_q8HwM","description":"Manage main tenant indicators in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"ZfywKL6dJxvPNyP2bfFw","title":"Navigate the Cortex XSOAR 8.12 On-prem docs","pathname":"/cortex-xsoar-8-on-prem/8.12","siteSpaceId":"sitesp_2pvqE","description":"Start here for a visual overview of the main Cortex XSOAR 8.12 On-prem documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"h4cKVoTXSRpGQOjpxrI9","title":"Get Started with Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/learn-about-cortex-xsoar/get-started-with-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn about architecture, roles, responsibilities, and licenses.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"hOzVtamb7swtySKp5i18","title":"What is Cortex XSOAR?","pathname":"/cortex-xsoar-8-on-prem/8.12/learn-about-cortex-xsoar/what-is-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"Learn about Cortex XSOAR 8.12 On-prem features for security orchestration and automation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"BMvI1BPdmzI5nzz3jYev","title":"Cortex XSOAR architecture","pathname":"/cortex-xsoar-8-on-prem/8.12/learn-about-cortex-xsoar/cortex-xsoar-architecture","siteSpaceId":"sitesp_2pvqE","description":"Explore the Cortex XSOAR 8.12 On-prem architecture, including cluster nodes and core services.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"rf2VYe505ZP8qYm4Aaqi","title":"Cortex XSOAR use cases","pathname":"/cortex-xsoar-8-on-prem/8.12/learn-about-cortex-xsoar/cortex-xsoar-use-cases","siteSpaceId":"sitesp_2pvqE","description":"Explore recommended SOC automation use cases in Cortex XSOAR 8.12 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"MNOx59lVgkTywX7EOsQ7","title":"Understand Cortex XSOAR licenses","pathname":"/cortex-xsoar-8-on-prem/8.12/learn-about-cortex-xsoar/understand-cortex-xsoar-licenses","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn about license types, quotas, and user access.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"rKcid0LCgxUXEFRZVaUj","title":"Roles and responsibilities","pathname":"/cortex-xsoar-8-on-prem/8.12/learn-about-cortex-xsoar/roles-and-responsibilities","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn about core SOC roles and responsibilities.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"ZNyJvsYJCFbATayQa4A1","title":"Supported web browsers","pathname":"/cortex-xsoar-8-on-prem/8.12/learn-about-cortex-xsoar/supported-web-browsers","siteSpaceId":"sitesp_2pvqE","description":"View supported web browsers for Cortex XSOAR 8.12 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR","icon":"book"}]},{"id":"PA7YZz59vsUux3FOXHPI","title":"How to onboard Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, onboard and configure your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"bMP9y1o7fGEDaQhAbHhw","title":"Plan your deployment","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/plan-your-deployment","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, plan deployment, access, and content management.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"htrcSYZ57lwdCTxgW7vF","title":"Deployment steps","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, follow the core deployment and onboarding steps.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"q8xqabrEizHdIeFzRv86","title":"Onboarding checklist","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/onboarding-checklist","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, activate, provision, grant access, and configure.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"gNKwEB06PY9gHe2w6w6k","title":"Step 1. Install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-1.-install-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install your deployment and add a license.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"JnxNJHgplTnKuGoa1twK","title":"Step 2. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-2.-set-up-an-engine","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, set up an engine on a remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"oqAhMS41hgvcuAKH6RTj","title":"Step 3. Set up a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-3.-set-up-a-remote-repository","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, set up a remote repository for content development.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"mPnm7l4j2vRoA1nkgKGU","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure users, permissions, and predefined roles.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"3xkCjvV1Mt6Ox3Gzwvqd","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install and configure content for your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"}]},{"id":"5VqqjxPVf2qzkKJDnSWB","title":"Install content packs","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/install-content-packs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install content packs for your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Step 5. Install and configure content"}]},{"id":"pcLpi9uSmHTc0v75xBcI","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-5.-install-and-configure-content/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use the Deployment Wizard to adopt a use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Deployment steps"},{"label":"Step 5. Install and configure content"}]},{"id":"u3oMRALmBY0xG79J6Czb","title":"Post deployment","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/post-deployment","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, complete post-deployment communication and system setup.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"}]},{"id":"x6hzDbOiTcIW0pvNDLsr","title":"User communication","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/post-deployment/user-communication","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure communications for your users.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"}]},{"id":"m0CIdOnBXzpfqbGbV1eQ","title":"Configure user notifications in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/post-deployment/user-communication/configure-user-notifications-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure notifications for your users.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"xPP3cL903z8gIo0ETzH4","title":"Customize system emails","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/post-deployment/user-communication/customize-system-emails","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize system email messages.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"hTh42wrU07bb2L5EBvAM","title":"Configure system settings","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/post-deployment/configure-system-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure system settings for your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"}]},{"id":"kMROuGO7xEg5Dd7u00sP","title":"Configure server settings","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/post-deployment/configure-system-settings/configure-server-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure server settings for your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"Configure system settings"}]},{"id":"WJWReOttIIVQcqUY1LM1","title":"Configure security settings","pathname":"/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/post-deployment/configure-system-settings/configure-security-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure security settings for your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR","icon":"rocket"},{"label":"Post deployment"},{"label":"Configure system settings"}]},{"id":"kZDfumZ50cQUzNy3khme","title":"How to install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/cortex-xsoar-installation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install, maintain, and upgrade your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"qyzAmihFrEfQ1REvrPUI","title":"High Availability for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/high-availability-for-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure High Availability for reliable operation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"3aPT8O6NXutRS0rjXJDZ","title":"Load balancing for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/load-balancing-for-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure load balancing for reliable operation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"tMDmooRUuNhv05I3YHOO","title":"System Requirements","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/system-requirements","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, verify minimum system requirements for deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"aO4z8UAK5UFyN9uQ2Jpr","title":"Hardware requirements","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/system-requirements/hardware-requirements","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, review hardware requirements for installation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"Jbu36DdstlWK24UCT4tH","title":"Port requirements for cluster communication","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/system-requirements/port-requirements-for-cluster-communication","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure ports for cluster communication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"J8b9nlV6RHul8uKIwDd3","title":"URL requirements","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/system-requirements/url-requirements","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, allow required URLs for installation and operation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"QT3P0u1yJcSFbIr7UOlR","title":"Bandwidth and NTP requirements","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/system-requirements/bandwidth-and-ntp-requirements","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, meet bandwidth and NTP synchronization requirements.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"System Requirements"}]},{"id":"eVyMG2HnjHHb5QEzS3TK","title":"Install Cortex XSOAR on a VM deployed on AWS","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install a virtual machine on AWS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"FaBULz4lnYsj4u7nUDFv","title":"Task 1. Download the OVA Image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, download the OVA image and license from Cortex Gateway.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"yVuul6MwOqJUgJSApCBy","title":"Task 2. Deploy your virtual machine on AWS","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-2.-deploy-your-virtual-machine-on-aws","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, deploy your virtual machine on AWS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"2fZ1h3SduJeA58MsJccj","title":"Task 3. Validate tenant nework and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-3.-validate-tenant-nework-and-ip-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, validate tenant network and IP settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"MQsQtFvaiKd0bk0qRSUe","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure NTP servers for your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"tEOl1iRUO2dN743fWQs1","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure optional proxy settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"XVNRN0obGGLSqRKyReS6","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, establish trust between cluster nodes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"G7DWPrL8oWXBtdWvZkqv","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install it on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"PfsesklFTNd2iBrcYLLZ","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, verify that you can sign in.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"9xubcqMU3DGRA6T24MyL","title":"Install Cortex XSOAR on a VM deployed on OCI","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install a virtual machine on OCI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"KdXEW7AoWLiTQlYFHNq9","title":"Task 1. Download the OVA image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, download the OVA image and license from Cortex Gateway.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"MYIXgB8KQruYc2jYWMZe","title":"Task 2. Deploy your virtual machine on OCI","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-2.-deploy-your-virtual-machine-on-oci","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, deploy your virtual machine on OCI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"alkklQYtUJipvsIO8TI9","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-3.-validate-tenant-network-and-ip-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, validate tenant network and IP settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"mBqnIXMWx5rpWycYn7BG","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure NTP servers for your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"lfnG8d4Fz38J8x1sXNOT","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure optional proxy settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"JOLIUCbQ888ZjYiuH2GT","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, establish trust between cluster nodes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"bj8oz2h2LNpy8DzHFx8G","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install it on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"h1AOEKK2P5ucC1EXnERe","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, verify that you can sign in.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"FXeJ4pRqWUmfq06GTra9","title":"Install Cortex XSOAR on a VM deployed on Hyper-V","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install a virtual machine on Hyper-V.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"cWAJKBENU0Y3yk1fyH0L","title":"Install Cortex XSOAR on a VM deployed on VSphere","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-vsphere","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install a virtual machine on vSphere.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"z6vArEsxT7bMtXz9Cbq7","title":"Install Cortex XSOAR on a VM deployed on KVM","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install a virtual machine on KVM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"JtCMxrOL7sjpoJen7ZCx","title":"Task 1. Download the QCOW2 image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-1.-download-the-qcow2-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, download the QCOW2 image and license from Cortex Gateway.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"KCGqwMhJKZ5TnC3pkyPt","title":"Task 2. Deploy your virtual machine on KVM","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-2.-deploy-your-virtual-machine-on-kvm","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, deploy your virtual machine on KVM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"HqlASE7S9ESMvCBvD0c0","title":"Task 3. Configure tenant network and IP settings for each node","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-3.-configure-tenant-network-and-ip-settings-for-each-node","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure tenant network and IP settings for each node.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"PuxF2iGMJsWEbaGCQ9W6","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure NTP servers for your deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"B3BCYqNtw8ME8yEBJV7a","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure optional proxy settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"XJ9yDM5uH66sOSsqJ8qG","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, establish trust between cluster nodes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"K0vlvea4BoJZtYYVNgr2","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install it on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"SMqoDQVF5Z6HSVtsgc7e","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, verify that you can sign in.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"SgQPX3nUWFuw5oUFWMLB","title":"Post-installation","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add a license, configure certificates, and maintain your VM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"LQ7fg8F47AKRQRgZnSEL","title":"Add the Cortex XSOAR license","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation/add-the-cortex-xsoar-license","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, download and add a license from Cortex Gateway.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"59KhHuiC4aQ3d8KcvGcO","title":"HTTPS with a signed certificate","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation/https-with-a-signed-certificate","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure HTTPS with a signed certificate.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"NntNzDPEFyNuKxeA2NMb","title":"Use a signed certificate instead of SSL verification","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation/use-a-signed-certificate-instead-of-ssl-verification","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use a signed certificate for MSSP connections.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"Vsqqr6dQmPBI9GTcooeH","title":"Optimize performance and robustness from the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, optimize performance from the VM textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"}]},{"id":"O3zzZsRuQnYeujaPJNiB","title":"Manage nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/manage-nodes-in-a-cluster","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage nodes in your cluster.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"fttQfEpbxBtSQ42n7ysH","title":"Scale up hardware resources","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation/optimize-performance-and-robustness-from-the-textual-ui/scale-up-hardware-resources","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, scale up hardware resources.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"ttcgeDQ4rsZQxrZogocf","title":"Troubleshoot your installation","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/troubleshoot-your-installation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot installation from the VM textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"mm1uhDPY6VZuGoKBzXJJ","title":"Common installation limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/troubleshoot-your-installation/common-installation-limitations-and-fixes","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot common installation limitations and issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"iXmUY61PUQhANRdmaV5L","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/troubleshoot-your-installation/access-logs-and-log-bundles","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, access logs and download troubleshooting bundles.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"TyF2okYmQNC1rIZwOAWT","title":"Open a support session","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/troubleshoot-your-installation/open-a-support-session","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, open a support session from the VM textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"nIrJ9uQkvAf7Df33wPtH","title":"Upload your license to the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/troubleshoot-your-installation/upload-your-license-to-the-textual-ui","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, upload a license to the VM textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"iYevfvpZwJe7vcPPNVYh","title":"Shut down Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/troubleshoot-your-installation/shut-down-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, shut down your deployment from the VM textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"},{"label":"Troubleshoot your installation"}]},{"id":"a1HyRakCBUptjPVbzjgK","title":"Update Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/update-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, upgrade your tenant to the latest version.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Install Cortex XSOAR","icon":"desktop-arrow-down"}]},{"id":"6pio27iQuctDPb71gmSg","title":"How to back up and restore Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/back-up-and-restore-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, back up and restore your cluster data.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"qj82Frfyz5at2iFioSPl","title":"Set up access to an external storage","pathname":"/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/set-up-access-to-an-external-storage","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure access to external storage.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"kAL0mycQMqQ1NpwKJZER","title":"Back up data","pathname":"/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/back-up-data","siteSpaceId":"sitesp_2pvqE","description":"From the Cortex XSOAR tenant, perform scheduled backups and on-demand backup and restore of Cortex XSOAR data.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"Fr9hfPPNrD62wsWcrNpY","title":"Backup guidelines and best practices","pathname":"/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/back-up-data/backup-guidelines-and-best-practices","siteSpaceId":"sitesp_2pvqE","description":"","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"},{"label":"Back up data"}]},{"id":"sew4BqANbE67QkpUxl5Z","title":"Restore data","pathname":"/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/restore-data","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, restore data from an external backup.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"pQxkUAebdNY2m9LxhH8T","title":"End-to-end example of Cortex XSOAR cluster backup and restore","pathname":"/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/end-to-end-example-of-cortex-xsoar-cluster-backup-and-restore","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, follow an end-to-end backup and restore workflow.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"aarU6XjvFlqQ49G2nEfQ","title":"Common backup and restore limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/common-backup-and-restore-limitations-and-fixes","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot common backup and restore issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Back up and Restore Cortex XSOAR","icon":"floppy-disks"}]},{"id":"drLBNwbgh0GL0aZ1vaHW","title":"Engines","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install, configure, and troubleshoot engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"c2S5V96XNG9pc6njYx17","title":"What is an engine?","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/what-is-an-engine","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn how engines connect external systems.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"z47UJi0np0rWJO5RNRpZ","title":"Engine requirements","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/engine-requirements","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, review engine hardware, OS, and URL requirements.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"E1mrLs8XM1a2E9JUTMOq","title":"Install an engine","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install, deploy, and configure an engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"h4tDYAxkdLCCsPGaYubE","title":"Engine air gap installation","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/engine-air-gap-installation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install an engine offline on RHEL 8.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"BrUmmk69SYCDhSe7Idsb","title":"Docker","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install, configure, secure, and troubleshoot Docker.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"3tDu2y9tUQZhzt1Sb9cn","title":"Install Docker","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install Docker for engine operations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"2bLknDzkcGkWouCtb0ce","title":"Install Docker distribution for Red Hat on an engine server","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker-distribution-for-red-hat-on-an-engine-server","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install Docker on a Red Hat engine server.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"XOzqyO4b0z9nKi95b3Vy","title":"Docker image security","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, secure Docker images used by engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"DL8j2VTLaYP6HLdZANG0","title":"Use the Cortex XSOAR Container Registry","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use the Container Registry with engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"dj294NCtHX2Xf3P4c48d","title":"Docker FAQs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, find answers to common Docker questions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"D6W2gfAmlxYbcvpNxwmE","title":"Troubleshoot Docker issues","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot Docker issues on engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"FrbBYMaEAsfBTsj8KD7h","title":"Configure Docker pull rate limit","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Docker image pull rate limits.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"3TTbCjJ9yAYvcbzVrZHv","title":"Change the Docker installation folder","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, change the Docker installation directory.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"Kk3dL8TXLoyZkpYzkxrm","title":"Configure Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Docker integrations to trust custom certificates.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"kwdNobIfRrttTWoBEihs","title":"Configure Python Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Python Docker integrations to trust custom certificates.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"aKhloYwJvEndoVfpPkJp","title":"Docker hardening guide","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, harden Docker for secure engine operations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"Qn6sOrZVRm1LN6FGLYWx","title":"Podman","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/podman","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, run Podman containers on RHEL 8 or later.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"Lvs0RiV9kAwIFf1Bcl3C","title":"Change container storage directory","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/podman/change-container-storage-directory","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, change the Podman container storage directory.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"BAUNwDRrrZZCBDsHDpNu","title":"Install Podman","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install Podman for engine operations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"KBIb38aF7uU5eCeIqoca","title":"Migrate From Docker to Podman","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, migrate an engine from Docker to Podman.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"rnAMDaBnNIAfkCSeO6iC","title":"Troubleshoot Podman","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot Podman on an engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"GVH9A4e7zaoBM9vSYXdc","title":"Manage engines","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage engines and load-balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"wE1ejwA0gEQuhltOZBPf","title":"Upgrade an engine","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/upgrade-an-engine","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, upgrade an engine from the tenant or remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"LQKY8YK8aCuGimYr34hv","title":"Remove an engine","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, remove an engine using operating system commands.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"gWeRSrymrKviprDBTHla","title":"Configure engines","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure engines in d1.conf or the UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"usm860r56JnRdSTsBwyp","title":"Configure the engine to use a web proxy","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_2pvqE","description":"Configure a Cortex XSOAR engine to use a web proxy by editing the d1.conf file.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"QEh9967tNTGDPa3h8I02","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure an engine to bypass a proxy.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"nOKzPMQnV73seQbc33CM","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use NGINX as an engine reverse proxy.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"},{"label":"Configure engines"},{"label":"Configure the engine to call the server without using a proxy"}]},{"id":"yig45A583eIM4ZsSjuKR","title":"Configure an engine to use custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure an engine to use custom certificates.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"G8dZRAMfyvzqkkXtdN7n","title":"Use an engine in an integration","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use an engine with an integration.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"btkPXXjRhROe92mEzbZY","title":"Run a script using an engine","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, run scripts on an engine or load-balancing group.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"qcJ102kirdTcUyiwwIdd","title":"Troubleshoot engines","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/troubleshoot-engines","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot engines using logs and errors.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"SrXSG5cIBoT61FUjKaSr","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot integrations running on engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Engines"}]},{"id":"fr09PjIeRzhlnLxifHDy","title":"Remote Repository Management","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/remote-repository-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure and manage remote repositories across development and production tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"Pm2oJWeWOuEKniBkGTc7","title":"Content management in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/remote-repository-management/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage content using manual, CI/CD, or remote repository workflows.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"X3aanQ3IRNh98E0hNxCh","title":"Set up a private remote repository","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/remote-repository-management/set-up-a-private-remote-repository","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, set up a private remote repository for tenant content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"uFVo8h1U6FgunKNHw4v5","title":"Push content from a development tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/remote-repository-management/push-content-from-a-development-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, push development tenant content to a remote repository.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"lOBOCBNF0aBtvINdEoHi","title":"Install content on a production tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/remote-repository-management/install-content-on-a-production-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install remote repository content on a production tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"CEEkehoKbvlaytzoRu1W","title":"Remote repository troubleshooting","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot remote repository content management issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Remote Repository Management"}]},{"id":"LqCRArlypacTs1ra64QE","title":"Users and Roles Management","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage users, roles, groups, and authentication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"L1tRW9gmHfUfDSR8pJe6","title":"Users and roles in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/users-and-roles-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure user access through roles, groups, and authentication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"ZGlWNJJhyuwq3fTHgHeo","title":"Roles management","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/roles-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure roles and their tenant permissions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"v9eYE6myG8itEmGvx11f","title":"Role-based permissions","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/roles-management/role-based-permissions","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure role-based permissions and page access.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"YiocWM2bIg4zyahF72gL","title":"Manage roles in the Cortex XSOAR tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/roles-management/manage-roles-in-the-cortex-xsoar-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, manage, and assign tenant roles.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"HbPKgOnpkueHfhPnugM9","title":"User group management","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/user-group-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create user groups and assign roles and users.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"xwSTUfpW65neSZq8uqJs","title":"Set up authentication","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/set-up-authentication","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure local user authentication or SAML SSO.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"WeWb5ZnlOAj69EqJc8Xc","title":"Create users in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/create-users-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, invite local users and assign their access.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"CARwaXgbfrMhQqEdczwM","title":"Authenticate users using SSO","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, authenticate tenant users through SAML SSO.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"EugRIZjIwxMJudiVTIih","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Okta as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"IYtjDcjQo05BSFArm9MV","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Microsoft Entra ID as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"XN4IVX8BhdPVFmnFIgIz","title":"User management","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/user-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage user access, roles, and groups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"HJJVZRNgdgMneN9r4jxE","title":"Configure a password policy","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/users-and-roles-management/configure-a-password-policy","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure password complexity, expiration, and lockout policies.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Users and Roles Management"}]},{"id":"5gaBueMtgUYVDsbGoqzL","title":"Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use Marketplace to discover and manage content packs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"aODlbvQy3Ph7vity7Etj","title":"Cortex Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/cortex-marketplace","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, search Marketplace content by use case, integration, and category.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"OSSWFtVsT80irqXPDaHv","title":"Content packs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/content-packs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, find content packs for your security use cases.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"vAVSyiS6f8zCmqIAFwBM","title":"Content Pack Support Types","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/content-pack-support-types","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, understand Marketplace content pack support types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"BdgilLxy3X98vvDfxPJp","title":"Manage content packs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/manage-content-packs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install, update, revert, and delete content packs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"33hlA5HkE9gf4BvCZUwU","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use the Deployment Wizard to configure a security use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"2QbfSjPA8wvcbN0yyARs","title":"Marketplace FAQs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, find answers to common Marketplace content questions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"NCSfVXdjqrn5DYWJMXJX","title":"Content pack update notifications","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, enable update notifications for selected content packs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"oC2bEyUeRJfHc7FpGSuW","title":"Customize content pack notifications","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize content pack update notification delivery.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack update notifications"}]},{"id":"Tl8b0rKDjMZxuNCI2ddB","title":"Content pack contributions","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and submit Marketplace content pack contributions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"}]},{"id":"1njXCQZ4D81Zvy5NrZ53","title":"Create a content pack","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and submit a Marketplace content pack.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"6pG0sfBf6bhk1VWQZ0Nm","title":"Resubmit a content pack","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, resubmit an updated Marketplace content pack.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"CzBQCxwHdDnSnEqxUqoC","title":"Integrations","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure, manage, and troubleshoot integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"txfSFxRyzF5cpC3Yp42e","title":"Integration use cases","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/integration-use-cases","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, explore integration use cases for security operations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"y6YqE4ceZJbihZ2KtVF7","title":"Configure integrations","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/configure-integrations","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure integrations and create custom integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"qiQvqcPYfaoQte8UHUPp","title":"Change the Docker image in an integration or script","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, change Docker images for integrations and scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"hbuK81V9eZ6pv1d8CUHd","title":"Connect your engine to an image registry","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/connect-your-engine-to-an-image-registry","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, connect an engine to an authenticated image registry.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"eLEwMp2F0tmnnSxLv674","title":"Pull images from a private image registry","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/pull-images-from-a-private-image-registry","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, pull Docker images from a private registry.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"xapQyXzqfA10bqDUPu9e","title":"Manage credentials","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/manage-credentials","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage credentials for integration instances.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"vsE7EfeBguLRt23C4ipA","title":"Configure an external credentials vault","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/manage-credentials/configure-an-external-credentials-vault","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure an external credentials vault.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Manage credentials"}]},{"id":"QKrwV7dMPUan63LXPRpU","title":"Add an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/add-an-integration-instance","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add integration instances and ingest incidents or indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"wvcdBl8Amo6sfwOb3JDX","title":"Fetch incidents from an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/add-an-integration-instance/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure an integration instance to fetch incidents.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"R75MZfypoux5lsabHNn0","title":"Receive notifications on an incident fetch error","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/add-an-integration-instance/receive-notifications-on-an-incident-fetch-error","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, receive notifications for integration incident fetch errors.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"e2XJ8LIeWav8Z7YkIINp","title":"Configure integration permissions","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/add-an-integration-instance/configure-integration-permissions","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, restrict integration commands through role permissions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"Yc0CGjFdOTpM5AJPoxq4","title":"Troubleshoot integrations","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/add-an-integration-instance/troubleshoot-integrations","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot integration configuration and runtime issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"PSPK6dAtMp6c8Nw85Vnb","title":"Integration commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/integration-commands-in-the-cli","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, run integration commands from the CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"exP5tDTTeyxY0isnEcEt","title":"Forward requests to long-running integrations","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, forward requests to long-running integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Integrations"}]},{"id":"tXrVnVOp1jmjvATqrVME","title":"Incident configuration","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize incident workflows, fields, and processing.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"WLKaO4AO1xK5Wai8DDFR","title":"Incident lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-lifecycle","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, understand incident lifecycle stages and processing.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"uG5MU6sLJ9L15a21ESTS","title":"Incident Customization","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and edit incident types, fields, and layouts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"sNa2A1WRnAHKdzbi4wUj","title":"Use incident context data","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization/use-incident-context-data","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use context data in incident layouts and fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"Lc0toFDj9nLynhUqPd1M","title":"Create an incident type","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and edit incident types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"7jpuU6Sy2AOWYhUZNLES","title":"Create an incident field","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"aEfiBfQ8OKsH0hWTRD1z","title":"Incident field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/incident-field-trigger-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure trigger scripts for incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"zypcjIoECAy0wLKoIDrI","title":"Create dynamic fields","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/create-dynamic-fields","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create dynamic incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"OJ3Uj7a8PnKfRm60vCne","title":"Troubleshoot incident fields","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/troubleshoot-incident-fields","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot incident field configuration issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"DTHIzs6mmhDOLgPNndjG","title":"Incident layout customization","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize incident layouts to show relevant information.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"KLSAZCkWTrKm9StTAg0E","title":"Create an evidence field","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/create-an-evidence-field","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom evidence fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"AY297oDrlOqNj2p2u1xn","title":"Classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/classification-and-mapping","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, classify and map integration instances.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"soXD5Y94dylMcBpUFnfs","title":"Create an incident classifier","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-classifier","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create incident classifiers for integration ingestion.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"oaFIZmBhbBVCdA9eusLv","title":"Create an incident mapper","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-mapper","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and apply incident mappers.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"33BfbiPwwpIN1UDiJ7vH","title":"Set up incident mirroring","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/set-up-incident-mirroring","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure integrations to mirror incidents.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"aRpy7UHJQcomKETZWIvA","title":"Incident deduplication in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/incident-deduplication-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, deduplicate incidents using rules or playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"M9ca839hEh4ryE1PPCld","title":"Pre-process rules","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/pre-process-rules","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create pre-process rules for ingested incidents.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"st7x7Bbw0I77IsvJyVeO","title":"Use post-processing scripts in an incident","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/use-post-processing-scripts-in-an-incident","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, run post-processing scripts before incident closure.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"SbfOOC2WtShhnNDmpgXV","title":"Customize incident close reasons","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/customize-incident-close-reasons","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize incident close reasons through server configuration.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"YRnyuAqT8d6t68It6Pty","title":"Configure inline value fields","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/configure-inline-value-fields","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure inline value fields in incident layouts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"hZX85iQoTKZiWZ9PHWR5","title":"Configure incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, export and delete incidents using external storage.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"KXAG3w64k0lIz6QNesSF","title":"Configure access to external storage","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/configure-access-to-external-storage","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure external storage for incident exports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"c2kbPnkT5lMllCxW53L9","title":"Schedule incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/schedule-incident-export-and-delete","siteSpaceId":"sitesp_2pvqE","description":"Schedule incident exports and deletions to external storage in Cortex XSOAR 8.12 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"SZMxbT1qvtHPqGJ2qMGU","title":"Export an incident to CSV using the UTF8-BOM format","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, export incidents to UTF8-BOM CSV files.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"cHqOK8wErleiLK3gp25H","title":"Amazon S3 configuration example","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/incident-configuration/amazon-s3-configuration-example","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Amazon S3 for backups and incident exports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Incident configuration"}]},{"id":"jEzYPs3wT6j2ArjahnIj","title":"Playbooks","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, build playbooks that automate security operations workflows.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"gXNRL4WUTNJCVRHkqhfa","title":"What is a playbook?","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/what-is-a-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use playbooks to automate security processes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"fk7MLoL63SAWJfiUv7v5","title":"Playbook development checklist","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, follow the playbook development checklist.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"VnzJHPZ70gaDyUUU9IoB","title":"Plan your playbook","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/plan-your-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, plan a playbook for your security workflow.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"V99sFCRFVJq68YrXNsbP","title":"Develop your playbook","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create or customize playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"TjgjBrR5Sri8cIWNU8Tj","title":"Task 1. Choose from existing playbooks or create your own","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-1.-choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, choose an existing playbook or create one.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"x5Nq3QTCseiwIxQlR6Ir","title":"Task 2. Configure playbook settings","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-2.-configure-playbook-settings","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure playbook settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"9Z5P71epXZFi5Mb3XyA6","title":"Task 3. Add tasks","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add tasks to a playbook.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"ipyge3JAL2okjqPTMQ3C","title":"Set playbook inputs and outputs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/set-playbook-inputs-and-outputs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, set playbook task inputs and outputs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"mCeJU90VzJ73omC3dTY8","title":"Create a section header","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-section-header","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create section headers in playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"fKldNf2bOhw05GBIwUIZ","title":"Create a standard task","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-standard-task","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create standard playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"mZumheQWGpie96RaXsjN","title":"Create a conditional task","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-conditional-task","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create conditional playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"hxwQOEruVXcbeqoZ1TMY","title":"Create a communication task","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-communication-task","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create communication tasks in playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"RVxqaSf0FAHp5Aqj8CGP","title":"Configure script error handling in a playbook","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure script error handling in playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"6tFIw0gB8HPqpcJo9RrE","title":"Task 4. Add custom playbook features","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-4.-add-custom-playbook-features","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add custom features to playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"A51AkAvGT1fGt10IEZKU","title":"Task 5. Test and debug the playbook","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-5.-test-and-debug-the-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, test and debug playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"d2dqLkgsuEZzixkUnVk8","title":"Task 6. Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/task-6.-manage-playbook-content","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage playbook content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"JcT7864Em946Z0uPgB64","title":"Customize a playbook for a phishing use case example","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/develop-your-playbook/customize-a-playbook-for-a-phishing-use-case-example","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize a playbook for phishing investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"OBIQguvM2TgztmLVRa30","title":"Customize your playbook","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize playbooks with data, scripts, and tasks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"fUgQDTLuEeF2OrVuvx11","title":"Customize the SOC name","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/customize-the-soc-name","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize the SOC name in communication tasks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"4f74mMUR6kYGZBn0dBGW","title":"Configure a sub-playbook","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/configure-a-sub-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure sub-playbooks and loops.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"fJsnBbyB770Y9eeTmYet","title":"Filter and transform data","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, filter and transform data in playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"syykf2hcs3tfvkW1u42B","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use built-in transformers in playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"},{"label":"Filter and transform data"}]},{"id":"jKRRDe2NHW01MpCvobkK","title":"Extract indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, extract and enrich indicators in playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"q1RIC2UCiHNY0zQX6ADI","title":"Extend context","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/extend-context","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, extend context with integration and command data.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"x72cHb8svPJ1xk7YKvX9","title":"Set and update incident fields","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/set-and-update-incident-fields","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, set and update incident fields in playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"1lVJUGSuPx9Jb42nBIa9","title":"Playbook polling","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/customize-your-playbook/playbook-polling","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use playbook polling for remote processes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"2Pdq7ynhdVaN5sgIdqsI","title":"Scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, edit, and manage automation scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"CRpfUFiyBnBPRL2xbriC","title":"Use existing scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/scripts/use-existing-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use existing scripts in playbooks and the War Room.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"hhVdJZALdNk3Fn0PKt8J","title":"Create a script","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/scripts/create-a-script","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and edit automation scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"PqFTOhZsk6igEkJQg3VD","title":"Debug your playbook","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/debug-your-playbook","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, debug playbooks with breakpoints and task overrides.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"OUeKUb0Pm8QWy1kTGjgr","title":"Troubleshoot playbook performance","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/debug-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot playbook performance using metadata.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"},{"label":"Debug your playbook"}]},{"id":"y3lGCuj9m4SsTm07Q8gW","title":"Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/manage-playbook-content","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage playbook content and versions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"o4E3L5IFYTHdsqfHCGYo","title":"Playbook best practices","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, follow playbook development best practices.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Playbooks"}]},{"id":"QLw9vXFfpE0L1uRKGb0X","title":"Lists","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/lists","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and manage lists for playbooks and scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"nk60JWXEo6dm6afwQ3wm","title":"What is a list?","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/lists/what-is-a-list","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and manage lists.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"xZ3n9Be7SaPxlf0i6PH8","title":"Create a list","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create lists for playbooks, scripts, and the CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"pctiUGofxCY0tZM3IRzq","title":"List commands","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/lists/list-commands","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use list commands in the CLI, playbooks, and scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"LiBaZ2IRFcmIIT7nNV9a","title":"Use cases: JSON lists","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/lists/use-cases-json-lists","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage JSON lists for automations and playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"0ucdrzr4Ne89AOKvRt0y","title":"Transform a list into an array","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, transform a list into an array for tasks and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Lists"}]},{"id":"cTyAlNVhjnT0EKD2M2N9","title":"Jobs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create scheduled and event-triggered jobs for playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"d0U3YquZOb0pkS0QOfCI","title":"Manage jobs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/jobs/manage-jobs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage time-triggered and feed-triggered playbook jobs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"C1xLpSkT4ezuboZbhNnr","title":"Create a time triggered job","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create time-triggered and feed-triggered playbook jobs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"6rawe3QomqUd1rxyFl3n","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create a job triggered by feed content changes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"p7mxHZt7tLA2T4mQrlfF","title":"Create jobs to process indicators example","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/jobs/create-jobs-to-process-indicators-example","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create jobs that process and export indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Jobs"}]},{"id":"xU6MPBeeS26bClkHP2Sm","title":"SLAs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure SLAs to manage investigation goals and deadlines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"G3PLead3gieQollBgleJ","title":"SLAs in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/slas-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use SLA fields to track deadlines and trigger actions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"ZVfkkdvnrUJQJGCcxnY4","title":"Configure an SLA in an incident type","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/configure-an-sla-in-an-incident-type","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add SLA time and date fields to incident types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"lVnppbcI4t6ifUtC9IPc","title":"Configure Timer/SLA fields","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/configure-timersla-fields","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure timer and SLA fields with trigger scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"PHx2wQgOcCCBkeYfTOqs","title":"Configure a playbook to run Timers/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/configure-a-playbook-to-run-timersslas","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure playbooks to run SLA timers.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"qLgAxLpkmk3RuHMQ7Twl","title":"Automate changes to incident fields using SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/automate-changes-to-incident-fields-using-sla-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use SLA scripts to automate incident field changes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"7xXPbTRCRTsipZ1XIFzt","title":"Create SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/create-sla-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create SLA scripts for breached deadlines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"nErjdze6oGKcDoVdsqZL","title":"Use SLA and Timer field commands manually in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/use-sla-and-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, run SLA and timer field commands from the CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"CB34OOHPrKGd3zqNHy58","title":"Configure the Global Risk Threshold","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure the global SLA risk threshold.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"oKLKsO9hqZEu1dcHHfv0","title":"Search incidents for Timer/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/slas/search-incidents-for-timerslas","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, search incidents by SLA status and timer fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"SLAs"}]},{"id":"aLW9vPhZ0q0FRQOlVemG","title":"Dashboards and Reports","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, manage, and share dashboards, reports, and widgets.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"}]},{"id":"0ITM7jKs5snfMWas5DiJ","title":"Dashboards","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/dashboards","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, customize, and share dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"pBOwopeWLPz7rE5sscx5","title":"Dashboard actions","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/dashboards/dashboard-actions","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, import, share, and delete dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"4asmoGOHMKONtXuC3I8t","title":"Manage dashboards","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/dashboards/manage-dashboards","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize dashboards and add widgets.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"Dr6IcEXsfo33KROm75tz","title":"Reports","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/reports","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, customize, and schedule reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"OGMK6e5eisTDYG1GojZf","title":"Manage reports","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/reports/manage-reports","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage reports, widgets, schedules, and time settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"HK73YDuRY9bsLfQri7Sh","title":"Configure the timezone in a report","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/reports/configure-the-timezone-in-a-report","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure report timezones and time formats.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"2mArn8nROLQEBzALhsqo","title":"Troubleshoot script timeout for reports","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-script-timeout-for-reports","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure report script timeout values.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"tE79kPDvtLDjcIrGoVAA","title":"Troubleshoot overlapping text and extra pages","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-overlapping-text-and-extra-pages","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, fix overlapping text and extra PDF report pages.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"EsAGrtC5kNO7nB3gopsM","title":"Widgets","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and edit dashboard and report widgets.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"}]},{"id":"lEYFnaSXQ5D3H9MSUSGr","title":"Widget customization","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/widget-customization","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize widgets for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"FMyRM5AEgnvvFljJ19Vd","title":"Create a widget using the widget builder","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use the widget builder for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"1NAvpTLExDt1Fq5k0Zhz","title":"Create a custom widget using a JSON file","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom dashboard and report widgets using JSON.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"lod7FbxIB7iLL2uR8taT","title":"Create a custom widget using a script","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-script","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom dashboard and report widgets using scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"qyC2bXbaMW5TRDN9gA3m","title":"Create a widget from an incident","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-incident","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom widgets from incident searches.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"Gu2rLkxlqNeyvfCEcBjJ","title":"Create a widget from an indicator","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-indicator","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom widgets from indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"0lhNg3tYJVilDOan0lTu","title":"Edit a widget","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/edit-a-widget","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, edit widgets in the library, dashboards, and reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"rD35LNxlDP4wHvGQxBvN","title":"Add a widget in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/add-a-widget-in-the-war-room","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add script-based widgets in the War Room.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"6Qm6di1aRa9Fl3ClzhwC","title":"Saved By Dbot (ROI) Widget","pathname":"/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/dashboards-and-reports/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize the Saved by Dbot ROI widget.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR","icon":"sliders"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"c3XjK75n25KCK9y2ab4L","title":"Incidents and indicators investigation","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation","siteSpaceId":"sitesp_2pvqE","description":"Investigate incidents and indicators that have been ingested into Cortex XSOAR 8.12 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"}]},{"id":"qABLtGhq1U6SycSav4rG","title":"Incidents","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incidents","siteSpaceId":"sitesp_2pvqE","description":"Incidents are potential security data threats that are ingested or created in Cortex XSOAR 8.12 On-prem for investigation and remediation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"eeijpOFHFCy9DWlY0aPt","title":"Incident management","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, view, manage, create, and export incidents.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"YxIOTAeFXaZ37w6FVtKz","title":"Search for incidents","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/search-for-incidents","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, search incidents and save search queries.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"1tD2lEMfcPwlBHTX7pzh","title":"Create an incident","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/create-an-incident","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create incidents manually, through the API, or by import.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"Br7gEepggkVdzLGvcdMw","title":"Export incidents","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, export incidents manually or on a schedule.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"PTH7nUf65TJ0PK1Pnk8q","title":"Export incidents from the Incidents table","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-from-the-incidents-table","siteSpaceId":"sitesp_2pvqE","description":"Export incidents from the Incidents table as Excel, CSV, or JSON files in Cortex XSOAR 8.12 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"CDdzsnxYCbLIUeC8Q33x","title":"Export incidents on demand","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-on-demand","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, export incidents on demand to external storage.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"qSv0Ughhhd2K1M7MaKd8","title":"Investigate an incident","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, investigate incidents and take remediation actions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"liNZ6rhVeMrRm7fJJxbk","title":"Retain incidents","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/retain-incidents","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, retain up to 1,000 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"6pZ7kxzi5NMIs3hmhBBw","title":"Limit access to investigations using access control","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/limit-access-to-investigations-using-access-control","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, limit access to incidents and investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"i4uPZpUrTecxEVyU9IKQ","title":"Incident Tasks","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/incident-tasks","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use playbook and to-do tasks in investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"gPg9t2YJ4UgflNQNAlDq","title":"Use the War Room in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use the War Room for real-time incident investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"d6WbMjy1s1YKRBhhFXF1","title":"Schedule a command in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/schedule-a-command-in-the-war-room","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, schedule commands from the War Room.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"DNaBcGKks0JZ0dWMZxKK","title":"Run commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/run-commands-in-the-cli","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, run system, integration, and script commands from the CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"gDkE55VBsNxsdTwDrFmT","title":"Evidence Handling","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/evidence-handling","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add and manage investigation evidence from the War Room.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"3hPrPHD73Nlh88nV6qRx","title":"Use the Work Plan in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use the Work Plan to manage playbook workflows.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"pxeCynQGsupJF7j9R0k8","title":"Add ad hoc tasks to a Work Plan as part of your investigation","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation/add-ad-hoc-tasks-to-a-work-plan-as-part-of-your-investigation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add ad hoc tasks to an investigation Work Plan.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"},{"label":"Use the Work Plan in an investigation"}]},{"id":"Pt2AZySE9cQlaNrlYNty","title":"Investigate an incident using the canvas","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, visually map incidents using the investigation canvas.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"kgK6KJwzGVN86AGxMGWL","title":"Link incidents","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/link-incidents","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, link related incidents from the UI or CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"wIEH3RmZLv90kITddHBM","title":"Create an incident summary report","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/create-an-incident-summary-report","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and save incident summary report templates.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"8ftK8QIp50b0FT1414qN","title":"Manage indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, edit, search, export, and delete indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"}]},{"id":"w6xPMAYjjlL5LIBs4mdy","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/query-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, query indicators in the threat intel library.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"C6cvLvF8xNog2RamA3Al","title":"View indicator relationships in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/view-indicator-relationships-in-an-investigation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and use indicator relationships during investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"TrO2IDeZJdb31t7O0XPO","title":"Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage indicators, relationships, enrichment, layouts, and TIM reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"}]},{"id":"zPCWsKPF8tBj7L4vOBAS","title":"Get started with Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, get started with Threat Intel Management investigations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"9VuDUtpvsNg7ecLhrnon","title":"What is Threat Intel Management?","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn about Threat Intel Management and its use cases.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"60Brchvl99zpAa62nF1B","title":"Threat Intel Management use cases","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, explore Threat Intel Management use cases for analysts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"9CUSEi0B7ux45qOBJEln","title":"Indicator concepts","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn core indicator concepts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"plvAYF4jx4B8W0PPt2fY","title":"Indicator lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, understand the indicator lifecycle for investigation and remediation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"txRwiEDu3gedoUIwBaFI","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, understand Threat Intel Management roles and responsibilities.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"upK9FxPElaHp6r77taSs","title":"Indicator configuration","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure indicator types, fields, layouts, and extraction.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"BD2A1HeJ7V7StRV7Oynk","title":"Customize indicator types, fields, and layouts","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize indicator types, fields, and layouts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"8ixuGvqoOPzy36Obh3ua","title":"Create an indicator type","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom indicator types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"IcjfdNaTC8M2Epr4mq8I","title":"Indicator type profile","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/indicator-type-profile","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure indicator type profiles.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"awDExroZuK1V0WufGooV","title":"File indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/file-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure file indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"lXVdCwIKcycGK1Sfcqyb","title":"Formatting scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/formatting-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use formatting scripts for indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"3E5IgFmjSgQ5RyLXM5g1","title":"Enhancement scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/enhancement-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use enhancement scripts for indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"nn0QUAwFLy7Ni6TRgmBR","title":"Reputation scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/reputation-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use reputation scripts for indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"2YrdtLeAZcGnXudHrRNH","title":"Reputation commands","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/reputation-commands","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure reputation commands for indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"TswOi1jHfGTTTXflZWcq","title":"Map custom indicator fields","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/map-custom-indicator-fields","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, map custom indicator fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"eqRX61Rc2IBZNJOCSa0L","title":"Create an indicator field","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create custom indicator fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"Mveez3846NyJOKKox1vm","title":"Indicator fields structure","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field/indicator-fields-structure","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, understand indicator field structure.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator field"}]},{"id":"ugscpjWfTtWSnIbwCgud","title":"Indicator field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field/indicator-field-trigger-scripts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure trigger scripts for indicator fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator field"}]},{"id":"93riVz2iqLSgpfRKvSyl","title":"Indicator layout customization","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field/indicator-layout-customization","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize indicator layouts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator field"}]},{"id":"urt6AOOrFIGpxPWvXpON","title":"Indicator classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, classify and map indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"S9F83M9mRUly1iXJQPr8","title":"Indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, extract and enrich indicators from incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"GUbM3QZNacK2BLfwK2D4","title":"Indicator extraction modes","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure indicator extraction modes.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"mZwQTmfNhNziFkw6v2JV","title":"Create indicator extraction rules for an incident type","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create indicator extraction rules for incident types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"70euKtLpYjMSXgT3jr4E","title":"Set the indicator extraction mode for a playbook task","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/set-the-indicator-extraction-mode-for-a-playbook-task","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, set indicator extraction modes for playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"DHvaCX2zwihQd22c2S3C","title":"Disable indicator extraction for scripts or integrations","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/disable-indicator-extraction-for-scripts-or-integrations","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, disable indicator extraction for scripts and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"VwvinhffsAruIajG5nzq","title":"Troubleshoot indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/troubleshoot-indicator-extraction","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot indicator extraction issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"htVFjuJpkBsn1rtEgrsh","title":"Configure the indicator timeline","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-the-indicator-timeline","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure and optimize the indicator timeline.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"PdfBmMY8YX4pHMCh7aCt","title":"Configure indicator expiration","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-indicator-expiration","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure indicator expiration status and defaults.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"5bydfPeORwocxJ18CJPE","title":"Configure Threat Intel feed integrations","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intel-feed-integrations","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Threat Intel feed integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"m1RK0772zm4DiZzCXGCw","title":"Exclude indicators from enrichment","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, exclude indicators from enrichment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"xWXP5gqLaE2xgOuJgJFM","title":"Configure Threat Intelligence Management playbooks to process indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intelligence-management-playbooks-to-process-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure TIM playbooks to process indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"ehrg2XzndmJIFD1LgTrU","title":"Export indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/export-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, export indicators through tables, integrations, playbooks, and EDLs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"ZSHRp63FcJKP5Gkj0w1P","title":"Customize Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure and customize Threat Intel Report types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"qzgzbFKqNI6DlCT93GL1","title":"Create a Threat Intel Report type","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-type","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create or detach Threat Intel Report types.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"hVn0QvitBJnvdM8EzVQn","title":"Create a Threat Intel Report field","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-field","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create Threat Intel Report fields and layouts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"pCgrtwVRzmO9pskWkI0s","title":"Create a Threat Intel Report layout","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-layout","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure Threat Intel Report layouts and script content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"vSoCUHt7pIgk3wz4xZwe","title":"Indicator management","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create, edit, search, export, and delete threat indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"HsyCUobheozK1pF1Jw7g","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-management/query-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, query indicators in the threat intel library.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator management"}]},{"id":"NJF5YiDAIrFgB8D3AU2G","title":"Indicator investigation","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, investigate indicators, reports, and relationships with TIM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"kppAp4Ex8XsYI13aB7KF","title":"Indicator verdict","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage indicator verdicts, types, layouts, and exclusion lists.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"7sATFqu0jOgHh0Bd8Kok","title":"Extract and enrich an indicator","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, extract and enrich indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"1tPH6hCMhzcm2fVbfZsQ","title":"Expire an indicator","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, expire indicators from the CLI or UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"JjYTuNv7FGYbITBwHat7","title":"Manage indicator relationships","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, create and manage indicator relationships.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"6G0zwK8lbEsQA6YqwyVZ","title":"Delete and exclude indicators","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, delete indicators and manage exclusion lists.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"uw923qNcP6MImcqX8mDc","title":"Manage Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.12/investigate-and-respond-to-threats/threat-intel-management/manage-threat-intel-reports","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage Threat Intel Reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats","icon":"magnifying-glass"},{"label":"Threat Intel Management"}]},{"id":"cjQmYO5mUFyoITKxrJYB","title":"Troubleshoot","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, troubleshoot system errors and operational issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"DaCu4HOP9DypFyk1Kdl8","title":"View system status in the System Diagnostics page","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot/view-system-status-in-the-system-diagnostics-page","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, view errors and system status in System Diagnostics.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"fSG4et4IKLsMSa7UpeS6","title":"View Guard Rails warnings and errors","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot/view-guard-rails-warnings-and-errors","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, review Guard Rails warnings and errors affecting performance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"PX2H6attRr3kK4dtrsV9","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot/access-logs-and-log-bundles","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, access logs and download troubleshooting log bundles.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"8lSOcpxuQ6gWu9bsq52o","title":"Management audit logs","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot/management-audit-logs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, view, export, extract, and purge management audit logs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"xenFyC4uLYrt07rhWH9l","title":"Manage syslog servers","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot/manage-syslog-servers","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add and configure syslog servers.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"6ArriajQ7v0Ts1SNm7xi","title":"Configure log and notification forwarding","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot/configure-log-and-notification-forwarding","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, forward audit, integration, and Guard Rails logs.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"m4XZSqYMhzZfaIhFnzH1","title":"Integration logs","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/troubleshoot/integration-logs","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, view and export integration logs for troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Troubleshoot"}]},{"id":"ysu78LNAtgdYLoFLgMVC","title":"Reference","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, access product reference and configuration information.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"}]},{"id":"Xr6s92n3aAnXmYaIa9dM","title":"Cortex XSOAR concepts","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/cortex-xsoar-concepts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn common product concepts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"JoPYVK5CE2M7FCbgDUSx","title":"How to search in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/how-to-search-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, search using Lucene syntax and product search tools.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"eprRQrP6cnyz3sp7qaz3","title":"How to use markdown in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/how-to-use-markdown-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use markdown for text formatting.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"b1Fi1aWwmMUUBWnETQSi","title":"User details and preferences","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/user-details-and-preferences","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage user details, preferences, and notifications.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"P3jsPDzIMTSjiDDMiszc","title":"Server configurations","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/server-configurations","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, customize and troubleshoot server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"TiDsk6VttFuQ22WSqjNm","title":"New user FAQ","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/new-user-faq","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, find answers to common new-user questions.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"ILyBHZxq9q28edUtORD0","title":"Cortex XSOAR API","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/cortex-xsoar-api","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, generate an API key and make API calls.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"h0Fjo5JeBQhI8d7aeGQQ","title":"Telemetry in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/telemetry-in-cortex-xsoar","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, learn how telemetry data improves the product.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"obYFwgU8U6Agoy1lseD7","title":"Keyboard shortcuts","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/keyboard-shortcuts","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, use keyboard shortcuts across product pages.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"UmpKkXN0RjSbzpNgmwVH","title":"Product support lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/product-support-lifecycle","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, review the product support lifecycle.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"DpVKtb3OUdx8IhfVUqeR","title":"Cortex XSOAR navigation cheat sheet","pathname":"/cortex-xsoar-8-on-prem/8.12/troubleshoot-and-reference/reference/cortex-xsoar-navigation-cheat-sheet","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, navigate commonly used product features.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference","icon":"code"},{"label":"Reference"}]},{"id":"X1oL3rtRIzeG83Kn505e","title":"What is Cortex XSOAR multi-tenant?","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/what-is-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_2pvqE","description":"Learn about Cortex XSOAR 8.12 On-prem multi-tenant deployments that provide data segregation while enabling you to manage multiple tenants from a main tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"iCdD4xwIiXNNBtyYVvjo","title":"Onboard Cortex XSOAR multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/onboard-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install, pair, and manage main and child tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"LlYxIirLt8XcCexUtfrp","title":"Onboarding checklist for multi-tenant deployments","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/onboard-cortex-xsoar-multi-tenant/onboarding-checklist-for-multi-tenant-deployments","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, follow the multi-tenant and MSSP onboarding checklist.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"hBZ4gKMOjOc7GUZppQ8H","title":"Step 1. Install Cortex XSOAR for multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-1.-install-cortex-xsoar-for-multi-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install a multi-tenant deployment and add a license.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"FTZNbD2ulmjXF0bDh9Zx","title":"Step 2. Pair child tenant to main tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-2.-pair-child-tenant-to-main-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, pair a child tenant with its main tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"IMWbsuP5i1dHvGufxJjA","title":"Step 3. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-3.-set-up-an-engine","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install engines and configure tenant network access.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"ms91ACB04d1yuyj3ygAH","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, configure multi-tenant users, roles, and SAML authentication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"87X64AaPbd7Jdf8XUN5C","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-5.-install-and-configure-content","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, install and configure multi-tenant and MSSP content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"Iu7JRW7arMityr8dSOVg","title":"Child tenant management","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage child tenants and their content centrally.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"xYtBm8ru09HEYHs3b3kX","title":"Content management in multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/child-tenant-management/content-management-in-multi-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, distribute content to child tenants with propagation labels.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"}]},{"id":"ItvKeJqAOQ9eUNYPUHIP","title":"Add propagation labels to content","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-content","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add propagation labels to multi-tenant content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"ER0QnHhq4HNcu0DUhKxs","title":"Add propagation labels to a child tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-a-child-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, add propagation labels to child tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"CeAv2XVd5Dsncgt1MfXy","title":"Sync content to child tenants","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/child-tenant-management/content-management-in-multi-tenant/sync-content-to-child-tenants","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, sync content from the main tenant to child tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"LLFMc5AAJRCT1yMrCzN8","title":"Manage content using a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/child-tenant-management/content-management-in-multi-tenant/manage-content-using-a-remote-repository","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage multi-tenant content using a remote repository.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"fGNqHkqpCPWzipcW4P1q","title":"Incident management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/incident-management-on-the-main-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, manage incidents and take action across child tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"owbyQ4vxBUjmnrRXEIUi","title":"Run a command on multiple tenants","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/incident-management-on-the-main-tenant/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, run commands across incidents on multiple tenants.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"},{"label":"Incident management on the main tenant"}]},{"id":"6y9zuqwzSVikZ2SPmJCK","title":"Indicator management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.12/multi-tenant/indicator-management-on-the-main-tenant","siteSpaceId":"sitesp_2pvqE","description":"In Cortex XSOAR 8.12 On-prem, view and act on indicators from the main tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant","icon":"align-justify"}]},{"id":"eDWR47Os47vtv7p95XYu","title":"Navigate the Cortex XSOAR 8.11 On-prem docs","pathname":"/cortex-xsoar-8-on-prem/8.11","siteSpaceId":"sitesp_GXO9U","description":"Start here for a visual overview of Cortex XSOAR 8.11 On-prem documentation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"}]},{"id":"eMxFppNhkkSI7xCkKenS","title":"Get Started with Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/learn-about-cortex-xsoar/get-started-with-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Get started with Cortex XSOAR 8.11 On-prem, including architecture, roles, responsibilities, and licenses.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"}]},{"id":"TEvecIldZuqp2SRmI2sq","title":"What is Cortex XSOAR?","pathname":"/cortex-xsoar-8-on-prem/8.11/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/what-is-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Learn about features in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"O4wfib1zl6TG6Byc0TJ4","title":"Cortex XSOAR architecture","pathname":"/cortex-xsoar-8-on-prem/8.11/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/cortex-xsoar-architecture","siteSpaceId":"sitesp_GXO9U","description":"Explore the Cortex XSOAR 8.11 On-prem architecture.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"mmCLOvECVjwzMUM3QOGC","title":"Cortex XSOAR use cases","pathname":"/cortex-xsoar-8-on-prem/8.11/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/cortex-xsoar-use-cases","siteSpaceId":"sitesp_GXO9U","description":"Explore SOC automation use cases in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"RXxBuRemoX6zFeyLlBte","title":"Understand Cortex XSOAR licenses","pathname":"/cortex-xsoar-8-on-prem/8.11/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/understand-cortex-xsoar-licenses","siteSpaceId":"sitesp_GXO9U","description":"Understand licenses for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"yUnJjKDGEWdJLpWtKFWQ","title":"Roles and responsibilities","pathname":"/cortex-xsoar-8-on-prem/8.11/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/roles-and-responsibilities","siteSpaceId":"sitesp_GXO9U","description":"Learn about core SOC roles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"AUhwsUCX5h6Jc9lvnoID","title":"Supported web browsers","pathname":"/cortex-xsoar-8-on-prem/8.11/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/supported-web-browsers","siteSpaceId":"sitesp_GXO9U","description":"Review supported web browsers for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"WkMsOkSuTQOmBEEtd6o9","title":"Onboard and configure Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Follow the steps to onboard and configure Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"LPUwqKbhCMLxsUWJXQPE","title":"Plan your deployment","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/plan-your-deployment","siteSpaceId":"sitesp_GXO9U","description":"Plan deployment and onboarding for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"IigCnGjUT5PoH1TH3Mky","title":"Onboarding checklist","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/onboarding-checklist","siteSpaceId":"sitesp_GXO9U","description":"Activate, provision, grant access, and configure Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"d9kWYwoHQdg537i5uo6i","title":"Step 1. Install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-1.-install-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem, including system requirements and licensing.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"AkS8T0EZpwNX6zFQSOtC","title":"Step 2. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-2.-set-up-an-engine","siteSpaceId":"sitesp_GXO9U","description":"Set up an engine for Cortex XSOAR 8.11 On-prem on a remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"zupPrzBvyWNuBYx1zYOZ","title":"Step 3. Set up a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-3.-set-up-a-remote-repository","siteSpaceId":"sitesp_GXO9U","description":"Set up remote repository content management in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"DIs0kurAVf4kefmUNQsR","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_GXO9U","description":"View permissions and predefined roles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"P5M6jtGZZOB5ZZ1XTBqz","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-5.-install-and-configure-content","siteSpaceId":"sitesp_GXO9U","description":"Learn what content includes in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"jarocYOMx4kjJLtuPz5v","title":"What is content?","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-5.-install-and-configure-content/what-is-content","siteSpaceId":"sitesp_GXO9U","description":"Learn what content includes in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Step 5. Install and configure content"}]},{"id":"ngW1jjdeCqDFiQc2FQRn","title":"Install content packs","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-5.-install-and-configure-content/install-content-packs","siteSpaceId":"sitesp_GXO9U","description":"Install content packs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Step 5. Install and configure content"}]},{"id":"OZLFtXr4hyFUD3TFFpFu","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-5.-install-and-configure-content/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_GXO9U","description":"Use the Deployment Wizard in Cortex XSOAR 8.11 On-prem to adopt a use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Step 5. Install and configure content"}]},{"id":"MsR33rdi0Cjpfk5se82y","title":"Post deployment","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment","siteSpaceId":"sitesp_GXO9U","description":"Complete post-deployment configuration in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"6B6UcScAEAH1xJsNb5ma","title":"User communication","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/user-communication","siteSpaceId":"sitesp_GXO9U","description":"Configure user communication in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"}]},{"id":"XJlpJigSrLnEPIfzjR7b","title":"Configure user notifications in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/user-communication/configure-user-notifications-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Configure user notifications in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"kalx5y87Y4YNAYyFCEXZ","title":"Customize system emails","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/user-communication/customize-system-emails","siteSpaceId":"sitesp_GXO9U","description":"Customize system emails in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"},{"label":"User communication"}]},{"id":"cmzhSvBSj5JKLcWDgBZ8","title":"Configure system settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/configure-system-settings","siteSpaceId":"sitesp_GXO9U","description":"Configure system settings in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"}]},{"id":"IHAuz9SQaJU08AHQ0Whe","title":"Configure server settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/configure-system-settings/configure-server-settings","siteSpaceId":"sitesp_GXO9U","description":"Configure server settings in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"},{"label":"Configure system settings"}]},{"id":"zB9xQ1f4RtZC4oidOiD1","title":"Configure security settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/configure-system-settings/configure-security-settings","siteSpaceId":"sitesp_GXO9U","description":"Configure security settings in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"},{"label":"Configure system settings"}]},{"id":"z5LVUNAzoypqp7EjfTok","title":"Cortex XSOAR Installation","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem and complete post-installation steps.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"8Ipk2vbkJ4y5HNBYNZwv","title":"Installation overview","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/installation-overview","siteSpaceId":"sitesp_GXO9U","description":"Review installation options for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"IKFqQ6GHfO5sRLTHP7cW","title":"High Availability for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/high-availability-for-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Configure high availability for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"AnFuAs1bu6jYXkJFN4Tv","title":"Load balancing for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/load-balancing-for-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Configure load balancing for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"sryOkWvKJ922dC2lyh9t","title":"System Requirements","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements","siteSpaceId":"sitesp_GXO9U","description":"Review system requirements for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"KHpsgBDxs0grcJcrAnAj","title":"Hardware requirements","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/hardware-requirements","siteSpaceId":"sitesp_GXO9U","description":"Review hardware requirements for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"v2g3QTtMOFeDAd3JnlTZ","title":"Port requirements for cluster communication","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/port-requirements-for-cluster-communication","siteSpaceId":"sitesp_GXO9U","description":"Configure cluster communication ports for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"xx0MtkjJ1hkR2uevAZaF","title":"URL requirements","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/url-requirements","siteSpaceId":"sitesp_GXO9U","description":"Review required URLs for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"fV7GvBr7RopYYw8ELQod","title":"Bandwidth and NTP requirements","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/bandwidth-and-ntp-requirements","siteSpaceId":"sitesp_GXO9U","description":"Review bandwidth and NTP requirements for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"5oBu3bAEQa2d1u8qtKl3","title":"Install Cortex XSOAR on a VM deployed on AWS","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on a VM deployed on AWS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"Ae1yyudTSEMGTTbhYiQd","title":"Task 1. Download the OVA Image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_GXO9U","description":"Download the OVA image and license for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"gtQDWyOjTwd2KSMntzby","title":"Task 2. Deploy your virtual machine on AWS","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-2.-deploy-your-virtual-machine-on-aws","siteSpaceId":"sitesp_GXO9U","description":"Deploy a Cortex XSOAR 8.11 On-prem virtual machine on AWS.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"cV0kWk1vyt7s1KChMD40","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-3.-validate-tenant-nework-and-ip-settings","siteSpaceId":"sitesp_GXO9U","description":"Validate tenant network and IP settings for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"4gWIPA5nuCqfFL8x18pm","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_GXO9U","description":"Configure NTP servers for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"JDkmN2osxRh0RbFQcAMt","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_GXO9U","description":"Configure proxy settings for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"01DtwZm7rDNb4voDOfNe","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_GXO9U","description":"Establish cluster node trust for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"AgASIlHdap3CwvmyBjzt","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"pSUQ0gvVwi1Om34YmoVI","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Verify access to Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"y82UrGJfbOXnOJDAFFNT","title":"Install Cortex XSOAR on a VM deployed on OCI","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on a VM deployed on OCI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"VAjsFfnHDZaV6YTyaIWw","title":"Task 1. Download the OVA image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_GXO9U","description":"Download the OVA image and license for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"zkptiqIfGHo4AhJLUGVz","title":"Task 2. Deploy your virtual machine on OCI","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-2.-deploy-your-virtual-machine-on-oci","siteSpaceId":"sitesp_GXO9U","description":"Deploy a Cortex XSOAR 8.11 On-prem virtual machine on OCI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"eQqFoFP5k1nDdMIjtJFb","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-3.-validate-tenant-network-and-ip-settings","siteSpaceId":"sitesp_GXO9U","description":"Validate tenant network and IP settings for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"qgSZjs3EACF5s0hwtFfA","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_GXO9U","description":"Configure NTP servers for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"Quit7zZAPdrTcx1xDEDE","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_GXO9U","description":"Configure proxy settings for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"eu3QuTZkLp1MugamSH02","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_GXO9U","description":"Establish cluster node trust for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"63RU3LDNtAib7n6ettEB","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"9asqm9tFUbUFRJ4IpxII","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Verify access to Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"7prmoqOgOIgNuv0GJDSh","title":"Install Cortex XSOAR on a VM deployed on Hyper-V","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on a VM deployed on Hyper-V.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"taWzDfZerOL20ibKjE0u","title":"Install Cortex XSOAR on a VM deployed on VSphere","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-vsphere","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on a VM deployed on vSphere.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"gePpm4Ehdfo0lseiyGEI","title":"Install Cortex XSOAR on a VM deployed on KVM","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on a VM deployed on KVM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"uCqikkbayZjDbFXzUS0y","title":"Task 1. Download the QCOW2 image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-1.-download-the-qcow2-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_GXO9U","description":"Download the QCOW2 image and license for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"oVsz7puMQDEStQ3kymDx","title":"Task 2. Deploy your virtual machine on KVM","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-2.-deploy-your-virtual-machine-on-kvm","siteSpaceId":"sitesp_GXO9U","description":"Deploy a Cortex XSOAR 8.11 On-prem virtual machine on KVM.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"yZCpYGF6imgIhjRzVyRm","title":"Task 3. Configure tenant network and IP settings for each node","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-3.-configure-tenant-network-and-ip-settings-for-each-node","siteSpaceId":"sitesp_GXO9U","description":"Configure tenant network and IP settings for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"MMLkY29aA1nbJaE9W1SE","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_GXO9U","description":"Configure NTP servers for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"eCXyCGcKeFCVvEh9xp0p","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_GXO9U","description":"Configure proxy settings for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"xQFfpenic46jHlEtTD0j","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_GXO9U","description":"Establish cluster node trust for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"CLjQrWKSHmtPIOWUURE9","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"jNC3dkFCPjwSfoWsRieZ","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Verify access to Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on KVM"}]},{"id":"oBoOwzBB2o28bD6SBH5B","title":"Post-installation","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation","siteSpaceId":"sitesp_GXO9U","description":"Complete post-installation tasks for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"wthMLgdJ2X0j7JgcfPNP","title":"Add the Cortex XSOAR license","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/add-the-cortex-xsoar-license","siteSpaceId":"sitesp_GXO9U","description":"Add a license to Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"Vmd6jqifkiESMITTEa2p","title":"HTTPS with a signed certificate","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/https-with-a-signed-certificate","siteSpaceId":"sitesp_GXO9U","description":"Configure HTTPS with a signed certificate in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"Zf3uNdt9uYjfAeXx52HF","title":"Use a signed certificate instead of SSL verification","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/use-a-signed-certificate-instead-of-ssl-verification","siteSpaceId":"sitesp_GXO9U","description":"Use a signed certificate in Cortex XSOAR 8.11 On-prem for MSSP.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"AaE3eHvCPGLkb3MqQrRg","title":"Optimize performance and robustness from the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/optimize-performance-and-robustness-from-the-textual-ui","siteSpaceId":"sitesp_GXO9U","description":"Optimize Cortex XSOAR 8.11 On-prem from the VM textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"55tlzpsjaU8YSBmGbhuk","title":"Manage your SSH admin password","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/manage-your-ssh-admin-password","siteSpaceId":"sitesp_GXO9U","description":"Manage the SSH admin password for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"Aec1BCDfBNiMHsn8JRKb","title":"Troubleshoot your installation","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot a Cortex XSOAR 8.11 On-prem installation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"wOSYkPUUyrdPse2wO5eb","title":"Common installation limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/common-installation-limitations-and-fixes","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot common Cortex XSOAR 8.11 On-prem installation issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"iyzCFGEvzmLv61FR4xcr","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/access-logs-and-log-bundles","siteSpaceId":"sitesp_GXO9U","description":"Access logs and log bundles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"2D428hHhjPBSalOYmZyO","title":"Open a support session","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/open-a-support-session","siteSpaceId":"sitesp_GXO9U","description":"Open a support session for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"HdyzxAsix6xyCRSZ7RCq","title":"Upload your license to the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/upload-your-license-to-the-textual-ui","siteSpaceId":"sitesp_GXO9U","description":"Upload a license through the Cortex XSOAR 8.11 On-prem textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"mtNV6h1cilOx6M8Czh2q","title":"Shut down Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/shut-down-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Shut down Cortex XSOAR 8.11 On-prem from the textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"lB6gMGcc4CwjhOSlTu6D","title":"Update Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/cortex-xsoar-installation/update-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Update Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"83gWXcHz5hwLKHTcQn0r","title":"Back up and Restore Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Back up and restore your cluster in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"RRSDFcqN2w5UzVGDXKLF","title":"Set up access to an external storage","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/set-up-access-to-an-external-storage","siteSpaceId":"sitesp_GXO9U","description":"Set up external storage access for backups in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"AUOLDZGHGEyBjqqNkJGE","title":"Back up data","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/back-up-data","siteSpaceId":"sitesp_GXO9U","description":"Create scheduled and on-demand backups in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"ngSvbAgmfzjatdrLRqPE","title":"Backup guidelines and best practices","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/back-up-data/backup-guidelines-and-best-practices","siteSpaceId":"sitesp_GXO9U","description":"Follow backup guidelines and best practices in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"},{"label":"Back up data"}]},{"id":"fmLNENPBqHTciwjRhHWM","title":"Restore data","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/restore-data","siteSpaceId":"sitesp_GXO9U","description":"Restore backed-up data in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"FUlVY5LSvzta8AVhgIZA","title":"End-to-end example of Cortex XSOAR cluster backup and restore","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/end-to-end-example-of-cortex-xsoar-cluster-backup-and-restore","siteSpaceId":"sitesp_GXO9U","description":"Follow an end-to-end cluster backup and restore workflow in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"YGtg5CwU97o3IoiPRFIe","title":"Common backup and restore limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.11/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/common-backup-and-restore-limitations-and-fixes","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot backup and restore issues in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"wv6RIIc2OyZSfeoSocdR","title":"Engines","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines","siteSpaceId":"sitesp_GXO9U","description":"Install, manage, configure, and troubleshoot engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"GAAK1Zru9tX3W0ESLg9p","title":"What is an engine?","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/what-is-an-engine","siteSpaceId":"sitesp_GXO9U","description":"Learn how engines work in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"4aaRaF97KFv1BdtuBILC","title":"Engine requirements","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/engine-requirements","siteSpaceId":"sitesp_GXO9U","description":"Review engine requirements in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"Ufz5m9abGCZGXWwW5Sfq","title":"Install an engine","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine","siteSpaceId":"sitesp_GXO9U","description":"Install, deploy, and configure engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"vwRuwzEFqfSWm66OCqfF","title":"Engine air gap installation","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/engine-air-gap-installation","siteSpaceId":"sitesp_GXO9U","description":"Install an engine offline in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"OsMcICeNslB8XS6uIotn","title":"Docker","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker","siteSpaceId":"sitesp_GXO9U","description":"Configure, secure, and troubleshoot Docker in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"v7TOA71pIiamGJ2yi1Ok","title":"Install Docker","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_GXO9U","description":"Install Docker for engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"RfusokKpcXV5UI1K76Jy","title":"Install Docker distribution for Red Hat on an engine server","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker-distribution-for-red-hat-on-an-engine-server","siteSpaceId":"sitesp_GXO9U","description":"Install Docker for Red Hat on an engine server in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"SZMnpirdNKYh5PNKoWM4","title":"Docker image security","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/docker-image-security","siteSpaceId":"sitesp_GXO9U","description":"Secure Docker images in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"st6z21VEjzLLm9O7vtmA","title":"Use the Cortex XSOAR Container Registry","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_GXO9U","description":"Use the container registry in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"PiP4Cudkmx8Qtb0H4KrZ","title":"Docker FAQs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/docker-faqs","siteSpaceId":"sitesp_GXO9U","description":"Find Docker answers for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"B1zWRt1ttCW4QEtHeNuY","title":"Troubleshoot Docker issues","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot Docker issues in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"ZQunZQGaZuwN7qtMIoDT","title":"Configure Docker pull rate limit","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_GXO9U","description":"Configure Docker pull limits in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"tIeE6ywdbqsyXkKQLlvA","title":"Change the Docker installation folder","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_GXO9U","description":"Change the Docker installation folder in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"pt5IxIyj4C570t9b1jmO","title":"Configure Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_GXO9U","description":"Configure Docker integrations for custom certificates in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"pPe61gMwTi8FqyAnl616","title":"Configure Python Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_GXO9U","description":"Configure Python Docker integrations for custom certificates in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"BqfYno9xl7CCyIbf9wXw","title":"Docker hardening guide","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_GXO9U","description":"Harden Docker deployments in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"fun9fDaQxAKcIuyqbqk3","title":"Podman","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/podman","siteSpaceId":"sitesp_GXO9U","description":"Run Podman containers for engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"ioS4tYHJ9jI9pUwmT6rM","title":"Install Podman","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_GXO9U","description":"Install Podman for engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"NIbq7Rf6br0LGXtFW1dL","title":"Change container storage directory","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/podman/change-container-storage-directory","siteSpaceId":"sitesp_GXO9U","description":"Change the container storage directory in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"chreq4IGGJgun7ll4UpW","title":"Migrate From Docker to Podman","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_GXO9U","description":"Migrate engine containers to Podman in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"HSkU5dDCN70GLDk8Ki7P","title":"Troubleshoot Podman","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot Podman in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"gKDwFeVH9sJp8SYTQnph","title":"Manage engines","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_GXO9U","description":"Manage engines and load-balancing groups in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"IGY7L7CB6OQIfiNBNf2I","title":"Upgrade an engine","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/upgrade-an-engine","siteSpaceId":"sitesp_GXO9U","description":"Upgrade an engine in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"7JM5r4C08GnUOaQFFXMY","title":"Remove an engine","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_GXO9U","description":"Remove an engine in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"xkKoRvF3C1wxyc2v58bS","title":"Configure engines","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_GXO9U","description":"Configure engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"gCdrnXEo5dbTbhf867of","title":"Configure the engine to use a web proxy","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_GXO9U","description":"Configure an engine web proxy in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"lDCTiBaVjv73x1iWY7YG","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_GXO9U","description":"Configure direct engine server access in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"saHAGbz72sV6j4EuEfk6","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/configure-engines/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_GXO9U","description":"Use NGINX as an engine reverse proxy in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"ae3U75lvGwi37agnic1E","title":"Configure an engine to use custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_GXO9U","description":"Configure custom engine certificates in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"ynDzwttnQ2K1DFoefykQ","title":"Use an engine in an integration","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_GXO9U","description":"Use an engine with an integration in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"gFnVthY30fP6A9D6tQiW","title":"Run a script using an engine","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_GXO9U","description":"Run a script using an engine in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"aNvkGlstaTjnQegdqr9K","title":"Troubleshoot engines","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/troubleshoot-engines","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"Yu96I02vPZmIhvWkjWpc","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot integrations running on engines in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"cYXMHd9XTiZrCNW3MSa7","title":"Remote Repository Management","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/remote-repository-management","siteSpaceId":"sitesp_GXO9U","description":"Configure and manage remote repositories in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"K9cnmUcKC3Faldy73JcO","title":"Content management in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/remote-repository-management/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Manage content with remote repositories in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"3DCKT8n93pmwB5yb9ci9","title":"Set up a private remote repository","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/remote-repository-management/set-up-a-private-remote-repository","siteSpaceId":"sitesp_GXO9U","description":"Set up a private remote repository in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"1EyGcYbWQs7DPqYyIcoZ","title":"Push content from a development tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/remote-repository-management/push-content-from-a-development-tenant","siteSpaceId":"sitesp_GXO9U","description":"Push content from a development tenant in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"tOmUMu4LRwXlbg2XpEx9","title":"Install content on a production tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/remote-repository-management/install-content-on-a-production-tenant","siteSpaceId":"sitesp_GXO9U","description":"Install remote repository content on a production tenant in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"VKYVTObDHK9UCx0dLZHL","title":"Remote repository troubleshooting","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot remote repository issues in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"r4WLKZ7zZjN1eCobmrZU","title":"Users and Roles Management","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management","siteSpaceId":"sitesp_GXO9U","description":"Manage users, roles, groups, and authentication in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"hXX4Gg3jhsgJS9wosyiR","title":"Users and roles in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/users-and-roles-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Configure users, roles, groups, and authentication in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"5yufN1FwoCsWo3hVDbTN","title":"Roles management","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/roles-management","siteSpaceId":"sitesp_GXO9U","description":"Configure roles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"RnWPu1PqsDKzxEEDUKch","title":"Role-based permissions","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/roles-management/role-based-permissions","siteSpaceId":"sitesp_GXO9U","description":"Configure role-based permissions in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"U7HsXYJoZLdnw72doWM6","title":"Manage roles in the Cortex XSOAR tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/roles-management/manage-roles-in-the-cortex-xsoar-tenant","siteSpaceId":"sitesp_GXO9U","description":"Manage roles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"ek3iSPlhjtIPeg8FPSjg","title":"User group management","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/user-group-management","siteSpaceId":"sitesp_GXO9U","description":"Create and manage user groups in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"wjDKojMXhFhmjHQ4ETC2","title":"Set up authentication","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/set-up-authentication","siteSpaceId":"sitesp_GXO9U","description":"Set up local and SSO authentication in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"8P6NXip8aP6IsNILmEOB","title":"Create users in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/create-users-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Create local users in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"zqduRxcmVqXRwbR4gLB0","title":"Authenticate users using SSO","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_GXO9U","description":"Authenticate users with SSO in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"pC4jwvXz340lrmj2kkuk","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_GXO9U","description":"Set up Okta SAML authentication in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"vXPf1l8rMK6QEQXqhrUv","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_GXO9U","description":"Set up Microsoft Entra ID SAML authentication in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"qycNCgUN0gLDLcoq0QZT","title":"User management","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/user-management","siteSpaceId":"sitesp_GXO9U","description":"Invite and manage users in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"a1nx7mlHak3ELsUl9moG","title":"Configure a password policy","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/users-and-roles-management/configure-a-password-policy","siteSpaceId":"sitesp_GXO9U","description":"Configure a password policy in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"gjRV8gvJdFApmbTcbb8W","title":"Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace","siteSpaceId":"sitesp_GXO9U","description":"Discover and manage content packs in Cortex XSOAR 8.11 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"sCZbqf0VUQFA91WCecjs","title":"Cortex Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/cortex-marketplace","siteSpaceId":"sitesp_GXO9U","description":"Search Marketplace content in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"mYgg50d7vOOJ5ulE0DT5","title":"Content packs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/content-packs","siteSpaceId":"sitesp_GXO9U","description":"Use Marketplace content packs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"QQ5B7biYcto56TMKW8qH","title":"Content Pack Support Types","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/content-pack-support-types","siteSpaceId":"sitesp_GXO9U","description":"Review content pack support types in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"waLbddURhb74m7CibIkE","title":"Manage content packs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/manage-content-packs","siteSpaceId":"sitesp_GXO9U","description":"Install and manage content packs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"wVePndJa4dH5LQWml7k9","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_GXO9U","description":"Set up a use case with the Deployment Wizard in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"X9QdFBjzOfWng6SsJ5BY","title":"Marketplace FAQs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_GXO9U","description":"Find Marketplace answers for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"m60lLk4ajSA8amkTdckE","title":"Content pack update notifications","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_GXO9U","description":"Enable content pack update notifications in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"vBY3I3jiME2aRd2k81z6","title":"Customize content pack notifications","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_GXO9U","description":"Customize content pack notifications in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content pack update notifications"}]},{"id":"qKchoqfihJGVjTxMWcqN","title":"Content pack contributions","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_GXO9U","description":"Contribute content packs to Marketplace in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"eAP1f0opvt9R8E5MzkAc","title":"Create a content pack","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_GXO9U","description":"Create a Marketplace content pack in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"zhQfim1HfMD0OlFamsr6","title":"Resubmit a content pack","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_GXO9U","description":"Resubmit a Marketplace content pack in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"WKn31ZDP26dOha2wwhhJ","title":"Integrations","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations","siteSpaceId":"sitesp_GXO9U","description":"Configure and manage integrations in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"gmy4KSsOod26j51PQFKy","title":"Integration use cases","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/integration-use-cases","siteSpaceId":"sitesp_GXO9U","description":"Explore common integration use cases in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"NSRDv9pvUsZ7LdPg4hKf","title":"Configure integrations","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/configure-integrations","siteSpaceId":"sitesp_GXO9U","description":"Configure integrations in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"KL7QLUWZnuxifGRrJQ9v","title":"Change the Docker image in an integration or script","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_GXO9U","description":"Change Docker images for integrations and scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"r6zQ3zYQfzQgjLtS9eSF","title":"Connect your engine to an image registry","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/connect-your-engine-to-an-image-registry","siteSpaceId":"sitesp_GXO9U","description":"Connect an engine to an image registry in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"cJcv2OCMHoBGHvzFt6KP","title":"Pull images from a private image registry","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/pull-images-from-a-private-image-registry","siteSpaceId":"sitesp_GXO9U","description":"Pull private registry images in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"gGKl2AjhUda5uSEsqYOU","title":"Manage credentials","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/manage-credentials","siteSpaceId":"sitesp_GXO9U","description":"Manage integration credentials in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"vgm5W0iDPqrMraAahl5t","title":"Add an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/add-an-integration-instance","siteSpaceId":"sitesp_GXO9U","description":"Add an integration instance in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"O06rldCkfiFXrZy4le3g","title":"Fetch incidents from an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/add-an-integration-instance/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_GXO9U","description":"Fetch incidents from an integration instance in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"OIWN11qrc2x9ZUS43CvP","title":"Receive notifications on an incident fetch error","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/add-an-integration-instance/receive-notifications-on-an-incident-fetch-error","siteSpaceId":"sitesp_GXO9U","description":"Receive integration fetch error notifications in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"SVWAA4jVOaUAXTsT6ERn","title":"Configure integration permissions","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/add-an-integration-instance/configure-integration-permissions","siteSpaceId":"sitesp_GXO9U","description":"Configure integration permissions in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"wEkyXj2UEpNc66g5ARvh","title":"Troubleshoot integrations","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/add-an-integration-instance/troubleshoot-integrations","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot integrations in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"iFtFiPJViJv60w8LzV1M","title":"Integration commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/integration-commands-in-the-cli","siteSpaceId":"sitesp_GXO9U","description":"Run integration commands in the CLI in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"GKRVz7t6YG8yVxVBTfJF","title":"Forward requests to long-running integrations","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_GXO9U","description":"Forward requests to long-running integrations in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"O3DyW9BPJI3e2TaJgKfQ","title":"Incident configuration","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration","siteSpaceId":"sitesp_GXO9U","description":"Configure incidents in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"L5s97LtXl8SJwjaBxUeo","title":"Incident lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-lifecycle","siteSpaceId":"sitesp_GXO9U","description":"Understand the incident lifecycle in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"JYXj44l26RuFGCpOAdSy","title":"Incident Customization","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization","siteSpaceId":"sitesp_GXO9U","description":"Customize incident types, fields, and layouts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"bDueBFjtjhI2JA6X6o1f","title":"Use incident context data","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/use-incident-context-data","siteSpaceId":"sitesp_GXO9U","description":"Use incident context data in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"iQUeLVUkP3xvleapgJve","title":"Create an incident type","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_GXO9U","description":"Create incident types in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"HAOehBcr2727snU6ZTTC","title":"Create an incident field","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field","siteSpaceId":"sitesp_GXO9U","description":"Create incident fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"K7KQHHLRwNeR2N7rlZ66","title":"Incident field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/incident-field-trigger-scripts","siteSpaceId":"sitesp_GXO9U","description":"Configure incident field trigger scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"6zcyFNxPWQoMAA5slj2U","title":"Create dynamic fields","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/create-dynamic-fields","siteSpaceId":"sitesp_GXO9U","description":"Create dynamic incident fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"AVo6KDKETlAgBKXEWqUs","title":"Troubleshoot incident fields","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field/troubleshoot-incident-fields","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot incident fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Create an incident field"}]},{"id":"z0QLXXQ6fhMipnDuZqBi","title":"Incident layout customization","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization","siteSpaceId":"sitesp_GXO9U","description":"Customize incident layouts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"dC8QOqjOPtPjT19HmF7m","title":"Examples of using scripts in incident layouts","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization/examples-of-using-scripts-in-incident-layouts","siteSpaceId":"sitesp_GXO9U","description":"Use scripts in incident layouts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"},{"label":"Incident layout customization"}]},{"id":"y5KkFFNg5KN2cZydGuob","title":"Classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/classification-and-mapping","siteSpaceId":"sitesp_GXO9U","description":"Configure incident classification and mapping in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"Uo2OKnBLxzX5RXgaXiKT","title":"Create an incident classifier","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-classifier","siteSpaceId":"sitesp_GXO9U","description":"Create an incident classifier in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"2oD6zJZ77cQoTBlMfAkd","title":"Create an incident mapper","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-mapper","siteSpaceId":"sitesp_GXO9U","description":"Create an incident mapper in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"x6VwKkYeAsfoOdHzm98g","title":"Set up incident mirroring","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/set-up-incident-mirroring","siteSpaceId":"sitesp_GXO9U","description":"Set up incident mirroring in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"VyDD1gjdUblqxiq80MUe","title":"Incident deduplication in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/incident-deduplication-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Deduplicate incidents in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"uIiY10jZrY5sB6lAb3PZ","title":"Pre-process rules","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/pre-process-rules","siteSpaceId":"sitesp_GXO9U","description":"Configure incident pre-process rules in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"ExlMbpggpmVRjQTPr18x","title":"Use post-processing scripts in an incident","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/use-post-processing-scripts-in-an-incident","siteSpaceId":"sitesp_GXO9U","description":"Use post-processing scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"nXI8GuUrE3JGTBDmxjJq","title":"Customize incident close reasons","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/customize-incident-close-reasons","siteSpaceId":"sitesp_GXO9U","description":"Customize incident close reasons in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"IrXiA3LWP3E8gbkK0lAG","title":"Configure inline value fields","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/configure-inline-value-fields","siteSpaceId":"sitesp_GXO9U","description":"Configure inline value fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"euU5QQZOCNWzDfZUipYQ","title":"Configure incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete","siteSpaceId":"sitesp_GXO9U","description":"Configure incident export and deletion in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"nCXcDXYB2DEif3do7bbl","title":"Configure access to external storage","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/configure-access-to-external-storage","siteSpaceId":"sitesp_GXO9U","description":"Configure external storage access in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"oVHFktiUTqhhwMXbxQ1U","title":"Schedule incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/schedule-incident-export-and-delete","siteSpaceId":"sitesp_GXO9U","description":"Schedule incident exports and deletions to external storage in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"TMMvJI2kXMNDojbbdz0u","title":"Export an incident to CSV using the UTF8-BOM format","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_GXO9U","description":"Export incidents to UTF8-BOM CSV in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"yGAWFNbRe6cXJtg7ZRJE","title":"Amazon S3 configuration example","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/incident-configuration/amazon-s3-configuration-example","siteSpaceId":"sitesp_GXO9U","description":"Configure Amazon S3 storage in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"PGWAQs2M9m7hnpjrhpLj","title":"Playbooks","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_GXO9U","description":"Build and automate workflows with playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"raQqZg3FNBFKkCT5p0x8","title":"What is a playbook?","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/what-is-a-playbook","siteSpaceId":"sitesp_GXO9U","description":"Learn about playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"zLcN5tjv6uDWoLvQhVxz","title":"Playbook development checklist","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_GXO9U","description":"Follow the playbook development checklist in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"L4Jn1ETiyZhV4qs69G1q","title":"Plan your playbook","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/plan-your-playbook","siteSpaceId":"sitesp_GXO9U","description":"Plan a playbook in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"RFnZCP3hJjCe5CXb62g3","title":"Develop your playbook","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook","siteSpaceId":"sitesp_GXO9U","description":"Develop playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"GjJs5uijvxzdgWes2fzk","title":"Task 1. Choose from existing playbooks or create your own","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-1.-choose-from-existing-playbooks-or-create-your-own","siteSpaceId":"sitesp_GXO9U","description":"Choose or create a playbook in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"VmZSXXNtJNWlrRYm3Zgn","title":"Task 2. Configure playbook settings","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-2.-configure-playbook-settings","siteSpaceId":"sitesp_GXO9U","description":"Configure playbook settings in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"1omPmFGSgi6HqWhMPQ4Z","title":"Task 3. Add tasks","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks","siteSpaceId":"sitesp_GXO9U","description":"Add tasks to a playbook in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"nH2xVuQSIUUxDnNAqcln","title":"Set playbook inputs and outputs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/set-playbook-inputs-and-outputs","siteSpaceId":"sitesp_GXO9U","description":"Set playbook inputs and outputs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"FdtBreRALVMc4CPXvRTz","title":"Create a section header","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-section-header","siteSpaceId":"sitesp_GXO9U","description":"Create a playbook section header in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"FfVybFDVtFL4ELyui2Lj","title":"Create a standard task","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-standard-task","siteSpaceId":"sitesp_GXO9U","description":"Create a standard playbook task in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"zN50jHQefBJW69QqVdYZ","title":"Create a conditional task","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-conditional-task","siteSpaceId":"sitesp_GXO9U","description":"Create a conditional playbook task in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"0lYzx6RJcYmJbWWXxT3m","title":"Create a communication task","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/create-a-communication-task","siteSpaceId":"sitesp_GXO9U","description":"Create a communication task in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"L3JwjeJlTeIexWpaJl65","title":"Configure script error handling in a playbook","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks/configure-script-error-handling-in-a-playbook","siteSpaceId":"sitesp_GXO9U","description":"Configure script error handling in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"},{"label":"Task 3. Add tasks"}]},{"id":"I5akac1AQX6SemoOtcAo","title":"Task 4. Add custom playbook features","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-4.-add-custom-playbook-features","siteSpaceId":"sitesp_GXO9U","description":"Add custom playbook features in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"PF4iEc9uEVpPIRoGvBHr","title":"Task 5. Test and debug the playbook","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-5.-test-and-debug-the-playbook","siteSpaceId":"sitesp_GXO9U","description":"Test and debug playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"KXrGlz7InmEJZdOXQubc","title":"Task 6. Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/task-6.-manage-playbook-content","siteSpaceId":"sitesp_GXO9U","description":"Manage playbook content in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"aUl6qu0K2gb6K8cOVuKo","title":"Customize a playbook for a phishing use case example","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/develop-your-playbook/customize-a-playbook-for-a-phishing-use-case-example","siteSpaceId":"sitesp_GXO9U","description":"Customize phishing playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"6imNZh7fCHO0e8heVhin","title":"Customize your playbook","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook","siteSpaceId":"sitesp_GXO9U","description":"Customize playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"4ZNhhtXuCjj2LxfDqpVH","title":"Customize the SOC name","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/customize-the-soc-name","siteSpaceId":"sitesp_GXO9U","description":"Customize the SOC name in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"b4SYzX1Z0PeuQeqVGh3N","title":"Configure a sub-playbook","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/configure-a-sub-playbook","siteSpaceId":"sitesp_GXO9U","description":"Configure sub-playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"E0T6SNrq1xu4avPoe9NR","title":"Filter and transform data","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_GXO9U","description":"Filter and transform data in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"1rLDaGGAIX2YAfSI3mzk","title":"Filter considerations, categories, and built-in filters","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data/filter-considerations-categories-and-built-in-filters","siteSpaceId":"sitesp_GXO9U","description":"Use filters in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"},{"label":"Filter and transform data"}]},{"id":"jgafYv8tCduKvRItFsNj","title":"Transformer considerations, categories, and built-in transformers","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data/transformer-considerations-categories-and-built-in-transformers","siteSpaceId":"sitesp_GXO9U","description":"Use transformers in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"},{"label":"Filter and transform data"}]},{"id":"PQkCQiHuC4KpGZzYR7HZ","title":"Extract indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_GXO9U","description":"Extract indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"IrbSEMzBZ1T4Oq6EvGIq","title":"Extend context","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/extend-context","siteSpaceId":"sitesp_GXO9U","description":"Extend context in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"TwFxjmw02ZygF4pOfqPZ","title":"Set and update incident fields","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/set-and-update-incident-fields","siteSpaceId":"sitesp_GXO9U","description":"Set and update incident fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"7VL6VeS8BDn2Tmem2mL9","title":"Playbook polling","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/customize-your-playbook/playbook-polling","siteSpaceId":"sitesp_GXO9U","description":"Configure playbook polling in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"VxdPEgqpKvR4p2W1XHGS","title":"Scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/scripts","siteSpaceId":"sitesp_GXO9U","description":"Create and edit scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"qA22Fdr9ZAlympzYhpZh","title":"Use existing scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/scripts/use-existing-scripts","siteSpaceId":"sitesp_GXO9U","description":"Use existing scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"k195NroAiEjMORBT1bqM","title":"Create a script","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/scripts/create-a-script","siteSpaceId":"sitesp_GXO9U","description":"Create scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"z0MFJOtZgmvEggNA36xJ","title":"Debug your playbook","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/debug-your-playbook","siteSpaceId":"sitesp_GXO9U","description":"Debug playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"8umfTmBobwXNs5bdALSb","title":"Troubleshoot playbook performance","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/debug-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot playbook performance in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Debug your playbook"}]},{"id":"JWK0AJ06NsJbenNY0WbV","title":"Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/manage-playbook-content","siteSpaceId":"sitesp_GXO9U","description":"Manage playbook content in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"YbT98nVSToIPuAtoUfLT","title":"Best practices","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_GXO9U","description":"Follow playbook best practices in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"2Gyc322LZKo0DRI0Init","title":"Lists","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/lists","siteSpaceId":"sitesp_GXO9U","description":"Create and manage lists in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"sddzuZlBlF8Af0werh0s","title":"What is a list?","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/lists/what-is-a-list","siteSpaceId":"sitesp_GXO9U","description":"Learn about lists in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"RPtfeBvUNKtNzWkF3jvv","title":"Create a list","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_GXO9U","description":"Create a list in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"X7bZgvOWTByrBafBiGyG","title":"List commands","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/lists/list-commands","siteSpaceId":"sitesp_GXO9U","description":"Use list commands in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"67hJL0Cf4LxrtM7Uo4Fa","title":"Use cases: JSON lists","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/lists/use-cases-json-lists","siteSpaceId":"sitesp_GXO9U","description":"Manage JSON lists in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"Ofxqsa5NzD7Rf74ihQNp","title":"Transform a list into an array","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_GXO9U","description":"Transform lists into arrays in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"7orRpnbGUaCooLZwdS7U","title":"Jobs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_GXO9U","description":"Create and manage jobs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"OlkAqsJrHjKx1wq7UHJV","title":"Manage jobs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/jobs/manage-jobs","siteSpaceId":"sitesp_GXO9U","description":"Manage jobs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"8VLf5GgCWPO59L4fTB8O","title":"Create a time triggered job","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_GXO9U","description":"Create time-triggered jobs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"sLQy0RHe0tiIK6flYsQW","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_GXO9U","description":"Create feed-triggered jobs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"01ceM8eftKezXaKb5xJm","title":"Create jobs to process indicators example","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/jobs/create-jobs-to-process-indicators-example","siteSpaceId":"sitesp_GXO9U","description":"Process indicators with jobs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"NWZ9pKkTLmE48Y0mGZka","title":"SLAs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas","siteSpaceId":"sitesp_GXO9U","description":"Configure SLAs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"JooNTsNI4zyTh41NtsiX","title":"SLAs in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/slas-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Learn about SLAs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"t0soaKSrtwBptv5gZIiX","title":"Configure an SLA in an incident type","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/configure-an-sla-in-an-incident-type","siteSpaceId":"sitesp_GXO9U","description":"Configure SLAs in incident types in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"0bGkXEP6SfzW55rsX8mj","title":"Configure Timer/SLA fields","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/configure-timersla-fields","siteSpaceId":"sitesp_GXO9U","description":"Configure timer and SLA fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"ahGzVvrf7eoUhZMNJzwL","title":"Configure a playbook to run Timers/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/configure-a-playbook-to-run-timersslas","siteSpaceId":"sitesp_GXO9U","description":"Configure playbooks to run timers and SLAs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"9IxAv5OSmmzKAq5kkXsi","title":"Automate changes to incident fields using SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/automate-changes-to-incident-fields-using-sla-scripts","siteSpaceId":"sitesp_GXO9U","description":"Automate incident field changes with SLA scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"NB6L7a4isIMhUpQIsBc5","title":"Create SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/create-sla-scripts","siteSpaceId":"sitesp_GXO9U","description":"Create SLA scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"8EX96Ej6jv7NLlRv0XdT","title":"Use SLA and Timer field commands manually in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/use-sla-and-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_GXO9U","description":"Use SLA and timer commands in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"yAoAXB8BRmnVszYwxOSN","title":"Configure the Global Risk Threshold","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_GXO9U","description":"Configure the global risk threshold in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"SCsrI1XwsvFdxDakeOB6","title":"Search incidents for Timer/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/slas/search-incidents-for-timerslas","siteSpaceId":"sitesp_GXO9U","description":"Search incidents by timer and SLA in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"MbL4a3q3BT23RSrVkqZJ","title":"Dashboards and Reports","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports","siteSpaceId":"sitesp_GXO9U","description":"Create dashboards, reports, and widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"rq7Xn4Tj8ILE5NkLLLST","title":"Dashboards","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/dashboards","siteSpaceId":"sitesp_GXO9U","description":"Create, edit, and share dashboards in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"}]},{"id":"hxCcjNyAZ5wiEolOmhcw","title":"Dashboard actions","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/dashboards/dashboard-actions","siteSpaceId":"sitesp_GXO9U","description":"Manage dashboards and customizable widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"ATL7ZIe9hWU27or9g9Y6","title":"Manage dashboards","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/dashboards/manage-dashboards","siteSpaceId":"sitesp_GXO9U","description":"Create, customize, and share dashboards in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"S7D9IJuj5E2YlnX6ZPeU","title":"Reports","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/reports","siteSpaceId":"sitesp_GXO9U","description":"Create, edit, and schedule reports in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"}]},{"id":"VuhndSZmqnr7B5cmki01","title":"Manage reports","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/reports/manage-reports","siteSpaceId":"sitesp_GXO9U","description":"Create, customize, schedule, and generate reports in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"YlilA4SRZYafe6tM79cq","title":"Configure the timezone in a report","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/reports/configure-the-timezone-in-a-report","siteSpaceId":"sitesp_GXO9U","description":"Configure report timezones and time formats in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"4BFBaZyqSJZ1MQZNsIFi","title":"Troubleshoot script timeout for reports","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-script-timeout-for-reports","siteSpaceId":"sitesp_GXO9U","description":"Change report script timeout values in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"eXgJt5U7DX2WetzjGqAo","title":"Troubleshoot overlapping text and extra pages","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-overlapping-text-and-extra-pages","siteSpaceId":"sitesp_GXO9U","description":"Fix overlapping text and extra PDF pages in Cortex XSOAR 8.11 On-prem reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"KecabBT2dnJZMlpSYObV","title":"Widgets","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets","siteSpaceId":"sitesp_GXO9U","description":"Create and edit dashboard and report widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"}]},{"id":"ZIkerZBUFmz7k6Bs2qTA","title":"Widget customization","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/widget-customization","siteSpaceId":"sitesp_GXO9U","description":"Customize widgets for dashboards and reports in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"ClmSrj3ked4OAVpfHkoM","title":"Create a widget using the widget builder","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_GXO9U","description":"Create widgets with Widget Builder in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"s1ew7uwwwDVvn7aAkmXc","title":"Create a custom widget using a JSON file","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_GXO9U","description":"Create custom JSON widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"uH5xhpvdJYinkwpissjZ","title":"Create a custom widget using a script","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-script","siteSpaceId":"sitesp_GXO9U","description":"Create custom script-based widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"QCNt5EQS5wlBQ2rkEOYR","title":"Create a widget from an incident","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-incident","siteSpaceId":"sitesp_GXO9U","description":"Create custom widgets from incident searches in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"CzBnAdUNmVUJ0RLa3bBP","title":"Create a widget from an indicator","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-indicator","siteSpaceId":"sitesp_GXO9U","description":"Create custom indicator widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"I6OltpaBifaELV2lkLRA","title":"Edit a widget","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/edit-a-widget","siteSpaceId":"sitesp_GXO9U","description":"Edit Widgets Library, dashboard, and report widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"lVoVyKhZestMCG63gyYS","title":"Add a widget in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/add-a-widget-in-the-war-room","siteSpaceId":"sitesp_GXO9U","description":"Add script-based War Room widgets in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"HV93oxDOaXqj6hm9sY9v","title":"Saved By Dbot (ROI) Widget","pathname":"/cortex-xsoar-8-on-prem/8.11/configure-cortex-xsoar/dashboards-and-reports/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_GXO9U","description":"Customize the Saved By Dbot ROI widget in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"8m0ptbrkgxzXx9Hl733T","title":"Incidents and indicators investigation","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation","siteSpaceId":"sitesp_GXO9U","description":"Investigate incidents and indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"}]},{"id":"SE2qMTRNCz4cMqYkOxBi","title":"Incidents","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incidents","siteSpaceId":"sitesp_GXO9U","description":"Investigate and remediate incidents in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"nOj9lzKuDHzJcVzLKfRS","title":"Incident management","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management","siteSpaceId":"sitesp_GXO9U","description":"View and manage incidents in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"644RtO0P0gncp2CvFZaC","title":"Search for incidents","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/search-for-incidents","siteSpaceId":"sitesp_GXO9U","description":"Search and save incident queries in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"6MWweechr5IG1bxInyWb","title":"Create an incident","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/create-an-incident","siteSpaceId":"sitesp_GXO9U","description":"Create incidents manually, through the API, or by importing data in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"9ZFk9kA7TTxc1XpTq3gR","title":"Export incidents","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents","siteSpaceId":"sitesp_GXO9U","description":"Export and schedule incident exports in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"Df45VqrntYA7il3pZhGX","title":"Export incidents from the Incidents table","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-from-the-incidents-table","siteSpaceId":"sitesp_GXO9U","description":"Export incidents from the Incidents table as Excel, CSV, or JSON files in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"ty1DMbEV5RPmfN3n1jo0","title":"Export incidents on demand","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-on-demand","siteSpaceId":"sitesp_GXO9U","description":"Export incidents on demand to external storage in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"2O7UFCFQjhCPCMzkTJM3","title":"Investigate an incident","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident","siteSpaceId":"sitesp_GXO9U","description":"Investigate incidents and take remediation steps in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"n8DfZW8jvPb20EefQ3hC","title":"Retain incidents","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/retain-incidents","siteSpaceId":"sitesp_GXO9U","description":"Retain incidents in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"53SR5PKjCMxQfHRvi034","title":"Limit access to investigations using access control","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/limit-access-to-investigations-using-access-control","siteSpaceId":"sitesp_GXO9U","description":"Limit access to investigations in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"IHQzSGBQU6R06Hqfca9N","title":"Incident Tasks","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/incident-tasks","siteSpaceId":"sitesp_GXO9U","description":"Manage incident and playbook tasks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"lc5aWnsnK6Mnl5wqIsMY","title":"Use the War Room in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_GXO9U","description":"Use the War Room for incident investigations in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"7CLmyizZVbWqqWWss2AI","title":"Schedule a command in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/schedule-a-command-in-the-war-room","siteSpaceId":"sitesp_GXO9U","description":"Schedule War Room commands in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"DSzAZzdAFcnTxKA28jrl","title":"Run commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/run-commands-in-the-cli","siteSpaceId":"sitesp_GXO9U","description":"Run system, integration, and script commands in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"bA1VGfZ60f0BgJT6qXJC","title":"Evidence Handling","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/evidence-handling","siteSpaceId":"sitesp_GXO9U","description":"Manage investigation evidence in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"FvfgABpDkVEQtXcA8SEP","title":"Use the Work Plan in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_GXO9U","description":"Monitor and manage playbook workflows in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"Ln2IvfabfXur35a7P9Jm","title":"Investigate an incident using the canvas","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_GXO9U","description":"Map and investigate incidents with the canvas in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"pggLufROgtfwwaqI5qjO","title":"Link incidents","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/link-incidents","siteSpaceId":"sitesp_GXO9U","description":"Link incidents in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"BLLbZr0AuZ0ANdB6XnTO","title":"Create an incident summary report","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/create-an-incident-summary-report","siteSpaceId":"sitesp_GXO9U","description":"Create incident summary reports in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"ko37WRTWvsKK3eIoCSll","title":"Manage indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators","siteSpaceId":"sitesp_GXO9U","description":"Manage and search indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"cuBPo0tlTKrgcR6GHLJv","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/query-indicators","siteSpaceId":"sitesp_GXO9U","description":"Query indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"QoNYoRW1rtnyDZGNT05s","title":"View indicator relationships in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/view-indicator-relationships-in-an-investigation","siteSpaceId":"sitesp_GXO9U","description":"Create and investigate indicator relationships in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"4d8BTMSmZ5XvKe2M5GYh","title":"Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management","siteSpaceId":"sitesp_GXO9U","description":"Manage threat intelligence in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"}]},{"id":"WfDtvhunUQc7zQa1vtPS","title":"Get started with Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_GXO9U","description":"Get started with Threat Intel Management in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"O9oIKtNrhCd4qaogXNWV","title":"What is Threat Intel Management?","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_GXO9U","description":"Learn about Threat Intel Management in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"DNaSwoiyM4ba7UATcmYX","title":"Threat Intel Management use cases","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_GXO9U","description":"Explore Threat Intel Management use cases in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"f4gtNGslYG38gYai5T7u","title":"Indicator concepts","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_GXO9U","description":"Learn indicator concepts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"vokimCfLnAZ9lIheUwJU","title":"Indicator lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_GXO9U","description":"Understand the indicator lifecycle in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"JkmsUxHtXExpwX1bQb8W","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_GXO9U","description":"Understand Threat Intel Management roles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"LpfSN8NFWpBLym8AOTyQ","title":"Indicator configuration","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_GXO9U","description":"Configure indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"PA6tNhBSRnTS7xdcttBF","title":"Customize indicator types, fields, and layouts","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts","siteSpaceId":"sitesp_GXO9U","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"2CY40F5tdFduwwknF3q6","title":"Create an indicator type","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type","siteSpaceId":"sitesp_GXO9U","description":"Create indicator types in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"1HotvHY5UEkKN6shlaEr","title":"Indicator type profile","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/indicator-type-profile","siteSpaceId":"sitesp_GXO9U","description":"Configure indicator type profiles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"IW9C1Hr0oG1kW6KUItoh","title":"File indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/file-indicators","siteSpaceId":"sitesp_GXO9U","description":"Manage file indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"B5zBp4Iqt29lC9Teut7p","title":"Formatting scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/formatting-scripts","siteSpaceId":"sitesp_GXO9U","description":"Use formatting scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"gwqw4WqRApQnRjYKTvS9","title":"Enhancement scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/enhancement-scripts","siteSpaceId":"sitesp_GXO9U","description":"Use enhancement scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"Jus340wqULZNgWkqmOYs","title":"Reputation scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/reputation-scripts","siteSpaceId":"sitesp_GXO9U","description":"Use reputation scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"susvQaqffNlw6IhdFxD6","title":"Reputation commands","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/reputation-commands","siteSpaceId":"sitesp_GXO9U","description":"Run reputation commands in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"FKuw2QbRW3ZOJpcGQIrK","title":"Map custom indicator fields","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-type/map-custom-indicator-fields","siteSpaceId":"sitesp_GXO9U","description":"Map custom indicator fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator type"}]},{"id":"ZWl38VGbTZDDPa6A5byX","title":"Create an indicator field","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field","siteSpaceId":"sitesp_GXO9U","description":"Create indicator fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"IPLWooD3aa2qRJHpvOb2","title":"Indicator fields structure","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field/indicator-fields-structure","siteSpaceId":"sitesp_GXO9U","description":"Understand indicator field structures in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator field"}]},{"id":"qIIA5LF75Ahhd3A443s6","title":"Indicator field trigger scripts","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/create-an-indicator-field/indicator-field-trigger-scripts","siteSpaceId":"sitesp_GXO9U","description":"Configure indicator field trigger scripts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"},{"label":"Create an indicator field"}]},{"id":"WCXSr7tKbo42KOUO7khC","title":"Indicator layout customization","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts/indicator-layout-customization","siteSpaceId":"sitesp_GXO9U","description":"Customize indicator layouts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Customize indicator types, fields, and layouts"}]},{"id":"m3Mtmp2RvwuiGFq7gxfP","title":"Indicator classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_GXO9U","description":"Configure indicator classification and mapping in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"B6ThUknb3NaFJShrWDX1","title":"Indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_GXO9U","description":"Extract and enrich indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"EgClxbNTTbBt281cyp8a","title":"Indicator extraction modes","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_GXO9U","description":"Configure indicator extraction modes in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"ZQEK0Duj4rsFILb4s2AD","title":"Create indicator extraction rules for an incident type","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_GXO9U","description":"Create indicator extraction rules in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"NsWiJaKbsqihev9vM6Zm","title":"Set the indicator extraction mode for a playbook task","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/set-the-indicator-extraction-mode-for-a-playbook-task","siteSpaceId":"sitesp_GXO9U","description":"Set indicator extraction modes in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"M72v4ragFZ1a2MMYOGGS","title":"Disable indicator extraction for scripts or integrations","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/disable-indicator-extraction-for-scripts-or-integrations","siteSpaceId":"sitesp_GXO9U","description":"Disable indicator extraction in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"lgznC0fEOEhJjGf1uhFJ","title":"Troubleshoot indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction/troubleshoot-indicator-extraction","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot indicator extraction in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"},{"label":"Indicator extraction"}]},{"id":"mkDERAxAiMg4UvGZsALU","title":"Configure the indicator timeline","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-the-indicator-timeline","siteSpaceId":"sitesp_GXO9U","description":"Configure the indicator timeline in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"PjGNvSpVc5SlZyLBEzNd","title":"Configure indicator expiration","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-indicator-expiration","siteSpaceId":"sitesp_GXO9U","description":"Configure indicator expiration in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"Vb7E45v7SdJv5Vt7B5sK","title":"Configure Threat Intel feed integrations","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intel-feed-integrations","siteSpaceId":"sitesp_GXO9U","description":"Configure threat intelligence feeds in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"WxxUUtU4u4dcYMvizUee","title":"Exclude indicators from enrichment","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_GXO9U","description":"Exclude indicators from enrichment in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"tsT27U8ZtKAyEbyOtKNo","title":"Configure Threat Intelligence Management playbooks to process indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intelligence-management-playbooks-to-process-indicators","siteSpaceId":"sitesp_GXO9U","description":"Configure Threat Intel Management playbooks in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"Ui1eazqXD65jsPKfS5TB","title":"Export indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/export-indicators","siteSpaceId":"sitesp_GXO9U","description":"Export indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"qe9GBlNXoKl1aqteBnFc","title":"Customize Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports","siteSpaceId":"sitesp_GXO9U","description":"Customize Threat Intel Reports in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"gRb0Y9pNFxKpJuplTB0g","title":"Create a Threat Intel Report type","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-type","siteSpaceId":"sitesp_GXO9U","description":"Create Threat Intel Report types in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"VVA5payl3lGhG8o6NE6u","title":"Create a Threat Intel Report field","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-field","siteSpaceId":"sitesp_GXO9U","description":"Create Threat Intel Report fields in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"f01GycVJYJjK1mIMGAO8","title":"Create a Threat Intel Report layout","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-layout","siteSpaceId":"sitesp_GXO9U","description":"Create Threat Intel Report layouts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"AqyTUYfKEdpJLYqaGi7t","title":"Indicator management","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-management","siteSpaceId":"sitesp_GXO9U","description":"Manage and search indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"m7hEg4q2TYggUOTWCiC4","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-management/query-indicators","siteSpaceId":"sitesp_GXO9U","description":"Query indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator management"}]},{"id":"RWsVoVfiJVM4yYbPBDLS","title":"Indicator investigation","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_GXO9U","description":"Investigate indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"OJ84ZvMGH8jcYd2JUs0w","title":"Indicator verdict","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_GXO9U","description":"Manage indicator verdicts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"nK2uiV4BNfP2XcHdfBWk","title":"Extract and enrich an indicator","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_GXO9U","description":"Extract and enrich indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"ZcZsJYfB1wfmL2jTTeNE","title":"Expire an indicator","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_GXO9U","description":"Expire indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"VfWixXwyN6vwUSCiwVmx","title":"Manage indicator relationships","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_GXO9U","description":"Manage indicator relationships in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"qkxdVAO0KNZwFwpuutpF","title":"Delete and exclude indicators","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_GXO9U","description":"Delete and exclude indicators in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"9FaiRu0JQmwvaEz3dvl8","title":"Manage Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.11/investigate-and-respond-to-threats/threat-intel-management/manage-threat-intel-reports","siteSpaceId":"sitesp_GXO9U","description":"Manage Threat Intel Reports in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"USQEfTQsu3hUveHSQCDC","title":"Troubleshoot","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/troubleshoot","siteSpaceId":"sitesp_GXO9U","description":"Troubleshoot errors in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"}]},{"id":"tLTvsDJM3aeaepsOvb8k","title":"View system status in the System Diagnostics page","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/troubleshoot/view-system-status-in-the-system-diagnostics-page","siteSpaceId":"sitesp_GXO9U","description":"View System Diagnostics status in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"o8pmXZ8p4Ye9EGlt5fBx","title":"View Guard Rails warnings and errors","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/troubleshoot/view-guard-rails-warnings-and-errors","siteSpaceId":"sitesp_GXO9U","description":"View Guard Rails warnings and errors in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"BtgJtqXHYyTQg9j54IiS","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/troubleshoot/access-logs-and-log-bundles","siteSpaceId":"sitesp_GXO9U","description":"Access logs and log bundles in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"sqqCujo7r9MARjSUADtf","title":"Management audit logs","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/troubleshoot/management-audit-logs","siteSpaceId":"sitesp_GXO9U","description":"Manage audit logs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"4WSHMHutCloJIbkwhCd5","title":"Integration logs","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/troubleshoot/integration-logs","siteSpaceId":"sitesp_GXO9U","description":"View integration logs in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"OndVuBBXKzww156iWrF9","title":"Reference","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference","siteSpaceId":"sitesp_GXO9U","description":"Explore reference information in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"}]},{"id":"sp2OUp4LMFyBQHwX1c0O","title":"Cortex XSOAR concepts","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/cortex-xsoar-concepts","siteSpaceId":"sitesp_GXO9U","description":"Learn common concepts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"961D6Glnb6qiCMu0vasb","title":"How to search in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/how-to-search-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Search in Cortex XSOAR 8.11 On-prem using queries and search tools.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"m9Gh1glm5F3Y08wDXgTt","title":"How to use markdown in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/how-to-use-markdown-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Use Markdown formatting in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"D3iOJ9cKWVQ8pGYPYL4U","title":"User details and preferences","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/user-details-and-preferences","siteSpaceId":"sitesp_GXO9U","description":"Manage user details and preferences in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"iKReZPfphklA6j0e4mon","title":"Server configurations","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/server-configurations","siteSpaceId":"sitesp_GXO9U","description":"Configure server settings in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"Dfo8QWF4UHGO12rr2Shm","title":"New user FAQ","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/new-user-faq","siteSpaceId":"sitesp_GXO9U","description":"Find answers for new users of Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"tomwjqKOXWx8Plu9oleq","title":"Cortex XSOAR API","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/cortex-xsoar-api","siteSpaceId":"sitesp_GXO9U","description":"Generate API keys and make API calls in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"sXhIxLanAwGjQ0hr2DRl","title":"Telemetry in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/telemetry-in-cortex-xsoar","siteSpaceId":"sitesp_GXO9U","description":"Understand telemetry collection in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"VCKmkyVBOoNCD3LVPUSd","title":"Keyboard shortcuts","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/keyboard-shortcuts","siteSpaceId":"sitesp_GXO9U","description":"Use keyboard shortcuts in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"xRmPjbBfi6rAz0NCPmrE","title":"Product support lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/product-support-lifecycle","siteSpaceId":"sitesp_GXO9U","description":"Review the product support lifecycle for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"24qo6W595fQdCiKrG6VY","title":"Cortex XSOAR navigation cheat sheet","pathname":"/cortex-xsoar-8-on-prem/8.11/troubleshoot-and-reference/reference/cortex-xsoar-navigation-cheat-sheet","siteSpaceId":"sitesp_GXO9U","description":"Navigate Cortex XSOAR 8.11 On-prem with the navigation cheat sheet.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"OHqGZdQm2TvW0D363Bbb","title":"What is Cortex XSOAR multi-tenant?","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/what-is-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_GXO9U","description":"Learn about multi-tenant deployments in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"}]},{"id":"T1g2v77sVpSFZXQ6grxL","title":"Onboard Cortex XSOAR multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/onboard-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_GXO9U","description":"Install, pair, and manage tenants in Cortex XSOAR 8.11 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"}]},{"id":"ucbM4JrYdQiAh95vqWAg","title":"Onboarding checklist for multi-tenant deployments","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/onboard-cortex-xsoar-multi-tenant/onboarding-checklist-for-multi-tenant-deployments","siteSpaceId":"sitesp_GXO9U","description":"Follow the multi-tenant onboarding checklist in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"GDIsgs4UN9aOqQiJtE4G","title":"Step 1. Install Cortex XSOAR for multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-1.-install-cortex-xsoar-for-multi-tenant","siteSpaceId":"sitesp_GXO9U","description":"Install Cortex XSOAR 8.11 On-prem for a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"ijNtMOcKk4PfukAzYRNn","title":"Step 2. Pair the child tenant to main tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-2.-pair-child-tenant-to-main-tenant","siteSpaceId":"sitesp_GXO9U","description":"Pair child tenants to the main tenant in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"UkWUQc30CiqsTOLKgQnB","title":"Step 3. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-3.-set-up-an-engine","siteSpaceId":"sitesp_GXO9U","description":"Set up engines for multi-tenant deployments in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"hrpBLAG0zS2o1USQG2YP","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_GXO9U","description":"Set up users and roles for multi-tenant deployments in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"lNvpJmZbUSJKraIBY89v","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-5.-install-and-configure-content","siteSpaceId":"sitesp_GXO9U","description":"Install and configure content for multi-tenant deployments in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"IBoF2q2dQ5MWj3AXJIF4","title":"Child tenant management","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_GXO9U","description":"Manage child tenants and their content in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"}]},{"id":"vDcwtS81lpeVqg5B3Nw6","title":"Content management in multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/child-tenant-management/content-management-in-multi-tenant","siteSpaceId":"sitesp_GXO9U","description":"Manage content across tenants in Cortex XSOAR 8.11 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Child tenant management"}]},{"id":"07cdXuaLEzCi3T8qbtMa","title":"Add propagation labels to content","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-content","siteSpaceId":"sitesp_GXO9U","description":"Add propagation labels to content in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"pZdr4S3m2YskqKDkTgbX","title":"Add propagation labels to a child tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/child-tenant-management/content-management-in-multi-tenant/add-propagation-labels-to-a-child-tenant","siteSpaceId":"sitesp_GXO9U","description":"Add propagation labels to child tenants in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"Vde2PmP1ngmE9D293I2Z","title":"Sync content to child tenants","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/child-tenant-management/content-management-in-multi-tenant/sync-content-to-child-tenants","siteSpaceId":"sitesp_GXO9U","description":"Sync content to child tenants in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"jG39MAkhF03mzTBVufy6","title":"Manage content using a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/child-tenant-management/content-management-in-multi-tenant/manage-content-using-a-remote-repository","siteSpaceId":"sitesp_GXO9U","description":"Manage multi-tenant content with a remote repository in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Child tenant management"},{"label":"Content management in multi-tenant"}]},{"id":"zIKVm6xDVIHXoFKdHUBg","title":"Incident management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/incident-management-on-the-main-tenant","siteSpaceId":"sitesp_GXO9U","description":"Manage incidents on the main tenant in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"}]},{"id":"TwGmjD3GYwAk1PpaLNDB","title":"Run a command on multiple tenants","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/incident-management-on-the-main-tenant/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_GXO9U","description":"Run commands across multiple tenants in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Incident management on the main tenant"}]},{"id":"7yVW8VruirPInoL4x8wj","title":"Indicator management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.11/multi-tenant/indicator-management-on-the-main-tenant","siteSpaceId":"sitesp_GXO9U","description":"Manage indicators on the main tenant in Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"}]},{"id":"JtlsBNE077DyaWMpdghU","title":"Cortex XSOAR 8.10 On-prem documentation","pathname":"/cortex-xsoar-8-on-prem/8.10","siteSpaceId":"sitesp_3eeMj","description":"Access Cortex XSOAR 8.10 On-prem documentation for onboarding, configuration, threat investigation, troubleshooting, and multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"}]},{"id":"urWJuPBbvYwpwAYNPGoP","title":"Get Started with Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/learn-about-cortex-xsoar/get-started-with-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, get started with architecture, roles, responsibilities, and licenses.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"}]},{"id":"qPhdTkvOOSdv6Kf9h8dY","title":"What is Cortex XSOAR?","pathname":"/cortex-xsoar-8-on-prem/8.10/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/what-is-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Learn about Cortex XSOAR 8.10 On-prem features.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"aE1vWXCNCIgQdo9aQEVC","title":"Cortex XSOAR architecture","pathname":"/cortex-xsoar-8-on-prem/8.10/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/cortex-xsoar-architecture","siteSpaceId":"sitesp_3eeMj","description":"Learn about the Cortex XSOAR 8.10 On-prem architecture.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"yTDWumrd5NBhDb4bMcWC","title":"Cortex XSOAR use cases","pathname":"/cortex-xsoar-8-on-prem/8.10/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/cortex-xsoar-use-cases","siteSpaceId":"sitesp_3eeMj","description":"Explore SOC automation use cases in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"0O7TO9OpTzz13yMGSKwB","title":"Understand Cortex XSOAR licenses","pathname":"/cortex-xsoar-8-on-prem/8.10/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/understand-cortex-xsoar-licenses","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, learn how licenses control components and tenant access.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"6xb0gjhmKLvfrvAIpy8N","title":"Roles and responsibilities","pathname":"/cortex-xsoar-8-on-prem/8.10/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/roles-and-responsibilities","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, learn about the core roles in a SOC team.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"9oossxyd8VO28yXkhRH7","title":"Supported web browsers","pathname":"/cortex-xsoar-8-on-prem/8.10/learn-about-cortex-xsoar/get-started-with-cortex-xsoar/supported-web-browsers","siteSpaceId":"sitesp_3eeMj","description":"View supported web browsers for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started with Cortex XSOAR"}]},{"id":"yrj4PgKws8J6E8vjJODq","title":"Onboard and configure Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, follow the steps to onboard and configure your environment.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"Rl9tx5qzQsmDcoTnlALs","title":"Plan your deployment","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/plan-your-deployment","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, review deployment considerations and onboarding steps.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"T7vdUwZfVQb1XdLKhukI","title":"Onboarding checklist","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/onboarding-checklist","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, activate, provision, grant access, and configure your tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"CbR4Ytf7WrHpgCFGA1ST","title":"Step 1. Install Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-1.-install-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, install your environment, verify requirements, and add a license.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"2asPJf6bUlqy3riEJQvX","title":"Step 2. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-2.-set-up-an-engine","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, set up an engine on a remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"BMLIIUq9WvaJZnrYwDie","title":"Step 3. Set up a remote repository","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-3.-set-up-a-remote-repository","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, set up a remote repository for development and production content.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"UUBsUFVrKKb469HXJ7Ug","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure users, permissions, and predefined roles.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"bSGJq0HqEd4KrtQCnZoK","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-5.-install-and-configure-content","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, install and configure the content for your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"Kejkkb0SHF237LB6FTdA","title":"Install content packs","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-5.-install-and-configure-content/install-content-packs","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, install content packs for your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Step 5. Install and configure content"}]},{"id":"u4lnWEN3V2yjUc8ZeOOF","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-5.-install-and-configure-content/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, use the Deployment Wizard to adopt your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Step 5. Install and configure content"}]},{"id":"BpvEzhkbQZHP2xDz5f5N","title":"Post deployment","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment","siteSpaceId":"sitesp_3eeMj","description":"Complete post-deployment tasks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"SDFuLGzGIiqx4kgodGHn","title":"User communication","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/user-communication","siteSpaceId":"sitesp_3eeMj","description":"Manage user communications after deploying Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"}]},{"id":"m8m5xkhqWxuBxAT6ofLm","title":"Configure system settings","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/post-deployment/configure-system-settings","siteSpaceId":"sitesp_3eeMj","description":"Configure system settings in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"},{"label":"Post deployment"}]},{"id":"yr0ONv21sua9SuuJ6fVX","title":"Configure Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/configure-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure engines, playbooks, scripts, and dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Onboard and configure Cortex XSOAR"}]},{"id":"EitTgVCxQAPu3oGDUjkl","title":"Cortex XSOAR Installation","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, install, complete post-installation tasks, and upgrade your tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"KC31K5wop9M69YNjKGkJ","title":"Installation overview","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/installation-overview","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, review installation requirements and add a license.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"C7z33tFXZhNQ8i461Sgn","title":"High Availability for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/high-availability-for-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Configure High Availability for reliable Cortex XSOAR 8.10 On-prem operation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"vZb9ETJLD1SAI1qwkMxF","title":"Load balancing for Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/load-balancing-for-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Configure load balancing for reliable Cortex XSOAR 8.10 On-prem operation.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"XpfYeMQP0PMnleBBpaG0","title":"System Requirements","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements","siteSpaceId":"sitesp_3eeMj","description":"Verify that Cortex XSOAR 8.10 On-prem meets the minimum system requirements.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"m1XRcsm30xPYHsN9xIzn","title":"Hardware requirements","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/hardware-requirements","siteSpaceId":"sitesp_3eeMj","description":"View hardware requirements for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"EX3j68sKmJDp7k5GeEz2","title":"Port requirements for cluster communication","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/port-requirements-for-cluster-communication","siteSpaceId":"sitesp_3eeMj","description":"Add required cluster communication ports for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"UJd1U9B4M0nqEk6vUM5U","title":"URL requirements","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/url-requirements","siteSpaceId":"sitesp_3eeMj","description":"Add required URLs for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"KI9fsafFmxWNCoztWIJH","title":"Bandwidth and NTP requirements","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements/bandwidth-and-ntp-requirements","siteSpaceId":"sitesp_3eeMj","description":"Review bandwidth and NTP requirements for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"System Requirements"}]},{"id":"nSSdRLT4JOIeirvN0d1w","title":"Install Cortex XSOAR on a VM deployed on AWS","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws","siteSpaceId":"sitesp_3eeMj","description":"Install Cortex XSOAR 8.10 On-prem on an AWS virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"BH8M1JrD0KHvB1zCCeqT","title":"Task 1. Download the OVA Image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_3eeMj","description":"Download the OVA image and license for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"GXBBzwUtNdrcrM8Y3Qs3","title":"Task 2. Deploy your virtual machine on AWS","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-2.-deploy-your-virtual-machine-on-aws","siteSpaceId":"sitesp_3eeMj","description":"Deploy a virtual machine on AWS for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"4jRmdZnWE9cYwyTwpvKe","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-3.-validate-tenant-nework-and-ip-settings","siteSpaceId":"sitesp_3eeMj","description":"Validate tenant network and IP settings for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"sZYIj73Hi13v085Z0qQS","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_3eeMj","description":"Configure NTP servers for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"mRBp1s46seOk6XhUSdUW","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_3eeMj","description":"Configure optional proxy settings for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"7mXOv77t4SDwnzMLzBYq","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_3eeMj","description":"Establish cluster node trust in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"rbOkXjMi22gsKEA4N2A0","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_3eeMj","description":"Install Cortex XSOAR 8.10 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"jMVeOyK9ae9btkSO7aDO","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-aws/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Verify access to your Cortex XSOAR 8.10 On-prem tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on AWS"}]},{"id":"FQHehejNQMP8eoaBqUOp","title":"Install Cortex XSOAR on a VM deployed on OCI","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci","siteSpaceId":"sitesp_3eeMj","description":"Install Cortex XSOAR 8.10 On-prem on an OCI virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"euNcBtJFKQR21Jpka5n5","title":"Task 1. Download the OVA image and license from Cortex Gateway","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-1.-download-the-ova-image-and-license-from-cortex-gateway","siteSpaceId":"sitesp_3eeMj","description":"Download the OVA image and license for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"0ourdiFJzSUriEAHITvF","title":"Task 2. Deploy your virtual machine on OCI","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-2.-deploy-your-virtual-machine-on-oci","siteSpaceId":"sitesp_3eeMj","description":"Deploy a virtual machine on OCI for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"25KgjIQKoP2gayXH5F8r","title":"Task 3. Validate tenant network and IP settings","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-3.-validate-tenant-network-and-ip-settings","siteSpaceId":"sitesp_3eeMj","description":"Validate tenant network and IP settings for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"Ji0mSALTOXC9UjriiFD0","title":"Task 4. Configure NTP servers","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-4.-configure-ntp-servers","siteSpaceId":"sitesp_3eeMj","description":"Configure NTP servers for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"PRtVJYUwS53CkIe3Qt3X","title":"Task 5. (Optional) Configure proxy settings","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-5.-optional-configure-proxy-settings","siteSpaceId":"sitesp_3eeMj","description":"Configure optional proxy settings for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"rFELNXZ0HmNbrQWMNV8T","title":"Task 6. Establish trust between all nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-6.-establish-trust-between-all-nodes-in-a-cluster","siteSpaceId":"sitesp_3eeMj","description":"Establish cluster node trust in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"DGiQJeF3FFPRHoa9YpJt","title":"Task 7. Install Cortex XSOAR on your VM","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-7.-install-cortex-xsoar-on-your-vm","siteSpaceId":"sitesp_3eeMj","description":"Install Cortex XSOAR 8.10 On-prem on your virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"D4zKDY48MbmBoMTy9kEN","title":"Task 8. Verify you can log into Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-oci/task-8.-verify-you-can-log-into-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Verify access to your Cortex XSOAR 8.10 On-prem tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Install Cortex XSOAR on a VM deployed on OCI"}]},{"id":"NVQWPrjpa6DBZbYeboyE","title":"Install Cortex XSOAR on a VM deployed on Hyper-V","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v","siteSpaceId":"sitesp_3eeMj","description":"Install Cortex XSOAR 8.10 On-prem on a Hyper-V virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"HFSksiHia430XE6nrN2U","title":"Install Cortex XSOAR on a VM deployed on VSphere","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-vsphere","siteSpaceId":"sitesp_3eeMj","description":"Install Cortex XSOAR 8.10 On-prem on a vSphere virtual machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"W00sSC3SRL3MQMeXCuiQ","title":"Post-installation","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, add a license, configure certificates, and complete post-installation maintenance.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"dtrQYnLgHbxgsrYTozaP","title":"Add the Cortex XSOAR license","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/add-the-cortex-xsoar-license","siteSpaceId":"sitesp_3eeMj","description":"Download and add a Cortex XSOAR 8.10 On-prem license from Cortex Gateway.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"okdnCpQdhRVNPIurg7lC","title":"HTTPS with a signed certificate","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/https-with-a-signed-certificate","siteSpaceId":"sitesp_3eeMj","description":"Configure HTTPS with a signed certificate in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"KxxUdI4lafBxhGdEKN71","title":"Use a signed certificate instead of SSL verification","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/use-a-signed-certificate-instead-of-ssl-verification","siteSpaceId":"sitesp_3eeMj","description":"Use a signed certificate with Cortex XSOAR 8.10 On-prem for MSSP deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"l1Z7dnayK05Or4aJnnNM","title":"Optimize performance and robustness from the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/optimize-performance-and-robustness-from-the-textual-ui","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, optimize system performance from the textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"}]},{"id":"T91YwJ16vjvy2bcoFVF5","title":"Manage nodes in a cluster","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/optimize-performance-and-robustness-from-the-textual-ui/manage-nodes-in-a-cluster","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, manage cluster nodes from the textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"dIOrNXjtPGIFRHmREYhZ","title":"Scale up hardware resources","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/optimize-performance-and-robustness-from-the-textual-ui/optimize-performance-and-robustness-from-the-textual-ui","siteSpaceId":"sitesp_3eeMj","description":"Scale up hardware resources for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"xpD6oYu3sby1oAFLO4ap","title":"Auto expand PVC volumes","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/optimize-performance-and-robustness-from-the-textual-ui/auto-expand-pvc-volumes","siteSpaceId":"sitesp_3eeMj","description":"Automatically expand PVC volumes in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Post-installation"},{"label":"Optimize performance and robustness from the textual UI"}]},{"id":"eMclGVKasGXt2lH4IhcG","title":"Troubleshoot your installation","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, troubleshoot installation from the textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"8t8CcXdWknfn86Qp0Wfs","title":"Common installation limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/common-installation-limitations-and-fixes","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot common Cortex XSOAR 8.10 On-prem installation issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"Eku0nSMNz7NDSIsPSORV","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/access-logs-and-log-bundles","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, access logs and log bundles for troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"5nk791qJ4isqwKnlFqTt","title":"Open a support session","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/open-a-support-session","siteSpaceId":"sitesp_3eeMj","description":"Open a support session from the Cortex XSOAR 8.10 On-prem textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"DRBEoPpL4KPmxNOkHM7z","title":"Upload your license to the textual UI","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/upload-your-license-to-the-textual-ui","siteSpaceId":"sitesp_3eeMj","description":"Upload a license through the Cortex XSOAR 8.10 On-prem textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"fvLvvSNRzCQAIUEvhuA2","title":"Shut down Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/troubleshoot-your-installation/shut-down-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Shut down Cortex XSOAR 8.10 On-prem from the textual UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"},{"label":"Troubleshoot your installation"}]},{"id":"2ZNlGgzYLhh0Lj0esLaw","title":"Update Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/cortex-xsoar-installation/update-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Upgrade your Cortex XSOAR 8.10 On-prem tenant to the latest version.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Cortex XSOAR Installation"}]},{"id":"LCkHdY5qKGHisla8qPvC","title":"Back up and Restore Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, back up and restore your cluster and data.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"}]},{"id":"WO0d29GEGEloAnhc8ojt","title":"Set up access to an external storage","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/set-up-access-to-an-external-storage","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, set up access to external storage.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"FwCHkXndk2h8CNmB79Ub","title":"Back up data","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/back-up-data","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, schedule and perform on-demand data backups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"I972Qd8P4aS2lg4Xm7lH","title":"Backup guidelines and best practices","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/back-up-data/backup-guidelines-and-best-practices","siteSpaceId":"sitesp_3eeMj","description":"Follow backup guidelines and best practices for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"},{"label":"Back up data"}]},{"id":"TAJmQi7ncPzNDma6kY8p","title":"Restore data","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/restore-data","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, restore data from an on-demand backup.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"fNJwO3SOAqdtJrDQYr7T","title":"End-to-end example of Cortex XSOAR cluster backup and restore","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/end-to-end-example-of-cortex-xsoar-cluster-backup-and-restore","siteSpaceId":"sitesp_3eeMj","description":"Review an end-to-end backup and restore workflow in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"c40bK496TqUXEp7ctxJC","title":"Common backup and restore limitations and fixes","pathname":"/cortex-xsoar-8-on-prem/8.10/onboard-cortex-xsoar/back-up-and-restore-cortex-xsoar/common-backup-and-restore-limitations-and-fixes","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot common Cortex XSOAR 8.10 On-prem backup and restore issues.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Onboard Cortex XSOAR"},{"label":"Back up and Restore Cortex XSOAR"}]},{"id":"xdvlsLMv372qkUEJzVVu","title":"Engines","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, install, manage, configure, and troubleshoot engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"JgdfzLsHjHdkPG3mJfDO","title":"What is an engine?","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/what-is-an-engine","siteSpaceId":"sitesp_3eeMj","description":"Learn about engines in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"y5yBni90NelCoT0WsCB2","title":"Engine requirements","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/engine-requirements","siteSpaceId":"sitesp_3eeMj","description":"Review engine hardware, operating system, and URL requirements for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"ki0EQbyGn8nRQPam3bNv","title":"Install an engine","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, install, deploy, and configure engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"fQ6LScRDjg9MUy7d1DmS","title":"Engine air gap installation","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/engine-air-gap-installation","siteSpaceId":"sitesp_3eeMj","description":"Install an offline engine for Cortex XSOAR 8.10 On-prem on RHEL 8.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"TaJVyHTqT9JiFiF1G3qf","title":"Docker","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker","siteSpaceId":"sitesp_3eeMj","description":"Configure Docker installation, security, and troubleshooting for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"OerJ0RjBWgX8ww73XAmi","title":"Install Docker","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker","siteSpaceId":"sitesp_3eeMj","description":"Install Docker for Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"YwiqNtSDn7SgiMVfwH9a","title":"Install Docker distribution for Red Hat on an engine server","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker/install-docker-distribution-for-red-hat-on-an-engine-server","siteSpaceId":"sitesp_3eeMj","description":"Install Docker for Red Hat on a Cortex XSOAR 8.10 On-prem engine server.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Install Docker"}]},{"id":"p4mCL1y3QmP0hSHVYibF","title":"Docker image security","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker/docker-image-security","siteSpaceId":"sitesp_3eeMj","description":"Configure Docker image security for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Install Docker"}]},{"id":"CouOcebl7RyIgEtLmwjR","title":"Use the Cortex XSOAR Container Registry","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_3eeMj","description":"Use the Cortex XSOAR 8.10 On-prem Container Registry.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Install Docker"}]},{"id":"KYjK8bm5mN2H2LAUrtZy","title":"Docker FAQs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker/docker-faqs","siteSpaceId":"sitesp_3eeMj","description":"Find Docker answers for Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Install Docker"}]},{"id":"jHGeQHUMZkzOlUBi8oIZ","title":"Troubleshoot Docker issues","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker/troubleshoot-docker-issues","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot Docker issues in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Install Docker"}]},{"id":"rUIPNnETA64ZjibtIIRO","title":"Configure Docker pull rate limit","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_3eeMj","description":"Configure Docker pull rate limits for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Install Docker"}]},{"id":"cu8kpAg8bXFojJKLDp5d","title":"Change the Docker installation folder","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/install-docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_3eeMj","description":"Change the Docker installation folder for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"},{"label":"Install Docker"}]},{"id":"dBZTTdHSTKBuVoyBQO8e","title":"Configure Docker integrations to trust custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/configure-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_3eeMj","description":"Configure Docker integrations to trust custom certificates in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"xqINfNh0PmU3k3vZ3Q6e","title":"Docker hardening guide","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/docker/docker-hardening-guide","siteSpaceId":"sitesp_3eeMj","description":"Harden Docker for Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Docker"}]},{"id":"WvMMrr15nzcob1gvEfUE","title":"Podman","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/podman","siteSpaceId":"sitesp_3eeMj","description":"Run Podman containers for Cortex XSOAR 8.10 On-prem engines on RHEL 8.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"}]},{"id":"cP69laKaCI4jsLzgkkZa","title":"Install Podman","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/podman/install-podman","siteSpaceId":"sitesp_3eeMj","description":"Install Podman for Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"8D7YToYJQVrm5UhAgFoR","title":"Change container storage directory","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/podman/change-container-storage-directory","siteSpaceId":"sitesp_3eeMj","description":"Change the container storage directory for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"cVu5ub6U7Jk1OqXgKoOA","title":"Migrate From Docker to Podman","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_3eeMj","description":"Migrate from Docker to Podman for Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"MzFHvrRrQxxsUq6J6OMI","title":"Troubleshoot Podman","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/install-an-engine/podman/troubleshoot-podman","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot Podman for Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Install an engine"},{"label":"Podman"}]},{"id":"jLMO4vzVt39O9ttOBFWU","title":"Manage engines","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, manage engines and load-balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"cjTxB7vQtHHq3SqmMTLg","title":"Upgrade an engine","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/upgrade-an-engine","siteSpaceId":"sitesp_3eeMj","description":"Upgrade a Cortex XSOAR 8.10 On-prem engine from the tenant or remote machine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"LrqUyzpfJtQPImI7bZGA","title":"Remove an engine","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_3eeMj","description":"Remove a Cortex XSOAR 8.10 On-prem engine using the relevant operating system command.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"XQg4WXrsr8h5xqok4EUa","title":"Configure engines","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure engines with d1.conf or the UI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"M71V6ZQSmQV8P6MFlrIa","title":"Configure the engine to use a web proxy","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_3eeMj","description":"Configure a Cortex XSOAR 8.10 On-prem engine to use a web proxy.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"6faPx9DHqCtFRrOIkcBW","title":"Configure the engine to call the server without using a proxy","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_3eeMj","description":"Configure a Cortex XSOAR 8.10 On-prem engine to call the server without a proxy.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Configure engines"}]},{"id":"CghhQ6AT89BftbQAkROZ","title":"Use NGINX as a reverse proxy","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy/use-nginx-as-a-reverse-proxy","siteSpaceId":"sitesp_3eeMj","description":"Use NGINX as a reverse proxy for Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"},{"label":"Configure engines"},{"label":"Configure the engine to call the server without using a proxy"}]},{"id":"iCgWTF5kjCJiArJuZXx7","title":"Configure an engine to use custom certificates","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_3eeMj","description":"Configure custom certificates for a Cortex XSOAR 8.10 On-prem engine.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"EW86ZH3ieWtmTrF31O3m","title":"Use an engine in an integration","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, use engines to fetch alerts and run integration commands.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"Q1dwRkFVf20JwCWDq4cd","title":"Run a script using an engine","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, run scripts using engines and load-balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"nXeVHf4Yp4Lm8ZQEHsLn","title":"Troubleshoot engines","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/troubleshoot-engines","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot Cortex XSOAR 8.10 On-prem engines using logs and errors.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"lBtE729L6IHpzqAIGgaK","title":"Troubleshoot integrations running on engines","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot integrations running on Cortex XSOAR 8.10 On-prem engines.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Engines"}]},{"id":"UWcrRfByzFhpw2gKA4pC","title":"Remote Repository Management","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/remote-repository-management","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure and manage remote repositories for dev and production.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"iK234q0FcD3n0UzOfmaY","title":"Content management in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/remote-repository-management/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Learn how remote repositories manage content in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"62xSwzZQ5YIWislggnyv","title":"Set up a private remote repository","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/remote-repository-management/set-up-a-private-remote-repository","siteSpaceId":"sitesp_3eeMj","description":"Set up a private remote repository in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"ygeANy1Jw1i3Q0XSHFoY","title":"How to set up a private remote repository","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/remote-repository-management/set-up-a-private-remote-repository/how-to-set-up-a-private-remote-repository","siteSpaceId":"sitesp_3eeMj","description":"Learn how to set up a private remote repository in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"},{"label":"Set up a private remote repository"}]},{"id":"KHGDaPLnAZpIsc9aaIPV","title":"Push content from a development tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/remote-repository-management/push-content-from-a-development-tenant","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, push development content to a remote repository.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"0iQjp9Iuj9CVTtNbcdJX","title":"Install content on a production tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/remote-repository-management/install-content-on-a-production-tenant","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, install remote repository content on a production tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"nlAgcaROvKmDNeSIxrTK","title":"Remote repository troubleshooting","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/remote-repository-management/remote-repository-troubleshooting","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot remote repository content management in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Remote Repository Management"}]},{"id":"13dzUiB3eOm9WHrCXfXr","title":"Users and Roles Management","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, manage users, roles, groups, and authentication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"WASrU3OCEoBg0Ph12mVb","title":"Users and roles in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/users-and-roles-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure roles, groups, authentication, and users.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"I87mcE9BgEoxBKN7Hcxx","title":"Roles management","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/roles-management","siteSpaceId":"sitesp_3eeMj","description":"Configure roles in a Cortex XSOAR 8.10 On-prem tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"4YzrUqSUaeni9XoVPwXG","title":"Role-based permissions","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/roles-management/role-based-permissions","siteSpaceId":"sitesp_3eeMj","description":"Review role-based permissions in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"uqCOdqGFLcX66JQJAuFq","title":"Manage roles in the Cortex XSOAR tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/roles-management/manage-roles-in-the-cortex-xsoar-tenant","siteSpaceId":"sitesp_3eeMj","description":"Manage roles in a Cortex XSOAR 8.10 On-prem tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Roles management"}]},{"id":"dOJVqH2qiJsPQN61DWEi","title":"User group management","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/user-group-management","siteSpaceId":"sitesp_3eeMj","description":"Create user groups and assign roles and users in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"WvsBV4uOvTnbyCcinVVB","title":"Set up authentication","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/set-up-authentication","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure local or SSO authentication.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"R3R7FrYzYZin9yOgrzvy","title":"Create users in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/create-users-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, create users with username and password access.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"Hi3N5xGi5AsyXaqIvx7k","title":"Authenticate users using SSO","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_3eeMj","description":"Set up SSO authentication in a Cortex XSOAR 8.10 On-prem tenant.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"FhDJLIafVh4SGydHG6LJ","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_3eeMj","description":"Set up Okta SAML 2.0 authentication for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"qbnk1551vIAAVIRhxXC9","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_3eeMj","description":"Set up Microsoft Entra ID SAML 2.0 authentication for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"},{"label":"Set up authentication"}]},{"id":"epG6BzD44CWx8trotLSo","title":"User management","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/user-management","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, invite users and assign roles and groups.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"ogIU1oxip4qhb0m2auty","title":"Configure a password policy","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/users-and-roles-management/configure-a-password-policy","siteSpaceId":"sitesp_3eeMj","description":"Configure and edit the password policy in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Users and Roles Management"}]},{"id":"wdDe274PvoBTmEFtWMoF","title":"Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, use Marketplace content packs for your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"le0yq10Slicj4aT8vD66","title":"Cortex Marketplace","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/cortex-marketplace","siteSpaceId":"sitesp_3eeMj","description":"Search Cortex Marketplace content for Cortex XSOAR 8.10 On-prem use cases and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"PQm88QKDRembfIjyLr9B","title":"Content packs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/content-packs","siteSpaceId":"sitesp_3eeMj","description":"Download Marketplace content packs for your Cortex XSOAR 8.10 On-prem use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"2wC8uTt1stCCuOLEZRem","title":"Content Pack Support Types","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/content-pack-support-types","siteSpaceId":"sitesp_3eeMj","description":"Learn content pack support types for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"CDDmHls7MSH4aQiGaymb","title":"Manage content packs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/manage-content-packs","siteSpaceId":"sitesp_3eeMj","description":"Manage content packs in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"3u8XZUtVIqhnpBcz1G2h","title":"Set up your use case with the Deployment Wizard","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, use the Deployment Wizard to adopt your use case.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"eonqAuKOKAaqC3kizDlS","title":"Marketplace FAQs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_3eeMj","description":"Find Marketplace content answers for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"4XqOKg8elRuIHVrJzjST","title":"Content pack update notifications","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_3eeMj","description":"Enable content pack update notifications in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"2FAh64m75wxj2hTNHNMd","title":"Customize content pack notifications","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_3eeMj","description":"Customize content pack update notifications in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content pack update notifications"}]},{"id":"zAKVdSvEOBjz3V35WvHx","title":"Content pack contributions","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_3eeMj","description":"Create content packs for the Cortex XSOAR 8.10 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"sOty7rhE2LVLPUDV47rU","title":"Create a content pack","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_3eeMj","description":"Create and submit a content pack for Cortex XSOAR 8.10 On-prem Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"NQ039Zs3EZxAOYf5jYyN","title":"Resubmit a content pack","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_3eeMj","description":"Resubmit an updated content pack from Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content pack contributions"}]},{"id":"ihCkHx1Y5lcfxWIbpcml","title":"Integrations","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure integrations, manage credentials, run commands, and troubleshoot.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"73jGzDJS17WhKXtqZEx0","title":"Integration use cases","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/integration-use-cases","siteSpaceId":"sitesp_3eeMj","description":"Explore common integration use cases in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"oKKjpL5vODJcWMqy6bQA","title":"Configure integrations","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/configure-integrations","siteSpaceId":"sitesp_3eeMj","description":"Configure or create an integration in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"zWu4knbpNalhTrbIsypZ","title":"Change the Docker image in an integration or script","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script","siteSpaceId":"sitesp_3eeMj","description":"Change Docker images for integrations and scripts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"Fqo0nCYSc6v5Ww8hDNAL","title":"Connect your engine to an image registry","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/connect-your-engine-to-an-image-registry","siteSpaceId":"sitesp_3eeMj","description":"Connect an engine to an authenticated image registry in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"H4MzMPWoiYkM008OmpMk","title":"Pull images from a private image registry","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/change-the-docker-image-in-an-integration-or-script/pull-images-from-a-private-image-registry","siteSpaceId":"sitesp_3eeMj","description":"Pull images from a private registry for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Change the Docker image in an integration or script"}]},{"id":"Co6ihirKTPwfsup6C90W","title":"Manage credentials","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/manage-credentials","siteSpaceId":"sitesp_3eeMj","description":"Manage integration credentials in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"kwT3S2Cq3yC50Xpa8T6T","title":"Configure an external credentials vault","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/manage-credentials/configure-an-external-credentials-vault","siteSpaceId":"sitesp_3eeMj","description":"Configure an external credentials vault in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Manage credentials"}]},{"id":"IAOFY5tljThz90QqEBbd","title":"Add an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/add-an-integration-instance","siteSpaceId":"sitesp_3eeMj","description":"Set up an integration instance in Cortex XSOAR 8.10 On-prem and ingest incidents or indicators.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"NUscVOlNV5B6q3U1Tf09","title":"Fetch incidents from an integration instance","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/add-an-integration-instance/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_3eeMj","description":"Fetch incidents from an integration instance into Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"j8ysy90HqR664tIqj2lx","title":"Receive notifications on an incident fetch error","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/add-an-integration-instance/receive-notifications-on-an-incident-fetch-error","siteSpaceId":"sitesp_3eeMj","description":"Configure notifications for integration fetch errors in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"2d0CzGnnvXsftj44mZbS","title":"Configure integration permissions","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/add-an-integration-instance/configure-integration-permissions","siteSpaceId":"sitesp_3eeMj","description":"Restrict integration commands by role in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"Jau1npcifjI2cIUT3j8n","title":"Troubleshoot integrations","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/add-an-integration-instance/troubleshoot-integrations","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot integrations in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"},{"label":"Add an integration instance"}]},{"id":"vgo9lVdDpeKefuzjZDLL","title":"Integration commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/integration-commands-in-the-cli","siteSpaceId":"sitesp_3eeMj","description":"Run integration commands from the Cortex XSOAR 8.10 On-prem CLI.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"hHWsQiWwXMBzHnA8zRDV","title":"Forward requests to long-running integrations","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/integrations/forward-requests-to-long-running-integrations","siteSpaceId":"sitesp_3eeMj","description":"Forward requests to long-running integrations in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Integrations"}]},{"id":"oiKvG2D7z6jSVrJpQqmO","title":"Incident configuration","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, customize incidents, rules, workflows, and exports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"UKvAAc8VbmUbLxRj2Oa6","title":"Incident lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/incident-lifecycle","siteSpaceId":"sitesp_3eeMj","description":"Learn the incident lifecycle in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"TJZYNMsClga6b9ULd7tY","title":"Incident Customization","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/incident-customization","siteSpaceId":"sitesp_3eeMj","description":"Create and edit incident types, fields, and layouts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"maf16FLL14ez54sPJDcB","title":"Use incident context data","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/incident-customization/use-incident-context-data","siteSpaceId":"sitesp_3eeMj","description":"Use context data to populate and customize incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"2A59bgDmfVcQhJiUugP3","title":"Create an incident type","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_3eeMj","description":"Create and edit incident types in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"yzNGkbcB3gAcZPYXLoMq","title":"Create an incident field","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/incident-customization/create-an-incident-field","siteSpaceId":"sitesp_3eeMj","description":"Create custom incident fields in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"bqzGguHcSW2bUesKKEvW","title":"Incident layout customization","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/incident-customization/incident-layout-customization","siteSpaceId":"sitesp_3eeMj","description":"Customize incident layouts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Incident Customization"}]},{"id":"O2NhnReuELmDjqGqrob4","title":"Classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/classification-and-mapping","siteSpaceId":"sitesp_3eeMj","description":"Classify and map integration instances in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"EnAkMdtYvISNekAD2Ezh","title":"Create an incident classifier","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-classifier","siteSpaceId":"sitesp_3eeMj","description":"Create incident classifiers for integration ingestion in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"gjLg3YvYjQ4NJMulp2GT","title":"Create an incident mapper","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/classification-and-mapping/create-an-incident-mapper","siteSpaceId":"sitesp_3eeMj","description":"Create and apply incident mappers in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Classification and mapping"}]},{"id":"lTAxWhbonPCayvaQJLP9","title":"Set up incident mirroring","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/set-up-incident-mirroring","siteSpaceId":"sitesp_3eeMj","description":"Set up incident mirroring with integrations in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"0juJuCBWh9ajNhL92zrN","title":"Incident deduplication in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/incident-deduplication-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Deduplicate incidents using rules or playbooks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"mTwKwNqs6Q4jZwXhj0sj","title":"Pre-process rules","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/pre-process-rules","siteSpaceId":"sitesp_3eeMj","description":"Create pre-process rules for incoming incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"scADy5TfiSJwqZm9uKkx","title":"Use post-processing scripts in an incident","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/use-post-processing-scripts-in-an-incident","siteSpaceId":"sitesp_3eeMj","description":"Use post-processing scripts for incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"iXc4F7jRyQDLPEXsyTeJ","title":"Create a post-processing script","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/use-post-processing-scripts-in-an-incident/create-a-post-processing-script","siteSpaceId":"sitesp_3eeMj","description":"Create post-processing scripts for incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Use post-processing scripts in an incident"}]},{"id":"gcEVBybbljC2siZlchDR","title":"Customize incident close reasons","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/customize-incident-close-reasons","siteSpaceId":"sitesp_3eeMj","description":"Customize incident close reasons in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"R0Xys9GApqvk2FPvPhVj","title":"Configure inline value fields","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/configure-inline-value-fields","siteSpaceId":"sitesp_3eeMj","description":"Configure inline value fields in Cortex XSOAR 8.10 On-prem incident layouts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"oZBYD8JEe2edaWBwDvRO","title":"Configure incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete","siteSpaceId":"sitesp_3eeMj","description":"Configure incident export and deletion in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"52iT8czWsjj3edouK9ow","title":"Configure access to external storage","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/configure-access-to-external-storage","siteSpaceId":"sitesp_3eeMj","description":"Configure external storage access for Cortex XSOAR 8.10 On-prem incident exports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"E2eGJDR1rcNA1VF8XfZl","title":"Schedule incident export and delete","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/configure-incident-export-and-delete/schedule-incident-export-and-delete","siteSpaceId":"sitesp_3eeMj","description":"Schedule incident exports and deletions to external storage in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"},{"label":"Configure incident export and delete"}]},{"id":"vuVLM8zLbA9ATBSA9v4X","title":"Export an incident to CSV using the UTF8-BOM format","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_3eeMj","description":"Export incidents to UTF8-BOM CSV in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"dk48gb6MsY6QJbRfsZf3","title":"Amazon S3 configuration example","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/incident-configuration/amazon-s3-configuration-example","siteSpaceId":"sitesp_3eeMj","description":"Configure Amazon S3 storage for Cortex XSOAR 8.10 On-prem backups and exports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Incident configuration"}]},{"id":"eSHOtuOS7Kmx0ht2KqUu","title":"Playbooks","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, use playbooks to automate security workflows.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"47JhYdXdQw6ZcPYzyGtw","title":"What is a playbook?","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/what-is-a-playbook","siteSpaceId":"sitesp_3eeMj","description":"Learn how playbooks automate security processes in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"FcuRAQNvExpzPW3buSBw","title":"Playbook development checklist","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/playbook-development-checklist","siteSpaceId":"sitesp_3eeMj","description":"Follow the playbook development flow in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"eVF72SJzW02BXiZIGB2r","title":"Plan your playbook","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/plan-your-playbook","siteSpaceId":"sitesp_3eeMj","description":"Plan a playbook for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"uTzX4NXGXs3daM3JPe93","title":"Develop your playbook","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook","siteSpaceId":"sitesp_3eeMj","description":"Create or customize playbooks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"eqsUcpDDGIwalq3cxDEt","title":"Task 1. Choose from out-of-the-box playbooks or customize your own","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook/task-1.-choose-from-out-of-the-box-playbooks-or-customize-your-own","siteSpaceId":"sitesp_3eeMj","description":"Choose or customize a playbook in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"PUYUpT0uIht628FyH0l8","title":"Task 2. Configure playbook settings","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook/task-2.-configure-playbook-settings","siteSpaceId":"sitesp_3eeMj","description":"Configure playbook settings in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"DKs8L5p73xl49ozLZdFT","title":"Task 3. Add tasks","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook/task-3.-add-tasks","siteSpaceId":"sitesp_3eeMj","description":"Add tasks to a playbook in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"S1eaL9ERqrKz1cMqOIOY","title":"Task 4. Add custom playbook features","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook/task-4.-add-custom-playbook-features","siteSpaceId":"sitesp_3eeMj","description":"Add custom playbook features in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"oKwbYmVTmEFBGEwBOkW9","title":"Task 5. Test and debug the playbook","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook/task-5.-test-and-debug-the-playbook","siteSpaceId":"sitesp_3eeMj","description":"Test and debug playbooks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"LMlUptUAca4UopIowM7O","title":"Task 6. Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook/task-6.-manage-playbook-content","siteSpaceId":"sitesp_3eeMj","description":"Manage playbook content in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"uwJHEDJ5wfhylzXyXMDf","title":"Customize a playbook for a phishing use case example","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/develop-your-playbook/customize-a-playbook-for-a-phishing-use-case-example","siteSpaceId":"sitesp_3eeMj","description":"Customize a phishing response playbook in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Develop your playbook"}]},{"id":"0y7dzrmPmQIoco8tfYcK","title":"Customize your playbook","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, customize playbooks with indicators, context, fields, and polling.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"SJi1LIwwILsBy3Tfe37A","title":"Customize the SOC name","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook/customize-the-soc-name","siteSpaceId":"sitesp_3eeMj","description":"Customize the SOC name for communication tasks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"sSE32g3Oya7wrnqQtgEo","title":"Configure a sub-playbook","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook/configure-a-sub-playbook","siteSpaceId":"sitesp_3eeMj","description":"Configure and loop sub-playbooks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"ZVMviuAyToan1bgZ6p0N","title":"Filter and transform data","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook/filter-and-transform-data","siteSpaceId":"sitesp_3eeMj","description":"Filter and transform data in Cortex XSOAR 8.10 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"IliUpNuPFP8IIq83804r","title":"Extract indicators","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook/extract-indicators","siteSpaceId":"sitesp_3eeMj","description":"Extract and enrich indicators in Cortex XSOAR 8.10 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"qRPJ0NVxv4PiDNX7xMDd","title":"Extend context","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook/extend-context","siteSpaceId":"sitesp_3eeMj","description":"Extend context with integration and command data in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"EypGXOzf1kz2iql2NdYj","title":"Set and update incident fields","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook/set-and-update-incident-fields","siteSpaceId":"sitesp_3eeMj","description":"Set and update incident fields in Cortex XSOAR 8.10 On-prem playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"VJCT2qqHXcmh7nc19LEP","title":"Playbook polling","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/customize-your-playbook/playbook-polling","siteSpaceId":"sitesp_3eeMj","description":"Use playbook polling in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Customize your playbook"}]},{"id":"Gpbepvv8PwH9tJ2Es7Tw","title":"Scripts","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/scripts","siteSpaceId":"sitesp_3eeMj","description":"Create and manage scripts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"otmrtaWROt6ua4JY3xZw","title":"Configure existing scripts","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/scripts/common-scripts","siteSpaceId":"sitesp_3eeMj","description":"Configure existing scripts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"3iyytP9Sfrz13jKHA3WL","title":"Create a script","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/scripts/create-a-script","siteSpaceId":"sitesp_3eeMj","description":"Create or edit scripts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Scripts"}]},{"id":"ifYjScVuTpm8bjxgNe1F","title":"Debug your playbook","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/debug-your-playbook","siteSpaceId":"sitesp_3eeMj","description":"Debug playbooks using breakpoints and overrides in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"b2B1jv2g5SfKT5S1T2sn","title":"Troubleshoot playbook performance","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/debug-your-playbook/troubleshoot-playbook-performance","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot playbook performance in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Debug your playbook"}]},{"id":"mxpU7o4AKJ6YDeNhQop6","title":"Manage playbook content","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/manage-playbook-content","siteSpaceId":"sitesp_3eeMj","description":"Manage playbook content with repositories or versions in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"nS1nrW2CKLnOTDszXbqw","title":"Best practices","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_3eeMj","description":"Follow playbook best practices in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"K6QrTT7o5ngdalHp5BQ4","title":"Lists","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/lists","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, create and manage lists for playbooks and scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"026gexbVoSf03P6PBlWH","title":"What is a list?","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/lists/what-is-a-list","siteSpaceId":"sitesp_3eeMj","description":"Learn how lists store data in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"hRhfVBQVOXgmBTW3TEpl","title":"Use cases","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/lists/what-is-a-list/use-cases","siteSpaceId":"sitesp_3eeMj","description":"Explore list use cases in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"},{"label":"What is a list?"}]},{"id":"KKyx822Go1ySJD647qol","title":"Create a list","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_3eeMj","description":"Create and manage lists in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"wmy71xG5ShmstaR6aglu","title":"List commands","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/lists/list-commands","siteSpaceId":"sitesp_3eeMj","description":"Use list commands in Cortex XSOAR 8.10 On-prem CLI, playbooks, and scripts.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"7XKxqzqQgBbTR9DHvUIM","title":"Use cases: JSON lists","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/lists/use-cases-json-lists","siteSpaceId":"sitesp_3eeMj","description":"Manage JSON lists for automation and playbooks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"mcqMYOzN4yumwDKy2Mig","title":"Transform a list into an array","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_3eeMj","description":"Transform a list into an array in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"2X83ExaCgKpZUAbckYsX","title":"Jobs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, create jobs that automatically run playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"2LnV7s9YY0HmHgCZEUm5","title":"Manage jobs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/jobs/manage-jobs","siteSpaceId":"sitesp_3eeMj","description":"Manage time-triggered and event-triggered jobs in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"4D1YZuoHfkg4lwZSxarj","title":"Create a time triggered job","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_3eeMj","description":"Create time-triggered jobs that run playbooks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"XNcJOyOoSSuME5Uq3JD0","title":"Create a job triggered by a delta in a feed","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-a-feed","siteSpaceId":"sitesp_3eeMj","description":"Create feed-triggered jobs in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"9QHuE62TTPF3ZCaoJ8GS","title":"Create jobs to process indicators example","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/jobs/create-jobs-to-process-indicators-example","siteSpaceId":"sitesp_3eeMj","description":"Process and send indicators to a SIEM with jobs in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"SLJIjX149Xw3SlKzGvni","title":"SLAs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, configure SLAs and timers to track incident response.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"G2gH1zL4RvNYpXXiAT8Q","title":"SLAs in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/slas-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Use SLAs and timer fields to track incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"aV0ETdhlIEjXayKM2F0T","title":"Configure an SLA in an incident type","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/configure-an-sla-in-an-incident-type","siteSpaceId":"sitesp_3eeMj","description":"Configure SLA due dates for incident types in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"JbD7N1NyU5J9oNdg7qnt","title":"Configure Timer/SLA fields","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/configure-timersla-fields","siteSpaceId":"sitesp_3eeMj","description":"Configure Timer/SLA fields and breach scripts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"hyMLHIGE2lASV6iyAYBi","title":"Configure a playbook to run Timers/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/configure-a-playbook-to-run-timersslas","siteSpaceId":"sitesp_3eeMj","description":"Configure playbooks to run SLA timers in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"XTjBS1eeRmNtRYZuGw2s","title":"Automate changes to incident fields using SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/automate-changes-to-incident-fields-using-sla-scripts","siteSpaceId":"sitesp_3eeMj","description":"Automate incident field changes with SLA scripts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"LUR2aKHLvcmn6sConidb","title":"Create SLA scripts","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/create-sla-scripts","siteSpaceId":"sitesp_3eeMj","description":"Create SLA breach scripts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"nxPoxawx7LH1gyKgtXZO","title":"Use SLA and Timer field commands manually in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/use-sla-and-timer-field-commands-manually-in-the-cli","siteSpaceId":"sitesp_3eeMj","description":"Manage SLA and Timer fields with CLI commands in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"3YKJgKwU2dIsTkAtZYYR","title":"Configure the Global Risk Threshold","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_3eeMj","description":"Configure global SLA risk thresholds in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"LNxOM0SnsBuNpz4g3KDa","title":"Search incidents for Timer/SLAs","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/slas/search-incidents-for-timerslas","siteSpaceId":"sitesp_3eeMj","description":"Search incidents by SLA and timer fields in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"SLAs"}]},{"id":"5KrtsNOW7n2piz45oflk","title":"Dashboards and Reports","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports","siteSpaceId":"sitesp_3eeMj","description":"In Cortex XSOAR 8.10 On-prem, create and manage dashboards, reports, and widgets.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"}]},{"id":"5W2L6BY1hODZrJAhNP9u","title":"Dashboards","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/dashboards","siteSpaceId":"sitesp_3eeMj","description":"Create and manage dashboards in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"}]},{"id":"udXs31gTHzZOwoTcZrtE","title":"Default dashboards","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/dashboards/default-dashboards","siteSpaceId":"sitesp_3eeMj","description":"Configure default dashboards in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"api2jtCzWtxi3KMlsYbE","title":"Dashboard actions","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/dashboards/dashboard-actions","siteSpaceId":"sitesp_3eeMj","description":"Create, import, share, and manage dashboards in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"mQD5QIeM3uxzXiLLvR6q","title":"Manage dashboards","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/dashboards/manage-dashboards","siteSpaceId":"sitesp_3eeMj","description":"Create, customize, and share dashboards in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Dashboards"}]},{"id":"VyGS9WB7jZN3uiMWZU2g","title":"Reports","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/reports","siteSpaceId":"sitesp_3eeMj","description":"Create, schedule, and manage reports in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"}]},{"id":"X99qrimAS64THOJ9VjEo","title":"Manage reports","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/reports/manage-reports","siteSpaceId":"sitesp_3eeMj","description":"Create, customize, schedule, and generate reports in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"H2MR6nQxHXE6zc1ymFe6","title":"Configure the timezone in a report","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/reports/configure-the-timezone-in-a-report","siteSpaceId":"sitesp_3eeMj","description":"Configure report time zones and time formats in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"frY89Eizs9GFbL0uVtEu","title":"Troubleshoot script timeout for reports","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-script-timeout-for-reports","siteSpaceId":"sitesp_3eeMj","description":"Configure report script timeouts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"IgLUim9JYtFkq5m9ALtY","title":"Troubleshoot overlapping text and extra pages","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/reports/troubleshoot-overlapping-text-and-extra-pages","siteSpaceId":"sitesp_3eeMj","description":"Fix overlapping text and extra pages in Cortex XSOAR 8.10 On-prem PDF reports.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Reports"}]},{"id":"x8344HX3o5V71AzM8WZG","title":"Widgets","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets","siteSpaceId":"sitesp_3eeMj","description":"Create and manage dashboard and report widgets in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"}]},{"id":"GBXNhKvfAni9uzrEbtHs","title":"Widget customization","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/widget-customization","siteSpaceId":"sitesp_3eeMj","description":"Create and customize widgets for dashboards and reports in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"tilrpZiIFpH2RhqiFAzX","title":"Create a widget using the widget builder","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_3eeMj","description":"Create widgets with the Widget Builder in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"l8lEMr2ShKeR0TDhfBs5","title":"Create a custom widget using a JSON file","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_3eeMj","description":"Create custom JSON widgets in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"nrB8vHktKgJmIBO7Ntea","title":"Create a custom widget using a script","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-custom-widget-using-a-script","siteSpaceId":"sitesp_3eeMj","description":"Create custom script-based widgets in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"WPXLpxyeVpI1Z4gr5HpJ","title":"Create a widget from an incident","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-incident","siteSpaceId":"sitesp_3eeMj","description":"Create widgets from incident searches in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"QXm2Fzn3Cff2MfAVenqc","title":"Create a widget from an indicator","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/create-a-widget-from-an-indicator","siteSpaceId":"sitesp_3eeMj","description":"Create widgets from indicators in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"bvFasaKpwMAn9b60o2oY","title":"Edit a widget","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/edit-a-widget","siteSpaceId":"sitesp_3eeMj","description":"Edit widgets in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"uqTMHAFj764TFT8j6Q2q","title":"Add a widget in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/add-a-widget-in-the-war-room","siteSpaceId":"sitesp_3eeMj","description":"Add script-based War Room widgets in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"eiknaNlsNUB6sVxU8GNP","title":"Saved By Dbot (ROI) Widget","pathname":"/cortex-xsoar-8-on-prem/8.10/configure-cortex-xsoar/dashboards-and-reports/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_3eeMj","description":"Customize the Saved by Dbot ROI widget in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Configure Cortex XSOAR"},{"label":"Dashboards and Reports"},{"label":"Widgets"}]},{"id":"vSKqCq72yOWXDeyZ7MsN","title":"Incidents and indicators investigation","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation","siteSpaceId":"sitesp_3eeMj","description":"Investigate incidents and indicators in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"}]},{"id":"oMkl054GTxGVNehTxOhN","title":"Incidents","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incidents","siteSpaceId":"sitesp_3eeMj","description":"Investigate and remediate security incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"8fJLNCGdwXDo7a2u4t4O","title":"Incident management","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management","siteSpaceId":"sitesp_3eeMj","description":"View and manage incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"cWZd7PsRXpI4xGT2KUBk","title":"Search for incidents","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/search-for-incidents","siteSpaceId":"sitesp_3eeMj","description":"Search and save incident queries in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"9l56qbpDCsw7UefR05n5","title":"Create an incident","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/create-an-incident","siteSpaceId":"sitesp_3eeMj","description":"Create, ingest, or import incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"9Hj0r1BUVDPDsz4jtrfN","title":"Export incidents","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents","siteSpaceId":"sitesp_3eeMj","description":"Export incidents on demand or on a schedule in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"}]},{"id":"XyO9tVHhHTKncq1Os7RT","title":"Export incidents from the Incidents table","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-from-the-incidents-table","siteSpaceId":"sitesp_3eeMj","description":"Export incidents from the Incidents table as Excel, CSV, or JSON files in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"QCcDTIgCVcoVihUafuDL","title":"Export incidents on demand","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/incident-management/export-incidents/export-incidents-on-demand","siteSpaceId":"sitesp_3eeMj","description":"Export incidents on demand to external storage in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Incident management"},{"label":"Export incidents"}]},{"id":"UsRAImmAnfP4eT6LbtUC","title":"Investigate an incident","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident","siteSpaceId":"sitesp_3eeMj","description":"Investigate incidents and take remediation steps in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"8OhcP7pOFfnVuKvVDOkI","title":"Retain incidents","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/retain-incidents","siteSpaceId":"sitesp_3eeMj","description":"Retain incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"nFLSCphEuOIfcp5t6TaW","title":"Limit access to investigations using access control","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/limit-access-to-investigations-using-access-control","siteSpaceId":"sitesp_3eeMj","description":"Limit access to incidents and investigations in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"KoFFeb8I2XkMfRiGbbkC","title":"Incident Tasks","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/incident-tasks","siteSpaceId":"sitesp_3eeMj","description":"Manage playbook and to-do incident tasks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"NZENYuEWqWoDV1fKjXKJ","title":"Use the War Room in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-war-room-in-an-investigation","siteSpaceId":"sitesp_3eeMj","description":"Use the War Room for real-time investigations in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"u1hDEiz2YQ0v8XtLA2pq","title":"Schedule a command in the War Room","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/schedule-a-command-in-the-war-room","siteSpaceId":"sitesp_3eeMj","description":"Schedule War Room commands in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"HISTXBeJpvq43dqdUrYz","title":"Run commands in the CLI","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/run-commands-in-the-cli","siteSpaceId":"sitesp_3eeMj","description":"Run system, integration, and script commands in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"RzGfXdFJkUaopRATExSH","title":"Evidence Handling","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/evidence-handling","siteSpaceId":"sitesp_3eeMj","description":"Add and manage investigation evidence in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"F2rVny51JkhaZcpjWDMv","title":"Use the Work Plan in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/use-the-work-plan-in-an-investigation","siteSpaceId":"sitesp_3eeMj","description":"Monitor and manage incident playbook workflows in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"KxQQxQopRp08xpfta4DA","title":"Investigate an incident using the canvas","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_3eeMj","description":"Visually map incidents with the investigation canvas in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"4YwFq9Z9OEpa9hyAtCrO","title":"Link incidents","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/link-incidents","siteSpaceId":"sitesp_3eeMj","description":"Link incidents from the interface or CLI in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"Ccs3H1HJkdbXiwUp9xWE","title":"Create an incident summary report","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/investigate-an-incident/create-an-incident-summary-report","siteSpaceId":"sitesp_3eeMj","description":"Create incident summary reports in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Investigate an incident"}]},{"id":"gkIMX6xEbMhSEojqetTe","title":"Manage indicators","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators","siteSpaceId":"sitesp_3eeMj","description":"Create, manage, and search indicators in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"}]},{"id":"4sccB1lCz9oofNetCmMI","title":"Query indicators","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/query-indicators","siteSpaceId":"sitesp_3eeMj","description":"Query indicators in Cortex XSOAR 8.10 On-prem without a TIM license.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"Zk1p0EIC7JVSYav0I7Vt","title":"View indicator relationships in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/incidents-and-indicators-investigation/manage-indicators/view-indicator-relationships-in-an-investigation","siteSpaceId":"sitesp_3eeMj","description":"Create and investigate indicator relationships in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Incidents and indicators investigation"},{"label":"Manage indicators"}]},{"id":"tzwfgUvfOhnd5NiMTVU5","title":"Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management","siteSpaceId":"sitesp_3eeMj","description":"Manage threat intelligence, indicators, and TIM reports in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"}]},{"id":"gVXMnuHhE4n93qSTaiua","title":"Get started with Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management","siteSpaceId":"sitesp_3eeMj","description":"Get started with Threat Intel Management in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"aTawaKrS41o7ofEa2YNG","title":"Licenses","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/licenses","siteSpaceId":"sitesp_3eeMj","description":"Learn about Threat Intel Management licenses in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"dtz3llPQUuw23WoOUXJk","title":"What is Threat Intel Management?","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/what-is-threat-intel-management","siteSpaceId":"sitesp_3eeMj","description":"Learn about Threat Intel Management use cases in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"YkhCDNbYQYdu0t7TUvxC","title":"Threat Intel Management use cases","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/threat-intel-management-use-cases","siteSpaceId":"sitesp_3eeMj","description":"Explore Threat Intel Management use cases in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"6DiWqTSfsGSdwOpXbPHB","title":"Indicator concepts","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-concepts","siteSpaceId":"sitesp_3eeMj","description":"Learn core indicator concepts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"jLQiLU2fuSfm9J93WuP6","title":"Indicator lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/indicator-lifecycle","siteSpaceId":"sitesp_3eeMj","description":"Learn the indicator lifecycle in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"7wpvWlhTi49pMQzobjVQ","title":"Roles and responsibilities in Threat Intel Management","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/get-started-with-threat-intel-management/roles-and-responsibilities-in-threat-intel-management","siteSpaceId":"sitesp_3eeMj","description":"Learn Threat Intel Management roles in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Get started with Threat Intel Management"}]},{"id":"YqIxUJX603XKmSuDNZ2n","title":"Indicator configuration","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration","siteSpaceId":"sitesp_3eeMj","description":"Configure indicator types, fields, layouts, and enrichment in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"d36kMQZDRgXVBRfQT0Ne","title":"Customize indicator types, fields, and layouts","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/customize-indicator-types-fields-and-layouts","siteSpaceId":"sitesp_3eeMj","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"2y1MZPeWDGHVlAjTfo8f","title":"Indicator classification and mapping","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-classification-and-mapping","siteSpaceId":"sitesp_3eeMj","description":"Configure indicator classification and mapping in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"dALcI7cfPgMdFKZH21Os","title":"Indicator extraction","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/indicator-extraction","siteSpaceId":"sitesp_3eeMj","description":"Extract and enrich indicators in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"9BUsX8L8O4tNj0QHakDH","title":"Configure the indicator timeline","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-the-indicator-timeline","siteSpaceId":"sitesp_3eeMj","description":"Configure the indicator timeline in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"vrT8yB3C5iFgTmjpgioA","title":"Configure indicator expiration","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-indicator-expiration","siteSpaceId":"sitesp_3eeMj","description":"Configure indicator expiration in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"M2pDUyBDtQD5Na37zcDz","title":"Configure Threat Intel feed integrations","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intel-feed-integrations","siteSpaceId":"sitesp_3eeMj","description":"Configure Threat Intel feed integrations in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"mrztAEXSr0xxNOaFh7iR","title":"Exclude indicators from enrichment","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/exclude-indicators-from-enrichment","siteSpaceId":"sitesp_3eeMj","description":"Exclude indicators from enrichment in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"QvXjKuY6EC18PGi5qubv","title":"Configure Threat Intelligence Management playbooks to process indicators","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-configuration/configure-threat-intelligence-management-playbooks-to-process-indicators","siteSpaceId":"sitesp_3eeMj","description":"Configure Threat Intel Management playbooks in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator configuration"}]},{"id":"D5LQfr7KF79s0y8Rqm78","title":"Export indicators","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/export-indicators","siteSpaceId":"sitesp_3eeMj","description":"Export indicators and configure external dynamic lists in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"AvDRYW7XEyD9qtpHcO3J","title":"Customize Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports","siteSpaceId":"sitesp_3eeMj","description":"Create and customize Threat Intel Reports in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"IdvVIUgZnztKn8AQnaLm","title":"Create a Threat Intel Report type","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-type","siteSpaceId":"sitesp_3eeMj","description":"Create or detach Threat Intel Report types in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"AGShIZNcZY0Jo0O4cXjK","title":"Create a Threat Intel Report field","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-field","siteSpaceId":"sitesp_3eeMj","description":"Create Threat Intel Report fields in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"hCZUcxL6GoTJctPOzbY7","title":"Create a Threat Intel Report layout","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/customize-threat-intel-reports/create-a-threat-intel-report-layout","siteSpaceId":"sitesp_3eeMj","description":"Configure Threat Intel Report layouts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Customize Threat Intel Reports"}]},{"id":"10YPFBrMPjAa2j9uY7Ju","title":"Indicator management","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-management","siteSpaceId":"sitesp_3eeMj","description":"Create, manage, and search indicators in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"GGl5yLawNuKhHJUeKwf5","title":"Indicator investigation","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation","siteSpaceId":"sitesp_3eeMj","description":"Investigate indicators and relationships in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"BQ4zBdc8bgcCR9SFKkEj","title":"Indicator verdict","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/indicator-verdict","siteSpaceId":"sitesp_3eeMj","description":"Configure indicator verdicts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"rXEabdZg2DvTzni9bK9K","title":"Extract and enrich an indicator","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/extract-and-enrich-an-indicator","siteSpaceId":"sitesp_3eeMj","description":"Extract and enrich an indicator in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"fWec3a1GIjif9bv6Slw1","title":"Expire an indicator","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/expire-an-indicator","siteSpaceId":"sitesp_3eeMj","description":"Expire indicators from the CLI or UI in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"V5BFV484nIhlAIkBmBfY","title":"Manage indicator relationships","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/manage-indicator-relationships","siteSpaceId":"sitesp_3eeMj","description":"Create and manage indicator relationships in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"P6XB4yXPBbVEDJyD85cH","title":"Delete and exclude indicators","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/indicator-investigation/delete-and-exclude-indicators","siteSpaceId":"sitesp_3eeMj","description":"Delete and exclude indicators in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"},{"label":"Indicator investigation"}]},{"id":"phk2vFwEzu5BsrxeNYz8","title":"Manage Threat Intel Reports","pathname":"/cortex-xsoar-8-on-prem/8.10/investigate-and-respond-to-threats/threat-intel-management/manage-threat-intel-reports","siteSpaceId":"sitesp_3eeMj","description":"Manage Threat Intel Reports in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Investigate and Respond to Threats"},{"label":"Threat Intel Management"}]},{"id":"yJglpvsdIVYjWrmSPYDC","title":"Troubleshoot","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/troubleshoot","siteSpaceId":"sitesp_3eeMj","description":"Troubleshoot errors in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"}]},{"id":"CE00iiwmilU2ZEAQwHbV","title":"View system status in the System Diagnostics page","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/troubleshoot/view-system-status-in-the-system-diagnostics-page","siteSpaceId":"sitesp_3eeMj","description":"View System Diagnostics errors in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"jLbaWwWlVrMjn8f03FNG","title":"View Guard Rails warnings and errors","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/troubleshoot/view-guard-rails-warnings-and-errors","siteSpaceId":"sitesp_3eeMj","description":"Review Guard Rails warnings and errors in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"T8Oy3iDp6eyiY1vYPD1V","title":"Access logs and log bundles","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/troubleshoot/access-logs-and-log-bundles","siteSpaceId":"sitesp_3eeMj","description":"Access logs and log bundles for troubleshooting in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"kqVHWTxLswrLwDSS5jkD","title":"Management audit logs","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/troubleshoot/management-audit-logs","siteSpaceId":"sitesp_3eeMj","description":"Manage audit logs in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"KQani9XaKGWOt5hIPG48","title":"Integration logs","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/troubleshoot/integration-logs","siteSpaceId":"sitesp_3eeMj","description":"View and export integration logs in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Troubleshoot"}]},{"id":"M84VGEB1Izb20Att1MrH","title":"Reference","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference","siteSpaceId":"sitesp_3eeMj","description":"Access product reference topics for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"}]},{"id":"tBJgsghalrz4TA18A3ZB","title":"Cortex XSOAR concepts","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/cortex-xsoar-concepts","siteSpaceId":"sitesp_3eeMj","description":"Learn core concepts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"aDoVccpjiRikHV3PIqjP","title":"How to search in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/how-to-search-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Search data using queries and search tools in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"lEwcQCli4f7xI4xh0EXQ","title":"How to use markdown in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/how-to-use-markdown-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Use markdown formatting in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"SzQVtjL0bksHqm77BYyV","title":"User details and preferences","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/user-details-and-preferences","siteSpaceId":"sitesp_3eeMj","description":"Manage user details, preferences, and notifications in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"0rLKnLZ4gCsImnpEfGH7","title":"Server configurations","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/server-configurations","siteSpaceId":"sitesp_3eeMj","description":"Configure and troubleshoot server settings in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"uexqcp313qblgY5rUmT4","title":"New user FAQ","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/new-user-faq","siteSpaceId":"sitesp_3eeMj","description":"Find answers for new users of Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"9kj3W2GuHm4jtntDw3xr","title":"Cortex XSOAR API","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/cortex-xsoar-api","siteSpaceId":"sitesp_3eeMj","description":"Generate an API key and make API calls in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"0EXRunfKzmX6j5BZB7WU","title":"Telemetry in Cortex XSOAR","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/telemetry-in-cortex-xsoar","siteSpaceId":"sitesp_3eeMj","description":"Learn how telemetry collects usage data in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"Qg8hzD60fnIlMneIssZg","title":"Keyboard shortcuts","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/keyboard-shortcuts","siteSpaceId":"sitesp_3eeMj","description":"Use keyboard shortcuts in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"DkQ3FWuqKU5LjnuYgp81","title":"Product support lifecycle","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/product-support-lifecycle","siteSpaceId":"sitesp_3eeMj","description":"Review the product support lifecycle for Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"ye0oKP33kEEVyku4ohgn","title":"Cortex XSOAR navigation cheat sheet","pathname":"/cortex-xsoar-8-on-prem/8.10/troubleshoot-and-reference/reference/cortex-xsoar-navigation-cheat-sheet","siteSpaceId":"sitesp_3eeMj","description":"Navigate commonly used features in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Troubleshoot and Reference"},{"label":"Reference"}]},{"id":"LK5m64j1zCZTWY3PuhSG","title":"Multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant","siteSpaceId":"sitesp_3eeMj","description":"Configure multi-tenant deployments in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"}]},{"id":"oF5WgHsZiV1CK0ZpiyyW","title":"What is Cortex XSOAR multi-tenant?","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/what-is-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_3eeMj","description":"Learn about multi-tenant deployments in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"}]},{"id":"as5J9lCckIMseuBCJ3Rn","title":"Onboard Cortex XSOAR multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/onboard-cortex-xsoar-multi-tenant","siteSpaceId":"sitesp_3eeMj","description":"Onboard main and child tenants in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"}]},{"id":"I5PNwWU9JFCeoVZZmBAU","title":"Onboarding checklist for multi-tenant deployments","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/onboard-cortex-xsoar-multi-tenant/onboarding-checklist-for-multi-tenant-deployments","siteSpaceId":"sitesp_3eeMj","description":"Follow the multi-tenant onboarding checklist in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"SfICPtTpIunAJxq6Iw0l","title":"Step 1. Install Cortex XSOAR for multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-1.-install-cortex-xsoar-for-multi-tenant","siteSpaceId":"sitesp_3eeMj","description":"Install multi-tenant deployments in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"SQ2K0SxhCqcCcz7wrSZS","title":"Step 2. Pair child tenant to main tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-2.-pair-child-tenant-to-main-tenant","siteSpaceId":"sitesp_3eeMj","description":"Pair a child tenant with a main tenant in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"gXSYhqZFn5xCereVOd83","title":"Step 3. Set up an engine","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-3.-set-up-an-engine","siteSpaceId":"sitesp_3eeMj","description":"Set up tenant engines in Cortex XSOAR 8.10 On-prem multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"a46Je5uyJfS1ipwEbtGy","title":"Step 4. Set up users and roles","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-4.-set-up-users-and-roles","siteSpaceId":"sitesp_3eeMj","description":"Configure users and roles for multi-tenant Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"9fJszhCw2u93cV2qqik2","title":"Step 5. Install and configure content","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/onboard-cortex-xsoar-multi-tenant/step-5.-install-and-configure-content","siteSpaceId":"sitesp_3eeMj","description":"Install content for multi-tenant deployments in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Onboard Cortex XSOAR multi-tenant"}]},{"id":"ZmEkW1tS5kjWhLOeLdEJ","title":"Child tenant management","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/child-tenant-management","siteSpaceId":"sitesp_3eeMj","description":"Manage child tenants and content in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"}]},{"id":"GE1QhRSJ5ffUxWSWirzr","title":"Content management in multi-tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/child-tenant-management/content-management-in-multi-tenant","siteSpaceId":"sitesp_3eeMj","description":"Manage multi-tenant content in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Child tenant management"}]},{"id":"ZEMjO5l6hMSh5LDdfC6K","title":"Incident management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/incident-management-on-the-main-tenant","siteSpaceId":"sitesp_3eeMj","description":"Manage child-tenant incidents in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"}]},{"id":"RxMp7JD65gCzJGVyhtJg","title":"Manage main tenant users in an investigation","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/incident-management-on-the-main-tenant/manage-main-tenant-users-in-an-investigation","siteSpaceId":"sitesp_3eeMj","description":"Manage main tenant users during investigations in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Incident management on the main tenant"}]},{"id":"9V6CIJyhd7knDTJn9875","title":"Run a command on multiple tenants","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/incident-management-on-the-main-tenant/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_3eeMj","description":"Run commands across tenants in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"},{"label":"Incident management on the main tenant"}]},{"id":"EG6gNRXxQGt5U401XS8L","title":"Indicator management on the main tenant","pathname":"/cortex-xsoar-8-on-prem/8.10/multi-tenant/multi-tenant/indicator-management-on-the-main-tenant","siteSpaceId":"sitesp_3eeMj","description":"Manage indicators from the main tenant in Cortex XSOAR 8.10 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Multi-Tenant"},{"label":"Multi-tenant"}]},{"id":"q9d2Zi9fpnD5gnZVoTX8","title":"Navigate the Cortex XSOAR 8.8 On-prem docs","pathname":"/cortex-xsoar-8-on-prem/8.8","siteSpaceId":"sitesp_TddaI","description":"Start here for a visual overview of Cortex XSOAR On-prem 8.8 (EoL) documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 8","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 8 On-prem Documentation","icon":"diagram-project"},{"label":"Learn about Cortex XSOAR"}]},{"id":"ruEApDLojQLy1H0OWJbQ","title":"Cortex XSOAR 6 Administrator Guides","pathname":"/xsoar-6-administrator-guide","siteSpaceId":"sitesp_yi88z","description":"Start here to choose the right Cortex XSOAR 6 version.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"}]},{"id":"jY66kyXFbQxXSwykR2wt","title":"Navigate the Cortex XSOAR 6.15 Administrator Guide","pathname":"/xsoar-6-administrator-guide/6.15","siteSpaceId":"sitesp_BQwUa","description":"Start here for a visual overview of the main Cortex XSOAR 6.15 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"sbvSyXXrrHjSvkA6yYMg","title":"Overview","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/overview","siteSpaceId":"sitesp_BQwUa","description":"Cortex XSOAR provides security orchestration, incident management, and interactive investigation. Overview of Cortex XSOAR 6.15 features and concepts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"lkaTtFywohex34EnL5Om","title":"Get Started in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Get started with Cortex XSOAR 6.15. Learn core concepts, licenses, lifecycle support, API keys, search, CLI commands, and Markdown.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"9L6cIaYbuDMDxOLQ7Gdj","title":"Licenses","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/licenses","siteSpaceId":"sitesp_BQwUa","description":"Learn about Cortex XSOAR 6.15 licenses, editions, user types, license quotas, and multi-tenant licensing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"mzR0iMKJemc1923dGBfq","title":"FIPS Version","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/fips-version","siteSpaceId":"sitesp_BQwUa","description":"Learn about the vendor-affirmed Cortex XSOAR 6.15 FIPS version, its FIPS 140-3 cryptography, supported deployments, and limitations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"VES2zMNyjzKkrudWhbJ5","title":"Concepts","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/concepts","siteSpaceId":"sitesp_BQwUa","description":"Learn Cortex XSOAR 6.15 concepts, including incidents, integrations, playbooks, automations, commands, War Room, indicators, and Playground.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"mGA8PgVMgGG5AndWdhS0","title":"Product Support Lifecycle","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/product-support-lifecycle","siteSpaceId":"sitesp_BQwUa","description":"Review Cortex XSOAR 6.15 release versioning, supported releases, end-of-life dates, and product support lifecycle guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"MVu1uqFnA4JWiPmOArAH","title":"API Keys","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/api-keys","siteSpaceId":"sitesp_BQwUa","description":"Generate, manage, revoke, and secure API keys for Cortex XSOAR 6.15 REST API access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"usFfqsRryQMh7kzVwUKy","title":"Use the Command Line Interface","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/use-the-command-line-interface","siteSpaceId":"sitesp_BQwUa","description":"Use the CLI to run system and integration commands, automations, scripts, and user notifications in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"DtkfV2afIAbtZzYz8LU9","title":"How to Search","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-search","siteSpaceId":"sitesp_BQwUa","description":"Search Cortex XSOAR 6.15 with Bleve query syntax, the search box, general search, filters, wildcards, and regular expressions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"kTY3Rpq09hatdz4mxnH7","title":"How to Use Markdown","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-use-markdown","siteSpaceId":"sitesp_BQwUa","description":"Use Markdown in Cortex XSOAR 6.15 to format text, add links, tables, images, and XSOAR-specific content elements.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"NTZkM6B6RKGzkSkAQO0t","title":"New User FAQ","pathname":"/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/new-user-faq","siteSpaceId":"sitesp_BQwUa","description":"Find answers to common Cortex XSOAR 6.15 new-user questions about content, log bundles, commands, notifications, dashboards, and search.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"1V0xbzodQK4nBY8Oe6Xj","title":"Onboarding in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/onboarding-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Onboarding process for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"e3Nqc2oEFZSOCFhu9m6C","title":"Deployment Checklist - Best Practices","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/deployment-checklist-best-practices","siteSpaceId":"sitesp_BQwUa","description":"Overview of the deployment process, including best practices for Cortex XSOAR 6.15 installation and maintenance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"om32hJkXKChbQUXIvc8w","title":"Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment","siteSpaceId":"sitesp_BQwUa","description":"Install, configure, upgrade, and maintain a Cortex XSOAR 6.15 single-server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"L1Twppu7C6N1CxmjavjS","title":"System Requirements","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/system-requirements","siteSpaceId":"sitesp_BQwUa","description":"Verify operating system, hardware, network, and software requirements for a Cortex XSOAR 6.15 single-server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"qRfGytu4nD7wIK2zAdpw","title":"Install the Server for a Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/install-the-server-for-a-single-server-deployment","siteSpaceId":"sitesp_BQwUa","description":"Install Cortex XSOAR 6.15 on a single server with the application and database services on one host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"5aCSoDT2RuXlg1LiPaCd","title":"Installer Flags","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/install-the-server-for-a-single-server-deployment/installer-flags","siteSpaceId":"sitesp_BQwUa","description":"Reference the Cortex XSOAR 6.15 installer flags for installation, upgrades, Elasticsearch, backups, and system configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Install the Server for a Single Server Deployment"}]},{"id":"39opO965UrYCJ5irFN6d","title":"Install the Server with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/install-the-server-with-elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Install Cortex XSOAR 6.15 with Elasticsearch. Review prerequisites and deployment steps for a new Elasticsearch-backed environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"EGchQ1e1iweWeZo8VdVX","title":"Install the Server Offline","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline","siteSpaceId":"sitesp_BQwUa","description":"Install Cortex XSOAR 6.15 in an offline or air-gapped environment without internet access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"IBdp4LUAclxjWQvMFpLC","title":"Dependencies for Offline Installation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_BQwUa","description":"Review required RPM and Ubuntu dependencies for an offline Cortex XSOAR 6.14 server or engine installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Install the Server Offline"}]},{"id":"24WEuCRPNuMiJtvJujjn","title":"Add a License","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/add-a-license","siteSpaceId":"sitesp_BQwUa","description":"Add a Cortex XSOAR 6.15 license file through the user interface or directly on the server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"jh0hJts2rYoYUevDjfRC","title":"Post-Installation Checklist","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist","siteSpaceId":"sitesp_BQwUa","description":"Complete the Cortex XSOAR 6.15 post-installation checklist for monitoring, certificates, HTTP configuration, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"IYXNmL9WXUsxz4wXk4Jn","title":"Monitor Components","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/monitor-components","siteSpaceId":"sitesp_BQwUa","description":"Monitor Cortex XSOAR 6.15 server, engine, and Elasticsearch health with system checks, alerts, and health monitoring tools.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"b2PJ9xfmrRkEShRbXSw3","title":"HTTPS with a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate","siteSpaceId":"sitesp_BQwUa","description":"Configure HTTPS for Cortex XSOAR 6.15 with a signed X.509 certificate and supported TLS versions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"8LCaDvzQWRQvFBQVBSXs","title":"Create a Self-Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/create-a-self-signed-certificate","siteSpaceId":"sitesp_BQwUa","description":"Create and apply a self-signed certificate for a Cortex XSOAR 6.15 development environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"IWh5uMksbedLWzlZ0wMY","title":"Install or Renew a Custom Certificate","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/install-or-renew-a-custom-certificate","siteSpaceId":"sitesp_BQwUa","description":"Install or renew a CA-signed certificate for secure Cortex XSOAR 6.15 production deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"UIegCic1igmpGYah0Uc9","title":"Configure the Server to Listen on HTTP","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/configure-the-server-to-listen-on-http","siteSpaceId":"sitesp_BQwUa","description":"Configure a Cortex XSOAR 6.15 server HTTP endpoint for deployments using HTTPS termination.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"IUulhCazCOJcL8kZrTdg","title":"Troubleshoot WebSockets","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/troubleshoot-websockets","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 WebSocket disconnects, slow responses, and missing real-time browser updates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"32be08N9GBQig5VByOOy","title":"Upgrade the Cortex XSOAR Server","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_BQwUa","description":"Upgrade a Cortex XSOAR 6.15 server with preparation, installation, and post-upgrade validation steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"EyM7dLQR70lvE2njUlJt","title":"Uninstall the Server","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/single-server-deployment/uninstall-the-server","siteSpaceId":"sitesp_BQwUa","description":"Uninstall a Cortex XSOAR 6.15 server while retaining configuration files and engine-created files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"Pc2swjMF6NiX7ButznbP","title":"Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Deploy and manage Cortex XSOAR 6.15 with Elasticsearch, including setup, security, migration, backups, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"6Tv5OZE2kwWaxEglwWHR","title":"Elasticsearch Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 Elasticsearch deployments and how XSOAR data is migrated to Elasticsearch indices.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"EnIT75Cm9LHpGikgjMW0","title":"Elasticsearch Setup","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup","siteSpaceId":"sitesp_BQwUa","description":"Configure Elasticsearch for Cortex XSOAR 6.15 with best practices, sizing guidance, and data management settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"ewy7V3bnv7jBpi4NWtXA","title":"Elasticsearch System Requirements","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-system-requirements","siteSpaceId":"sitesp_BQwUa","description":"Review Elasticsearch system requirements for a supported and scalable Cortex XSOAR 6.15 deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"vED5C2kKqBT9FO549QPN","title":"Elasticsearch Configurations","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-configurations","siteSpaceId":"sitesp_BQwUa","description":"Configure Elasticsearch connection, indexing, shards, replicas, and performance settings for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"IOmSqR4S5GTHBwr2hoSX","title":"Elasticsearch Data Management","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-data-management","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 data in Elasticsearch, including index operations, data retention, and storage considerations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"3OL5H0VLN0ye0z3AOSBZ","title":"Elasticsearch Security","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-security","siteSpaceId":"sitesp_BQwUa","description":"Apply Elasticsearch security guidance and best practices to Cortex XSOAR 6.15 single-server and multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"bcTGy5cVWonGR7dl8ro5","title":"Elasticsearch General Security Guidelines","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_BQwUa","description":"Follow general Elasticsearch security guidelines for protecting a Cortex XSOAR 6.15 deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"AYloNzQ96Dmiyuq1bg2k","title":"Elasticsearch Security Guidelines - Multi-tenant Deployments","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-security-guidelines-multi-tenant-deployments","siteSpaceId":"sitesp_BQwUa","description":"Apply Elasticsearch security guidelines for Cortex XSOAR 6.15 multi-tenant deployments and tenant data isolation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"nc7qgxnja1nuXj8bS8pq","title":"Migration","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration","siteSpaceId":"sitesp_BQwUa","description":"Migrate Cortex XSOAR 6.15 data to Elasticsearch for single-server and multi-tenant environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"s5FdSnRIqdVeGWA7IH1s","title":"Elasticsearch Migration Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-migration-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand the Cortex XSOAR 6.15 Elasticsearch migration process, prerequisites, sequencing, and migration tool options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"1KAK2JQTUgvJOyuwzw5v","title":"Migrate Objects to Elasticsearch for a Single Server","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-single-server","siteSpaceId":"sitesp_BQwUa","description":"Migrate Cortex XSOAR 6.15 objects and data to Elasticsearch in a single-server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"sYhMSw6Xqs97iHT4SKel","title":"Migrate Objects to Elasticsearch for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-multi-tenant","siteSpaceId":"sitesp_BQwUa","description":"Migrate Cortex XSOAR 6.15 objects and tenant data to Elasticsearch in a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"yT2bU4tKdfx2UtQhDbqD","title":"Migrate an Existing Elasticsearch Deployment","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/migrate-an-existing-elasticsearch-deployment","siteSpaceId":"sitesp_BQwUa","description":"Migrate an existing Cortex XSOAR 6.15 Elasticsearch deployment while preserving data and configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"J6qZJGtmLS8cMm3VQJ6h","title":"Migrate Objects to Elasticsearch for a Distributed Database","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-distributed-database","siteSpaceId":"sitesp_BQwUa","description":"Migrate Cortex XSOAR 6.15 objects to Elasticsearch from a distributed database deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"8ZrHliey5HhbnyZjosZM","title":"Manage Partial Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/manage-partial-migration-to-elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Manage a partial Cortex XSOAR 6.15 migration to Elasticsearch and complete the remaining data migration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"zbYNlOcwshoVkkstiA8q","title":"Validate the Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/validate-the-migration-to-elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Validate a Cortex XSOAR 6.15 migration to Elasticsearch and identify incomplete or failed migrated objects.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"d9LJtQGvM8Z4gJDGqblj","title":"Elasticsearch Post Migration Health Check","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-post-migration-health-check","siteSpaceId":"sitesp_BQwUa","description":"Run post-migration health checks to confirm a Cortex XSOAR 6.15 Elasticsearch deployment is operating correctly.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"AJRKPu9wwj7JttyQBsuV","title":"Disaster Recovery for Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Back up and restore a Cortex XSOAR 6.15 Elasticsearch deployment using snapshots for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"3K1mUDRd3cMy1dAEAwqS","title":"Create Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/create-elasticsearch-snapshots","siteSpaceId":"sitesp_BQwUa","description":"Create Elasticsearch snapshots to back up Cortex XSOAR 6.15 data and prepare for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"Cbws5QjhfoilDemyScuH","title":"Restore Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/restore-elasticsearch-snapshots","siteSpaceId":"sitesp_BQwUa","description":"Restore Elasticsearch snapshots to recover Cortex XSOAR 6.15 data after data loss or an outage.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"7WsZZogI4228NkZ4AXOQ","title":"Archive Data with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/archive-data-with-elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Archive Cortex XSOAR 6.15 data with Elasticsearch index lifecycle management to manage storage and data retention.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"N4pr6QzO6KO0OS4zT9Ie","title":"Troubleshoot Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/elasticsearch/troubleshoot-elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot common Cortex XSOAR 6.15 Elasticsearch deployment, connectivity, indexing, and performance issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"SO2Il0M5yCz6vAMeuFNy","title":"Docker","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker","siteSpaceId":"sitesp_BQwUa","description":"Install, configure, secure, and troubleshoot Docker for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"y53yWiHeG6JeX7F21XmH","title":"Docker Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand how Cortex XSOAR 6.15 uses Docker to run integrations and automations securely and predictably.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"wfphRJbU2QJNMM3FhOSU","title":"Docker Installation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-installation","siteSpaceId":"sitesp_BQwUa","description":"Install and troubleshoot Docker on supported Enterprise Linux platforms for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"YGT6ehi3Yn7HhwNzbCVz","title":"Configure Python Docker Integrations to Trust Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 Python Docker integrations to trust CA-signed and custom certificates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"2pLJxIjQzWO5VJA0amnw","title":"Docker Images in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Use Docker images to run Cortex XSOAR 6.15 Python scripts and integrations in controlled environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"eftEE2ra6uXICZogYBGv","title":"Create a Docker Image In Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/create-a-docker-image-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Create a custom Docker image for Cortex XSOAR 6.15 integrations and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"ZuHJcovc7jNu0hl0zg5E","title":"Install Docker Images Offline","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/install-docker-images-offline","siteSpaceId":"sitesp_BQwUa","description":"Download and install Docker images offline for air-gapped Cortex XSOAR 6.14 environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"jndCHdwkiaBQVPkITiDJ","title":"Docker Image Security","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/docker-image-security","siteSpaceId":"sitesp_BQwUa","description":"Apply Docker image security practices for Cortex XSOAR 6.15 integrations and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"BFKR2LL6idHnHRPVAdCq","title":"Manage Docker Images","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/manage-docker-images","siteSpaceId":"sitesp_BQwUa","description":"Manage, update, and remove Docker images used by Cortex XSOAR 6.15 integrations and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"dYl9HQw8ieAeZu1XvrME","title":"Change the Docker Image for Automations and Integrations","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/change-the-docker-image-for-automations-and-integrations","siteSpaceId":"sitesp_BQwUa","description":"Change the Docker image used by Cortex XSOAR 6.15 automations and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"xdUJUykltGE5oc1ccwCO","title":"Use the Cortex XSOAR Container Registry","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_BQwUa","description":"Use the Cortex XSOAR 6.15 container registry to manage and distribute Docker images.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"vga3MQWETms9SnLfnAXo","title":"Docker hardening Guide","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide","siteSpaceId":"sitesp_BQwUa","description":"Configure Docker hardening in Cortex XSOAR 6.15 using non-root users, resource limits, and network access controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"EKdbetEeT1ZKh5g58Pq0","title":"Run Docker with Non-Root Internal Users","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_BQwUa","description":"Run Cortex XSOAR 6.15 Docker containers with non-root internal users to enforce least privilege.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"J10oxK2cYWrtIkCRb0XZ","title":"Configure Memory Limit Support Without Swap Limit Capabilities","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-memory-limit-support-without-swap-limit-capabilities","siteSpaceId":"sitesp_BQwUa","description":"Configure Docker memory limits for Cortex XSOAR 6.15 when swap limit capabilities are unavailable.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"epFnCKnnt8NM2nAGgLc6","title":"Configure the Memory Limitation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_BQwUa","description":"Configure Docker container memory limits to protect Cortex XSOAR 6.15 hosts from resource exhaustion.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"UdJBnChSXY7lEQRLAPTZ","title":"Test the Memory Limit","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/test-the-memory-limit","siteSpaceId":"sitesp_BQwUa","description":"Test Docker memory limits configured for Cortex XSOAR 6.15 containers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"oFsrJVuSRyZ4xCe9Aejr","title":"Limit Available CPU","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/limit-available-cpu","siteSpaceId":"sitesp_BQwUa","description":"Limit Docker container CPU resources to protect the Cortex XSOAR 6.15 host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"NJLv6NawHV0Zr1KFHFBi","title":"Configure the PIDs Limit","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-pids-limit","siteSpaceId":"sitesp_BQwUa","description":"Configure Docker PID limits to prevent process exhaustion in Cortex XSOAR 6.15 containers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"vLEHDZXhXgc5ipjoAKnA","title":"Configure the Open File Descriptors Limit","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-open-file-descriptors-limit","siteSpaceId":"sitesp_BQwUa","description":"Configure Docker open file descriptor limits for Cortex XSOAR 6.15 containers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"bpLiP2Ve18NU7RFf74iS","title":"Docker Network Hardening","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_BQwUa","description":"Harden Docker network access for Cortex XSOAR 6.15 containers with network security controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker hardening Guide"}]},{"id":"XZc7eB60kH4aHlIS0A3E","title":"Docker FAQs","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/docker-faqs","siteSpaceId":"sitesp_BQwUa","description":"Find answers to frequently asked questions about Docker in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"D8SmHwGSAVho2sGFJ9Z5","title":"Troubleshoot Docker Networking Issues","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/troubleshoot-docker-networking-issues","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Docker networking issues in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"G8von4Ye54q9CjT4nXjM","title":"Troubleshoot Docker Performance Issues","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/troubleshoot-docker-performance-issues","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 Docker performance issues and update Docker packages and dependencies.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"cUZtp03CeLzXDXzGezN0","title":"Configure Docker Pull Rate Limit","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_BQwUa","description":"Configure Docker image pull rate limits for Cortex XSOAR 6.15 and authenticate for higher limits.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"5wCVq1YwKODH3L0hHtxC","title":"Change the Docker Installation Folder","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_BQwUa","description":"Change the default Docker installation folder for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"rBEyEac5KD3XYARSMmR2","title":"Podman","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/podman","siteSpaceId":"sitesp_BQwUa","description":"Install, configure, migrate to, and troubleshoot Podman for Cortex XSOAR 6.14 on RHEL 8 and later.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"IL76zzDSOsdQYK0RH4eb","title":"Podman Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/podman/podman-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand how to use Podman instead of Docker for Cortex XSOAR 6.14 on supported operating systems, including RHEL 8.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"1VtgDdFbZtrKzazgP1SC","title":"Change container storage directory","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/podman/change-container-storage-directory","siteSpaceId":"sitesp_BQwUa","description":"Change the Podman container storage directory for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"lqYNudW35MvssnXT1jwU","title":"Podman Installation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/podman/podman-installation","siteSpaceId":"sitesp_BQwUa","description":"Install Podman for Cortex XSOAR 6.14 on supported Linux operating systems.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"D6AXRbgh8g6EPoqGiHRn","title":"Configure the SELinux Policy for PowerShell Integrations","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/podman/configure-the-selinux-policy-for-powershell-integrations","siteSpaceId":"sitesp_BQwUa","description":"Configure the Podman SELinux policy for PowerShell integrations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"ZHZzHHte5fDaKv3BRCfM","title":"Migrate From Docker to Podman","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_BQwUa","description":"Migrate Cortex XSOAR 6.14 from Docker to Podman on RHEL 8 or later.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"bChFuscOHMmQLQMMw04k","title":"Troubleshoot Podman","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/podman/troubleshoot-podman","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Podman installation, configuration, and container issues in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"cNZwj9v3ufiOAf2UMUjb","title":"Proxy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/proxy","siteSpaceId":"sitesp_BQwUa","description":"Configure proxy, proxy bypass, and NGINX reverse proxy settings for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"dLH7KRQk8XXkSyDr7sFN","title":"Configure Proxy Settings","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/proxy/configure-proxy-settings","siteSpaceId":"sitesp_BQwUa","description":"Configure global proxy settings for Cortex XSOAR 6.15 with server configuration options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"HotGcNOhXDgWZtPtK9rV","title":"Configure how to bypass proxy settings","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/proxy/configure-how-to-bypass-proxy-settings","siteSpaceId":"sitesp_BQwUa","description":"Configure proxy bypass settings for Cortex XSOAR 6.15 with server configuration options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"ZdpUSjVdLUEKDAkw5qvp","title":"Use NGINX as a Reverse Proxy to the Server","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/proxy/use-nginx-as-a-reverse-proxy-to-the-server","siteSpaceId":"sitesp_BQwUa","description":"Configure NGINX as a reverse proxy for a Cortex XSOAR 6.15 server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"iMPoUrUfoCLlNNIOe697","title":"High Availability","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 high availability with Elasticsearch, including sizing, migration, app servers, engines, and certificates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"NaZuEaBuZKEXqyDR0Tac","title":"High Availability Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/high-availability-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 high availability deployment architectures and components.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"146PLLlgRqfjjzkGjfN8","title":"Set Up High Availability","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/set-up-high-availability","siteSpaceId":"sitesp_BQwUa","description":"Set up high availability for Cortex XSOAR 6.15 with the required deployment steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"PUpxDMCPRj4QTZbGJkKB","title":"Sizing Requirements for High Availability Deployments","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/sizing-requirements-for-high-availability-deployments","siteSpaceId":"sitesp_BQwUa","description":"Review sizing requirements for a Cortex XSOAR 6.15 high availability deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"jbyDTt0jUM6l1wwtqeE6","title":"Monitor the Health of the App Servers","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/monitor-the-health-of-the-app-servers","siteSpaceId":"sitesp_BQwUa","description":"Monitor application server health in a Cortex XSOAR 6.15 high availability environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"0vdgOXqu4rCg8qMabkot","title":"Migrate a Single Instance for High Availability","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/migrate-a-single-instance-for-high-availability","siteSpaceId":"sitesp_BQwUa","description":"Migrate a Cortex XSOAR 6.15 single-instance deployment to high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"7E4rbcOOMK32tc6QRhwa","title":"Migrate a Multi-Tenant Deployment for High Availability","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/migrate-a-multi-tenant-deployment-for-high-availability","siteSpaceId":"sitesp_BQwUa","description":"Migrate a Cortex XSOAR 6.15 multi-tenant deployment to enable high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"T3BLhCf00VoPTWkgUFfr","title":"Install Additional App Servers","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/install-additional-app-servers","siteSpaceId":"sitesp_BQwUa","description":"Install additional application servers for a Cortex XSOAR 6.15 high availability configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"cC4pCsoGPOSHhWdbOIDc","title":"Deploy Engines in a High Availability Environment","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/deploy-engines-in-a-high-availability-environment","siteSpaceId":"sitesp_BQwUa","description":"Deploy Cortex XSOAR 6.15 engines in high availability and route engine connections through a load balancer.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"LTdp5UP0z52vQgJtEdqB","title":"Use a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/high-availability/use-a-signed-certificate","siteSpaceId":"sitesp_BQwUa","description":"Use a signed certificate in a Cortex XSOAR 6.15 high availability deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"SCQjUCTcc7Cz6gpS1OmP","title":"Disaster Recovery and Live Backup","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 disaster recovery and live backup, including failover, backups, restores, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"wwruiJOkgIAzGVDHd0Py","title":"Disaster Recovery and Live Backup Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/disaster-recovery-and-live-backup-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 live backup, disaster recovery states, environment configuration, and recovery scenarios.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"WPRrSgPPkeEw5nv4plTq","title":"Host Names, DNS, and Disaster Recovery","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/host-names-dns-and-disaster-recovery","siteSpaceId":"sitesp_BQwUa","description":"Configure host names and DNS for a Cortex XSOAR 6.15 disaster recovery environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"veN8hN8ZmLfGhgOSue5d","title":"Configure the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 live backup by mirroring a production server to a standby backup server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"SliyoMF2I5MMNmom5XfY","title":"Configure Live Backup for Multiple SAMLs","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/configure-live-backup-for-multiple-samls","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 live backup for environments that use multiple SAML identity providers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"SyknAw8RLRO9ROwkECH0","title":"DR Scenario: Testing the DR Environment","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-testing-the-dr-environment","siteSpaceId":"sitesp_BQwUa","description":"Test a Cortex XSOAR 6.15 disaster recovery environment and restore the original server roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"LihHkWCbNM4DD9zM4Sfj","title":"DR Scenario: Unrecoverable Active Server Failure","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-unrecoverable-active-server-failure","siteSpaceId":"sitesp_BQwUa","description":"Recover from an unrecoverable active server failure with Cortex XSOAR 6.15 live backup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"U7zmg0Fml3XqK8XWqbn0","title":"DR Scenario: Unrecoverable Standby Server Failure","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-unrecoverable-standby-server-failure","siteSpaceId":"sitesp_BQwUa","description":"Replace an unrecoverable standby server in a Cortex XSOAR 6.15 live backup environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"77HmhlpoHhSdhB5SFUCF","title":"Transition an Active Server to Standby Mode","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-an-active-server-to-standby-mode","siteSpaceId":"sitesp_BQwUa","description":"Transition an active Cortex XSOAR 6.15 server to standby mode for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"kKJaVRuKngk1bttxqKEh","title":"Transition a Standby Server to Active Mode","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-a-standby-server-to-active-mode","siteSpaceId":"sitesp_BQwUa","description":"Transition a standby Cortex XSOAR 6.15 server to active production mode.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"Cwdlih23wosBYVDPQZ0G","title":"Transition Between DR States Through the Configuration File","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-between-dr-states-through-the-configuration-file","siteSpaceId":"sitesp_BQwUa","description":"Transition Cortex XSOAR 6.15 disaster recovery states with the configuration file during first server startup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"GAGqTug8Rf9Yn83tBg1k","title":"Upgrade the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_BQwUa","description":"Upgrade a Cortex XSOAR 6.15 live backup environment while preserving disaster recovery readiness.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"t85JJeOGHxNN7s9dWOWP","title":"Engines and Disaster Recovery Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/engines-and-disaster-recovery-troubleshooting","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 engine failover issues in a disaster recovery environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"Jm173dkyXVXHYgxBKhia","title":"Back up the Database","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/back-up-the-database","siteSpaceId":"sitesp_BQwUa","description":"Create manual and automated database backups for Cortex XSOAR 6.15 and schedule backup jobs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"JcDp0e4rEka8H9uKKIsh","title":"Restore the Database","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-the-database","siteSpaceId":"sitesp_BQwUa","description":"Restore a Cortex XSOAR 6.15 database from a manual or automated backup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"rRROSdD4QqWCKjTnDwV2","title":"Restore a Partition","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-a-partition","siteSpaceId":"sitesp_BQwUa","description":"Restore one or more specific Cortex XSOAR 6.15 database partitions from a backup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"jyLuMtE2vcvmnzGG2p2L","title":"Troubleshoot Live Backup","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/disaster-recovery-and-live-backup/troubleshoot-live-backup","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot live backup and disaster recovery scenarios in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"NxVGz2m5UwaLdVfYYPwW","title":"Users and Roles","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 users, roles, permissions, settings, shifts, passwords, and authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"pahXTAslGLQ6Urlba6va","title":"Users and Roles Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/users-and-roles-overview","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 users, roles, invitations, password policies, and user activity.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"NW0hSiPKe9vPFfgeI9NV","title":"Roles in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 roles, permissions, access levels, queries, and shifts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"axywpyHEXiTIrTWAeMTO","title":"Pre-set Query per Role","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/pre-set-query-per-role","siteSpaceId":"sitesp_BQwUa","description":"Configure pre-set queries for Cortex XSOAR 6.15 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"Zk4D7WCqRSLsz9tuiyww","title":"Define a Role","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/define-a-role","siteSpaceId":"sitesp_BQwUa","description":"Define a custom role and its permissions in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"uE3tb4fDOfBHDYO3pKlo","title":"Role-based Permission Levels","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/role-based-permission-levels","siteSpaceId":"sitesp_BQwUa","description":"Understand role-based permission levels in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"Zggu3CQymwLdge8y5ZEp","title":"Shift Management","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management","siteSpaceId":"sitesp_BQwUa","description":"Manage user shifts and on-call schedules in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"JvKRk1uPomk4f1SfhtxJ","title":"Define Shifts","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management/define-shifts","siteSpaceId":"sitesp_BQwUa","description":"Create and manage shifts for Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"},{"label":"Shift Management"}]},{"id":"rHpjgstrHDSnjKMkH3dx","title":"Shift Automation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management/shift-automation","siteSpaceId":"sitesp_BQwUa","description":"Leverage shift schedules to route incoming incidents, assign tasks, and monitor analyst availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"},{"label":"Shift Management"}]},{"id":"eTfUV6bN38aQVQbjMmb3","title":"User Management","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management","siteSpaceId":"sitesp_BQwUa","description":"Invite and manage Cortex XSOAR 6.15 users, roles, passwords, access, and preferences.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"8v5fcsFKAN4RiAHS06Eg","title":"User Invitations","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations","siteSpaceId":"sitesp_BQwUa","description":"Manage user invitations in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"CuWzHd88okxlamZggsGK","title":"Invite a User","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations/invite-a-user","siteSpaceId":"sitesp_BQwUa","description":"Invite a user to Cortex XSOAR 6.15 and assign access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"User Invitations"}]},{"id":"nMY5YxTO485tn0dRRBMg","title":"Set the User as Default Administrator","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations/set-the-user-as-default-administrator","siteSpaceId":"sitesp_BQwUa","description":"Set a Cortex XSOAR 6.15 user as the default administrator.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"User Invitations"}]},{"id":"v0W6BiCboS2TvBF0qfOL","title":"Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users","siteSpaceId":"sitesp_BQwUa","description":"Configure self-service read-only users in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"e7bK9nBqK6JIkqitnZXV","title":"Configure the Server for Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/configure-the-server-for-self-service-read-only-users","siteSpaceId":"sitesp_BQwUa","description":"Configure the Cortex XSOAR 6.15 server for self-service read-only users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"hdPrZF7dxhaqzntgkMzv","title":"Create the Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-self-service-read-only-users","siteSpaceId":"sitesp_BQwUa","description":"Create self-service read-only users in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"gwRP5RYSjGyklrpOILQT","title":"Create the Read-Only Dashboard","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-dashboard","siteSpaceId":"sitesp_BQwUa","description":"Create a read-only dashboard for Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"7FH7NaCzcukIW92Vdt9K","title":"Create the Read-Only Incident Type and Layout","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-incident-type-and-layout","siteSpaceId":"sitesp_BQwUa","description":"Create a read-only incident type and layout in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"7a9bSnrgRfjeAQIyirNj","title":"Disable a User","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/disable-a-user","siteSpaceId":"sitesp_BQwUa","description":"Disable a Cortex XSOAR 6.15 user account.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"t1SK0j22wZ3xNHhC7BPf","title":"Remove a User","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/remove-a-user","siteSpaceId":"sitesp_BQwUa","description":"Remove a user from Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"lQztFM7wTuENqqbhEOIM","title":"Clear Users Data Using the CLI","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-the-cli","siteSpaceId":"sitesp_BQwUa","description":"Clear user data with the Cortex XSOAR 6.15 CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"RmlyDduaNolhlfBoEqaC","title":"Clear Users Data Using a Playbook","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-a-playbook","siteSpaceId":"sitesp_BQwUa","description":"Clear user data with a Cortex XSOAR 6.15 playbook.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"D264Y3topvABA7QtppPT","title":"Configure Users Data Using Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/configure-users-data-using-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Configure user data with Cortex XSOAR 6.15 server configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"vtWgXqgaVp0HSA1W5WOJ","title":"User Settings and Preferences","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/user-settings-and-preferences","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 user settings and preferences.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"PMq6YZZqm5MpEFIlRdsQ","title":"Configure User Settings","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/configure-user-settings","siteSpaceId":"sitesp_BQwUa","description":"Configure user settings in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"0kM2QV9RDz7ygEYEK4ky","title":"Manually Refresh the Number of Licenses in Use","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/user-management/manually-refresh-the-number-of-licenses-in-use","siteSpaceId":"sitesp_BQwUa","description":"Manually refresh the number of Cortex XSOAR 6.15 licenses in use.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"Wl8UmSel2cqIa5ZGHIUI","title":"Integration Permissions","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/integration-permissions","siteSpaceId":"sitesp_BQwUa","description":"Configure integration command permissions with role-based access control in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"CnVaFre92Agkyoaeb4rB","title":"Password Policy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/password-policy","siteSpaceId":"sitesp_BQwUa","description":"Configure password policies and requirements for Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"aYRngm9lTSfkohGPCPUJ","title":"Create a Password Policy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/password-policy/create-a-password-policy","siteSpaceId":"sitesp_BQwUa","description":"Create a password policy for Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"nYgdNmtUFGOhDXZR3Elf","title":"Edit a Default Password Policy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy","siteSpaceId":"sitesp_BQwUa","description":"Edit the default password policy in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"pjpxkLG843qSG7IucWOp","title":"Default Password Policy Keys","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy/default-password-policy-keys","siteSpaceId":"sitesp_BQwUa","description":"Reference default password policy keys for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"},{"label":"Edit a Default Password Policy"}]},{"id":"ZuCyXQHm2vleTN6EfU6R","title":"Change the Administrator Password","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/change-the-administrator-password","siteSpaceId":"sitesp_BQwUa","description":"Change the Cortex XSOAR 6.15 administrator password when account access is unavailable.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"YcttBM4MDtHrBc8nZqWq","title":"Authenticate Users with SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0","siteSpaceId":"sitesp_BQwUa","description":"Authenticate Cortex XSOAR 6.15 users with SAML 2.0 identity providers, including Okta, Microsoft Entra ID, ADFS, and Duo.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"0IhRYCX8txilYqQFMiHl","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_BQwUa","description":"Set up Okta as a SAML 2.0 identity provider for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"lqArkCS1JHL8IougO6GW","title":"Create Okta Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/create-okta-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_BQwUa","description":"Create Okta groups for Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"VK4u5ZgjkMY8e7BuEzKa","title":"Define the Okta Application to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Define an Okta application to authenticate Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"iPQ7Lq9SQzuOS7EVdyhJ","title":"SAML Settings for the Okta Application","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar/saml-settings-for-the-okta-application","siteSpaceId":"sitesp_BQwUa","description":"Configure SAML settings for the Okta application in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Define the Okta Application to authenticate Cortex XSOAR"}]},{"id":"joX1pd9bCV47314YVJuJ","title":"Configure the SAML 2.0 Integration for Okta","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta","siteSpaceId":"sitesp_BQwUa","description":"Configure the SAML 2.0 integration for Okta in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"uwelrIw2723RHcwHAHrr","title":"SAML 2.0 Okta Parameters","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta/saml-2.0-okta-parameters","siteSpaceId":"sitesp_BQwUa","description":"Reference SAML 2.0 Okta parameters for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Okta"}]},{"id":"DNEaGCVIsi5t3vOjIr3Z","title":"Map Okta Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/map-okta-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_BQwUa","description":"Map Okta groups to Cortex XSOAR 6.15 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"tqGKBVfHMLBMFPXWZgGW","title":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_BQwUa","description":"Set up Microsoft Entra ID as a SAML 2.0 identity provider for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"fjwhL4CSe3IhCnO917fP","title":"Configure Microsoft Entra ID to Authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-microsoft-entra-id-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Configure Microsoft Entra ID to authenticate Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"QDsl7roHj8zCBAtsYNhS","title":"Configure the SAML 2.0 Integration for Microsoft Entra ID","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id","siteSpaceId":"sitesp_BQwUa","description":"Configure the SAML 2.0 integration for Microsoft Entra ID in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"huEmH03K5wuHW2s9KaHJ","title":"SAML 2.0 Microsoft Entra ID Parameters","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id/saml-2.0-microsoft-entra-id-parameters","siteSpaceId":"sitesp_BQwUa","description":"Reference SAML 2.0 Microsoft Entra ID parameters for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Microsoft Entra ID"}]},{"id":"xRVDrAbLyPyXluxs9xow","title":"Set up ADFS as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_BQwUa","description":"Set up ADFS as a SAML 2.0 identity provider for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"tCgDWoijDYvMn0uZ2RuJ","title":"Create Relying Party Trust in ADFS","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/create-relying-party-trust-in-adfs","siteSpaceId":"sitesp_BQwUa","description":"Create an ADFS relying party trust for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"PStSq3ABs7YbfOuzfric","title":"Define the Claim Issuance Policy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/define-the-claim-issuance-policy","siteSpaceId":"sitesp_BQwUa","description":"Define the ADFS claim issuance policy for Cortex XSOAR 6.15 authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"LlQTRcMvS6k52623v5Ag","title":"Configure the SAML 2.0 Integration for ADFS","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs","siteSpaceId":"sitesp_BQwUa","description":"Configure the SAML 2.0 integration for ADFS in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"4bj0QvZ2uv1DbDrxO3sO","title":"SAML 2.0 ADFS Parameters","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs/saml-2.0-adfs-parameters","siteSpaceId":"sitesp_BQwUa","description":"Reference SAML 2.0 ADFS parameters for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for ADFS"}]},{"id":"VqWUHrkg6Im2phLVu2N0","title":"Map ADFS Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/map-adfs-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_BQwUa","description":"Map ADFS groups to Cortex XSOAR 6.15 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"qAP1ttraux9gvteZNTZd","title":"Duo for Single Sign-On","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on","siteSpaceId":"sitesp_BQwUa","description":"Configure Duo single sign-on for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"8gmwWwqGqoXmTXpYhpuD","title":"Create Duo Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/create-duo-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_BQwUa","description":"Create Duo groups for Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"RsGQXBA0tOYzLmJD8Lj1","title":"Define Duo to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/define-duo-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Define Duo to authenticate Cortex XSOAR 6.15 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"WSAltfEzqo1aIQ94X3nz","title":"Configure the SAML 2.0 Integration for Duo","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/configure-the-saml-2.0-integration-for-duo","siteSpaceId":"sitesp_BQwUa","description":"Configure the SAML 2.0 integration for Duo in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"DjzkScIzUgSIl8V1dHbQ","title":"Map Duo Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/map-duo-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_BQwUa","description":"Map Duo groups to Cortex XSOAR 6.15 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"gWoHYuyYXOL5YmA9o8S3","title":"Change the Default Administrator to a SAML User","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/change-the-default-administrator-to-a-saml-user","siteSpaceId":"sitesp_BQwUa","description":"Change the default Cortex XSOAR 6.15 administrator to a SAML user.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"898FocTSm0nn4CBHIOpi","title":"Set Up SAML Logout","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-saml-logout","siteSpaceId":"sitesp_BQwUa","description":"Set up SAML log out in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"4RcNAnMU47iQZRb7boW1","title":"Set the Default Theme for New Users","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/set-the-default-theme-for-new-users","siteSpaceId":"sitesp_BQwUa","description":"Set the default color theme for new Cortex XSOAR 6.15 users with server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"AtfvvajwyWNBAYwRZPfu","title":"Authenticate Users with Active Directory","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-active-directory","siteSpaceId":"sitesp_BQwUa","description":"Authenticate Cortex XSOAR 6.15 users with Active Directory credentials.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"C8LmeYY9t03Gr41rIAm4","title":"Marketplace","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace","siteSpaceId":"sitesp_BQwUa","description":"Browse Cortex XSOAR 6.15 Marketplace content packs, manage installations, and contribute content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"FaMfclU5VXc6YWE7xDha","title":"Marketplace Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/marketplace-overview","siteSpaceId":"sitesp_BQwUa","description":"Use Cortex XSOAR 6.15 Marketplace to discover, install, manage, and contribute content packs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"zwcjQEyVR8QrBnhTC6zL","title":"Content Packs Support Types","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-packs-support-types","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 content pack support types and ownership levels.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"bUbsS8o5isMDxE9icRgq","title":"Marketplace FAQs","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_BQwUa","description":"Find answers to common Cortex XSOAR 6.15 Marketplace and content pack questions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"IcyAmk2lNzdi9m12wTMs","title":"Search and Navigate in the Marketplace","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/search-and-navigate-in-the-marketplace","siteSpaceId":"sitesp_BQwUa","description":"Search and browse Cortex XSOAR 6.15 Marketplace content by use case, integration, and category.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"0zYS5hYEUbbBgWJkRmcX","title":"Convert Existing Content to Content Pack Format","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/convert-existing-content-to-content-pack-format","siteSpaceId":"sitesp_BQwUa","description":"Convert existing content to Cortex XSOAR 6.15 content pack format.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"BHJrAipbxbqNXp1SKJsL","title":"Use Cases","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/use-cases","siteSpaceId":"sitesp_BQwUa","description":"Explore Cortex XSOAR 6.15 Marketplace content packs by security use case.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"IMR0mLTqzdAI8FOeysEn","title":"Content Pack Installation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-installation","siteSpaceId":"sitesp_BQwUa","description":"Review Cortex XSOAR 6.15 content pack dependencies, installation requirements, errors, and warnings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"7LK60gRfpNoGiRLVUPkq","title":"Install a Content Pack","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack","siteSpaceId":"sitesp_BQwUa","description":"Install a Cortex XSOAR 6.15 Marketplace content pack and its required dependencies.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"hOg677eblGLIpwP2JNuP","title":"Set up Your Use Case with the Deployment Wizard","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_BQwUa","description":"Configure a supported Cortex XSOAR 6.15 content pack with the Deployment Wizard.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"},{"label":"Install a Content Pack"}]},{"id":"fJQLOJO4PnbjhvY0OCsM","title":"Delete a Content Pack","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-installation/delete-a-content-pack","siteSpaceId":"sitesp_BQwUa","description":"Delete an installed Cortex XSOAR 6.15 Marketplace content pack.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"fXAJm9kVAYMXFGISkqTC","title":"Update a Content Pack","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-installation/update-a-content-pack","siteSpaceId":"sitesp_BQwUa","description":"Update an installed Cortex XSOAR 6.15 Marketplace content pack.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"xI0SueB9T2xUZmqswQC4","title":"Revert a Content Pack","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-installation/revert-a-content-pack","siteSpaceId":"sitesp_BQwUa","description":"Revert a Cortex XSOAR 6.15 content pack to an earlier version.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"d0AXkCKPpcqvKSqPx54Y","title":"Install a Content Pack Offline","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/install-a-content-pack-offline","siteSpaceId":"sitesp_BQwUa","description":"Install Cortex XSOAR 6.15 Marketplace content packs in offline or air-gapped environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"CDK3euIXeCIjITYuHoBr","title":"Configure the Marketplace for Offline Installation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/install-a-content-pack-offline/configure-the-marketplace-for-offline-installation","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 Marketplace for offline content pack installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Install a Content Pack Offline"}]},{"id":"2UibH1FVhX969WviH2gK","title":"Content Pack Update Notifications","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_BQwUa","description":"Enable update notifications for Cortex XSOAR 6.15 content packs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"gFW6aVvBhGpzFd2uSrJN","title":"Customize Content Pack Notifications","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_BQwUa","description":"Customize Cortex XSOAR 6.15 content pack update notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Update Notifications"}]},{"id":"jXKFZBxReAHlduKaOPgw","title":"Marketplace Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/marketplace-troubleshooting","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 Marketplace login, connectivity, timeout, and certificate issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"QQg31ttaW2mdpzRTXB6E","title":"Content Pack Contributions","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_BQwUa","description":"Create and submit content packs to the Cortex XSOAR 6.15 Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"PIEUlw1IfpIH4lQZJ1Sj","title":"Create a Content Pack","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_BQwUa","description":"Create a content pack for the Cortex XSOAR 6.15 Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"qIzcn476Tj7xBRH3lXGn","title":"Resubmit a Content Pack","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_BQwUa","description":"Resubmit an updated content pack to the Cortex XSOAR 6.15 Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"Xj6igR0roGKkBhsj69y1","title":"Remote Repositories in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 remote repositories for content development, synchronization, and deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"ZyJToFFgY42AUSW1E9Cf","title":"Content Management in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 content with remote repositories and CI/CD workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"8ihNDHWRFnj4736Y3v1C","title":"Remote Repositories Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/remote-repositories-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand remote repository workflows and configuration in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"U9bMifRSo9Cn7LORRSeL","title":"Configure a Remote Repository on a Development Machine","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_BQwUa","description":"Configure a Cortex XSOAR 6.15 remote repository on a development machine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"s2qIdOkIgxF9j05U3WFc","title":"Configure a Remote Repository on the Production Machine","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-the-production-machine","siteSpaceId":"sitesp_BQwUa","description":"Configure a Cortex XSOAR 6.15 remote repository on a production machine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"CFOdohJMkOKyEcdXktsx","title":"Edit and Push Content to a Remote Repository","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_BQwUa","description":"Edit and push Cortex XSOAR 6.15 content to a remote repository.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"EBW9mx9qrSNdQds8lGv5","title":"Upgrade Remote Repositories from Versions 5.5 and below","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/upgrade-remote-repositories-from-versions-5.5-and-below","siteSpaceId":"sitesp_BQwUa","description":"Upgrade remote repository environments from Cortex XSOAR 5.5 to Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"PCO5WnOnFMiLAoP9hpDx","title":"Troubleshoot a Remote Repository Configuration","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 remote repository configuration and content workflow issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"bHhvmL0x1a8576SORfwS","title":"Troubleshoot a Remote Repository Definition","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-definition","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 remote repository definition issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"p33zd8PV9h7Bi2GNghaQ","title":"Troubleshoot Editing and Pushing Content","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-editing-and-pushing-content","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot editing and pushing Cortex XSOAR 6.15 remote repository content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"CihzaHFpcOYcObMwgPat","title":"Troubleshoot Content Issues","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-content-issues","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 content issues in remote repositories.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"3TjU13QJnR3YWr4h3C1P","title":"Troubleshoot a Remote Repository with an HTTP Proxy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-with-an-http-proxy","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot a Cortex XSOAR 6.15 remote repository using an HTTP proxy.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"AYMEALyjDJmkKHWvkWBh","title":"Engines","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines","siteSpaceId":"sitesp_BQwUa","description":"Install, manage, configure, and troubleshoot Cortex XSOAR 6.15 engines.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"YydzzUOmbsNLTyfqStfX","title":"Cortex XSOAR Engines Overview","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/cortex-xsoar-engines-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 engine architecture, installation, configuration, and load balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"HQ2ueqHMM95O07fAr6t4","title":"Engine Installation","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/engine-installation","siteSpaceId":"sitesp_BQwUa","description":"Review Cortex XSOAR 6.15 engine requirements and supported installation methods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"zYrLqMbVNhZUKp6xm6pT","title":"Install a Cortex XSOAR Engine","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine","siteSpaceId":"sitesp_BQwUa","description":"Install a Cortex XSOAR 6.14 engine on a supported host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"ysyNBp8LlAooLZdCLiV9","title":"Install a Signed Engine","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/engine-installation/install-a-signed-engine","siteSpaceId":"sitesp_BQwUa","description":"Install a signed Cortex XSOAR 6.15 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"5dPv23Vnm9cP3ev3bMe7","title":"Install a Cortex XSOAR Engine Offline","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine-offline","siteSpaceId":"sitesp_BQwUa","description":"Install a Cortex XSOAR 6.14 engine in an offline environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"dY00Dj1b80r33dijf6ps","title":"Use an Engine in an Integration","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_BQwUa","description":"Use a Cortex XSOAR 6.15 engine or load-balancing group with an integration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"rKPBw5ci5tLMfUMlBsa0","title":"Run a Script using an Engine","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_BQwUa","description":"Run Cortex XSOAR 6.15 scripts and automations on an engine or load-balancing group.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"Iaj5UiREYjMmrh6wVC7c","title":"Manage Engines","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 engines and load-balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"QO1gPiXO56cLCzrCsD6h","title":"Configure Engines","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 engine workers, connectivity, communication tasks, and notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"CtZmDra18fM5I8INa73q","title":"Edit the Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration","siteSpaceId":"sitesp_BQwUa","description":"Edit configuration settings for a Cortex XSOAR 6.15 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"ffVbxfvw36CBwDZzryKV","title":"Common Properties When Editing an Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/common-properties-when-editing-an-engine-configuration","siteSpaceId":"sitesp_BQwUa","description":"Reference common Cortex XSOAR 6.15 engine configuration properties.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"8Vag8V9bXOKURyYdgDUn","title":"Configure the Engine to Use a Web Proxy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_BQwUa","description":"Configure a Cortex XSOAR 6.15 engine to use a web proxy.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"z4ewHO1N3U0WFe7s35qB","title":"Configure the Engine to Call the Server Without Using a Proxy","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_BQwUa","description":"Configure a Cortex XSOAR 6.15 engine to connect without a proxy.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"xQGQJVX2Dc1mJHtm3jk4","title":"Configure the Number of Workers for the Server","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/configure-the-number-of-workers-for-the-server","siteSpaceId":"sitesp_BQwUa","description":"Configure the number of workers for a Cortex XSOAR 6.15 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"YDKK3ojxSQ2GdI1w9hf6","title":"Configure Access to Communication Tasks through an Engine","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/configure-access-to-communication-tasks-through-an-engine","siteSpaceId":"sitesp_BQwUa","description":"Configure communication task access through a Cortex XSOAR 6.15 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"ScvIPdb7S4OYBq7UJWNE","title":"Configure an Engine to Use Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_BQwUa","description":"Configure custom certificates for a Cortex XSOAR 6.15 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"Zl4LPs5VQ0GFAC6GhJ4l","title":"Notify Users When an Engine Disconnects","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/configure-engines/notify-users-when-an-engine-disconnects","siteSpaceId":"sitesp_BQwUa","description":"Notify users when a Cortex XSOAR 6.15 engine disconnects.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"VmSkTxmFEc3WZeXCn3Fi","title":"Remove an Engine","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_BQwUa","description":"Remove a Cortex XSOAR 6.15 engine from a supported operating system.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"EzDtzS1B1WEnXfKQoSqG","title":"Troubleshoot Cortex XSOAR Engines","pathname":"/xsoar-6-administrator-guide/6.15/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 engines with logs, errors, and diagnostics.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"zoBYi1RwjOtbFCpjLmz1","title":"Customize and Configure Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Customize and configure Cortex XSOAR 6.15 incidents, playbooks, data, reporting, and system settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"}]},{"id":"XT7Kj3SFEYGN7OVawoJg","title":"Incidents","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 incident types, workflows, fields, layouts, and access controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"Ja2OZCau8jowYOZ6rS2F","title":"Incident Lifecycle","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle","siteSpaceId":"sitesp_BQwUa","description":"Incidents are potential security threats analysts identify and remediate in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"X1NGSSiqoOgHrEx4VXQp","title":"Fetch Incidents From an Integration Instance","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_BQwUa","description":"Fetch incidents from an integration instance in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Lifecycle"}]},{"id":"v0eHW14ShGl1cyFX8QPq","title":"Receive Notification on an Incident Fetch Error","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/receive-notification-on-an-incident-fetch-error","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 notifications for incident fetch errors.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Lifecycle"}]},{"id":"8y4rnwB6QsaXaWfyVyo5","title":"Incident Context Data","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-context-data","siteSpaceId":"sitesp_BQwUa","description":"Learn about incident context data in Cortex XSOAR 6.15 and how to access it.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"Nx9Fawoy0sZjwCeRAAn4","title":"Incident Customization","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization","siteSpaceId":"sitesp_BQwUa","description":"Customize incidents in Cortex XSOAR 6.15, including types, fields, layouts, and indicator extraction.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"Z3AxuPMQVLGYKGWprPId","title":"Create an Incident Type","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_BQwUa","description":"Create and configure incident types in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"3GbPrbFTGWsH8R5m9Myh","title":"Customize Incident Layouts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/customize-incident-layouts","siteSpaceId":"sitesp_BQwUa","description":"Customize incident layouts for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"WOx4sKXGXwFnOhWYuRli","title":"Incident Fields","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields","siteSpaceId":"sitesp_BQwUa","description":"Configure incident fields for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"ystd0dJ1PBEgE09e5rA8","title":"Create a Custom Incident Field","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-custom-incident-field","siteSpaceId":"sitesp_BQwUa","description":"Create custom incident fields in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"bcjiMQgc4AFllPN1VlZv","title":"Create a Grid Field for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-grid-field-for-an-incident-type","siteSpaceId":"sitesp_BQwUa","description":"Create grid fields for Cortex XSOAR 6.15 incident types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"bc863NTgwUZ0dPxRsjCB","title":"Use Scripts with the Grid Field","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/use-scripts-with-the-grid-field","siteSpaceId":"sitesp_BQwUa","description":"Use scripts with Cortex XSOAR 6.15 grid incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"DfpsZrFFXDUMsheNV8V2","title":"Incident Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/incident-field-trigger-scripts","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 incident field trigger scripts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"nlghI7lycTCljDmaUNmn","title":"Troubleshoot Closing Case Incident after Changing Field Type","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/troubleshoot-closing-case-incident-after-changing-field-type","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 cases after changing an incident field type.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"Akd1eYOsXAvqG1nKi5fU","title":"Create an Evidence Field","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-an-evidence-field","siteSpaceId":"sitesp_BQwUa","description":"Create evidence fields for Cortex XSOAR 6.15 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"hLlfU3cqY74UqxTGCFHh","title":"Incident De-Duplication","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication","siteSpaceId":"sitesp_BQwUa","description":"De-duplicate Cortex XSOAR 6.15 incidents manually or automatically with rules, scripts, and playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"doUEKTn16wXQQ4RfotRa","title":"Manually De-Duplicate Incidents","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/manually-de-duplicate-incidents","siteSpaceId":"sitesp_BQwUa","description":"Manually de-duplicate Cortex XSOAR 6.15 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident De-Duplication"}]},{"id":"CK05i7dSiMfYF2pQyKVD","title":"Automatic De-Duplication Using Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/automatic-de-duplication-using-scripts","siteSpaceId":"sitesp_BQwUa","description":"Automate Cortex XSOAR 6.15 incident de-duplication with scripts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident De-Duplication"}]},{"id":"lqxb24IoyRV1sZBzvIRg","title":"Pre-Process Rules","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 pre-process rules to automate actions on incoming incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"IANYmJhzO5sNGSIS4lfa","title":"Create Pre-Process Rules for Incidents","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/create-pre-process-rules-for-incidents","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 pre-process rules for incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Pre-Process Rules"}]},{"id":"jJi3JxEViMFa1M6eW6iS","title":"Rule Actions for Pre-Process Rules","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/create-pre-process-rules-for-incidents/rule-actions-for-pre-process-rules","siteSpaceId":"sitesp_BQwUa","description":"Configure rule actions for Cortex XSOAR 6.15 pre-process rules.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Pre-Process Rules"},{"label":"Create Pre-Process Rules for Incidents"}]},{"id":"BQhq23y9khvudjHzdYDo","title":"Post Processing for Incidents","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 post-processing scripts to automate actions before incident closure.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"e8ZOOrUOjwxPesoKnyty","title":"Create a Post-Processing Script","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/create-a-post-processing-script","siteSpaceId":"sitesp_BQwUa","description":"Create post-processing scripts for Cortex XSOAR 6.15 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Post Processing for Incidents"}]},{"id":"kuEKfmAPRc1ddamrlZ7t","title":"Add a Post-Processing Script to the Incident Type","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/add-a-post-processing-script-to-the-incident-type","siteSpaceId":"sitesp_BQwUa","description":"Add post-processing scripts to Cortex XSOAR 6.15 incident types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Post Processing for Incidents"}]},{"id":"As56I2YFzveMbEAIFAlB","title":"War Room Overview","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview","siteSpaceId":"sitesp_BQwUa","description":"Use the Cortex XSOAR 6.15 War Room for real-time incident investigation, commands, and collaboration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"mSSEmiRkxop1ImIWwfxr","title":"Schedule a Command","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/schedule-a-command","siteSpaceId":"sitesp_BQwUa","description":"Schedule commands in the Cortex XSOAR 6.15 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"ZZRVdCD8obsg7Lalzz65","title":"Add a Custom Widget in the War Room","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/add-a-custom-widget-in-the-war-room","siteSpaceId":"sitesp_BQwUa","description":"Add custom widgets to the Cortex XSOAR 6.15 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"ltgJWyoyj5DRmdtfYNsm","title":"War Room Indexing","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing","siteSpaceId":"sitesp_BQwUa","description":"Configure War Room indexing in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"illuvj4Bci079UE0jbQ4","title":"Index War Room Entries Using Bolt DB","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-bolt-db","siteSpaceId":"sitesp_BQwUa","description":"Index Cortex XSOAR 6.15 War Room entries with Bolt DB.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"7D82D3HXRd9TMNaNQCBK","title":"Index War Room Entries Using Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-elasticsearch","siteSpaceId":"sitesp_BQwUa","description":"Index Cortex XSOAR 6.15 War Room entries with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"QNNxWDka0J8S6WsrzHVu","title":"Incident Access Control Configuration","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 incident and investigation access with role-based access controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"8KL0qac6wF7Hcvq2Jcqm","title":"Limit Access to Investigations using RBAC","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/limit-access-to-investigations-using-rbac","siteSpaceId":"sitesp_BQwUa","description":"Limit Cortex XSOAR 6.15 investigation access with role-based controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Access Control Configuration"}]},{"id":"az0suAvotVXRpjKrOuK5","title":"Restrict an Investigation","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/restrict-an-investigation","siteSpaceId":"sitesp_BQwUa","description":"Restrict access to Cortex XSOAR 6.15 investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Access Control Configuration"}]},{"id":"YnAopCsjTp1cJM6tCR2S","title":"Classification and Mapping","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping","siteSpaceId":"sitesp_BQwUa","description":"Classify and map incoming integration data to Cortex XSOAR 6.15 incidents and indicators.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"tZIrSUeltqpyuJ01EBxe","title":"Classify Events Using a Classification Key","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/classify-events-using-a-classification-key","siteSpaceId":"sitesp_BQwUa","description":"Classify events with a classification key in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Classification and Mapping"}]},{"id":"VArubug3Tdn2mjC2QBLu","title":"Create a Mapper","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/create-a-mapper","siteSpaceId":"sitesp_BQwUa","description":"Create mappers for Cortex XSOAR 6.15 incident classification and mapping.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Classification and Mapping"}]},{"id":"bPNJcv15ZOyRJgHKh3BL","title":"Incident Mirroring","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-mirroring","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 incident mirroring with third-party applications and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"whoeoVBl7yutsW1BKR2i","title":"Customize Incident Close Reasons","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/customize-incident-close-reasons","siteSpaceId":"sitesp_BQwUa","description":"Customize close reasons for incidents by adding a server configuration in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"9P1tTYhx2ZGoWUTy6OoC","title":"Change the Display Name of Security Incidents","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/change-the-display-name-of-security-incidents","siteSpaceId":"sitesp_BQwUa","description":"Add a Cortex XSOAR 6.15 server configuration to change the name of security incidents from ‘incident’ to another term - cases, issues, etc.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"Az3DGU9N4OnlyA6Kg8AM","title":"Playbooks","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_BQwUa","description":"Build and manage Cortex XSOAR 6.15 playbooks for security orchestration and response.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"SBMgRj1M0RlKJ5nSC6ib","title":"What Are Playbooks?","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/what-are-playbooks","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 playbooks for security process automation and incident remediation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"Ctu251015EQ6vsbD9izX","title":"Playbook Development","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-development","siteSpaceId":"sitesp_BQwUa","description":"Develop Cortex XSOAR 6.15 playbooks to automate security workflows and response actions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"kIUmDRlSOvw2UBtFWtsg","title":"Configure IoT Security Playbooks","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-iot-security-playbooks","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 IoT Security playbooks for automated security workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"E8llIVJOxq6winIoBxtm","title":"Manage Playbook Settings","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 playbook settings, access, triggers, and Quiet Mode.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"7gvX5inH2S5R2LhSwEDX","title":"Obtain Playbook Metadata","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings/obtain-playbook-metadata","siteSpaceId":"sitesp_BQwUa","description":"Analyze incident playbook task inputs, outputs, storage use, and task types in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Manage Playbook Settings"}]},{"id":"npiu4iIC1dY91YiYuSoL","title":"Version Control","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/version-control","siteSpaceId":"sitesp_BQwUa","description":"Save and manage Cortex XSOAR 6.15 playbook versions during development.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"n0v4qLX8UUysuO9e3dcO","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields","siteSpaceId":"sitesp_BQwUa","description":"Reference fields for defining Cortex XSOAR 6.15 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"lf4r8urvMkw9WSimx2Wy","title":"Create Section Headers","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-section-headers","siteSpaceId":"sitesp_BQwUa","description":"Create section headers to organize Cortex XSOAR 6.15 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"aiiQalLaqZuSN23KBehN","title":"Create a Conditional Task","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-a-conditional-task","siteSpaceId":"sitesp_BQwUa","description":"Create conditional tasks for branching Cortex XSOAR 6.15 playbook workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"8zWrFw0YEeHpFB4RNfXW","title":"Communication Tasks","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 playbook communication tasks for analyst interactions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"tYxmfoz2h2qBXPzZLtWR","title":"Create an Ask Task","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 Ask tasks to collect analyst responses.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"YTOQI1ClO2CybwAsZMXB","title":"Ask Task Examples","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/ask-task-examples","siteSpaceId":"sitesp_BQwUa","description":"Review Cortex XSOAR 6.15 Ask task examples for playbook communication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"aFopsDwL4ZI1BYnIxYx4","title":"Customize an Ask Task","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/customize-an-ask-task","siteSpaceId":"sitesp_BQwUa","description":"Customize Cortex XSOAR 6.15 Ask tasks for analyst communication workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"rBlKeTtxDBMjHzd1DrGW","title":"Create a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 data collection tasks to gather analyst input.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"UyEdNT18KYZF2FFDROkJ","title":"Data Collection Task Examples","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/data-collection-task-examples","siteSpaceId":"sitesp_BQwUa","description":"Review Cortex XSOAR 6.15 data collection task examples for playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"6tjYgJYQsopbwKCMIAAd","title":"Customize a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/customize-a-data-collection-task","siteSpaceId":"sitesp_BQwUa","description":"Customize Cortex XSOAR 6.15 data collection tasks for playbook workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"GPPUdJdF2bVZa0C9iNVa","title":"Customize the SOC Name","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/customize-the-soc-name","siteSpaceId":"sitesp_BQwUa","description":"Customize the SOC name shown in Cortex XSOAR 6.15 communication tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"ylSTCh0hL6AVxSxA2ZGl","title":"Create Communication Task Authentication","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-communication-task-authentication","siteSpaceId":"sitesp_BQwUa","description":"Configure authentication for Cortex XSOAR 6.15 communication tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"LOFHJVg27a9j8R7zrXCw","title":"Add Ad Hoc Tasks to a Work Plan","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/add-ad-hoc-tasks-to-a-work-plan","siteSpaceId":"sitesp_BQwUa","description":"Add ad hoc tasks to Cortex XSOAR 6.15 incident work plans.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"6MyZpqnwEIluaYZAk1rX","title":"Handle Errors in a Playbook","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/handle-errors-in-a-playbook","siteSpaceId":"sitesp_BQwUa","description":"Handle task errors in Cortex XSOAR 6.15 playbooks and automation workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"ueFuuYooWSuNqowfMSLw","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/playbook-task-fields","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 fields for communication playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"fTJF7RO3gcEgaNe6Mbqg","title":"Playbook Inputs and Outputs","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 playbook inputs and outputs for task data flow.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"gdy4KBZIRvn6xnKFoEYC","title":"Task Cheat Sheet","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs/task-cheat-sheet","siteSpaceId":"sitesp_BQwUa","description":"Use this Cortex XSOAR 6.15 cheat sheet for playbook task configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Inputs and Outputs"}]},{"id":"DWbh0uN0VSTvs9MW8L8N","title":"Extend Context","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context","siteSpaceId":"sitesp_BQwUa","description":"Extend Cortex XSOAR 6.15 context with integration and command output data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"wzZegvQZWWiy50OCpQyL","title":"Extend Context in a Playbook Task","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-in-a-playbook-task","siteSpaceId":"sitesp_BQwUa","description":"Extend context within a Cortex XSOAR 6.15 playbook task.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"28XP6UJBgbVJ00PW0cz8","title":"Extend Context using the Command Line","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-using-the-command-line","siteSpaceId":"sitesp_BQwUa","description":"Extend Cortex XSOAR 6.15 context using command-line commands.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"lnsHXbeRNQI5J3xyJbUy","title":"Use DT syntax to get select keys from a list of dictionaries","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/use-dt-syntax-to-get-select-keys-from-a-list-of-dictionaries","siteSpaceId":"sitesp_BQwUa","description":"Use DT syntax in Cortex XSOAR 6.15 to select dictionary list keys.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"425T8YPvdeBrICHedJG0","title":"Filters and Transformers","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers","siteSpaceId":"sitesp_BQwUa","description":"Use Cortex XSOAR 6.15 filters and transformers to manipulate playbook data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"dxff0Jix5fmaDqsZ7x0V","title":"Create Filters and Transformers in a Playbook","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook","siteSpaceId":"sitesp_BQwUa","description":"Create filters and transformers for Cortex XSOAR 6.15 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"BlwSnxAdpGdzCVie5jnz","title":"Create a Filter Example","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-example","siteSpaceId":"sitesp_BQwUa","description":"Create a Cortex XSOAR 6.15 playbook filter with this example.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"xmB2vxrB1OmWrIdB01yM","title":"Create a Filter (Advanced) Example","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-advanced-example","siteSpaceId":"sitesp_BQwUa","description":"Create advanced Cortex XSOAR 6.15 playbook filters with this example.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"rlUXvrWZquJKI4E0IEeJ","title":"Filter Operators","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators","siteSpaceId":"sitesp_BQwUa","description":"Reference filter operators for Cortex XSOAR 6.15 playbook data processing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"NpAr9pZDw2d81DTfXi8o","title":"Built-in Filters","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/built-in-filters","siteSpaceId":"sitesp_BQwUa","description":"Use built-in filters to transform Cortex XSOAR 6.15 playbook data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"hgvHtb4ixO1gRYoGKfhx","title":"Transformers Operators","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/transformers-operators","siteSpaceId":"sitesp_BQwUa","description":"Reference transformer operators for Cortex XSOAR 6.15 playbook data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"wHnQ5KMyY1OBfh9u17Hy","title":"Create Custom Filter and Transformer Operators","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/create-custom-filter-and-transformer-operators","siteSpaceId":"sitesp_BQwUa","description":"Create custom filters and transformers for Cortex XSOAR 6.15 playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"EUgGTBqub4b6lGZ9AZOa","title":"Automations","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations","siteSpaceId":"sitesp_BQwUa","description":"Create and manage Cortex XSOAR 6.15 automations for playbook workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"YI0BF6Y41xvKFZfrCuIV","title":"Special Automation Tags","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/special-automation-tags","siteSpaceId":"sitesp_BQwUa","description":"Reference special automation tags in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Automations"}]},{"id":"QUD2Gkmw7mdR63fAdisd","title":"Common Scripts to use in Automations","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/common-scripts-to-use-in-automations","siteSpaceId":"sitesp_BQwUa","description":"Use common Cortex XSOAR 6.15 scripts in automation workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Automations"}]},{"id":"YHAraSPb45UHysT0ZAWw","title":"Configure a Sub-playbook Loop","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_BQwUa","description":"Configure a Cortex XSOAR 6.15 sub-playbook to run in a loop.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"8rNiIme7lpre7PPc9Hn4","title":"Playbook Polling","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-polling","siteSpaceId":"sitesp_BQwUa","description":"Use the Cortex XSOAR 6.15 Generic Polling playbook to check remote process status.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"HFcrqMi2KAF2cMEML8Gt","title":"Create Incident Fields in a Playbook","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/create-incident-fields-in-a-playbook","siteSpaceId":"sitesp_BQwUa","description":"Use the Cortex XSOAR 6.15 setIncident automation to update system incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"34Mbc0Vqbwfrd1v4isqv","title":"Playbook Testing","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing","siteSpaceId":"sitesp_BQwUa","description":"Test Cortex XSOAR 6.15 playbooks with ingested incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"IISRyUyUo35HiwssoNvw","title":"Debug a Playbook","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debug-a-playbook","siteSpaceId":"sitesp_BQwUa","description":"Debug Cortex XSOAR 6.15 playbooks to inspect tasks and execution flow.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Testing"}]},{"id":"9Jci1HF0Efs5YjcWecDU","title":"Debugger Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debugger-troubleshooting","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot the Cortex XSOAR 6.15 playbook debugger.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Testing"}]},{"id":"VOkHkHHWIRjl0Uv0yHIj","title":"Playbook Best Practices","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_BQwUa","description":"Follow best practices for developing and managing Cortex XSOAR 6.15 playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"Hof3WgsdtmX058QZVOEZ","title":"Jobs","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_BQwUa","description":"Schedule Cortex XSOAR 6.15 playbooks with time-triggered and feed-triggered jobs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"dxmLUenzQLPffA8m2aDU","title":"Create a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_BQwUa","description":"Create a time-triggered Cortex XSOAR 6.15 job to run a playbook.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"tUzo6DtOC6linhREJGvb","title":"Create a Job Triggered by a Delta in Feed","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-feed","siteSpaceId":"sitesp_BQwUa","description":"Create a Cortex XSOAR 6.15 job triggered by feed changes.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"JCyKfzhHZElzVSsppJlC","title":"Time Triggered Job Parameters","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/time-triggered-job-parameters","siteSpaceId":"sitesp_BQwUa","description":"Describe parameters for creating a time-triggered job in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"F97U0SRr7c9YJlPBN5VI","title":"Process Indicators Using a Job Triggered By Delta","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/process-indicators-using-a-job-triggered-by-delta","siteSpaceId":"sitesp_BQwUa","description":"Process indicators with a feed-triggered Cortex XSOAR 6.15 job.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"E9PvQYeTDvuVEvpYH0MN","title":"Add Indicators to SIEM Using a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/add-indicators-to-siem-using-a-time-triggered-job","siteSpaceId":"sitesp_BQwUa","description":"Send indicators to a SIEM with a time-triggered Cortex XSOAR 6.15 job.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"NmBiCXCaV8mXjw3hq6yU","title":"Work with SLAs","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas","siteSpaceId":"sitesp_BQwUa","description":"Create and manage Cortex XSOAR 6.15 SLAs, timers, triggers, scripts, and risk thresholds.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"3N2GDOFDLjdbRfs6O4CU","title":"SLA Overview","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/sla-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand SLA fields, timers, and actions in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"6rRw8888DTNdROqgtWpo","title":"Create an SLA Field","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-field","siteSpaceId":"sitesp_BQwUa","description":"Create SLA and timer fields in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"k9oyBOEQfzDMwoEJPKic","title":"Manage SLA and Timer Fields in an Incident","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/manage-sla-and-timer-fields-in-an-incident","siteSpaceId":"sitesp_BQwUa","description":"Manage incident SLA and timer fields in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"Kjf9zgywZwBQwUvTv7aR","title":"Create an SLA Trigger","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-trigger","siteSpaceId":"sitesp_BQwUa","description":"Create SLA triggers for Cortex XSOAR 6.15 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"7hJ4SLmJue2KkhbYLoPC","title":"Customize SLA Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/customize-sla-scripts","siteSpaceId":"sitesp_BQwUa","description":"Customize SLA scripts for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"QCvjuPpTr6HwXWzgBXDY","title":"Search Incidents using SLA and Timer Fields","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/search-incidents-using-sla-and-timer-fields","siteSpaceId":"sitesp_BQwUa","description":"Search Cortex XSOAR 6.15 incidents by SLA and timer fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"4EaMi8y1FsegpYZhCFBa","title":"Configure the Global Risk Threshold","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_BQwUa","description":"Configure the global SLA risk threshold in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"qkBZOayeyH32dL7dhrf1","title":"Machine Learning","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning","siteSpaceId":"sitesp_BQwUa","description":"Use Cortex XSOAR 6.15 machine learning models for phishing classification and automation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"gvQKrQwlCTgK6p8F4snU","title":"Machine Learning Capabilities","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-capabilities","siteSpaceId":"sitesp_BQwUa","description":"Explore Cortex XSOAR 6.15 machine learning and phishing classifier capabilities.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"sMYCnEPXnGy4QtFINtcJ","title":"Machine Learning Models","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-models","siteSpaceId":"sitesp_BQwUa","description":"Use Cortex XSOAR 6.15 machine learning models for incident analysis.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"nekeiy50DUNYxiX56u60","title":"Use the Phishing Classifier in Production","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/use-the-phishing-classifier-in-production","siteSpaceId":"sitesp_BQwUa","description":"Use the Cortex XSOAR 6.15 phishing classifier in production.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"fcdMfi8ulFclqmwcoQrv","title":"Create a Machine Learning Model","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/create-a-machine-learning-model","siteSpaceId":"sitesp_BQwUa","description":"Create a Cortex XSOAR 6.15 machine learning model for phishing classification.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"fHpFZXnI951HHFZ9Dxzp","title":"Phishing Classifier Demo","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/phishing-classifier-demo","siteSpaceId":"sitesp_BQwUa","description":"Try the Cortex XSOAR 6.15 phishing classifier demonstration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"VyYtnGcwiuNou7PC1iXT","title":"Train a Phishing Classifier on Non-English Languages","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/train-a-phishing-classifier-on-non-english-languages","siteSpaceId":"sitesp_BQwUa","description":"Train a Cortex XSOAR 6.15 phishing classifier for non-English language emails.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"md4lCrsTMGdCFCK7MIxa","title":"Additional Machine Learning Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/additional-machine-learning-scripts","siteSpaceId":"sitesp_BQwUa","description":"Reference additional Cortex XSOAR 6.15 machine learning scripts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"ciZhfmegqIJm8xBTqkxR","title":"Lists","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists","siteSpaceId":"sitesp_BQwUa","description":"Create and manage Cortex XSOAR 6.15 lists for playbooks and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"7sOgullMJ7sfIpEGwVdw","title":"Work With Lists","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists","siteSpaceId":"sitesp_BQwUa","description":"Manage lists in Cortex XSOAR 6.15 that automations and playbooks can access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"qm9HcPXV8PUC6K3NY2Xf","title":"Work with JSON Lists","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists/work-with-json-lists","siteSpaceId":"sitesp_BQwUa","description":"Extract, filter, and transform JSON list data in Cortex XSOAR 6.15 playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"},{"label":"Work With Lists"}]},{"id":"6cSSun6I5UvF19La4Gex","title":"Create a List","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 lists that scripts can parse and modify.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"1NL3F2YIFJPMsMEXxyqx","title":"Set the List Separator Character","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/set-the-list-separator-character","siteSpaceId":"sitesp_BQwUa","description":"Set the list separator character in Cortex XSOAR 6.15. The default is a comma.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"CQPfuThnYzPSXIGbUaNt","title":"Transform a List into an Array","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_BQwUa","description":"Transform a list into an array for playbook tasks and instance mapping in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"uDn3XGg1sjFYYWQvCXXj","title":"Indicators","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 threat indicators, including types, fields, extraction, enrichment, expiration, and feeds.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"RdhEZIBK7pGJ01tiBWEj","title":"Indicator Concepts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-concepts","siteSpaceId":"sitesp_BQwUa","description":"Learn Cortex XSOAR 6.15 threat intelligence concepts, including fetching, configuring, enriching, and exporting indicators.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"KyBkeoUEVaWc0HklcNm1","title":"Indicator Verdict","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-verdict","siteSpaceId":"sitesp_BQwUa","description":"Understand how Cortex XSOAR 6.15 assigns and uses indicator verdicts from the most reliable reputation source.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"h8peUpfpBZ5Veum2gKy0","title":"Indicator Ingestion","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-ingestion","siteSpaceId":"sitesp_BQwUa","description":"Understand how Cortex XSOAR 6.15 detects, ingests, and processes threat indicators from supported sources.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"kxPKyfH2A80t7zCth3xd","title":"Indicator Customization","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization","siteSpaceId":"sitesp_BQwUa","description":"Customize Cortex XSOAR 6.15 indicator types, fields, scripts, profiles, and layouts for threat intelligence workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"HFsKGC2H8BbYIYIXgMLF","title":"Indicator Types","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 indicator types, associated fields, profiles, and scripts for threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"sT5p0VpGwiutEVrNr5go","title":"File Indicators","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 file indicators and their associated hash values for threat intelligence workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"pUgr0MYCzNhpmNwvoGPX","title":"File Indicator Merging Strategy","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators/file-indicator-merging-strategy","siteSpaceId":"sitesp_BQwUa","description":"Understand how Cortex XSOAR 6.15 merges file indicators using their hash values.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"},{"label":"File Indicators"}]},{"id":"WpKdMErxDg1qp4ugvDLa","title":"Create an Indicator Type","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_BQwUa","description":"Create a custom Cortex XSOAR 6.15 indicator type for structured threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"es5tnt04ru5byd95QURH","title":"Indicator Type Profile","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 indicator type profiles to control indicator fields and behavior.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"JRGgNz1rqIMQJ0JXEmTx","title":"Map Custom Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_BQwUa","description":"Map custom fields to Cortex XSOAR 6.15 indicator data for consistent threat intelligence management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"zTkVAvgEa1yy6PVswey9","title":"Formatting Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 formatting scripts to normalize indicator values and output.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"dsNvkoIIyjbUjRa4zZrS","title":"Enhancement Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 enhancement scripts to enrich indicators on demand.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"bnLysqX6ImDFi5Bt6fyx","title":"Reputation Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 reputation scripts that calculate and update indicator verdicts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"r3ISWKgGYKI8iyNwejmN","title":"Reputation Commands","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 reputation commands that calculate and update indicator verdicts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"N0VXpVBvfzvPhgbORrj9","title":"Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_BQwUa","description":"Create and configure Cortex XSOAR 6.15 indicator fields for structured threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"hioYFqj1lB5emPPTBize","title":"Create a Custom Indicator Field","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_BQwUa","description":"Create a custom Cortex XSOAR 6.15 indicator field for tailored threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"cHs4nzjoWCtI3iVAvxh6","title":"Configure the HTML Field","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field/configure-the-html-field","siteSpaceId":"sitesp_BQwUa","description":"Configure HTML indicator fields in Cortex XSOAR 6.15 to display rich threat intelligence content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"},{"label":"Create a Custom Indicator Field"}]},{"id":"IFxK3hhBmKrpymhxtvLF","title":"Indicator Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_BQwUa","description":"Run Cortex XSOAR 6.15 scripts automatically when indicator field values change.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"9a6CnfTCOyHURQQdxXyQ","title":"Indicator Layouts","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_BQwUa","description":"Customize Cortex XSOAR 6.15 layouts for indicator types and threat intelligence investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"JgRxHgJNn2zSw94qLQwK","title":"Customize an Indicator Type Layout","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_BQwUa","description":"Customize a Cortex XSOAR 6.15 layout for an indicator type and its threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"YsmuTsuU1JVnY2KVEwgA","title":"Add a Script in the Indicator Layout","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_BQwUa","description":"Add dynamic script output to a Cortex XSOAR 6.15 indicator layout.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"4VfyLC3vQw1GVr8vKiXW","title":"Indicator Extraction","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 indicator extraction and enrichment from incident fields, playbook tasks, and CLI commands.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"9EPerQKDDQ1yevtX7p6P","title":"Indicator Extraction Modes","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 indicator extraction modes and their behavior for incident data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"jx61g6gKfuQQc1oVqMQ2","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 indicator extraction rules for incident types and fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"EWJyxREu2eD8v1MQALcu","title":"Run Indicator Extraction in the CLI","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_BQwUa","description":"Extract and enrich Cortex XSOAR 6.15 indicators from the command-line interface.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"Yrkrp0exsfhsstDp7IfO","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 indicator extraction rules for playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"JJXafwgqnPe3mUq126L5","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_BQwUa","description":"Disable Cortex XSOAR 6.15 indicator extraction for selected automations or integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"1o0zwRFSlUdnursFSHtU","title":"Indicator Expiration","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-expiration","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 indicator expiration statuses, default methods, and retention periods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"s2psXnTGD2Ay9QmDtMVF","title":"Feed Integrations","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations","siteSpaceId":"sitesp_BQwUa","description":"Use Cortex XSOAR 6.15 feed integrations to fetch and process threat indicators from intelligence sources.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"JqkV6a3OTDFW8AXm1PHk","title":"Set the Source Reliability of Enrichment Integrations","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations/set-the-source-reliability-of-enrichment-integrations","siteSpaceId":"sitesp_BQwUa","description":"Set Cortex XSOAR 6.15 source reliability for enrichment integrations and indicator reputation data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Feed Integrations"}]},{"id":"2mSMBhOPAQ4iwgeIpjrP","title":"Dashboards","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards","siteSpaceId":"sitesp_BQwUa","description":"Create, customize, share, and manage Cortex XSOAR 6.15 dashboards and widgets for security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"0b1dO2zCZavbG7hma87H","title":"Dashboard Overview","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/dashboard-overview","siteSpaceId":"sitesp_BQwUa","description":"Explore Cortex XSOAR 6.15 dashboards, customizable widgets, filters, sharing, imports, exports, and dashboard management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"4RlnQGIZKalQZ0ejK7Ix","title":"Create a Dashboard","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/create-a-dashboard","siteSpaceId":"sitesp_BQwUa","description":"Create and customize a Cortex XSOAR 6.15 dashboard with widgets, data views, and security operations insights.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"rvbftxEBEIWsDUws6u7j","title":"Add a Widget to a Dashboard","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/add-a-widget-to-a-dashboard","siteSpaceId":"sitesp_BQwUa","description":"Add and configure widgets on Cortex XSOAR 6.15 dashboards, including widget parameters and date ranges.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"jIi7ttFXXqLIqHYqX9Ht","title":"Share a Dashboard","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/share-a-dashboard","siteSpaceId":"sitesp_BQwUa","description":"Share Cortex XSOAR 6.15 dashboards with users by role and manage permissions for shared dashboard access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"rYFDv2CAFJH3aBw3RQY2","title":"Edit a Dashboard","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/edit-a-dashboard","siteSpaceId":"sitesp_BQwUa","description":"Edit Cortex XSOAR 6.15 dashboards by managing widgets, date ranges, layout, size, and position.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"vDU8cDIalrzMwL3sBFIG","title":"Reports","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports","siteSpaceId":"sitesp_BQwUa","description":"Create, customize, schedule, and troubleshoot Cortex XSOAR 6.15 reports for security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"o8lIQv2XLvPh5X1eJ5pv","title":"Reports Overview","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/reports-overview","siteSpaceId":"sitesp_BQwUa","description":"Explore Cortex XSOAR 6.15 reporting features, including report creation, customization, scheduling, formats, and branding.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"11HWVSh0PeNti77sWpNX","title":"Create a Report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-a-report","siteSpaceId":"sitesp_BQwUa","description":"Create and customize Cortex XSOAR 6.15 reports with widgets, schedules, recipients, and PDF, CSV, or Word output.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"PEbYrj4bhmoBOlY8ESem","title":"Schedule a report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/schedule-a-report","siteSpaceId":"sitesp_BQwUa","description":"Schedule Cortex XSOAR 6.15 reports with email recipients, role restrictions, start dates, and Cron expressions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"eQJlqifZ1SDMAniiRcu8","title":"Customize the Email When Sending a Report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/customize-the-email-when-sending-a-report","siteSpaceId":"sitesp_BQwUa","description":"Customize Cortex XSOAR 6.15 report email subjects, message bodies, and HTML content for scheduled delivery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"hj2CUZ6yu5rBPAFCOwVp","title":"Create an Incident Summary Report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-an-incident-summary-report","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 incident summary reports from incident pages and save report templates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"94vzkbL2UVroX4ukOZih","title":"Select and Customize Sections to Export to a Summary Report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/select-and-customize-sections-to-export-to-a-summary-report","siteSpaceId":"sitesp_BQwUa","description":"Select and customize Cortex XSOAR 6.15 summary report sections, then save the report as a reusable template.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"tjxrSZksIQRe9IxsTD5L","title":"Add a Widget to a Report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/add-a-widget-to-a-report","siteSpaceId":"sitesp_BQwUa","description":"Add and configure widgets in Cortex XSOAR 6.15 reports to visualize security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"WcYcHk7hhnKKTGMNd7Vb","title":"Edit a report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/edit-a-report","siteSpaceId":"sitesp_BQwUa","description":"Edit Cortex XSOAR 6.15 report widgets, layout, and output type for custom reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"80QpzPbhMhhPs7v3PK8f","title":"Change the Report Logo","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/change-the-report-logo","siteSpaceId":"sitesp_BQwUa","description":"Add and customize a company logo in Cortex XSOAR 6.15 reports using server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"xAo6eUC42Q6gd6EINQdu","title":"Configure the Time Zone and Format in a Report","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/configure-the-time-zone-and-format-in-a-report","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 report time zones and date formats, and resolve related display issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"moIxfIBCa9QK41NottCJ","title":"Troubleshoot Reports","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/troubleshoot-reports","siteSpaceId":"sitesp_BQwUa","description":"Troubleshoot Cortex XSOAR 6.15 reports by downloading and reviewing report JSON output.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"jJxZbZ4jGd8ivS2vDxeY","title":"Widgets","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets","siteSpaceId":"sitesp_BQwUa","description":"Create, customize, and manage Cortex XSOAR 6.15 widgets for dashboards, reports, and security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"FUcfi8SVn3Fg5QKnG43G","title":"Widgets Overview","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/widgets-overview","siteSpaceId":"sitesp_BQwUa","description":"Explore Cortex XSOAR 6.15 widgets and learn how to create, configure, and use them in dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"zwxbdVW2wgEGYgIFH7Hg","title":"Create a Widget using the Widget Builder","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 widgets with the Widget Builder for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"X35x8B55UfVoYJz32jEm","title":"Create a Custom Widget Using a JSON File","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_BQwUa","description":"Create custom Cortex XSOAR 6.15 widgets from JSON files for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"DgZfaL4Kd5teBgzkBDwv","title":"Create a Custom Widget Using an Automation Script","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-an-automation-script","siteSpaceId":"sitesp_BQwUa","description":"Create custom Cortex XSOAR 6.15 widgets with automation scripts for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"c4gtlcF5LlTI1ftRFykT","title":"Edit a Widget","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/edit-a-widget","siteSpaceId":"sitesp_BQwUa","description":"Edit Cortex XSOAR 6.15 widgets in the Widgets Library, dashboards, and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"tmrhMg1Jb4XccpBy4gvQ","title":"Create a Used Percentage Widget for a Disk Partition","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-used-percentage-widget-for-a-disk-partition","siteSpaceId":"sitesp_BQwUa","description":"Create a Cortex XSOAR 6.15 disk partition usage widget with server configuration and a dashboard.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"ObiRwxKwGjSEPSRI2DRh","title":"Saved By Dbot (ROI) Widget","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_BQwUa","description":"Configure the Cortex XSOAR 6.15 Saved by Dbot widget to calculate security operations return on investment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"czfMAD234GcaD5GfYPIM","title":"Manage Data","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data","siteSpaceId":"sitesp_BQwUa","description":"Manage Cortex XSOAR 6.15 data with reindexing, archiving, migration, storage, and restoration procedures.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"IIPnIruSRXFP5x9Byrh4","title":"Reindex the Entire Database","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-entire-database","siteSpaceId":"sitesp_BQwUa","description":"Reindex the entire Cortex XSOAR 6.15 database to rebuild searchable data and indexes.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"n9gC92tr4h1zlMhPOYER","title":"Reindex a Specific Index Database","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-a-specific-index-database","siteSpaceId":"sitesp_BQwUa","description":"Reindex specific Cortex XSOAR 6.15 index databases, including multiple selected indexes.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"bPkOzTte3pIZfKMZIIzk","title":"Reindex the Audit Log","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-audit-log","siteSpaceId":"sitesp_BQwUa","description":"Reindex the Cortex XSOAR 6.15 audit log to restore searchable historical audit trail data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"YKrX9VAmdhBMLxZISTnK","title":"Free up Disk Space with Data Archiving","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/free-up-disk-space-with-data-archiving","siteSpaceId":"sitesp_BQwUa","description":"Free Cortex XSOAR 6.15 disk space by archiving unused incident, entry, and indicator data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"0fYYI6mRe8LDFMYcoR1V","title":"Archive Artifacts and Attachments","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/archive-artifacts-and-attachments","siteSpaceId":"sitesp_BQwUa","description":"Archive Cortex XSOAR 6.15 artifacts and attachment folders to reduce storage use.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"rYJKBAOxyP4Mf5zhoBwF","title":"Store Incident/Artifact Files in the Cloud","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/store-incidentartifact-files-in-the-cloud","siteSpaceId":"sitesp_BQwUa","description":"Store Cortex XSOAR 6.15 incident attachments, artifacts, and War Room files in cloud storage.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"l8Axumcga5X19A2j1O8m","title":"Migrate Data to Another Server","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server","siteSpaceId":"sitesp_BQwUa","description":"Migrate Cortex XSOAR 6.15 data, files, and directories to another server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"6XgfvJb2PJZtUuxcE1AY","title":"Migrate Data to Another Server for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server-for-multi-tenant","siteSpaceId":"sitesp_BQwUa","description":"Migrate Cortex XSOAR 6.15 data to another server in a multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"PGY44CtOf5MSnu43jcfb","title":"Move Data Folders to Another Location on the Server","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/move-data-folders-to-another-location-on-the-server","siteSpaceId":"sitesp_BQwUa","description":"Move Cortex XSOAR 6.15 data folders to a different server location for storage management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"wY639J7W5ThbyG7fvg9t","title":"Restore an Archived Folder","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/restore-an-archived-folder","siteSpaceId":"sitesp_BQwUa","description":"Restore an archived Cortex XSOAR 6.15 data folder when access to archived data is required.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"NTNoIvfX4i37Htae9jS7","title":"Logs","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 server logs, access logs, audit trails, and diagnostic log bundles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"grwiVpMoZzDKvI0C7To1","title":"Logs Overview","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/logs-overview","siteSpaceId":"sitesp_BQwUa","description":"Understand Cortex XSOAR 6.15 logs and use log data for system monitoring and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"IY8vzzW9DF87cqzIKrUx","title":"Configure the Server Log","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-server-log","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 server log levels, file sizes, backups, and retention periods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"ID2aIrdfNphYtP6sDkGn","title":"Configure the Access Log for HTTPS Requests","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-access-log-for-https-requests","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 access logs to view HTTP and HTTPS requests.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"jTzkwSOzpqea14A1vw30","title":"Create a Log Bundle","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/create-a-log-bundle","siteSpaceId":"sitesp_BQwUa","description":"Create a Cortex XSOAR 6.15 diagnostic log bundle for troubleshooting and support investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"eHUUdleaVbM6FgEMnjfu","title":"Audit Trail","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/audit-trail","siteSpaceId":"sitesp_BQwUa","description":"View, export, extract, and purge Cortex XSOAR 6.15 audit trail records for administrative user actions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"E9QPySEsGFMwI9vfdiNp","title":"Send the Audit Trail to an External Log Service","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/send-the-audit-trail-to-an-external-log-service","siteSpaceId":"sitesp_BQwUa","description":"Send Cortex XSOAR 6.15 audit trail records to an external log service using server configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"Szh1AITP4yZYps1PRf2z","title":"System Settings","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 branding, login messages, system emails, and notification delivery settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"Kn99XwaTfsRNeHpJAiej","title":"Customize the Logo","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-logo","siteSpaceId":"sitesp_BQwUa","description":"Customize full-size and minimized logos in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"0L8HqlGj0egc0xEXFT2A","title":"Customize the Login Message","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-login-message","siteSpaceId":"sitesp_BQwUa","description":"Customize the login page message displayed to Cortex XSOAR 6.15 users before authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"Y8bqshoLMHlKoolrE6FR","title":"Customize System Emails","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-system-emails","siteSpaceId":"sitesp_BQwUa","description":"Customize Cortex XSOAR 6.15 system email subjects and message bodies in HTML or plain-text formats.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"Cxy55nqr68aTWTJxVNRB","title":"Configure System Notifications","pathname":"/xsoar-6-administrator-guide/6.15/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/configure-system-notifications","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 email notifications and mail sender settings with server configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"mXWvzyCPsIIo12DtTLIe","title":"Day to Day Tasks in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Manage daily Cortex XSOAR 6.15 incidents and threat indicators with investigation and response workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"}]},{"id":"1NENKy29Cv2ZYAu8QnPV","title":"Incident Management","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management","siteSpaceId":"sitesp_BQwUa","description":"Open, investigate, manage, and resolve security incidents in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"Ehv9OPzSVix1Y52dsGQc","title":"Create an Incident","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-an-incident","siteSpaceId":"sitesp_BQwUa","description":"Create Cortex XSOAR 6.15 incidents manually, from feeds, or by importing JSON files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"y55TvLKdyP11JWIdREoc","title":"Create a Search Query for Incidents","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-search-query-for-incidents","siteSpaceId":"sitesp_BQwUa","description":"Create and save Cortex XSOAR 6.15 incident search queries to filter displayed results.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"ZWIvXm1qV7bP6KYuq3hT","title":"Create a Widget From an Incident","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-widget-from-an-incident","siteSpaceId":"sitesp_BQwUa","description":"Create custom Cortex XSOAR 6.15 widgets from incident search results.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"XZPOdkYJGJ1onImHlSEO","title":"Export an Incident to CSV Using the UTF8-BOM Format","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_BQwUa","description":"Export Cortex XSOAR 6.15 incidents to UTF-8 BOM CSV files for Cyrillic characters.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"426mfJmkSHRQigB3r6j6","title":"Incident Investigation","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-investigation","siteSpaceId":"sitesp_BQwUa","description":"Open Cortex XSOAR 6.15 incidents to review details and investigate security events.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"2HqCyoxj7SIydCSKvT6u","title":"Work Plan","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/work-plan","siteSpaceId":"sitesp_BQwUa","description":"Monitor and manage Cortex XSOAR 6.15 incident playbook workflows in the Work Plan.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"rMHIcwnoWjAnnX028014","title":"Investigate an Incident Using the Canvas","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_BQwUa","description":"Visually map and investigate Cortex XSOAR 6.15 incident relationships with the investigation canvas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"7lHyee8kYlZd9rjSk084","title":"Auto Populate the Canvas","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/auto-populate-the-canvas","siteSpaceId":"sitesp_BQwUa","description":"Automatically add related Cortex XSOAR 6.15 incidents and entities to an investigation canvas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"1WVmC65om3Crivb8wyat","title":"Dbot Suggestions: Quick View Window","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/dbot-suggestions-quick-view-window","siteSpaceId":"sitesp_BQwUa","description":"Review DBot incident and indicator suggestions in the Cortex XSOAR 6.15 canvas quick view.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"le6pNDQdB7WBofzUScqW","title":"Edit Dbot Incident and Indicator Suggestions","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/edit-dbot-incident-and-indicator-suggestions","siteSpaceId":"sitesp_BQwUa","description":"Configure DBot incident and indicator suggestions for Cortex XSOAR 6.15 investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"RP4sx8n2bFkyqssr6kSv","title":"Incident Actions","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-actions","siteSpaceId":"sitesp_BQwUa","description":"Perform Cortex XSOAR 6.15 incident actions, including tasks, notes, reports, editing, and deletion.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"GWh2a7gC1VJfmgTeASwc","title":"Evidence Handling","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/evidence-handling","siteSpaceId":"sitesp_BQwUa","description":"Add and manage investigation evidence in the Cortex XSOAR 6.15 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"JFoZ0E2o7dxQcLetY9eP","title":"Incident Tasks","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-tasks","siteSpaceId":"sitesp_BQwUa","description":"Create and complete Cortex XSOAR 6.15 playbook and to-do tasks during investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"O8eBqUpIshIZTnupZNea","title":"Link Incidents","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents","siteSpaceId":"sitesp_BQwUa","description":"Link related Cortex XSOAR 6.15 incidents from the interface, pre-process rules, or CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"U18PABnLoKOQ8jriK7T9","title":"Manage Related Incidents","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents/manage-related-incidents","siteSpaceId":"sitesp_BQwUa","description":"View and manage related incidents during Cortex XSOAR 6.15 investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Link Incidents"}]},{"id":"95HsnIjmyqYLTihxwgPx","title":"Link and Unlink incidents in the CLI","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents/link-and-unlink-incidents-in-the-cli","siteSpaceId":"sitesp_BQwUa","description":"Link and unlink related Cortex XSOAR 6.15 incidents using the command-line interface.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Link Incidents"}]},{"id":"iFiK5nDYwzacIUljLASu","title":"Configure Incident Fields for Related Incidents","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/configure-incident-fields-for-related-incidents","siteSpaceId":"sitesp_BQwUa","description":"Configure related Cortex XSOAR 6.15 incident fields using allow and ignore list settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"eAii4zl2eirUzF5NGQXQ","title":"Indicator Management","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management","siteSpaceId":"sitesp_BQwUa","description":"Create, search, edit, export, and manage threat indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"abYVapa5hXU9cX5teCpA","title":"Configure the Indicator Timeline","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_BQwUa","description":"Configure the Cortex XSOAR 6.15 indicator timeline and improve timeline performance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"b2PwcN83tpeDFdf8AY5F","title":"Exclusion List","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/exclusion-list","siteSpaceId":"sitesp_BQwUa","description":"Add threat indicators to Cortex XSOAR 6.15 exclusion lists to prevent system processing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"LjZfh2I7Lmn3VX8MbRYX","title":"Export Indicators","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators","siteSpaceId":"sitesp_BQwUa","description":"Export Cortex XSOAR 6.15 threat indicators as lists or files for security tools.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"5nHPcRjPLTxtQSbME12f","title":"Manually Export Indicators","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators/manually-export-indicators","siteSpaceId":"sitesp_BQwUa","description":"Manually export Cortex XSOAR 6.15 threat indicators for external security tools.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"N4Zx7vmBR5hdwUtOWqFl","title":"Export Indicators Integrations","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators/export-indicators-integrations","siteSpaceId":"sitesp_BQwUa","description":"Export Cortex XSOAR 6.15 threat indicators through supported integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"z4oXtmB2bRbi7cxixFOh","title":"Export an Indicator to CSV Using the UTF8-BOM Format","pathname":"/xsoar-6-administrator-guide/6.15/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators/export-an-indicator-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_BQwUa","description":"Export Cortex XSOAR 6.15 threat indicators to UTF-8 BOM CSV files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"ibOQRmQ8EMZUMqgAYt0W","title":"Reference","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference","siteSpaceId":"sitesp_BQwUa","description":"Find Cortex XSOAR 6.15 reference information for configuration, diagnostics, security, and operations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"}]},{"id":"CXZ8nNCkOSd5EqjmiPlP","title":"Navigation Cheat Sheet","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/navigation-cheat-sheet","siteSpaceId":"sitesp_BQwUa","description":"Use the Cortex XSOAR 6.15 navigation cheat sheet to access common features quickly.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"MRt7kBBidajiHeXT1kIO","title":"Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for customization, administration, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"Q1G0HDY97N3MS7KTdrSH","title":"Modify Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/modify-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Modify Cortex XSOAR 6.15 server configurations for customization and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"gT90wvYWS3TiRk2mSexk","title":"Active Directory Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/active-directory-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for Active Directory authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"eVIhzmrUCZCi7lrLQv0L","title":"Automation Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/automation-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for automation behavior.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"5GMG6584yLbVUgZqZtqG","title":"Dashboard Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/dashboard-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"548K0rb7LyRtBs7Pf3Rl","title":"Database Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/database-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for the database in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"r5ImcS8bUGS5iB27NtuQ","title":"Disaster Recovery Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/disaster-recovery-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"wX6DXCCqcqAyO2ZIEjKq","title":"Docker Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/docker-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for Docker.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"iyOKgXHHjyNr9jNClGIz","title":"Elasticsearch Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/elasticsearch-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"kXI8hibQx5TdZlgZP8MH","title":"Engine Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/engine-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for engines.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"o7UA1Jy2PCb4AV0s0H5P","title":"General Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/general-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference general Cortex XSOAR 6.15 server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"yJpcsXPEWqOUPJUhRjoU","title":"Google API Server Configuration","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/google-api-server-configuration","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configuration settings for Google APIs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"eOc6tOmTNDre0JCXC7pZ","title":"Incident Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/incident-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for incident management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"MMJ9J0u2FcHwvb4mMgDQ","title":"Indicator Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/indicator-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"We4Lux16oQtg6EOcgdy2","title":"Integration Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/integration-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for integrations in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"zVRFJlFvqMV4DlWNC817","title":"List Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/list-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for lists.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"xuNU1ocGKG0H82dhLXjQ","title":"Logs Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/logs-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for logs in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"u6MLtex9ShD7ga0vFgEG","title":"Marketplace Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/marketplace-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"eZQ1Y4JyiwdKpPJU9UEE","title":"Multi-Tenant Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/multi-tenant-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for multi-tenant deployments in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"ht0aa7bTgw77TxDV28xr","title":"Notification Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/notification-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"d6z9SR0ooTkBLvEjIAw0","title":"Playbook Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/playbook-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for playbooks in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"naL5VanC1zWCmvqpD4qb","title":"Proxy Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/proxy-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for proxy servers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"ZTrfru2Zrx41dQJGQJmK","title":"Remote Repository Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/remote-repository-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for remote repositories in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"agE1E8Y43remQu4pt4Su","title":"Report Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/report-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"TEVlsuIw9qNWudN4wXct","title":"Security Headers Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/security-headers-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for security headers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"bkpF4IJiO37Xt10mYDtR","title":"SLA Server Configuration","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/sla-server-configuration","siteSpaceId":"sitesp_BQwUa","description":"Server configuration for SLAs in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"VK2rL7eJFReaBoc67y4y","title":"System Diagnostics Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/system-diagnostics-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for system diagnostics.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"tPX4x5rH82oMb1gdimkM","title":"Users and Roles Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/users-and-roles-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 server configurations for users and roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"V9bPRm6ZJhQofXliIL9Z","title":"War Room Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/war-room-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for the War Room in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"b2WPXC748hjR5JLdCdMU","title":"Widget Server Configurations","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/server-configurations/widget-server-configurations","siteSpaceId":"sitesp_BQwUa","description":"Server configurations for widgets in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"yR29fUlVr8ElPH3AAopM","title":"System Diagnostics","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/system-diagnostics","siteSpaceId":"sitesp_BQwUa","description":"Monitor Cortex XSOAR 6.15 system health and resolve performance and diagnostic alerts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"WWD9lja9G38sh5GOOTUP","title":"Fix System Diagnostics Issues","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/system-diagnostics/fix-system-diagnostics-issues","siteSpaceId":"sitesp_BQwUa","description":"Resolve Cortex XSOAR 6.15 alerts reported on the System Diagnostics page.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"System Diagnostics"}]},{"id":"m9dcWhGgZyLmdQnsaaff","title":"Performance Tuning for Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/performance-tuning-for-cortex-xsoar","siteSpaceId":"sitesp_BQwUa","description":"Tune Cortex XSOAR 6.15 performance for reliable and scalable security operations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"wrTLiDB553p43rxc9uY4","title":"Supported Ciphers","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/supported-ciphers","siteSpaceId":"sitesp_BQwUa","description":"Review TLS 1.2 and TLS 1.3 cipher suites supported by Cortex XSOAR 6.15 servers and engines.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"nplqAzhTFO8199hrBwEB","title":"Telemetry","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/telemetry","siteSpaceId":"sitesp_BQwUa","description":"Configure Cortex XSOAR 6.15 telemetry collection and control product usage data sharing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"mzBYZlATKdHZMXn07rBo","title":"Keyboard Shortcuts","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/keyboard-shortcuts","siteSpaceId":"sitesp_BQwUa","description":"Use Cortex XSOAR 6.15 keyboard shortcuts for playbooks, scripts, the CLI, and incident pages.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"8XyoWZXSPZyY65wtFp6F","title":"Indicator Fields Structure","pathname":"/xsoar-6-administrator-guide/6.15/reference-docs/reference/indicator-fields-structure","siteSpaceId":"sitesp_BQwUa","description":"Reference Cortex XSOAR 6.15 indicator field structures aligned with STIX standards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"jY66kyXFbQxXSwykR2wt","title":"Navigate the Cortex XSOAR 6.14 Administrator Guide","pathname":"/xsoar-6-administrator-guide/6.14","siteSpaceId":"sitesp_gf9hC","description":"Start here for a visual overview of the main Cortex XSOAR 6.14 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"sbvSyXXrrHjSvkA6yYMg","title":"Overview","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/overview","siteSpaceId":"sitesp_gf9hC","description":"Cortex XSOAR provides security orchestration, incident management, and interactive investigation. Overview of Cortex XSOAR 6.14 features and concepts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"lkaTtFywohex34EnL5Om","title":"Get Started in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Get started with Cortex XSOAR 6.14. Learn core concepts, licenses, lifecycle support, API keys, search, CLI commands, and Markdown.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"9L6cIaYbuDMDxOLQ7Gdj","title":"Licenses","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/licenses","siteSpaceId":"sitesp_gf9hC","description":"Learn about Cortex XSOAR 6.14 licenses, editions, user types, license quotas, and multi-tenant licensing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"mzR0iMKJemc1923dGBfq","title":"FIPS Version","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/fips-version","siteSpaceId":"sitesp_gf9hC","description":"Learn about the vendor-affirmed Cortex XSOAR 6.14 FIPS version, its FIPS 140-3 cryptography, supported deployments, and limitations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"VES2zMNyjzKkrudWhbJ5","title":"Concepts","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/concepts","siteSpaceId":"sitesp_gf9hC","description":"Learn Cortex XSOAR 6.14 concepts, including incidents, integrations, playbooks, automations, commands, War Room, indicators, and Playground.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"mGA8PgVMgGG5AndWdhS0","title":"Product Support Lifecycle","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/product-support-lifecycle","siteSpaceId":"sitesp_gf9hC","description":"Review Cortex XSOAR 6.14 release versioning, supported releases, end-of-life dates, and product support lifecycle guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"MVu1uqFnA4JWiPmOArAH","title":"API Keys","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/api-keys","siteSpaceId":"sitesp_gf9hC","description":"Generate, manage, revoke, and secure API keys for Cortex XSOAR 6.14 REST API access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"usFfqsRryQMh7kzVwUKy","title":"Use the Command Line Interface","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/use-the-command-line-interface","siteSpaceId":"sitesp_gf9hC","description":"Use the Cortex XSOAR 6.14 CLI to run system and integration commands, automations, scripts, and user notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"DtkfV2afIAbtZzYz8LU9","title":"How to Search","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-search","siteSpaceId":"sitesp_gf9hC","description":"Search Cortex XSOAR 6.14 with Bleve query syntax, the search box, general search, filters, wildcards, and regular expressions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"kTY3Rpq09hatdz4mxnH7","title":"How to Use Markdown","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-use-markdown","siteSpaceId":"sitesp_gf9hC","description":"Use Markdown in Cortex XSOAR 6.14 to format text, add links, tables, images, and XSOAR-specific content elements.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"NTZkM6B6RKGzkSkAQO0t","title":"New User FAQ","pathname":"/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/new-user-faq","siteSpaceId":"sitesp_gf9hC","description":"Find answers to common Cortex XSOAR 6.14 new-user questions about content, log bundles, commands, notifications, dashboards, and search.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"1V0xbzodQK4nBY8Oe6Xj","title":"Onboarding in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/onboarding-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Onboarding process for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"e3Nqc2oEFZSOCFhu9m6C","title":"Deployment Checklist - Best Practices","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/deployment-checklist-best-practices","siteSpaceId":"sitesp_gf9hC","description":"Overview of the deployment process, including best practices for Cortex XSOAR 6.14 installation and maintenance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"om32hJkXKChbQUXIvc8w","title":"Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment","siteSpaceId":"sitesp_gf9hC","description":"Install, configure, upgrade, and maintain a Cortex XSOAR 6.14 single-server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"L1Twppu7C6N1CxmjavjS","title":"System Requirements","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/system-requirements","siteSpaceId":"sitesp_gf9hC","description":"Verify operating system, hardware, network, and software requirements for a Cortex XSOAR 6.14 single-server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"qRfGytu4nD7wIK2zAdpw","title":"Install the Server for a Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/install-the-server-for-a-single-server-deployment","siteSpaceId":"sitesp_gf9hC","description":"Install Cortex XSOAR 6.14 on a single server with the application and database services on one host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"5aCSoDT2RuXlg1LiPaCd","title":"Installer Flags","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/install-the-server-for-a-single-server-deployment/installer-flags","siteSpaceId":"sitesp_gf9hC","description":"Reference the Cortex XSOAR 6.14 installer flags for installation, upgrades, Elasticsearch, backups, and system configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Install the Server for a Single Server Deployment"}]},{"id":"39opO965UrYCJ5irFN6d","title":"Install the Server with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/install-the-server-with-elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Install Cortex XSOAR 6.14 with Elasticsearch. Review prerequisites and deployment steps for a new Elasticsearch-backed environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"EGchQ1e1iweWeZo8VdVX","title":"Install the Server Offline","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline","siteSpaceId":"sitesp_gf9hC","description":"Install Cortex XSOAR 6.14 in an offline or air-gapped environment without internet access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"IBdp4LUAclxjWQvMFpLC","title":"Dependencies for Offline Installation","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_gf9hC","description":"Review required RPM and Ubuntu dependencies for an offline Cortex XSOAR 6.14 server or engine installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Install the Server Offline"}]},{"id":"24WEuCRPNuMiJtvJujjn","title":"Add a License","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/add-a-license","siteSpaceId":"sitesp_gf9hC","description":"Add a Cortex XSOAR 6.14 license file through the user interface or directly on the server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"jh0hJts2rYoYUevDjfRC","title":"Post-Installation Checklist","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist","siteSpaceId":"sitesp_gf9hC","description":"Complete the Cortex XSOAR 6.14 post-installation checklist for monitoring, certificates, HTTP configuration, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"IYXNmL9WXUsxz4wXk4Jn","title":"Monitor Components","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/monitor-components","siteSpaceId":"sitesp_gf9hC","description":"Monitor Cortex XSOAR 6.14 server, engine, and Elasticsearch health with system checks, alerts, and health monitoring tools.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"b2PJ9xfmrRkEShRbXSw3","title":"HTTPS with a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate","siteSpaceId":"sitesp_gf9hC","description":"Configure HTTPS for Cortex XSOAR 6.14 with a signed X.509 certificate and supported TLS versions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"8LCaDvzQWRQvFBQVBSXs","title":"Create a Self-Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/create-a-self-signed-certificate","siteSpaceId":"sitesp_gf9hC","description":"Create and apply a self-signed certificate for a Cortex XSOAR 6.14 development environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"IWh5uMksbedLWzlZ0wMY","title":"Install or Renew a Custom Certificate","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/install-or-renew-a-custom-certificate","siteSpaceId":"sitesp_gf9hC","description":"Install or renew a CA-signed certificate for secure Cortex XSOAR 6.14 production deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"UIegCic1igmpGYah0Uc9","title":"Configure the Server to Listen on HTTP","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/configure-the-server-to-listen-on-http","siteSpaceId":"sitesp_gf9hC","description":"Configure a Cortex XSOAR 6.14 server HTTP endpoint for deployments using HTTPS termination.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"IUulhCazCOJcL8kZrTdg","title":"Troubleshoot WebSockets","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/troubleshoot-websockets","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 WebSocket disconnects, slow responses, and missing real-time browser updates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"32be08N9GBQig5VByOOy","title":"Upgrade the Cortex XSOAR Server","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_gf9hC","description":"Upgrade a Cortex XSOAR 6.14 server with preparation, installation, and post-upgrade validation steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"EyM7dLQR70lvE2njUlJt","title":"Uninstall the Server","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment/uninstall-the-server","siteSpaceId":"sitesp_gf9hC","description":"Uninstall a Cortex XSOAR 6.14 server while retaining configuration files and engine-created files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"Pc2swjMF6NiX7ButznbP","title":"Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Deploy and manage Cortex XSOAR 6.14 with Elasticsearch, including setup, security, migration, backups, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"6Tv5OZE2kwWaxEglwWHR","title":"Elasticsearch Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 Elasticsearch deployments and how XSOAR data is migrated to Elasticsearch indices.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"EnIT75Cm9LHpGikgjMW0","title":"Elasticsearch Setup","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup","siteSpaceId":"sitesp_gf9hC","description":"Configure Elasticsearch for Cortex XSOAR 6.14 with best practices, sizing guidance, and data management settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"ewy7V3bnv7jBpi4NWtXA","title":"Elasticsearch System Requirements","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-system-requirements","siteSpaceId":"sitesp_gf9hC","description":"Review Elasticsearch system requirements for a supported and scalable Cortex XSOAR 6.14 deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"vED5C2kKqBT9FO549QPN","title":"Elasticsearch Configurations","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-configurations","siteSpaceId":"sitesp_gf9hC","description":"Configure Elasticsearch connection, indexing, shards, replicas, and performance settings for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"IOmSqR4S5GTHBwr2hoSX","title":"Elasticsearch Data Management","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-data-management","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 data in Elasticsearch, including index operations, data retention, and storage considerations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"3OL5H0VLN0ye0z3AOSBZ","title":"Elasticsearch Security","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-security","siteSpaceId":"sitesp_gf9hC","description":"Apply Elasticsearch security guidance and best practices to Cortex XSOAR 6.14 single-server and multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"bcTGy5cVWonGR7dl8ro5","title":"Elasticsearch General Security Guidelines","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_gf9hC","description":"Follow general Elasticsearch security guidelines for protecting a Cortex XSOAR 6.14 deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"AYloNzQ96Dmiyuq1bg2k","title":"Elasticsearch Security Guidelines - Multi-tenant Deployments","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-security-guidelines-multi-tenant-deployments","siteSpaceId":"sitesp_gf9hC","description":"Apply Elasticsearch security guidelines for Cortex XSOAR 6.14 multi-tenant deployments and tenant data isolation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"nc7qgxnja1nuXj8bS8pq","title":"Migration","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration","siteSpaceId":"sitesp_gf9hC","description":"Migrate Cortex XSOAR 6.14 data to Elasticsearch for single-server and multi-tenant environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"s5FdSnRIqdVeGWA7IH1s","title":"Elasticsearch Migration Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-migration-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand the Cortex XSOAR 6.14 Elasticsearch migration process, prerequisites, sequencing, and migration tool options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"1KAK2JQTUgvJOyuwzw5v","title":"Migrate Objects to Elasticsearch for a Single Server","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-single-server","siteSpaceId":"sitesp_gf9hC","description":"Migrate Cortex XSOAR 6.14 objects and data to Elasticsearch in a single-server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"sYhMSw6Xqs97iHT4SKel","title":"Migrate Objects to Elasticsearch for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-multi-tenant","siteSpaceId":"sitesp_gf9hC","description":"Migrate Cortex XSOAR 6.14 objects and tenant data to Elasticsearch in a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"yT2bU4tKdfx2UtQhDbqD","title":"Migrate an Existing Elasticsearch Deployment","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/migrate-an-existing-elasticsearch-deployment","siteSpaceId":"sitesp_gf9hC","description":"Migrate an existing Cortex XSOAR 6.14 Elasticsearch deployment while preserving data and configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"J6qZJGtmLS8cMm3VQJ6h","title":"Migrate Objects to Elasticsearch for a Distributed Database","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-distributed-database","siteSpaceId":"sitesp_gf9hC","description":"Migrate Cortex XSOAR 6.14 objects to Elasticsearch from a distributed database deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"8ZrHliey5HhbnyZjosZM","title":"Manage Partial Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/manage-partial-migration-to-elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Manage a partial Cortex XSOAR 6.14 migration to Elasticsearch and complete the remaining data migration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"zbYNlOcwshoVkkstiA8q","title":"Validate the Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/validate-the-migration-to-elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Validate a Cortex XSOAR 6.14 migration to Elasticsearch and identify incomplete or failed migrated objects.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"d9LJtQGvM8Z4gJDGqblj","title":"Elasticsearch Post Migration Health Check","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-post-migration-health-check","siteSpaceId":"sitesp_gf9hC","description":"Run post-migration health checks to confirm a Cortex XSOAR 6.14 Elasticsearch deployment is operating correctly.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"AJRKPu9wwj7JttyQBsuV","title":"Disaster Recovery for Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Back up and restore a Cortex XSOAR 6.14 Elasticsearch deployment using snapshots for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"3K1mUDRd3cMy1dAEAwqS","title":"Create Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/create-elasticsearch-snapshots","siteSpaceId":"sitesp_gf9hC","description":"Create Elasticsearch snapshots to back up Cortex XSOAR 6.14 data and prepare for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"Cbws5QjhfoilDemyScuH","title":"Restore Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/restore-elasticsearch-snapshots","siteSpaceId":"sitesp_gf9hC","description":"Restore Elasticsearch snapshots to recover Cortex XSOAR 6.14 data after data loss or an outage.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"7WsZZogI4228NkZ4AXOQ","title":"Archive Data with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/archive-data-with-elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Archive Cortex XSOAR 6.14 data with Elasticsearch index lifecycle management to manage storage and data retention.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"N4pr6QzO6KO0OS4zT9Ie","title":"Troubleshoot Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch/troubleshoot-elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot common Cortex XSOAR 6.14 Elasticsearch deployment, connectivity, indexing, and performance issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"SO2Il0M5yCz6vAMeuFNy","title":"Docker","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker","siteSpaceId":"sitesp_gf9hC","description":"Install, configure, secure, and troubleshoot Docker for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"y53yWiHeG6JeX7F21XmH","title":"Docker Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand how Cortex XSOAR 6.14 uses Docker to run integrations and automations securely and predictably.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"wfphRJbU2QJNMM3FhOSU","title":"Docker Installation","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-installation","siteSpaceId":"sitesp_gf9hC","description":"Install and troubleshoot Docker on supported Enterprise Linux platforms for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"YGT6ehi3Yn7HhwNzbCVz","title":"Configure Python Docker Integrations to Trust Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 Python Docker integrations to trust CA-signed and custom certificates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"2pLJxIjQzWO5VJA0amnw","title":"Docker Images in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Use Docker images to run Cortex XSOAR 6.14 Python scripts and integrations in controlled environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"eftEE2ra6uXICZogYBGv","title":"Create a Docker Image In Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/create-a-docker-image-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Create a custom Docker image for Cortex XSOAR 6.14 integrations and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"ZuHJcovc7jNu0hl0zg5E","title":"Install Docker Images Offline","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/install-docker-images-offline","siteSpaceId":"sitesp_gf9hC","description":"Download and install Docker images offline for air-gapped Cortex XSOAR 6.14 environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"jndCHdwkiaBQVPkITiDJ","title":"Docker Image Security","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/docker-image-security","siteSpaceId":"sitesp_gf9hC","description":"Apply Docker image security practices for Cortex XSOAR 6.14 integrations and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"BFKR2LL6idHnHRPVAdCq","title":"Manage Docker Images","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/manage-docker-images","siteSpaceId":"sitesp_gf9hC","description":"Manage, update, and remove Docker images used by Cortex XSOAR 6.14 integrations and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"dYl9HQw8ieAeZu1XvrME","title":"Change the Docker Image for Automations and Integrations","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/change-the-docker-image-for-automations-and-integrations","siteSpaceId":"sitesp_gf9hC","description":"Change the Docker image used by Cortex XSOAR 6.14 automations and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"xdUJUykltGE5oc1ccwCO","title":"Use the Cortex XSOAR Container Registry","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_gf9hC","description":"Use the Cortex XSOAR 6.14 container registry to manage and distribute Docker images.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"vga3MQWETms9SnLfnAXo","title":"Docker Hardening Guide","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide","siteSpaceId":"sitesp_gf9hC","description":"Harden Docker containers in Cortex XSOAR 6.14 with least privilege, resource limits, and network security controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"EKdbetEeT1ZKh5g58Pq0","title":"Run Docker with Non-Root Internal Users","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_gf9hC","description":"Run Cortex XSOAR 6.14 Docker containers with non-root internal users to enforce least privilege.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"J10oxK2cYWrtIkCRb0XZ","title":"Configure Memory Limit Support Without Swap Limit Capabilities","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-memory-limit-support-without-swap-limit-capabilities","siteSpaceId":"sitesp_gf9hC","description":"Configure Docker memory limits for Cortex XSOAR 6.14 when swap limit capabilities are unavailable.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"epFnCKnnt8NM2nAGgLc6","title":"Configure the Memory Limitation","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_gf9hC","description":"Configure Docker container memory limits to protect Cortex XSOAR 6.14 hosts from resource exhaustion.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"UdJBnChSXY7lEQRLAPTZ","title":"Test the Memory Limit","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/test-the-memory-limit","siteSpaceId":"sitesp_gf9hC","description":"Test Docker memory limits configured for Cortex XSOAR 6.14 containers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"oFsrJVuSRyZ4xCe9Aejr","title":"Limit Available CPU","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/limit-available-cpu","siteSpaceId":"sitesp_gf9hC","description":"Limit Docker container CPU resources to protect the Cortex XSOAR 6.14 host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"NJLv6NawHV0Zr1KFHFBi","title":"Configure the PIDs Limit","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-pids-limit","siteSpaceId":"sitesp_gf9hC","description":"Configure Docker PID limits to prevent process exhaustion in Cortex XSOAR 6.14 containers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"vLEHDZXhXgc5ipjoAKnA","title":"Configure the Open File Descriptors Limit","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-open-file-descriptors-limit","siteSpaceId":"sitesp_gf9hC","description":"Configure Docker open file descriptor limits for Cortex XSOAR 6.14 containers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"bpLiP2Ve18NU7RFf74iS","title":"Docker Network Hardening","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_gf9hC","description":"Harden Docker network access for Cortex XSOAR 6.14 containers with network security controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"XZc7eB60kH4aHlIS0A3E","title":"Docker FAQs","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/docker-faqs","siteSpaceId":"sitesp_gf9hC","description":"Find answers to frequently asked questions about Docker in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"D8SmHwGSAVho2sGFJ9Z5","title":"Troubleshoot Docker Networking Issues","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/troubleshoot-docker-networking-issues","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Docker networking issues in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"G8von4Ye54q9CjT4nXjM","title":"Troubleshoot Docker Performance Issues","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/troubleshoot-docker-performance-issues","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 Docker performance issues and update Docker packages and dependencies.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"cUZtp03CeLzXDXzGezN0","title":"Configure Docker Pull Rate Limit","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_gf9hC","description":"Configure Docker image pull rate limits for Cortex XSOAR 6.14 and authenticate for higher limits.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"5wCVq1YwKODH3L0hHtxC","title":"Change the Docker Installation Folder","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_gf9hC","description":"Change the default Docker installation folder for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"rBEyEac5KD3XYARSMmR2","title":"Podman","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman","siteSpaceId":"sitesp_gf9hC","description":"Install, configure, migrate to, and troubleshoot Podman for Cortex XSOAR 6.14 on RHEL 8 and later.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"IL76zzDSOsdQYK0RH4eb","title":"Podman Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman/podman-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand how to use Podman instead of Docker for Cortex XSOAR 6.14 on supported operating systems, including RHEL 8.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"1VtgDdFbZtrKzazgP1SC","title":"Change container storage directory","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman/change-container-storage-directory","siteSpaceId":"sitesp_gf9hC","description":"Change the Podman container storage directory for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"lqYNudW35MvssnXT1jwU","title":"Podman Installation","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman/podman-installation","siteSpaceId":"sitesp_gf9hC","description":"Install Podman for Cortex XSOAR 6.14 on supported Linux operating systems.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"D6AXRbgh8g6EPoqGiHRn","title":"Configure the SELinux Policy for PowerShell Integrations","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman/configure-the-selinux-policy-for-powershell-integrations","siteSpaceId":"sitesp_gf9hC","description":"Configure the Podman SELinux policy for PowerShell integrations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"ZHZzHHte5fDaKv3BRCfM","title":"Migrate From Docker to Podman","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_gf9hC","description":"Migrate Cortex XSOAR 6.14 from Docker to Podman on RHEL 8 or later.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"bChFuscOHMmQLQMMw04k","title":"Troubleshoot Podman","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman/troubleshoot-podman","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Podman installation, configuration, and container issues in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"cNZwj9v3ufiOAf2UMUjb","title":"Proxy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/proxy","siteSpaceId":"sitesp_gf9hC","description":"Configure proxy, proxy bypass, and NGINX reverse proxy settings for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"dLH7KRQk8XXkSyDr7sFN","title":"Configure Proxy Settings","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/proxy/configure-proxy-settings","siteSpaceId":"sitesp_gf9hC","description":"Configure global proxy settings for Cortex XSOAR 6.14 with server configuration options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"HotGcNOhXDgWZtPtK9rV","title":"Configure how to bypass proxy settings","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/proxy/configure-how-to-bypass-proxy-settings","siteSpaceId":"sitesp_gf9hC","description":"Configure proxy bypass settings for Cortex XSOAR 6.14 with server configuration options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"ZdpUSjVdLUEKDAkw5qvp","title":"Use NGINX as a Reverse Proxy to the Server","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/proxy/use-nginx-as-a-reverse-proxy-to-the-server","siteSpaceId":"sitesp_gf9hC","description":"Configure NGINX as a reverse proxy for a Cortex XSOAR 6.14 server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"iMPoUrUfoCLlNNIOe697","title":"High Availability","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 high availability with Elasticsearch, including sizing, migration, app servers, engines, and certificates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"NaZuEaBuZKEXqyDR0Tac","title":"High Availability Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/high-availability-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 high availability deployment architectures and components.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"146PLLlgRqfjjzkGjfN8","title":"Set Up High Availability","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/set-up-high-availability","siteSpaceId":"sitesp_gf9hC","description":"Set up high availability for Cortex XSOAR 6.14 with the required deployment steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"PUpxDMCPRj4QTZbGJkKB","title":"Sizing Requirements for High Availability Deployments","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/sizing-requirements-for-high-availability-deployments","siteSpaceId":"sitesp_gf9hC","description":"Review sizing requirements for a Cortex XSOAR 6.14 high availability deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"jbyDTt0jUM6l1wwtqeE6","title":"Monitor the Health of the App Servers","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/monitor-the-health-of-the-app-servers","siteSpaceId":"sitesp_gf9hC","description":"Monitor application server health in a Cortex XSOAR 6.14 high availability environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"0vdgOXqu4rCg8qMabkot","title":"Migrate a Single Instance for High Availability","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/migrate-a-single-instance-for-high-availability","siteSpaceId":"sitesp_gf9hC","description":"Migrate a Cortex XSOAR 6.14 single-instance deployment to high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"7E4rbcOOMK32tc6QRhwa","title":"Migrate a Multi-Tenant Deployment for High Availability","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/migrate-a-multi-tenant-deployment-for-high-availability","siteSpaceId":"sitesp_gf9hC","description":"Migrate a Cortex XSOAR 6.14 multi-tenant deployment to enable high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"T3BLhCf00VoPTWkgUFfr","title":"Install Additional App Servers","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/install-additional-app-servers","siteSpaceId":"sitesp_gf9hC","description":"Install additional application servers for a Cortex XSOAR 6.14 high availability configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"cC4pCsoGPOSHhWdbOIDc","title":"Deploy Engines in a High Availability Environment","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/deploy-engines-in-a-high-availability-environment","siteSpaceId":"sitesp_gf9hC","description":"Deploy Cortex XSOAR 6.14 engines in high availability and route engine connections through a load balancer.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"LTdp5UP0z52vQgJtEdqB","title":"Use a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability/use-a-signed-certificate","siteSpaceId":"sitesp_gf9hC","description":"Use a signed certificate in a Cortex XSOAR 6.14 high availability deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"SCQjUCTcc7Cz6gpS1OmP","title":"Disaster Recovery and Live Backup","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 disaster recovery and live backup, including failover, backups, restores, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"wwruiJOkgIAzGVDHd0Py","title":"Disaster Recovery and Live Backup Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/disaster-recovery-and-live-backup-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 live backup, disaster recovery states, environment configuration, and recovery scenarios.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"WPRrSgPPkeEw5nv4plTq","title":"Host Names, DNS, and Disaster Recovery","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/host-names-dns-and-disaster-recovery","siteSpaceId":"sitesp_gf9hC","description":"Configure host names and DNS for a Cortex XSOAR 6.14 disaster recovery environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"veN8hN8ZmLfGhgOSue5d","title":"Configure the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 live backup by mirroring a production server to a standby backup server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"SliyoMF2I5MMNmom5XfY","title":"Configure Live Backup for Multiple SAMLs","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/configure-live-backup-for-multiple-samls","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 live backup for environments that use multiple SAML identity providers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"SyknAw8RLRO9ROwkECH0","title":"DR Scenario: Testing the DR Environment","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-testing-the-dr-environment","siteSpaceId":"sitesp_gf9hC","description":"Test a Cortex XSOAR 6.14 disaster recovery environment and restore the original server roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"LihHkWCbNM4DD9zM4Sfj","title":"DR Scenario: Unrecoverable Active Server Failure","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-unrecoverable-active-server-failure","siteSpaceId":"sitesp_gf9hC","description":"Recover from an unrecoverable active server failure with Cortex XSOAR 6.14 live backup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"U7zmg0Fml3XqK8XWqbn0","title":"DR Scenario: Unrecoverable Standby Server Failure","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-unrecoverable-standby-server-failure","siteSpaceId":"sitesp_gf9hC","description":"Replace an unrecoverable standby server in a Cortex XSOAR 6.14 live backup environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"77HmhlpoHhSdhB5SFUCF","title":"Transition an Active Server to Standby Mode","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-an-active-server-to-standby-mode","siteSpaceId":"sitesp_gf9hC","description":"Transition an active Cortex XSOAR 6.14 server to standby mode for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"kKJaVRuKngk1bttxqKEh","title":"Transition a Standby Server to Active Mode","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-a-standby-server-to-active-mode","siteSpaceId":"sitesp_gf9hC","description":"Transition a standby Cortex XSOAR 6.14 server to active production mode.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"Cwdlih23wosBYVDPQZ0G","title":"Transition Between DR States Through the Configuration File","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-between-dr-states-through-the-configuration-file","siteSpaceId":"sitesp_gf9hC","description":"Transition Cortex XSOAR 6.14 disaster recovery states with the configuration file during first server startup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"GAGqTug8Rf9Yn83tBg1k","title":"Upgrade the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_gf9hC","description":"Upgrade a Cortex XSOAR 6.14 live backup environment while preserving disaster recovery readiness.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"t85JJeOGHxNN7s9dWOWP","title":"Engines and Disaster Recovery Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/engines-and-disaster-recovery-troubleshooting","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 engine failover issues in a disaster recovery environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"Jm173dkyXVXHYgxBKhia","title":"Back up the Database","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/back-up-the-database","siteSpaceId":"sitesp_gf9hC","description":"Create manual and automated database backups for Cortex XSOAR 6.14 and schedule backup jobs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"JcDp0e4rEka8H9uKKIsh","title":"Restore the Database","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-the-database","siteSpaceId":"sitesp_gf9hC","description":"Restore a Cortex XSOAR 6.14 database from a manual or automated backup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"rRROSdD4QqWCKjTnDwV2","title":"Restore a Partition","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-a-partition","siteSpaceId":"sitesp_gf9hC","description":"Restore one or more specific Cortex XSOAR 6.14 database partitions from a backup.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"jyLuMtE2vcvmnzGG2p2L","title":"Troubleshoot Live Backup","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup/troubleshoot-live-backup","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot live backup and disaster recovery scenarios in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"NxVGz2m5UwaLdVfYYPwW","title":"Users and Roles","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 users, roles, permissions, settings, shifts, passwords, and authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"pahXTAslGLQ6Urlba6va","title":"Users and Roles Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/users-and-roles-overview","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 users, roles, invitations, password policies, and user activity.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"NW0hSiPKe9vPFfgeI9NV","title":"Roles in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 roles, permissions, access levels, queries, and shifts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"axywpyHEXiTIrTWAeMTO","title":"Pre-set Query per Role","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/pre-set-query-per-role","siteSpaceId":"sitesp_gf9hC","description":"Configure pre-set queries for Cortex XSOAR 6.14 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"Zk4D7WCqRSLsz9tuiyww","title":"Define a Role","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/define-a-role","siteSpaceId":"sitesp_gf9hC","description":"Define a custom role and its permissions in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"uE3tb4fDOfBHDYO3pKlo","title":"Role-based Permission Levels","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/role-based-permission-levels","siteSpaceId":"sitesp_gf9hC","description":"Understand role-based permission levels in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"Zggu3CQymwLdge8y5ZEp","title":"Shift Management","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management","siteSpaceId":"sitesp_gf9hC","description":"Manage user shifts and on-call schedules in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"JvKRk1uPomk4f1SfhtxJ","title":"Managing Shifts","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management/managing-shifts","siteSpaceId":"sitesp_gf9hC","description":"Create and manage shifts for Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"},{"label":"Shift Management"}]},{"id":"eTfUV6bN38aQVQbjMmb3","title":"User Management","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management","siteSpaceId":"sitesp_gf9hC","description":"Invite and manage Cortex XSOAR 6.14 users, roles, passwords, access, and preferences.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"8v5fcsFKAN4RiAHS06Eg","title":"User Invitations","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations","siteSpaceId":"sitesp_gf9hC","description":"Manage user invitations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"CuWzHd88okxlamZggsGK","title":"Invite a User","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations/invite-a-user","siteSpaceId":"sitesp_gf9hC","description":"Invite a user to Cortex XSOAR 6.14 and assign access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"User Invitations"}]},{"id":"nMY5YxTO485tn0dRRBMg","title":"Set the User as Default Administrator","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations/set-the-user-as-default-administrator","siteSpaceId":"sitesp_gf9hC","description":"Set a Cortex XSOAR 6.14 user as the default administrator.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"User Invitations"}]},{"id":"v0W6BiCboS2TvBF0qfOL","title":"Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users","siteSpaceId":"sitesp_gf9hC","description":"Configure self-service read-only users in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"e7bK9nBqK6JIkqitnZXV","title":"Configure the Server for Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/configure-the-server-for-self-service-read-only-users","siteSpaceId":"sitesp_gf9hC","description":"Configure the Cortex XSOAR 6.14 server for self-service read-only users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"hdPrZF7dxhaqzntgkMzv","title":"Create the Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-self-service-read-only-users","siteSpaceId":"sitesp_gf9hC","description":"Create self-service read-only users in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"gwRP5RYSjGyklrpOILQT","title":"Create the Read-Only Dashboard","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-dashboard","siteSpaceId":"sitesp_gf9hC","description":"Create a read-only dashboard for Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"7FH7NaCzcukIW92Vdt9K","title":"Create the Read-Only Incident Type and Layout","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-incident-type-and-layout","siteSpaceId":"sitesp_gf9hC","description":"Create a read-only incident type and layout in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"7a9bSnrgRfjeAQIyirNj","title":"Disable a User","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/disable-a-user","siteSpaceId":"sitesp_gf9hC","description":"Disable a Cortex XSOAR 6.14 user account.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"t1SK0j22wZ3xNHhC7BPf","title":"Remove a User","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/remove-a-user","siteSpaceId":"sitesp_gf9hC","description":"Remove a user from Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"lQztFM7wTuENqqbhEOIM","title":"Clear Users Data Using the CLI","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-the-cli","siteSpaceId":"sitesp_gf9hC","description":"Clear user data with the Cortex XSOAR 6.14 CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"RmlyDduaNolhlfBoEqaC","title":"Clear Users Data Using a Playbook","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-a-playbook","siteSpaceId":"sitesp_gf9hC","description":"Clear user data with a Cortex XSOAR 6.14 playbook.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"D264Y3topvABA7QtppPT","title":"Configure Users Data Using Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/configure-users-data-using-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Configure user data with Cortex XSOAR 6.14 server configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"vtWgXqgaVp0HSA1W5WOJ","title":"User Settings and Preferences","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/user-settings-and-preferences","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 user settings and preferences.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"PMq6YZZqm5MpEFIlRdsQ","title":"Configure User Settings","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/configure-user-settings","siteSpaceId":"sitesp_gf9hC","description":"Configure user settings in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"0kM2QV9RDz7ygEYEK4ky","title":"Manually Refresh the Number of Licenses in Use","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/user-management/manually-refresh-the-number-of-licenses-in-use","siteSpaceId":"sitesp_gf9hC","description":"Manually refresh the number of Cortex XSOAR 6.14 licenses in use.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"Wl8UmSel2cqIa5ZGHIUI","title":"Integration Permissions","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/integration-permissions","siteSpaceId":"sitesp_gf9hC","description":"Configure integration command permissions with role-based access control in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"CnVaFre92Agkyoaeb4rB","title":"Password Policy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/password-policy","siteSpaceId":"sitesp_gf9hC","description":"Configure password policies and requirements for Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"aYRngm9lTSfkohGPCPUJ","title":"Create a Password Policy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/password-policy/create-a-password-policy","siteSpaceId":"sitesp_gf9hC","description":"Create a password policy for Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"nYgdNmtUFGOhDXZR3Elf","title":"Edit a Default Password Policy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy","siteSpaceId":"sitesp_gf9hC","description":"Edit the default password policy in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"pjpxkLG843qSG7IucWOp","title":"Default Password Policy Keys","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy/default-password-policy-keys","siteSpaceId":"sitesp_gf9hC","description":"Reference default password policy keys for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"},{"label":"Edit a Default Password Policy"}]},{"id":"ZuCyXQHm2vleTN6EfU6R","title":"Change the Administrator Password","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/change-the-administrator-password","siteSpaceId":"sitesp_gf9hC","description":"Change the Cortex XSOAR 6.14 administrator password when account access is unavailable.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"YcttBM4MDtHrBc8nZqWq","title":"Authenticate Users with SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0","siteSpaceId":"sitesp_gf9hC","description":"Authenticate Cortex XSOAR 6.14 users with SAML 2.0 identity providers, including Okta, Microsoft Entra ID, ADFS, and Duo.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"0IhRYCX8txilYqQFMiHl","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_gf9hC","description":"Set up Okta as a SAML 2.0 identity provider for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"lqArkCS1JHL8IougO6GW","title":"Create Okta Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/create-okta-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_gf9hC","description":"Create Okta groups for Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"VK4u5ZgjkMY8e7BuEzKa","title":"Define the Okta Application to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Define an Okta application to authenticate Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"iPQ7Lq9SQzuOS7EVdyhJ","title":"SAML Settings for the Okta Application","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar/saml-settings-for-the-okta-application","siteSpaceId":"sitesp_gf9hC","description":"Configure SAML settings for the Okta application in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Define the Okta Application to authenticate Cortex XSOAR"}]},{"id":"joX1pd9bCV47314YVJuJ","title":"Configure the SAML 2.0 Integration for Okta","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta","siteSpaceId":"sitesp_gf9hC","description":"Configure the SAML 2.0 integration for Okta in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"uwelrIw2723RHcwHAHrr","title":"SAML 2.0 Okta Parameters","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta/saml-2.0-okta-parameters","siteSpaceId":"sitesp_gf9hC","description":"Reference SAML 2.0 Okta parameters for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Okta"}]},{"id":"DNEaGCVIsi5t3vOjIr3Z","title":"Map Okta Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/map-okta-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_gf9hC","description":"Map Okta groups to Cortex XSOAR 6.14 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"tqGKBVfHMLBMFPXWZgGW","title":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_gf9hC","description":"Set up Microsoft Entra ID as a SAML 2.0 identity provider for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"fjwhL4CSe3IhCnO917fP","title":"Configure Microsoft Entra ID to Authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-microsoft-entra-id-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Configure Microsoft Entra ID to authenticate Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"QDsl7roHj8zCBAtsYNhS","title":"Configure the SAML 2.0 Integration for Microsoft Entra ID","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id","siteSpaceId":"sitesp_gf9hC","description":"Configure the SAML 2.0 integration for Microsoft Entra ID in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"huEmH03K5wuHW2s9KaHJ","title":"SAML 2.0 Microsoft Entra ID Parameters","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id/saml-2.0-microsoft-entra-id-parameters","siteSpaceId":"sitesp_gf9hC","description":"Reference SAML 2.0 Microsoft Entra ID parameters for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Microsoft Entra ID"}]},{"id":"xRVDrAbLyPyXluxs9xow","title":"Set up ADFS as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_gf9hC","description":"Set up ADFS as a SAML 2.0 identity provider for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"tCgDWoijDYvMn0uZ2RuJ","title":"Create Relying Party Trust in ADFS","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/create-relying-party-trust-in-adfs","siteSpaceId":"sitesp_gf9hC","description":"Create an ADFS relying party trust for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"PStSq3ABs7YbfOuzfric","title":"Define the Claim Issuance Policy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/define-the-claim-issuance-policy","siteSpaceId":"sitesp_gf9hC","description":"Define the ADFS claim issuance policy for Cortex XSOAR 6.14 authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"LlQTRcMvS6k52623v5Ag","title":"Configure the SAML 2.0 Integration for ADFS","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs","siteSpaceId":"sitesp_gf9hC","description":"Configure the SAML 2.0 integration for ADFS in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"4bj0QvZ2uv1DbDrxO3sO","title":"SAML 2.0 ADFS Parameters","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs/saml-2.0-adfs-parameters","siteSpaceId":"sitesp_gf9hC","description":"Reference SAML 2.0 ADFS parameters for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for ADFS"}]},{"id":"VqWUHrkg6Im2phLVu2N0","title":"Map ADFS Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/map-adfs-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_gf9hC","description":"Map ADFS groups to Cortex XSOAR 6.14 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"qAP1ttraux9gvteZNTZd","title":"Duo for Single Sign-On","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on","siteSpaceId":"sitesp_gf9hC","description":"Configure Duo single sign-on for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"8gmwWwqGqoXmTXpYhpuD","title":"Create Duo Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/create-duo-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_gf9hC","description":"Create Duo groups for Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"RsGQXBA0tOYzLmJD8Lj1","title":"Define Duo to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/define-duo-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Define Duo to authenticate Cortex XSOAR 6.14 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"WSAltfEzqo1aIQ94X3nz","title":"Configure the SAML 2.0 Integration for Duo","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/configure-the-saml-2.0-integration-for-duo","siteSpaceId":"sitesp_gf9hC","description":"Configure the SAML 2.0 integration for Duo in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"DjzkScIzUgSIl8V1dHbQ","title":"Map Duo Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/map-duo-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_gf9hC","description":"Map Duo groups to Cortex XSOAR 6.14 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"gWoHYuyYXOL5YmA9o8S3","title":"Change the Default Administrator to a SAML User","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/change-the-default-administrator-to-a-saml-user","siteSpaceId":"sitesp_gf9hC","description":"Change the default Cortex XSOAR 6.14 administrator to a SAML user.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"898FocTSm0nn4CBHIOpi","title":"Set Up SAML Logout","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-saml-logout","siteSpaceId":"sitesp_gf9hC","description":"","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"4RcNAnMU47iQZRb7boW1","title":"Set the Default Theme for New Users","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/set-the-default-theme-for-new-users","siteSpaceId":"sitesp_gf9hC","description":"Set the default color theme for new Cortex XSOAR 6.14 users with server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"AtfvvajwyWNBAYwRZPfu","title":"Authenticate Users with Active Directory","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-active-directory","siteSpaceId":"sitesp_gf9hC","description":"Authenticate Cortex XSOAR 6.14 users with Active Directory credentials.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"C8LmeYY9t03Gr41rIAm4","title":"Marketplace","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace","siteSpaceId":"sitesp_gf9hC","description":"Browse Cortex XSOAR 6.14 Marketplace content packs, manage installations, and contribute content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"FaMfclU5VXc6YWE7xDha","title":"Marketplace Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/marketplace-overview","siteSpaceId":"sitesp_gf9hC","description":"Use Cortex XSOAR 6.14 Marketplace to discover, install, manage, and contribute content packs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"zwcjQEyVR8QrBnhTC6zL","title":"Content Packs Support Types","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-packs-support-types","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 content pack support types and ownership levels.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"bUbsS8o5isMDxE9icRgq","title":"Marketplace FAQs","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_gf9hC","description":"Find answers to common Cortex XSOAR 6.14 Marketplace and content pack questions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"IcyAmk2lNzdi9m12wTMs","title":"Search and Navigate in the Marketplace","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/search-and-navigate-in-the-marketplace","siteSpaceId":"sitesp_gf9hC","description":"Search and browse Cortex XSOAR 6.14 Marketplace content by use case, integration, and category.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"0zYS5hYEUbbBgWJkRmcX","title":"Convert Existing Content to Content Pack Format","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/convert-existing-content-to-content-pack-format","siteSpaceId":"sitesp_gf9hC","description":"Convert existing content to Cortex XSOAR 6.14 content pack format.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"BHJrAipbxbqNXp1SKJsL","title":"Use Cases","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/use-cases","siteSpaceId":"sitesp_gf9hC","description":"Explore Cortex XSOAR 6.14 Marketplace content packs by security use case.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"IMR0mLTqzdAI8FOeysEn","title":"Content Pack Installation","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-installation","siteSpaceId":"sitesp_gf9hC","description":"Review Cortex XSOAR 6.14 content pack dependencies, installation requirements, errors, and warnings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"7LK60gRfpNoGiRLVUPkq","title":"Install a Content Pack","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack","siteSpaceId":"sitesp_gf9hC","description":"Install a Cortex XSOAR 6.14 Marketplace content pack and its required dependencies.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"hOg677eblGLIpwP2JNuP","title":"Set up Your Use Case with the Deployment Wizard","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_gf9hC","description":"Configure a supported Cortex XSOAR 6.14 content pack with the Deployment Wizard.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"},{"label":"Install a Content Pack"}]},{"id":"fJQLOJO4PnbjhvY0OCsM","title":"Delete a Content Pack","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-installation/delete-a-content-pack","siteSpaceId":"sitesp_gf9hC","description":"Delete an installed Cortex XSOAR 6.14 Marketplace content pack.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"fXAJm9kVAYMXFGISkqTC","title":"Update a Content Pack","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-installation/update-a-content-pack","siteSpaceId":"sitesp_gf9hC","description":"Update an installed Cortex XSOAR 6.14 Marketplace content pack.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"xI0SueB9T2xUZmqswQC4","title":"Revert a Content Pack","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-installation/revert-a-content-pack","siteSpaceId":"sitesp_gf9hC","description":"Revert a Cortex XSOAR 6.14 content pack to an earlier version.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"d0AXkCKPpcqvKSqPx54Y","title":"Install a Content Pack Offline","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/install-a-content-pack-offline","siteSpaceId":"sitesp_gf9hC","description":"Install Cortex XSOAR 6.14 Marketplace content packs in offline or air-gapped environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"CDK3euIXeCIjITYuHoBr","title":"Configure the Marketplace for Offline Installation","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/install-a-content-pack-offline/configure-the-marketplace-for-offline-installation","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 Marketplace for offline content pack installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Install a Content Pack Offline"}]},{"id":"2UibH1FVhX969WviH2gK","title":"Content Pack Update Notifications","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_gf9hC","description":"Enable update notifications for Cortex XSOAR 6.14 content packs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"gFW6aVvBhGpzFd2uSrJN","title":"Customize Content Pack Notifications","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-update-notifications/customize-content-pack-notifications","siteSpaceId":"sitesp_gf9hC","description":"Customize Cortex XSOAR 6.14 content pack update notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Update Notifications"}]},{"id":"jXKFZBxReAHlduKaOPgw","title":"Marketplace Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/marketplace-troubleshooting","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 Marketplace login, connectivity, timeout, and certificate issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"QQg31ttaW2mdpzRTXB6E","title":"Content Pack Contributions","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_gf9hC","description":"Create and submit content packs to the Cortex XSOAR 6.14 Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"PIEUlw1IfpIH4lQZJ1Sj","title":"Create a Content Pack","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_gf9hC","description":"Create a content pack for the Cortex XSOAR 6.14 Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"qIzcn476Tj7xBRH3lXGn","title":"Resubmit a Content Pack","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_gf9hC","description":"Resubmit an updated content pack to the Cortex XSOAR 6.14 Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"Xj6igR0roGKkBhsj69y1","title":"Remote Repositories in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 remote repositories for content development, synchronization, and deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"ZyJToFFgY42AUSW1E9Cf","title":"Content Management in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 content with remote repositories and CI/CD workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"8ihNDHWRFnj4736Y3v1C","title":"Remote Repositories Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/remote-repositories-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand remote repository workflows and configuration in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"U9bMifRSo9Cn7LORRSeL","title":"Configure a Remote Repository on a Development Machine","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_gf9hC","description":"Configure a Cortex XSOAR 6.14 remote repository on a development machine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"s2qIdOkIgxF9j05U3WFc","title":"Configure a Remote Repository on the Production Machine","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-the-production-machine","siteSpaceId":"sitesp_gf9hC","description":"Configure a Cortex XSOAR 6.14 remote repository on a production machine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"CFOdohJMkOKyEcdXktsx","title":"Edit and Push Content to a Remote Repository","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_gf9hC","description":"Edit and push Cortex XSOAR 6.14 content to a remote repository.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"EBW9mx9qrSNdQds8lGv5","title":"Upgrade Remote Repositories from Versions 5.5 and below","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/upgrade-remote-repositories-from-versions-5.5-and-below","siteSpaceId":"sitesp_gf9hC","description":"Upgrade remote repository environments from Cortex XSOAR 5.5 to Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"PCO5WnOnFMiLAoP9hpDx","title":"Troubleshoot a Remote Repository Configuration","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 remote repository configuration and content workflow issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"bHhvmL0x1a8576SORfwS","title":"Troubleshoot a Remote Repository Definition","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-definition","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 remote repository definition issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"p33zd8PV9h7Bi2GNghaQ","title":"Troubleshoot Editing and Pushing Content","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-editing-and-pushing-content","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot editing and pushing Cortex XSOAR 6.14 remote repository content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"CihzaHFpcOYcObMwgPat","title":"Troubleshoot Content Issues","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-content-issues","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 content issues in remote repositories.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"3TjU13QJnR3YWr4h3C1P","title":"Troubleshoot a Remote Repository with an HTTP Proxy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-with-an-http-proxy","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot a Cortex XSOAR 6.14 remote repository using an HTTP proxy.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"AYMEALyjDJmkKHWvkWBh","title":"Engines","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines","siteSpaceId":"sitesp_gf9hC","description":"Install, manage, configure, and troubleshoot Cortex XSOAR 6.14 engines.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"YydzzUOmbsNLTyfqStfX","title":"Cortex XSOAR Engines Overview","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/cortex-xsoar-engines-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 engine architecture, installation, configuration, and load balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"HQ2ueqHMM95O07fAr6t4","title":"Engine Installation","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/engine-installation","siteSpaceId":"sitesp_gf9hC","description":"Review Cortex XSOAR 6.14 engine requirements and supported installation methods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"zYrLqMbVNhZUKp6xm6pT","title":"Install a Cortex XSOAR Engine","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine","siteSpaceId":"sitesp_gf9hC","description":"Install a Cortex XSOAR 6.14 engine on a supported host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"ysyNBp8LlAooLZdCLiV9","title":"Install a Signed Engine","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/engine-installation/install-a-signed-engine","siteSpaceId":"sitesp_gf9hC","description":"Install a signed Cortex XSOAR 6.14 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"5dPv23Vnm9cP3ev3bMe7","title":"Install a Cortex XSOAR Engine Offline","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine-offline","siteSpaceId":"sitesp_gf9hC","description":"Install a Cortex XSOAR 6.14 engine in an offline environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"dY00Dj1b80r33dijf6ps","title":"Use an Engine in an Integration","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_gf9hC","description":"Use a Cortex XSOAR 6.14 engine or load-balancing group with an integration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"rKPBw5ci5tLMfUMlBsa0","title":"Run a Script using an Engine","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_gf9hC","description":"Run Cortex XSOAR 6.14 scripts and automations on an engine or load-balancing group.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"Iaj5UiREYjMmrh6wVC7c","title":"Manage Engines","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 engines and load-balancing groups.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"QO1gPiXO56cLCzrCsD6h","title":"Configure Engines","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 engine workers, connectivity, communication tasks, and notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"CtZmDra18fM5I8INa73q","title":"Edit the Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration","siteSpaceId":"sitesp_gf9hC","description":"Edit configuration settings for a Cortex XSOAR 6.14 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"ffVbxfvw36CBwDZzryKV","title":"Common Properties When Editing an Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/common-properties-when-editing-an-engine-configuration","siteSpaceId":"sitesp_gf9hC","description":"Reference common Cortex XSOAR 6.14 engine configuration properties.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"8Vag8V9bXOKURyYdgDUn","title":"Configure the Engine to Use a Web Proxy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_gf9hC","description":"Configure a Cortex XSOAR 6.14 engine to use a web proxy.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"z4ewHO1N3U0WFe7s35qB","title":"Configure the Engine to Call the Server Without Using a Proxy","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_gf9hC","description":"Configure a Cortex XSOAR 6.14 engine to connect without a proxy.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"xQGQJVX2Dc1mJHtm3jk4","title":"Configure the Number of Workers for the Server","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/configure-the-number-of-workers-for-the-server","siteSpaceId":"sitesp_gf9hC","description":"Configure the number of workers for a Cortex XSOAR 6.14 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"YDKK3ojxSQ2GdI1w9hf6","title":"Configure Access to Communication Tasks through an Engine","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/configure-access-to-communication-tasks-through-an-engine","siteSpaceId":"sitesp_gf9hC","description":"Configure communication task access through a Cortex XSOAR 6.14 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"ScvIPdb7S4OYBq7UJWNE","title":"Configure an Engine to Use Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_gf9hC","description":"Configure custom certificates for a Cortex XSOAR 6.14 engine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"Zl4LPs5VQ0GFAC6GhJ4l","title":"Notify Users When an Engine Disconnects","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/configure-engines/notify-users-when-an-engine-disconnects","siteSpaceId":"sitesp_gf9hC","description":"Notify users when a Cortex XSOAR 6.14 engine disconnects.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"VmSkTxmFEc3WZeXCn3Fi","title":"Remove an Engine","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_gf9hC","description":"Remove a Cortex XSOAR 6.14 engine from a supported operating system.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"EzDtzS1B1WEnXfKQoSqG","title":"Troubleshoot Cortex XSOAR Engines","pathname":"/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 engines with logs, errors, and diagnostics.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"zoBYi1RwjOtbFCpjLmz1","title":"Customize and Configure Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Customize and configure Cortex XSOAR 6.14 incidents, playbooks, data, reporting, and system settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"}]},{"id":"XT7Kj3SFEYGN7OVawoJg","title":"Incidents","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 incident types, workflows, fields, layouts, and access controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"Ja2OZCau8jowYOZ6rS2F","title":"Incident Lifecycle","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle","siteSpaceId":"sitesp_gf9hC","description":"Incidents are potential security threats analysts identify and remediate in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"X1NGSSiqoOgHrEx4VXQp","title":"Fetch Incidents From an Integration Instance","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_gf9hC","description":"Fetch incidents from an integration instance in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Lifecycle"}]},{"id":"v0eHW14ShGl1cyFX8QPq","title":"Receive Notification on an Incident Fetch Error","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/receive-notification-on-an-incident-fetch-error","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 notifications for incident fetch errors.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Lifecycle"}]},{"id":"8y4rnwB6QsaXaWfyVyo5","title":"Incident Context Data","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-context-data","siteSpaceId":"sitesp_gf9hC","description":"Learn about incident context data in Cortex XSOAR 6.14 and how to access it.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"Nx9Fawoy0sZjwCeRAAn4","title":"Incident Customization","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization","siteSpaceId":"sitesp_gf9hC","description":"Customize incidents in Cortex XSOAR 6.14, including types, fields, layouts, and indicator extraction.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"Z3AxuPMQVLGYKGWprPId","title":"Create an Incident Type","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_gf9hC","description":"Create and configure incident types in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"3GbPrbFTGWsH8R5m9Myh","title":"Customize Incident Layouts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/customize-incident-layouts","siteSpaceId":"sitesp_gf9hC","description":"Customize incident layouts for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"WOx4sKXGXwFnOhWYuRli","title":"Incident Fields","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields","siteSpaceId":"sitesp_gf9hC","description":"Configure incident fields for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"ystd0dJ1PBEgE09e5rA8","title":"Create a Custom Incident Field","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-custom-incident-field","siteSpaceId":"sitesp_gf9hC","description":"Create custom incident fields in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"bcjiMQgc4AFllPN1VlZv","title":"Create a Grid Field for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-grid-field-for-an-incident-type","siteSpaceId":"sitesp_gf9hC","description":"Create grid fields for Cortex XSOAR 6.14 incident types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"bc863NTgwUZ0dPxRsjCB","title":"Use Scripts with the Grid Field","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/use-scripts-with-the-grid-field","siteSpaceId":"sitesp_gf9hC","description":"Use scripts with Cortex XSOAR 6.14 grid incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"DfpsZrFFXDUMsheNV8V2","title":"Incident Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/incident-field-trigger-scripts","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 incident field trigger scripts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"nlghI7lycTCljDmaUNmn","title":"Troubleshoot Closing Case Incident after Changing Field Type","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/troubleshoot-closing-case-incident-after-changing-field-type","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 cases after changing an incident field type.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"Akd1eYOsXAvqG1nKi5fU","title":"Create an Evidence Field","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-an-evidence-field","siteSpaceId":"sitesp_gf9hC","description":"Create evidence fields for Cortex XSOAR 6.14 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"hLlfU3cqY74UqxTGCFHh","title":"Incident De-Duplication","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication","siteSpaceId":"sitesp_gf9hC","description":"De-duplicate Cortex XSOAR 6.14 incidents manually or automatically with rules, scripts, and playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"doUEKTn16wXQQ4RfotRa","title":"Manually De-Duplicate Incidents","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/manually-de-duplicate-incidents","siteSpaceId":"sitesp_gf9hC","description":"Manually de-duplicate Cortex XSOAR 6.14 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident De-Duplication"}]},{"id":"CK05i7dSiMfYF2pQyKVD","title":"Automatic De-Duplication Using Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/automatic-de-duplication-using-scripts","siteSpaceId":"sitesp_gf9hC","description":"Automate Cortex XSOAR 6.14 incident de-duplication with scripts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident De-Duplication"}]},{"id":"lqxb24IoyRV1sZBzvIRg","title":"Pre-Process Rules","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 pre-process rules to automate actions on incoming incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"IANYmJhzO5sNGSIS4lfa","title":"Create Pre-Process Rules for Incidents","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/create-pre-process-rules-for-incidents","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 pre-process rules for incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Pre-Process Rules"}]},{"id":"jJi3JxEViMFa1M6eW6iS","title":"Rule Actions for Pre-Process Rules","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/create-pre-process-rules-for-incidents/rule-actions-for-pre-process-rules","siteSpaceId":"sitesp_gf9hC","description":"Configure rule actions for Cortex XSOAR 6.14 pre-process rules.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Pre-Process Rules"},{"label":"Create Pre-Process Rules for Incidents"}]},{"id":"BQhq23y9khvudjHzdYDo","title":"Post Processing for Incidents","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 post-processing scripts to automate actions before incident closure.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"e8ZOOrUOjwxPesoKnyty","title":"Create a Post-Processing Script","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/create-a-post-processing-script","siteSpaceId":"sitesp_gf9hC","description":"Create post-processing scripts for Cortex XSOAR 6.14 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Post Processing for Incidents"}]},{"id":"kuEKfmAPRc1ddamrlZ7t","title":"Add a Post-Processing Script to the Incident Type","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/add-a-post-processing-script-to-the-incident-type","siteSpaceId":"sitesp_gf9hC","description":"Add post-processing scripts to Cortex XSOAR 6.14 incident types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Post Processing for Incidents"}]},{"id":"As56I2YFzveMbEAIFAlB","title":"War Room Overview","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview","siteSpaceId":"sitesp_gf9hC","description":"Use the Cortex XSOAR 6.14 War Room for real-time incident investigation, commands, and collaboration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"mSSEmiRkxop1ImIWwfxr","title":"Schedule a Command","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/schedule-a-command","siteSpaceId":"sitesp_gf9hC","description":"Schedule commands in the Cortex XSOAR 6.14 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"ZZRVdCD8obsg7Lalzz65","title":"Add a Custom Widget in the War Room","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/add-a-custom-widget-in-the-war-room","siteSpaceId":"sitesp_gf9hC","description":"Add custom widgets to the Cortex XSOAR 6.14 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"ltgJWyoyj5DRmdtfYNsm","title":"War Room Indexing","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing","siteSpaceId":"sitesp_gf9hC","description":"Configure War Room indexing in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"illuvj4Bci079UE0jbQ4","title":"Index War Room Entries Using Bolt DB","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-bolt-db","siteSpaceId":"sitesp_gf9hC","description":"Index Cortex XSOAR 6.14 War Room entries with Bolt DB.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"7D82D3HXRd9TMNaNQCBK","title":"Index War Room Entries Using Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-elasticsearch","siteSpaceId":"sitesp_gf9hC","description":"Index Cortex XSOAR 6.14 War Room entries with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"QNNxWDka0J8S6WsrzHVu","title":"Incident Access Control Configuration","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 incident and investigation access with role-based access controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"8KL0qac6wF7Hcvq2Jcqm","title":"Limit Access to Investigations using RBAC","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/limit-access-to-investigations-using-rbac","siteSpaceId":"sitesp_gf9hC","description":"Limit Cortex XSOAR 6.14 investigation access with role-based controls.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Access Control Configuration"}]},{"id":"az0suAvotVXRpjKrOuK5","title":"Restrict an Investigation","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/restrict-an-investigation","siteSpaceId":"sitesp_gf9hC","description":"Restrict access to Cortex XSOAR 6.14 investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Access Control Configuration"}]},{"id":"YnAopCsjTp1cJM6tCR2S","title":"Classification and Mapping","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping","siteSpaceId":"sitesp_gf9hC","description":"Classify and map incoming integration data to Cortex XSOAR 6.14 incidents and indicators.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"tZIrSUeltqpyuJ01EBxe","title":"Classify Events Using a Classification Key","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/classify-events-using-a-classification-key","siteSpaceId":"sitesp_gf9hC","description":"Classify events with a classification key in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Classification and Mapping"}]},{"id":"VArubug3Tdn2mjC2QBLu","title":"Create a Mapper","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/create-a-mapper","siteSpaceId":"sitesp_gf9hC","description":"Create mappers for Cortex XSOAR 6.14 incident classification and mapping.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Classification and Mapping"}]},{"id":"bPNJcv15ZOyRJgHKh3BL","title":"Incident Mirroring","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-mirroring","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 incident mirroring with third-party applications and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"whoeoVBl7yutsW1BKR2i","title":"Customize Incident Close Reasons","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/customize-incident-close-reasons","siteSpaceId":"sitesp_gf9hC","description":"Customize close reasons for incidents by adding a server configuration in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"9P1tTYhx2ZGoWUTy6OoC","title":"Change the Display Name of Security Incidents","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/change-the-display-name-of-security-incidents","siteSpaceId":"sitesp_gf9hC","description":"Add a Cortex XSOAR 6.14 server configuration to change the name of security incidents from ‘incident’ to another term - cases, issues, etc.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"Az3DGU9N4OnlyA6Kg8AM","title":"Playbooks","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_gf9hC","description":"Build and manage Cortex XSOAR 6.14 playbooks for security orchestration and response.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"SBMgRj1M0RlKJ5nSC6ib","title":"What Are Playbooks?","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/what-are-playbooks","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 playbooks for security process automation and incident remediation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"Ctu251015EQ6vsbD9izX","title":"Playbook Development","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-development","siteSpaceId":"sitesp_gf9hC","description":"Develop Cortex XSOAR 6.14 playbooks to automate security workflows and response actions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"kIUmDRlSOvw2UBtFWtsg","title":"Configure IoT Security Playbooks","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-iot-security-playbooks","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 IoT Security playbooks for automated security workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"E8llIVJOxq6winIoBxtm","title":"Manage Playbook Settings","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 playbook settings, access, triggers, and Quiet Mode.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"7gvX5inH2S5R2LhSwEDX","title":"Obtain Playbook Metadata","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings/obtain-playbook-metadata","siteSpaceId":"sitesp_gf9hC","description":"Analyze incident playbook task inputs, outputs, storage use, and task types in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Manage Playbook Settings"}]},{"id":"npiu4iIC1dY91YiYuSoL","title":"Version Control","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/version-control","siteSpaceId":"sitesp_gf9hC","description":"Save and manage Cortex XSOAR 6.14 playbook versions during development.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"n0v4qLX8UUysuO9e3dcO","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields","siteSpaceId":"sitesp_gf9hC","description":"Reference fields for defining Cortex XSOAR 6.14 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"lf4r8urvMkw9WSimx2Wy","title":"Create Section Headers","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-section-headers","siteSpaceId":"sitesp_gf9hC","description":"Create section headers to organize Cortex XSOAR 6.14 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"aiiQalLaqZuSN23KBehN","title":"Create a Conditional Task","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-a-conditional-task","siteSpaceId":"sitesp_gf9hC","description":"Create conditional tasks for branching Cortex XSOAR 6.14 playbook workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"8zWrFw0YEeHpFB4RNfXW","title":"Communication Tasks","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 playbook communication tasks for analyst interactions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"tYxmfoz2h2qBXPzZLtWR","title":"Create an Ask Task","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 Ask tasks to collect analyst responses.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"YTOQI1ClO2CybwAsZMXB","title":"Ask Task Examples","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/ask-task-examples","siteSpaceId":"sitesp_gf9hC","description":"Review Cortex XSOAR 6.14 Ask task examples for playbook communication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"aFopsDwL4ZI1BYnIxYx4","title":"Customize an Ask Task","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/customize-an-ask-task","siteSpaceId":"sitesp_gf9hC","description":"Customize Cortex XSOAR 6.14 Ask tasks for analyst communication workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"rBlKeTtxDBMjHzd1DrGW","title":"Create a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 data collection tasks to gather analyst input.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"UyEdNT18KYZF2FFDROkJ","title":"Data Collection Task Examples","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/data-collection-task-examples","siteSpaceId":"sitesp_gf9hC","description":"Review Cortex XSOAR 6.14 data collection task examples for playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"6tjYgJYQsopbwKCMIAAd","title":"Customize a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/customize-a-data-collection-task","siteSpaceId":"sitesp_gf9hC","description":"Customize Cortex XSOAR 6.14 data collection tasks for playbook workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"GPPUdJdF2bVZa0C9iNVa","title":"Customize the SOC Name","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/customize-the-soc-name","siteSpaceId":"sitesp_gf9hC","description":"Customize the SOC name shown in Cortex XSOAR 6.14 communication tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"ylSTCh0hL6AVxSxA2ZGl","title":"Create Communication Task Authentication","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-communication-task-authentication","siteSpaceId":"sitesp_gf9hC","description":"Configure authentication for Cortex XSOAR 6.14 communication tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"LOFHJVg27a9j8R7zrXCw","title":"Add Ad Hoc Tasks to a Work Plan","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/add-ad-hoc-tasks-to-a-work-plan","siteSpaceId":"sitesp_gf9hC","description":"Add ad hoc tasks to Cortex XSOAR 6.14 incident work plans.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"6MyZpqnwEIluaYZAk1rX","title":"Handle Errors in a Playbook","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/handle-errors-in-a-playbook","siteSpaceId":"sitesp_gf9hC","description":"Handle task errors in Cortex XSOAR 6.14 playbooks and automation workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"ueFuuYooWSuNqowfMSLw","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/playbook-task-fields","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 fields for communication playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"fTJF7RO3gcEgaNe6Mbqg","title":"Playbook Inputs and Outputs","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 playbook inputs and outputs for task data flow.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"gdy4KBZIRvn6xnKFoEYC","title":"Task Cheat Sheet","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs/task-cheat-sheet","siteSpaceId":"sitesp_gf9hC","description":"Use this Cortex XSOAR 6.14 cheat sheet for playbook task configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Inputs and Outputs"}]},{"id":"DWbh0uN0VSTvs9MW8L8N","title":"Extend Context","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context","siteSpaceId":"sitesp_gf9hC","description":"Extend Cortex XSOAR 6.14 context with integration and command output data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"wzZegvQZWWiy50OCpQyL","title":"Extend Context in a Playbook Task","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-in-a-playbook-task","siteSpaceId":"sitesp_gf9hC","description":"Extend context within a Cortex XSOAR 6.14 playbook task.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"28XP6UJBgbVJ00PW0cz8","title":"Extend Context using the Command Line","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-using-the-command-line","siteSpaceId":"sitesp_gf9hC","description":"Extend Cortex XSOAR 6.14 context using command-line commands.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"lnsHXbeRNQI5J3xyJbUy","title":"Use DT syntax to get select keys from a list of dictionaries","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/use-dt-syntax-to-get-select-keys-from-a-list-of-dictionaries","siteSpaceId":"sitesp_gf9hC","description":"Use DT syntax in Cortex XSOAR 6.14 to select dictionary list keys.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"425T8YPvdeBrICHedJG0","title":"Filters and Transformers","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers","siteSpaceId":"sitesp_gf9hC","description":"Use Cortex XSOAR 6.14 filters and transformers to manipulate playbook data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"dxff0Jix5fmaDqsZ7x0V","title":"Create Filters and Transformers in a Playbook","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook","siteSpaceId":"sitesp_gf9hC","description":"Create filters and transformers for Cortex XSOAR 6.14 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"BlwSnxAdpGdzCVie5jnz","title":"Create a Filter Example","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-example","siteSpaceId":"sitesp_gf9hC","description":"Create a Cortex XSOAR 6.14 playbook filter with this example.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"xmB2vxrB1OmWrIdB01yM","title":"Create a Filter (Advanced) Example","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-advanced-example","siteSpaceId":"sitesp_gf9hC","description":"Create advanced Cortex XSOAR 6.14 playbook filters with this example.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"rlUXvrWZquJKI4E0IEeJ","title":"Filter Operators","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators","siteSpaceId":"sitesp_gf9hC","description":"Reference filter operators for Cortex XSOAR 6.14 playbook data processing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"NpAr9pZDw2d81DTfXi8o","title":"Built-in Filters","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/built-in-filters","siteSpaceId":"sitesp_gf9hC","description":"Use built-in filters to transform Cortex XSOAR 6.14 playbook data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"hgvHtb4ixO1gRYoGKfhx","title":"Transformers Operators","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/transformers-operators","siteSpaceId":"sitesp_gf9hC","description":"Reference transformer operators for Cortex XSOAR 6.14 playbook data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"wHnQ5KMyY1OBfh9u17Hy","title":"Create Custom Filter and Transformer Operators","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/create-custom-filter-and-transformer-operators","siteSpaceId":"sitesp_gf9hC","description":"Create custom filters and transformers for Cortex XSOAR 6.14 playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"EUgGTBqub4b6lGZ9AZOa","title":"Automations","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations","siteSpaceId":"sitesp_gf9hC","description":"Create and manage Cortex XSOAR 6.14 automations for playbook workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"YI0BF6Y41xvKFZfrCuIV","title":"Special Automation Tags","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/special-automation-tags","siteSpaceId":"sitesp_gf9hC","description":"Reference special automation tags in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Automations"}]},{"id":"QUD2Gkmw7mdR63fAdisd","title":"Common Scripts to use in Automations","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/common-scripts-to-use-in-automations","siteSpaceId":"sitesp_gf9hC","description":"Use common Cortex XSOAR 6.14 scripts in automation workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Automations"}]},{"id":"YHAraSPb45UHysT0ZAWw","title":"Configure a Sub-playbook Loop","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_gf9hC","description":"Configure a Cortex XSOAR 6.14 sub-playbook to run in a loop.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"8rNiIme7lpre7PPc9Hn4","title":"Playbook Polling","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-polling","siteSpaceId":"sitesp_gf9hC","description":"Use the Cortex XSOAR 6.14 Generic Polling playbook to check remote process status.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"HFcrqMi2KAF2cMEML8Gt","title":"Create Incident Fields in a Playbook","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/create-incident-fields-in-a-playbook","siteSpaceId":"sitesp_gf9hC","description":"Use the Cortex XSOAR 6.14 setIncident automation to update system incident fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"34Mbc0Vqbwfrd1v4isqv","title":"Playbook Testing","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing","siteSpaceId":"sitesp_gf9hC","description":"Test Cortex XSOAR 6.14 playbooks with ingested incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"IISRyUyUo35HiwssoNvw","title":"Debug a Playbook","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debug-a-playbook","siteSpaceId":"sitesp_gf9hC","description":"Debug Cortex XSOAR 6.14 playbooks to inspect tasks and execution flow.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Testing"}]},{"id":"9Jci1HF0Efs5YjcWecDU","title":"Debugger Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debugger-troubleshooting","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot the Cortex XSOAR 6.14 playbook debugger.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Testing"}]},{"id":"VOkHkHHWIRjl0Uv0yHIj","title":"Best Practices","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_gf9hC","description":"Follow best practices for developing and managing Cortex XSOAR 6.14 playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"Hof3WgsdtmX058QZVOEZ","title":"Jobs","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_gf9hC","description":"Schedule Cortex XSOAR 6.14 playbooks with time-triggered and feed-triggered jobs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"dxmLUenzQLPffA8m2aDU","title":"Create a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_gf9hC","description":"Create a time-triggered Cortex XSOAR 6.14 job to run a playbook.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"tUzo6DtOC6linhREJGvb","title":"Create a Job Triggered by a Delta in Feed","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-feed","siteSpaceId":"sitesp_gf9hC","description":"Create a Cortex XSOAR 6.14 job triggered by feed changes.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"JCyKfzhHZElzVSsppJlC","title":"Time Triggered Job Parameters","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/time-triggered-job-parameters","siteSpaceId":"sitesp_gf9hC","description":"Describe parameters for creating a time-triggered job in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"F97U0SRr7c9YJlPBN5VI","title":"Process Indicators Using a Job Triggered By Delta","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/process-indicators-using-a-job-triggered-by-delta","siteSpaceId":"sitesp_gf9hC","description":"Process indicators with a feed-triggered Cortex XSOAR 6.14 job.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"E9PvQYeTDvuVEvpYH0MN","title":"Add Indicators to SIEM Using a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/add-indicators-to-siem-using-a-time-triggered-job","siteSpaceId":"sitesp_gf9hC","description":"Send indicators to a SIEM with a time-triggered Cortex XSOAR 6.14 job.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"NmBiCXCaV8mXjw3hq6yU","title":"Work with SLAs","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas","siteSpaceId":"sitesp_gf9hC","description":"Create and manage Cortex XSOAR 6.14 SLAs, timers, triggers, scripts, and risk thresholds.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"3N2GDOFDLjdbRfs6O4CU","title":"SLA Overview","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/sla-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand SLA fields, timers, and actions in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"6rRw8888DTNdROqgtWpo","title":"Create an SLA Field","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-field","siteSpaceId":"sitesp_gf9hC","description":"Create SLA and timer fields in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"k9oyBOEQfzDMwoEJPKic","title":"Manage SLA and Timer Fields in an Incident","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/manage-sla-and-timer-fields-in-an-incident","siteSpaceId":"sitesp_gf9hC","description":"Manage incident SLA and timer fields in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"Kjf9zgywZwBQwUvTv7aR","title":"Create an SLA Trigger","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-trigger","siteSpaceId":"sitesp_gf9hC","description":"Create SLA triggers for Cortex XSOAR 6.14 playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"7hJ4SLmJue2KkhbYLoPC","title":"Customize SLA Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/customize-sla-scripts","siteSpaceId":"sitesp_gf9hC","description":"Customize SLA scripts for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"QCvjuPpTr6HwXWzgBXDY","title":"Search Incidents using SLA and Timer Fields","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/search-incidents-using-sla-and-timer-fields","siteSpaceId":"sitesp_gf9hC","description":"Search Cortex XSOAR 6.14 incidents by SLA and timer fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"4EaMi8y1FsegpYZhCFBa","title":"Configure the Global Risk Threshold","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_gf9hC","description":"Configure the global SLA risk threshold in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"qkBZOayeyH32dL7dhrf1","title":"Machine Learning","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning","siteSpaceId":"sitesp_gf9hC","description":"Use Cortex XSOAR 6.14 machine learning models for phishing classification and automation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"gvQKrQwlCTgK6p8F4snU","title":"Machine Learning Capabilities","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-capabilities","siteSpaceId":"sitesp_gf9hC","description":"Explore Cortex XSOAR 6.14 machine learning and phishing classifier capabilities.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"sMYCnEPXnGy4QtFINtcJ","title":"Machine Learning Models","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-models","siteSpaceId":"sitesp_gf9hC","description":"Use Cortex XSOAR 6.14 machine learning models for incident analysis.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"nekeiy50DUNYxiX56u60","title":"Use the Phishing Classifier in Production","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/use-the-phishing-classifier-in-production","siteSpaceId":"sitesp_gf9hC","description":"Use the Cortex XSOAR 6.14 phishing classifier in production.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"fcdMfi8ulFclqmwcoQrv","title":"Create a Machine Learning Model","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/create-a-machine-learning-model","siteSpaceId":"sitesp_gf9hC","description":"Create a Cortex XSOAR 6.14 machine learning model for phishing classification.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"fHpFZXnI951HHFZ9Dxzp","title":"Phishing Classifier Demo","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/phishing-classifier-demo","siteSpaceId":"sitesp_gf9hC","description":"Try the Cortex XSOAR 6.14 phishing classifier demonstration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"VyYtnGcwiuNou7PC1iXT","title":"Train a Phishing Classifier on Non-English Languages","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/train-a-phishing-classifier-on-non-english-languages","siteSpaceId":"sitesp_gf9hC","description":"Train a Cortex XSOAR 6.14 phishing classifier for non-English language emails.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"md4lCrsTMGdCFCK7MIxa","title":"Additional Machine Learning Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/additional-machine-learning-scripts","siteSpaceId":"sitesp_gf9hC","description":"Reference additional Cortex XSOAR 6.14 machine learning scripts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"ciZhfmegqIJm8xBTqkxR","title":"Lists","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists","siteSpaceId":"sitesp_gf9hC","description":"Create and manage Cortex XSOAR 6.14 lists for playbooks and automations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"7sOgullMJ7sfIpEGwVdw","title":"Work With Lists","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists","siteSpaceId":"sitesp_gf9hC","description":"Manage lists in Cortex XSOAR 6.14 that automations and playbooks can access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"qm9HcPXV8PUC6K3NY2Xf","title":"Work with JSON Lists","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists/work-with-json-lists","siteSpaceId":"sitesp_gf9hC","description":"Extract, filter, and transform JSON list data in Cortex XSOAR 6.14 playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"},{"label":"Work With Lists"}]},{"id":"6cSSun6I5UvF19La4Gex","title":"Create a List","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 lists that scripts can parse and modify.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"1NL3F2YIFJPMsMEXxyqx","title":"Set the List Separator Character","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/set-the-list-separator-character","siteSpaceId":"sitesp_gf9hC","description":"Set the list separator character in Cortex XSOAR 6.14. The default is a comma.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"CQPfuThnYzPSXIGbUaNt","title":"Transform a List into an Array","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_gf9hC","description":"Transform a list into an array for playbook tasks and instance mapping in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"uDn3XGg1sjFYYWQvCXXj","title":"Indicators","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 threat indicators, including types, fields, extraction, enrichment, expiration, and feeds.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"RdhEZIBK7pGJ01tiBWEj","title":"Indicator Concepts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-concepts","siteSpaceId":"sitesp_gf9hC","description":"Learn Cortex XSOAR 6.14 threat intelligence concepts, including fetching, configuring, enriching, and exporting indicators.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"KyBkeoUEVaWc0HklcNm1","title":"Indicator Verdict","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-verdict","siteSpaceId":"sitesp_gf9hC","description":"Understand how Cortex XSOAR 6.14 assigns and uses indicator verdicts from the most reliable reputation source.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"h8peUpfpBZ5Veum2gKy0","title":"Indicator Ingestion","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-ingestion","siteSpaceId":"sitesp_gf9hC","description":"Understand how Cortex XSOAR 6.14 detects, ingests, and processes threat indicators from supported sources.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"kxPKyfH2A80t7zCth3xd","title":"Indicator Customization","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization","siteSpaceId":"sitesp_gf9hC","description":"Customize Cortex XSOAR 6.14 indicator types, fields, scripts, profiles, and layouts for threat intelligence workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"HFsKGC2H8BbYIYIXgMLF","title":"Indicator Types","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 indicator types, associated fields, profiles, and scripts for threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"sT5p0VpGwiutEVrNr5go","title":"File Indicators","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 file indicators and their associated hash values for threat intelligence workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"pUgr0MYCzNhpmNwvoGPX","title":"File Indicator Merging Strategy","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators/file-indicator-merging-strategy","siteSpaceId":"sitesp_gf9hC","description":"Understand how Cortex XSOAR 6.14 merges file indicators using their hash values.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"},{"label":"File Indicators"}]},{"id":"WpKdMErxDg1qp4ugvDLa","title":"Create an Indicator Type","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_gf9hC","description":"Create a custom Cortex XSOAR 6.14 indicator type for structured threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"es5tnt04ru5byd95QURH","title":"Indicator Type Profile","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 indicator type profiles to control indicator fields and behavior.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"JRGgNz1rqIMQJ0JXEmTx","title":"Map Custom Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_gf9hC","description":"Map custom fields to Cortex XSOAR 6.14 indicator data for consistent threat intelligence management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"zTkVAvgEa1yy6PVswey9","title":"Formatting Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 formatting scripts to normalize indicator values and output.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"dsNvkoIIyjbUjRa4zZrS","title":"Enhancement Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 enhancement scripts to enrich indicators on demand.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"bnLysqX6ImDFi5Bt6fyx","title":"Reputation Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 reputation scripts that calculate and update indicator verdicts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"r3ISWKgGYKI8iyNwejmN","title":"Reputation Commands","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 reputation commands that calculate and update indicator verdicts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"N0VXpVBvfzvPhgbORrj9","title":"Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_gf9hC","description":"Create and configure Cortex XSOAR 6.14 indicator fields for structured threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"hioYFqj1lB5emPPTBize","title":"Create a Custom Indicator Field","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_gf9hC","description":"Create a custom Cortex XSOAR 6.14 indicator field for tailored threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"cHs4nzjoWCtI3iVAvxh6","title":"Configure the HTML Field","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field/configure-the-html-field","siteSpaceId":"sitesp_gf9hC","description":"Configure HTML indicator fields in Cortex XSOAR 6.14 to display rich threat intelligence content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"},{"label":"Create a Custom Indicator Field"}]},{"id":"IFxK3hhBmKrpymhxtvLF","title":"Indicator Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_gf9hC","description":"Run Cortex XSOAR 6.14 scripts automatically when indicator field values change.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"9a6CnfTCOyHURQQdxXyQ","title":"Indicator Layouts","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_gf9hC","description":"Customize Cortex XSOAR 6.14 layouts for indicator types and threat intelligence investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"JgRxHgJNn2zSw94qLQwK","title":"Customize an Indicator Type Layout","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_gf9hC","description":"Customize a Cortex XSOAR 6.14 layout for an indicator type and its threat intelligence data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"YsmuTsuU1JVnY2KVEwgA","title":"Add a Script in the Indicator Layout","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_gf9hC","description":"Add dynamic script output to a Cortex XSOAR 6.14 indicator layout.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"4VfyLC3vQw1GVr8vKiXW","title":"Indicator Extraction","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 indicator extraction and enrichment from incident fields, playbook tasks, and CLI commands.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"9EPerQKDDQ1yevtX7p6P","title":"Indicator Extraction Modes","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 indicator extraction modes and their behavior for incident data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"jx61g6gKfuQQc1oVqMQ2","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 indicator extraction rules for incident types and fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"EWJyxREu2eD8v1MQALcu","title":"Run Indicator Extraction in the CLI","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_gf9hC","description":"Extract and enrich Cortex XSOAR 6.14 indicators from the command-line interface.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"Yrkrp0exsfhsstDp7IfO","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 indicator extraction rules for playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"JJXafwgqnPe3mUq126L5","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_gf9hC","description":"Disable Cortex XSOAR 6.14 indicator extraction for selected automations or integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"1o0zwRFSlUdnursFSHtU","title":"Indicator Expiration","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-expiration","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 indicator expiration statuses, default methods, and retention periods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"s2psXnTGD2Ay9QmDtMVF","title":"Feed Integrations","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations","siteSpaceId":"sitesp_gf9hC","description":"Use Cortex XSOAR 6.14 feed integrations to fetch and process threat indicators from intelligence sources.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"JqkV6a3OTDFW8AXm1PHk","title":"Set the Source Reliability of Enrichment Integrations","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations/set-the-source-reliability-of-enrichment-integrations","siteSpaceId":"sitesp_gf9hC","description":"Set Cortex XSOAR 6.14 source reliability for enrichment integrations and indicator reputation data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Feed Integrations"}]},{"id":"2mSMBhOPAQ4iwgeIpjrP","title":"Dashboards","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards","siteSpaceId":"sitesp_gf9hC","description":"Create, customize, share, and manage Cortex XSOAR 6.14 dashboards and widgets for security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"0b1dO2zCZavbG7hma87H","title":"Dashboard Overview","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/dashboard-overview","siteSpaceId":"sitesp_gf9hC","description":"Explore Cortex XSOAR 6.14 dashboards, customizable widgets, filters, sharing, imports, exports, and dashboard management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"4RlnQGIZKalQZ0ejK7Ix","title":"Create a Dashboard","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/create-a-dashboard","siteSpaceId":"sitesp_gf9hC","description":"Create and customize a Cortex XSOAR 6.14 dashboard with widgets, data views, and security operations insights.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"rvbftxEBEIWsDUws6u7j","title":"Add a Widget to a Dashboard","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/add-a-widget-to-a-dashboard","siteSpaceId":"sitesp_gf9hC","description":"Add and configure widgets on Cortex XSOAR 6.14 dashboards, including widget parameters and date ranges.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"jIi7ttFXXqLIqHYqX9Ht","title":"Share a Dashboard","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/share-a-dashboard","siteSpaceId":"sitesp_gf9hC","description":"Share Cortex XSOAR 6.14 dashboards with users by role and manage permissions for shared dashboard access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"rYFDv2CAFJH3aBw3RQY2","title":"Edit a Dashboard","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/edit-a-dashboard","siteSpaceId":"sitesp_gf9hC","description":"Edit Cortex XSOAR 6.14 dashboards by managing widgets, date ranges, layout, size, and position.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"vDU8cDIalrzMwL3sBFIG","title":"Reports","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports","siteSpaceId":"sitesp_gf9hC","description":"Create, customize, schedule, and troubleshoot Cortex XSOAR 6.14 reports for security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"o8lIQv2XLvPh5X1eJ5pv","title":"Reports Overview","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/reports-overview","siteSpaceId":"sitesp_gf9hC","description":"Explore Cortex XSOAR 6.14 reporting features, including report creation, customization, scheduling, formats, and branding.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"11HWVSh0PeNti77sWpNX","title":"Create a Report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-a-report","siteSpaceId":"sitesp_gf9hC","description":"Create and customize Cortex XSOAR 6.14 reports with widgets, schedules, recipients, and PDF, CSV, or Word output.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"PEbYrj4bhmoBOlY8ESem","title":"Schedule a report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/schedule-a-report","siteSpaceId":"sitesp_gf9hC","description":"Schedule Cortex XSOAR 6.14 reports with email recipients, role restrictions, start dates, and Cron expressions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"eQJlqifZ1SDMAniiRcu8","title":"Customize the Email When Sending a Report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/customize-the-email-when-sending-a-report","siteSpaceId":"sitesp_gf9hC","description":"Customize Cortex XSOAR 6.14 report email subjects, message bodies, and HTML content for scheduled delivery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"hj2CUZ6yu5rBPAFCOwVp","title":"Create an Incident Summary Report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-an-incident-summary-report","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 incident summary reports from incident pages and save report templates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"94vzkbL2UVroX4ukOZih","title":"Select and Customize Sections to Export to a Summary Report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/select-and-customize-sections-to-export-to-a-summary-report","siteSpaceId":"sitesp_gf9hC","description":"Select and customize Cortex XSOAR 6.14 summary report sections, then save the report as a reusable template.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"tjxrSZksIQRe9IxsTD5L","title":"Add a Widget to a Report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/add-a-widget-to-a-report","siteSpaceId":"sitesp_gf9hC","description":"Add and configure widgets in Cortex XSOAR 6.14 reports to visualize security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"WcYcHk7hhnKKTGMNd7Vb","title":"Edit a report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/edit-a-report","siteSpaceId":"sitesp_gf9hC","description":"Edit Cortex XSOAR 6.14 report widgets, layout, and output type for custom reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"80QpzPbhMhhPs7v3PK8f","title":"Change the Report Logo","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/change-the-report-logo","siteSpaceId":"sitesp_gf9hC","description":"Add and customize a company logo in Cortex XSOAR 6.14 reports using server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"xAo6eUC42Q6gd6EINQdu","title":"Configure the Time Zone and Format in a Report","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/configure-the-time-zone-and-format-in-a-report","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 report time zones and date formats, and resolve related display issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"moIxfIBCa9QK41NottCJ","title":"Troubleshoot Reports","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/troubleshoot-reports","siteSpaceId":"sitesp_gf9hC","description":"Troubleshoot Cortex XSOAR 6.14 reports by downloading and reviewing report JSON output.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"jJxZbZ4jGd8ivS2vDxeY","title":"Widgets","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets","siteSpaceId":"sitesp_gf9hC","description":"Create, customize, and manage Cortex XSOAR 6.14 widgets for dashboards, reports, and security operations data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"FUcfi8SVn3Fg5QKnG43G","title":"Widgets Overview","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/widgets-overview","siteSpaceId":"sitesp_gf9hC","description":"Explore Cortex XSOAR 6.14 widgets and learn how to create, configure, and use them in dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"zwxbdVW2wgEGYgIFH7Hg","title":"Create a Widget using the Widget Builder","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 widgets with the Widget Builder for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"X35x8B55UfVoYJz32jEm","title":"Create a Custom Widget Using a JSON File","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_gf9hC","description":"Create custom Cortex XSOAR 6.14 widgets from JSON files for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"DgZfaL4Kd5teBgzkBDwv","title":"Create a Custom Widget Using an Automation Script","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-an-automation-script","siteSpaceId":"sitesp_gf9hC","description":"Create custom Cortex XSOAR 6.14 widgets with automation scripts for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"c4gtlcF5LlTI1ftRFykT","title":"Edit a Widget","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/edit-a-widget","siteSpaceId":"sitesp_gf9hC","description":"Edit Cortex XSOAR 6.14 widgets in the Widgets Library, dashboards, and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"tmrhMg1Jb4XccpBy4gvQ","title":"Create a Used Percentage Widget for a Disk Partition","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-used-percentage-widget-for-a-disk-partition","siteSpaceId":"sitesp_gf9hC","description":"Create a Cortex XSOAR 6.14 disk partition usage widget with server configuration and a dashboard.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"ObiRwxKwGjSEPSRI2DRh","title":"Saved By Dbot (ROI) Widget","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_gf9hC","description":"Configure the Cortex XSOAR 6.14 Saved by Dbot widget to calculate security operations return on investment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"czfMAD234GcaD5GfYPIM","title":"Manage Data","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data","siteSpaceId":"sitesp_gf9hC","description":"Manage Cortex XSOAR 6.14 data with reindexing, archiving, migration, storage, and restoration procedures.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"IIPnIruSRXFP5x9Byrh4","title":"Reindex the Entire Database","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-entire-database","siteSpaceId":"sitesp_gf9hC","description":"Reindex the entire Cortex XSOAR 6.14 database to rebuild searchable data and indexes.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"n9gC92tr4h1zlMhPOYER","title":"Reindex a Specific Index Database","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-a-specific-index-database","siteSpaceId":"sitesp_gf9hC","description":"Reindex specific Cortex XSOAR 6.14 index databases, including multiple selected indexes.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"bPkOzTte3pIZfKMZIIzk","title":"Reindex the Audit Log","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-audit-log","siteSpaceId":"sitesp_gf9hC","description":"Reindex the Cortex XSOAR 6.14 audit log to restore searchable historical audit trail data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"YKrX9VAmdhBMLxZISTnK","title":"Free up Disk Space with Data Archiving","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/free-up-disk-space-with-data-archiving","siteSpaceId":"sitesp_gf9hC","description":"Free Cortex XSOAR 6.14 disk space by archiving unused incident, entry, and indicator data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"0fYYI6mRe8LDFMYcoR1V","title":"Archive Artifacts and Attachments","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/archive-artifacts-and-attachments","siteSpaceId":"sitesp_gf9hC","description":"Archive Cortex XSOAR 6.14 artifacts and attachment folders to reduce storage use.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"rYJKBAOxyP4Mf5zhoBwF","title":"Store Incident/Artifact Files in the Cloud","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/store-incidentartifact-files-in-the-cloud","siteSpaceId":"sitesp_gf9hC","description":"Store Cortex XSOAR 6.14 incident attachments, artifacts, and War Room files in cloud storage.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"l8Axumcga5X19A2j1O8m","title":"Migrate Data to Another Server","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server","siteSpaceId":"sitesp_gf9hC","description":"Migrate Cortex XSOAR 6.14 data, files, and directories to another server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"6XgfvJb2PJZtUuxcE1AY","title":"Migrate Data to Another Server for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server-for-multi-tenant","siteSpaceId":"sitesp_gf9hC","description":"Migrate Cortex XSOAR 6.14 data to another server in a multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"PGY44CtOf5MSnu43jcfb","title":"Move Data Folders to Another Location on the Server","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/move-data-folders-to-another-location-on-the-server","siteSpaceId":"sitesp_gf9hC","description":"Move Cortex XSOAR 6.14 data folders to a different server location for storage management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"wY639J7W5ThbyG7fvg9t","title":"Restore an Archived Folder","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/restore-an-archived-folder","siteSpaceId":"sitesp_gf9hC","description":"Restore an archived Cortex XSOAR 6.14 data folder when access to archived data is required.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"NTNoIvfX4i37Htae9jS7","title":"Logs","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 server logs, access logs, audit trails, and diagnostic log bundles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"grwiVpMoZzDKvI0C7To1","title":"Logs Overview","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/logs-overview","siteSpaceId":"sitesp_gf9hC","description":"Understand Cortex XSOAR 6.14 logs and use log data for system monitoring and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"IY8vzzW9DF87cqzIKrUx","title":"Configure the Server Log","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-server-log","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 server log levels, file sizes, backups, and retention periods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"ID2aIrdfNphYtP6sDkGn","title":"Configure the Access Log for HTTPS Requests","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-access-log-for-https-requests","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 access logs to view HTTP and HTTPS requests.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"jTzkwSOzpqea14A1vw30","title":"Create a Log Bundle","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/create-a-log-bundle","siteSpaceId":"sitesp_gf9hC","description":"Create a Cortex XSOAR 6.14 diagnostic log bundle for troubleshooting and support investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"eHUUdleaVbM6FgEMnjfu","title":"Audit Trail","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/audit-trail","siteSpaceId":"sitesp_gf9hC","description":"View, export, extract, and purge Cortex XSOAR 6.14 audit trail records for administrative user actions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"E9QPySEsGFMwI9vfdiNp","title":"Send the Audit Trail to an External Log Service","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/send-the-audit-trail-to-an-external-log-service","siteSpaceId":"sitesp_gf9hC","description":"Send Cortex XSOAR 6.14 audit trail records to an external log service using server configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"Szh1AITP4yZYps1PRf2z","title":"System Settings","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 branding, login messages, system emails, and notification delivery settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"Kn99XwaTfsRNeHpJAiej","title":"Customize the Logo","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-logo","siteSpaceId":"sitesp_gf9hC","description":"Customize full-size and minimized logos in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"0L8HqlGj0egc0xEXFT2A","title":"Customize the Login Message","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-login-message","siteSpaceId":"sitesp_gf9hC","description":"Customize the login page message displayed to Cortex XSOAR 6.14 users before authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"Y8bqshoLMHlKoolrE6FR","title":"Customize System Emails","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-system-emails","siteSpaceId":"sitesp_gf9hC","description":"Customize Cortex XSOAR 6.14 system email subjects and message bodies in HTML or plain-text formats.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"Cxy55nqr68aTWTJxVNRB","title":"Configure System Notifications","pathname":"/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/configure-system-notifications","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 email notifications and mail sender settings with server configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"mXWvzyCPsIIo12DtTLIe","title":"Day to Day Tasks in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Manage daily Cortex XSOAR 6.14 incidents and threat indicators with investigation and response workflows.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"}]},{"id":"1NENKy29Cv2ZYAu8QnPV","title":"Incident Management","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management","siteSpaceId":"sitesp_gf9hC","description":"Open, investigate, manage, and resolve security incidents in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"Ehv9OPzSVix1Y52dsGQc","title":"Create an Incident","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-an-incident","siteSpaceId":"sitesp_gf9hC","description":"Create Cortex XSOAR 6.14 incidents manually, from feeds, or by importing JSON files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"y55TvLKdyP11JWIdREoc","title":"Create a Search Query for Incidents","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-search-query-for-incidents","siteSpaceId":"sitesp_gf9hC","description":"Create and save Cortex XSOAR 6.14 incident search queries to filter displayed results.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"ZWIvXm1qV7bP6KYuq3hT","title":"Create a Widget From an Incident","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-widget-from-an-incident","siteSpaceId":"sitesp_gf9hC","description":"Create custom Cortex XSOAR 6.14 widgets from incident search results.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"XZPOdkYJGJ1onImHlSEO","title":"Export an Incident to CSV Using the UTF8-BOM Format","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_gf9hC","description":"Export Cortex XSOAR 6.14 incidents to UTF-8 BOM CSV files for Cyrillic characters.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"426mfJmkSHRQigB3r6j6","title":"Incident Investigation","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-investigation","siteSpaceId":"sitesp_gf9hC","description":"Open Cortex XSOAR 6.14 incidents to review details and investigate security events.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"2HqCyoxj7SIydCSKvT6u","title":"Work Plan","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/work-plan","siteSpaceId":"sitesp_gf9hC","description":"Monitor and manage Cortex XSOAR 6.14 incident playbook workflows in the Work Plan.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"rMHIcwnoWjAnnX028014","title":"Investigate an Incident Using the Canvas","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_gf9hC","description":"Visually map and investigate Cortex XSOAR 6.14 incident relationships with the investigation canvas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"7lHyee8kYlZd9rjSk084","title":"Auto Populate the Canvas","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/auto-populate-the-canvas","siteSpaceId":"sitesp_gf9hC","description":"Automatically add related Cortex XSOAR 6.14 incidents and entities to an investigation canvas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"1WVmC65om3Crivb8wyat","title":"Dbot Suggestions: Quick View Window","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/dbot-suggestions-quick-view-window","siteSpaceId":"sitesp_gf9hC","description":"Review DBot incident and indicator suggestions in the Cortex XSOAR 6.14 canvas quick view.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"le6pNDQdB7WBofzUScqW","title":"Edit Dbot Incident and Indicator Suggestions","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/edit-dbot-incident-and-indicator-suggestions","siteSpaceId":"sitesp_gf9hC","description":"Configure DBot incident and indicator suggestions for Cortex XSOAR 6.14 investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"RP4sx8n2bFkyqssr6kSv","title":"Incident Actions","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-actions","siteSpaceId":"sitesp_gf9hC","description":"Perform Cortex XSOAR 6.14 incident actions, including tasks, notes, reports, editing, and deletion.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"GWh2a7gC1VJfmgTeASwc","title":"Evidence Handling","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/evidence-handling","siteSpaceId":"sitesp_gf9hC","description":"Add and manage investigation evidence in the Cortex XSOAR 6.14 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"JFoZ0E2o7dxQcLetY9eP","title":"Incident Tasks","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-tasks","siteSpaceId":"sitesp_gf9hC","description":"Create and complete Cortex XSOAR 6.14 playbook and to-do tasks during investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"O8eBqUpIshIZTnupZNea","title":"Link Incidents","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents","siteSpaceId":"sitesp_gf9hC","description":"Link related Cortex XSOAR 6.14 incidents from the interface, pre-process rules, or CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"U18PABnLoKOQ8jriK7T9","title":"Manage Related Incidents","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents/manage-related-incidents","siteSpaceId":"sitesp_gf9hC","description":"View and manage related incidents during Cortex XSOAR 6.14 investigations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Link Incidents"}]},{"id":"95HsnIjmyqYLTihxwgPx","title":"Link and Unlink incidents in the CLI","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents/link-and-unlink-incidents-in-the-cli","siteSpaceId":"sitesp_gf9hC","description":"Link and unlink related Cortex XSOAR 6.14 incidents using the command-line interface.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Link Incidents"}]},{"id":"iFiK5nDYwzacIUljLASu","title":"Configure Incident Fields for Related Incidents","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/configure-incident-fields-for-related-incidents","siteSpaceId":"sitesp_gf9hC","description":"Configure related Cortex XSOAR 6.14 incident fields using allow and ignore list settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"eAii4zl2eirUzF5NGQXQ","title":"Indicator Management","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management","siteSpaceId":"sitesp_gf9hC","description":"Create, search, edit, export, and manage threat indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"7uFISB5dHB9KGy1jA3VA","title":"Indicator Query","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/indicator-query","siteSpaceId":"sitesp_gf9hC","description":"Search, create, edit, export, and delete threat indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"abYVapa5hXU9cX5teCpA","title":"Configure the Indicator Timeline","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_gf9hC","description":"Configure the Cortex XSOAR 6.14 indicator timeline and improve timeline performance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"b2PwcN83tpeDFdf8AY5F","title":"Exclusion List","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/exclusion-list","siteSpaceId":"sitesp_gf9hC","description":"Add threat indicators to Cortex XSOAR 6.14 exclusion lists to prevent system processing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"LjZfh2I7Lmn3VX8MbRYX","title":"Export Indicators","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators","siteSpaceId":"sitesp_gf9hC","description":"Export Cortex XSOAR 6.14 threat indicators as lists or files for security tools.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"5nHPcRjPLTxtQSbME12f","title":"Manually Export Indicators","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators/manually-export-indicators","siteSpaceId":"sitesp_gf9hC","description":"Manually export Cortex XSOAR 6.14 threat indicators for external security tools.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"N4Zx7vmBR5hdwUtOWqFl","title":"Export Indicators Integrations","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators/export-indicators-integrations","siteSpaceId":"sitesp_gf9hC","description":"Export Cortex XSOAR 6.14 threat indicators through supported integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"z4oXtmB2bRbi7cxixFOh","title":"Export an Indicator to CSV Using the UTF8-BOM Format","pathname":"/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators/export-an-indicator-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_gf9hC","description":"Export Cortex XSOAR 6.14 threat indicators to UTF-8 BOM CSV files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"ibOQRmQ8EMZUMqgAYt0W","title":"Reference","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference","siteSpaceId":"sitesp_gf9hC","description":"Find Cortex XSOAR 6.14 reference information for configuration, diagnostics, security, and operations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"}]},{"id":"CXZ8nNCkOSd5EqjmiPlP","title":"Navigation Cheat Sheet","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/navigation-cheat-sheet","siteSpaceId":"sitesp_gf9hC","description":"Use the Cortex XSOAR 6.14navigation cheat sheet to access common features quickly.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"MRt7kBBidajiHeXT1kIO","title":"Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for customization, administration, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"Q1G0HDY97N3MS7KTdrSH","title":"Modify Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/modify-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Modify Cortex XSOAR 6.14 server configurations for customization and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"gT90wvYWS3TiRk2mSexk","title":"Active Directory Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/active-directory-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for Active Directory authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"eVIhzmrUCZCi7lrLQv0L","title":"Automation Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/automation-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for automation behavior.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"5GMG6584yLbVUgZqZtqG","title":"Dashboard Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/dashboard-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"548K0rb7LyRtBs7Pf3Rl","title":"Database Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/database-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for the database in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"r5ImcS8bUGS5iB27NtuQ","title":"Disaster Recovery Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/disaster-recovery-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"wX6DXCCqcqAyO2ZIEjKq","title":"Docker Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/docker-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for Docker.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"iyOKgXHHjyNr9jNClGIz","title":"Elasticsearch Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/elasticsearch-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"kXI8hibQx5TdZlgZP8MH","title":"Engine Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/engine-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for engines.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"o7UA1Jy2PCb4AV0s0H5P","title":"General Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/general-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference general Cortex XSOAR 6.14 server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"yJpcsXPEWqOUPJUhRjoU","title":"Google API Server Configuration","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/google-api-server-configuration","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configuration settings for Google APIs.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"eOc6tOmTNDre0JCXC7pZ","title":"Incident Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/incident-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for incident management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"MMJ9J0u2FcHwvb4mMgDQ","title":"Indicator Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/indicator-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"We4Lux16oQtg6EOcgdy2","title":"Integration Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/integration-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for integrations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"zVRFJlFvqMV4DlWNC817","title":"List Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/list-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for lists.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"xuNU1ocGKG0H82dhLXjQ","title":"Logs Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/logs-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for logs in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"u6MLtex9ShD7ga0vFgEG","title":"Marketplace Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/marketplace-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for Marketplace.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"eZQ1Y4JyiwdKpPJU9UEE","title":"Multi-Tenant Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/multi-tenant-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for multi-tenant deployments in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"ht0aa7bTgw77TxDV28xr","title":"Notification Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/notification-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"d6z9SR0ooTkBLvEjIAw0","title":"Playbook Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/playbook-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for playbooks in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"naL5VanC1zWCmvqpD4qb","title":"Proxy Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/proxy-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for proxy servers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"ZTrfru2Zrx41dQJGQJmK","title":"Remote Repository Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/remote-repository-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for remote repositories in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"agE1E8Y43remQu4pt4Su","title":"Report Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/report-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"TEVlsuIw9qNWudN4wXct","title":"Security Headers Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/security-headers-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for security headers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"bkpF4IJiO37Xt10mYDtR","title":"SLA Server Configuration","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/sla-server-configuration","siteSpaceId":"sitesp_gf9hC","description":"Server configuration for SLAs in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"VK2rL7eJFReaBoc67y4y","title":"System Diagnostics Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/system-diagnostics-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for system diagnostics.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"tPX4x5rH82oMb1gdimkM","title":"Users and Roles Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/users-and-roles-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 server configurations for users and roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"V9bPRm6ZJhQofXliIL9Z","title":"War Room Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/war-room-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for the War Room in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"b2WPXC748hjR5JLdCdMU","title":"Widget Server Configurations","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations/widget-server-configurations","siteSpaceId":"sitesp_gf9hC","description":"Server configurations for widgets in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"yR29fUlVr8ElPH3AAopM","title":"System Diagnostics","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/system-diagnostics","siteSpaceId":"sitesp_gf9hC","description":"Monitor Cortex XSOAR 6.14 system health and resolve performance and diagnostic alerts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"WWD9lja9G38sh5GOOTUP","title":"Fix System Diagnostics Issues","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/system-diagnostics/fix-system-diagnostics-issues","siteSpaceId":"sitesp_gf9hC","description":"Resolve Cortex XSOAR 6.14 alerts reported on the System Diagnostics page.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"System Diagnostics"}]},{"id":"m9dcWhGgZyLmdQnsaaff","title":"Performance Tuning for Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/performance-tuning-for-cortex-xsoar","siteSpaceId":"sitesp_gf9hC","description":"Tune Cortex XSOAR 6.14 performance for reliable and scalable security operations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"wrTLiDB553p43rxc9uY4","title":"Supported Ciphers","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/supported-ciphers","siteSpaceId":"sitesp_gf9hC","description":"Review TLS 1.2 and TLS 1.3 cipher suites supported by Cortex XSOAR 6.14 servers and engines.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"nplqAzhTFO8199hrBwEB","title":"Telemetry","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/telemetry","siteSpaceId":"sitesp_gf9hC","description":"Configure Cortex XSOAR 6.14 telemetry collection and control product usage data sharing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"mzBYZlATKdHZMXn07rBo","title":"Keyboard Shortcuts","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/keyboard-shortcuts","siteSpaceId":"sitesp_gf9hC","description":"Use Cortex XSOAR 6.14 keyboard shortcuts for playbooks, scripts, the CLI, and incident pages.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"8XyoWZXSPZyY65wtFp6F","title":"Indicator Fields Structure","pathname":"/xsoar-6-administrator-guide/6.14/reference-docs/reference/indicator-fields-structure","siteSpaceId":"sitesp_gf9hC","description":"Reference Cortex XSOAR 6.14 indicator field structures aligned with STIX standards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"grQOKjv5bmikkCUHcV1w","title":"Navigate the Cortex XSOAR 6.13 Administrator Guide","pathname":"/xsoar-6-administrator-guide/6.13","siteSpaceId":"sitesp_eO0yu","description":"Start here for a visual overview of the main Cortex XSOAR 6.13 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"DMSlZdsBu6DoTrRpV7ki","title":"Overview","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/readme-1","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 provides security orchestration, incident management, and interactive investigation. Overview of Cortex XSOAR 6.13 features and concepts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"SNhscLkKxz6TCTtPIOJD","title":"Get Started in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Learn about Cortex XSOAR 6.13 concepts, licenses, and the product lifecycle, as well as basic functionality including the command line, API keys, search, CLI, etc.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"2QwQp19nx05bu680UdVJ","title":"Licenses","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/licenses","siteSpaceId":"sitesp_eO0yu","description":"The Cortex XSOAR 6.13 license type determines which components users can utilize. License types are community, starter, or enterprise. Users include audit and full.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"6jmnuwnlaemSfIi5RWPB","title":"FIPS Version","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/fips-version","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 offers a FIPS version using a software library validated against FIPS 140-3.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"EkhYBg1TfmSbteGB7Tyh","title":"Concepts","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/concepts","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 concepts, including incidents, integrations, playbokos, automations, commands, war room, indicators, playground.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"Gehd4lTFFrx6LTeeM12u","title":"Product Support Lifecycle","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/product-support-lifecycle","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 major releases product support lifecycle.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"xMIITqGWwMNSG2ELVQVR","title":"API Keys","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/api-keys","siteSpaceId":"sitesp_eO0yu","description":"Generate and manage API keys in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"gcUPKXWBrckzEzz2AAge","title":"Use the Command Line Interface","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/use-the-command-line-interface","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 enables you to run system commands, integration commands, automations, and more, from an integrated CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"gFgWtdxUuCHgsWcIcGxG","title":"Common Arguments","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/use-the-command-line-interface/common-arguments","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 enables you to run system commands, integration commands, automations, and more, from an integrated CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"},{"label":"Use the Command Line Interface"}]},{"id":"yETSLFVd5cd0sopWw4Tk","title":"How to Search","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-search","siteSpaceId":"sitesp_eO0yu","description":"Search Cortex XSOAR 6.13 using Lucene query syntax, the search box, or general search.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"l7Tb4lPUq8CL36jD0gBw","title":"Using the Search Query","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-search/using-the-search-query","siteSpaceId":"sitesp_eO0yu","description":"Search Cortex XSOAR 6.13 using Lucene query syntax, the search box, or general search.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"},{"label":"How to Search"}]},{"id":"ULMrT1gvZHD70AeFqdrd","title":"How to Use Markdown","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-use-markdown","siteSpaceId":"sitesp_eO0yu","description":"Use markdown to add basic formatting to text in multiple contexts within Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"Uv8jBpfKOiVn5VxDj8AR","title":"New User FAQ","pathname":"/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/new-user-faq","siteSpaceId":"sitesp_eO0yu","description":"New User FAQ for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"k0dLEnC67aBoR6MyBH1P","title":"Onboarding in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/onboarding-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Onboarding process for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"xJ5ZAYLKkpWIMucIPPKy","title":"Deployment Checklist - Best Practices","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/deployment-checklist-best-practices","siteSpaceId":"sitesp_eO0yu","description":"Overview of the deployment process, including best practices for Cortex XSOAR installation and maintenance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"r64ICBoEatvzuwAySdV6","title":"Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment","siteSpaceId":"sitesp_eO0yu","description":"Install Cortex XSOAR 6.13 for a single server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"ZG6MNjX7q2BMKFWqFM9p","title":"System Requirements","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/system-requirements","siteSpaceId":"sitesp_eO0yu","description":"Verify that your Cortex XSOAR 6.13 deployment meets the minimum system requirements.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"iLzM50mmFsQNQSC6JBKx","title":"Install the Server for a Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/install-the-server-for-a-single-server-deployment","siteSpaceId":"sitesp_eO0yu","description":"Installation instructions and requirements for standard Cortex XSOAR 6.13 single server deployments, with the app server and database server on the same machine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"XkxMpe0JEChUtNPXlwSy","title":"Install the Server with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/install-the-server-with-elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Install Cortex XSOAR 6.13 with Elasticsearch as the database. Prerequisites and instructions for installing a new Cortex XSOAR 6.13 environment with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"o2iYeQ5HsFLT8GL043cK","title":"Install the Server Offline","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline","siteSpaceId":"sitesp_eO0yu","description":"Install Cortex XSOAR 6.13 when you do not have internet access. Instructions for offline installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"HhuDLYgNaHOQpKBKJkBt","title":"Dependencies for Offline Installation","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_eO0yu","description":"Review required dependencies for an offline Cortex XSOAR 6.13 server or engine installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Install the Server Offline"}]},{"id":"0hJAJaErvZXVtUQAMUn4","title":"Add a License","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/add-a-license","siteSpaceId":"sitesp_eO0yu","description":"Add a Cortex XSOAR 6.13 license file through the UI or directly on the server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"YfHvd4wTZjMYsld0Od74","title":"Post-Installation Checklist","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist","siteSpaceId":"sitesp_eO0yu","description":"Common post-installation steps to perform after installing Cortex XSOAR 6.13. Cortex XSOAR 6.13 installation troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"aG1Li86NksGNU47DGOm2","title":"Monitor Components","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/monitor-components","siteSpaceId":"sitesp_eO0yu","description":"Monitor components in a Cortex XSOAR 6.13 single server deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"Gk42tvhwMMpcMSCrSuxG","title":"HTTPS with a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate","siteSpaceId":"sitesp_eO0yu","description":"Configure HTTPS with a signed certificate in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"M0k0UwepWy6RK5xFfrZH","title":"Install or Renew a Custom Certificate","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate/install-or-renew-a-custom-certificate","siteSpaceId":"sitesp_eO0yu","description":"Install or renew a custom certificate in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"},{"label":"HTTPS with a Signed Certificate"}]},{"id":"0HccUHBdz9eiwdU6XjoG","title":"Create a Self-Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate/create-a-self-signed-certificate","siteSpaceId":"sitesp_eO0yu","description":"Create a self-signed certificate for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"},{"label":"HTTPS with a Signed Certificate"}]},{"id":"kbx6cx64UJCqd1kJZvmP","title":"Configure the Server to Listen on HTTP","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/configure-the-server-to-listen-on-http","siteSpaceId":"sitesp_eO0yu","description":"Configure a Cortex XSOAR 6.13 server to listen on HTTP.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"yX5CGTCuAX5WvZ0RmPAA","title":"Troubleshoot WebSockets","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/troubleshoot-websockets","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot WebSocket connectivity in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"a1ih5U63UTi1nOOpEnW5","title":"Upgrade the Cortex XSOAR Server","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_eO0yu","description":"Upgrade the Cortex XSOAR 6.13 server, including preparation, upgrade, and post-upgrade steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"3Wf3rf2F4Ym80Ck9FnmM","title":"Uninstall the Server","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/single-server-deployment/uninstall-the-server","siteSpaceId":"sitesp_eO0yu","description":"Uninstall Cortex XSOAR 6.13. Configuration files and files created by engines are not removed.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"T52eNat4A1hIUCGxsw5c","title":"Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Implement Cortex XSOAR 6.13 with Elasticsearch for setup, security, migration, and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"zMNUo01BIxZKfT8LPinJ","title":"Elasticsearch Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-overview","siteSpaceId":"sitesp_eO0yu","description":"Migrate Cortex XSOAR 6.13 data to Elasticsearch. Object information in an existing Cortex XSOAR 6.13 instance is copied to a designated Elasticsearch index.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"FKckRiMZMT7SXxm1IJmB","title":"Elasticsearch Setup","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup","siteSpaceId":"sitesp_eO0yu","description":"Elasticsearch best practices, sizing requirements, and configuration options for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"fL7oUMqWI8fApeJzZYOy","title":"Elasticsearch System Requirements","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-system-requirements","siteSpaceId":"sitesp_eO0yu","description":"Review Elasticsearch system requirements for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"XIJ713OdrPbL9pfEo9Ck","title":"Elasticsearch Configurations","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-configurations","siteSpaceId":"sitesp_eO0yu","description":"Configure Elasticsearch for a Cortex XSOAR 6.13 deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"Ygij2Fxh2wzrjc9YYcBy","title":"Elasticsearch Data Management","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-data-management","siteSpaceId":"sitesp_eO0yu","description":"Manage Elasticsearch data in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"bpxgdoslzlrntLglSKAt","title":"Elasticsearch Security","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-security","siteSpaceId":"sitesp_eO0yu","description":"Elasticsearch security and best practices guidelines for Cortex XSOAR 6.13 single server and multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"UavVa1LGyvIaz7ush5BZ","title":"Elasticsearch General Security Guidelines","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_eO0yu","description":"Apply general Elasticsearch security guidelines for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"HAJaTW0ZKrTOhm7ESelM","title":"Elasticsearch Security Guidelines - Multi-tenant Deployments","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-security-guidelines-multi-tenant-deployments","siteSpaceId":"sitesp_eO0yu","description":"Apply Elasticsearch security guidelines for Cortex XSOAR 6.13 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"0yaidxBx0G3EXFlgAKMj","title":"Migration","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration","siteSpaceId":"sitesp_eO0yu","description":"Learn about migrating Cortex XSOAR 6.13 data to Elasticsearch for a single server or multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"5mpxJHbQ29rvRhHYUux3","title":"Elasticsearch Migration Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-migration-overview","siteSpaceId":"sitesp_eO0yu","description":"Review Elasticsearch migration options for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"VMC5SWyQWgV42czoYf6b","title":"Migrate Objects to Elasticsearch for a Single Server","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-single-server","siteSpaceId":"sitesp_eO0yu","description":"Migrate objects to Elasticsearch for a Cortex XSOAR 6.13 single server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"0kMLHfnVsmvtqiZS2CfS","title":"Migrate Objects to Elasticsearch for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-multi-tenant","siteSpaceId":"sitesp_eO0yu","description":"Migrate objects to Elasticsearch for Cortex XSOAR 6.13 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"k7ENKX1bQEkjIcZuiutK","title":"Migrate an Existing Elasticsearch Deployment","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/migrate-an-existing-elasticsearch-deployment","siteSpaceId":"sitesp_eO0yu","description":"Migrate an existing Elasticsearch deployment to Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"UXmvRnmoTIVctR1Qfj0g","title":"Migrate Objects to Elasticsearch for a Distributed Database","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-distributed-database","siteSpaceId":"sitesp_eO0yu","description":"Migrate objects to Elasticsearch for a Cortex XSOAR 6.13 distributed database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"VmgKWnGot76nTcrC65DN","title":"Manage Partial Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/manage-partial-migration-to-elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Manage a partial Elasticsearch migration in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"K7CzZD9ykQnRGaCdRUNH","title":"Validate the Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/validate-the-migration-to-elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Validate an Elasticsearch migration in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"zc9yevOuVei0JdAMM2JJ","title":"Elasticsearch Post Migration Health Check","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-post-migration-health-check","siteSpaceId":"sitesp_eO0yu","description":"Perform an Elasticsearch post-migration health check in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"eHTeAhLfj9USZFKD8QY0","title":"Disaster Recovery for Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Back up and restore a Cortex XSOAR 6.13 Elasticsearch deployment using snapshots.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"ED75pQt0Cm8be2UtNTxX","title":"Create Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/create-elasticsearch-snapshots","siteSpaceId":"sitesp_eO0yu","description":"Create Elasticsearch snapshots for Cortex XSOAR 6.13 disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"cnwsG1AZj09QEFMRC3d0","title":"Restore Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/restore-elasticsearch-snapshots","siteSpaceId":"sitesp_eO0yu","description":"Restore Elasticsearch snapshots for Cortex XSOAR 6.13 disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"O0fZcGjbLw1FEAwF4L2U","title":"Archive Data with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/archive-data-with-elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Archive Cortex XSOAR 6.13 data using Elasticsearch index lifecycle management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"ddANY5eI6XkfLzvkzTk7","title":"Troubleshoot Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/elasticsearch/troubleshoot-elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot common issues in Cortex XSOAR 6.13 Elasticsearch deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"ZlprKbmhSlpH9uRYILAc","title":"Docker","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 Docker installation, configuration, security, and troubleshooting guides.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"EP7nHpVIfU4tSu1khb2f","title":"Docker Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-overview","siteSpaceId":"sitesp_eO0yu","description":"Overview of how Cortex XSOAR 6.13 uses Docker for security and predictability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"bpeLYlnWstnruUFenhIp","title":"Docker Installation","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-installation","siteSpaceId":"sitesp_eO0yu","description":"Install Docker for Cortex XSOAR 6.13 on Enterprise Linux platforms and troubleshoot installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"jJHeL6ckwZFw5GxLjLkH","title":"Configure Python Docker Integrations to Trust Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_eO0yu","description":"Configure CA-signed and custom certificates for Docker. Trust custom certificates for Python integrations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"a8a38ijTm4HwZ2tdkZNF","title":"Docker Images in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Use Docker to run Python scripts and integrations in a controlled environment in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"LVEuLpKb4ITabbw9anOA","title":"Create a Docker Image In Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/create-a-docker-image-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Create a Docker image for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"OTQUgHhKwIhI573vGvk9","title":"Install Docker Images Offline","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/install-docker-images-offline","siteSpaceId":"sitesp_eO0yu","description":"Install Docker images offline for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"7uofDrdNk2s5dwXN3q2q","title":"Docker Image Security","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/docker-image-security","siteSpaceId":"sitesp_eO0yu","description":"Secure Docker images used by Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"2in67Vpf826NMKH8OrlP","title":"Manage Docker Images","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/manage-docker-images","siteSpaceId":"sitesp_eO0yu","description":"Manage Docker images in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"IzOc0Z7xbi9kLUosKNtc","title":"Change the Docker Image for Automations and Integrations","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/change-the-docker-image-for-automations-and-integrations","siteSpaceId":"sitesp_eO0yu","description":"Change Docker images for Cortex XSOAR 6.13 automations and integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"HCQCagS1Tdxd0gO56O4A","title":"Use the Cortex XSOAR Container Registry","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_eO0yu","description":"Use the Cortex XSOAR 6.13 container registry.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"2muMFDZo70UUgZaLAua9","title":"Docker Hardening Guide","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide","siteSpaceId":"sitesp_eO0yu","description":"Use the Docker Hardening Guide to configure Cortex XSOAR 6.13 settings when running Docker containers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"qxLrd7BqeG0urIKX50kz","title":"Run Docker with Non-Root Internal Users","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_eO0yu","description":"Run Docker with non-root internal users in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"ZngWXrpS9qQrZ04hqYfK","title":"Configure Memory Limit Support Without Swap Limit Capabilities","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-memory-limit-support-without-swap-limit-capabilities","siteSpaceId":"sitesp_eO0yu","description":"Configure Docker memory limit support for Cortex XSOAR 6.13 without swap limits.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"EsRxdcDvRuJbR74J2V39","title":"Configure the Memory Limitation","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_eO0yu","description":"Configure Docker memory limits in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"Hkis2RQDVOcpKYRYvBlv","title":"Test the Memory Limit","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/test-the-memory-limit","siteSpaceId":"sitesp_eO0yu","description":"Test Docker memory limits in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"qd0YOTzXOWBesyEOGRQl","title":"Limit Available CPU","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/limit-available-cpu","siteSpaceId":"sitesp_eO0yu","description":"Limit Docker CPU resources in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"Dv16QbbNJo3599wJ8fQd","title":"Configure the PIDs Limit","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-pids-limit","siteSpaceId":"sitesp_eO0yu","description":"Configure Docker process limits in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"V2S8AvmjniQLoSmnj5Xw","title":"Configure the Open File Descriptors Limit","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-open-file-descriptors-limit","siteSpaceId":"sitesp_eO0yu","description":"Configure Docker open file descriptor limits in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"YrIYGXZtfrIUNMzpXYoB","title":"Docker Network Hardening","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_eO0yu","description":"Harden Docker networking for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"qhhhTH74dbDwVAifho82","title":"Docker FAQs","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/docker-faqs","siteSpaceId":"sitesp_eO0yu","description":"Frequently asked questions about Docker in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"HqmDu9IRkYCyiYw4RKF5","title":"Troubleshoot Docker Networking Issues","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/troubleshoot-docker-networking-issues","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot Docker networking issues in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"TAcuTGioheTErnTXfZw0","title":"Troubleshoot Docker Performance Issues","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/troubleshoot-docker-performance-issues","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot Docker performance issues in Cortex XSOAR 6.13. Update Docker packages and dependencies.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"MSxBJtOMUV9BfjMEREtw","title":"Configure Docker Pull Rate Limit","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_eO0yu","description":"Configure Docker pull rate limits on public images in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"1OpL1ncdHjX2eECIleyW","title":"Change the Docker Installation Folder","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_eO0yu","description":"Change the default Docker installation folder for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"QJLobhDEdWSjmwO6ruUl","title":"Podman","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/podman","siteSpaceId":"sitesp_eO0yu","description":"Run Podman containers instead of Docker on RHEL v8 in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"xRxbNBdbrQJ4tKfiwjK5","title":"Podman Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/podman/podman-overview","siteSpaceId":"sitesp_eO0yu","description":"Run Podman containers instead of Docker on RHEL v8 in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"9lH2D7479FT81eBDjvvT","title":"Change container storage directory","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/podman/change-container-storage-directory","siteSpaceId":"sitesp_eO0yu","description":"Change the Podman container storage directory in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"Nw0850ZVHqcziswV2KMN","title":"Podman Installation","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/podman/podman-installation","siteSpaceId":"sitesp_eO0yu","description":"Install Podman in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"HmZJwL92vdee0VHJqgLM","title":"Configure the SELinux Policy for PowerShell Integrations","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/podman/configure-the-selinux-policy-for-powershell-integrations","siteSpaceId":"sitesp_eO0yu","description":"Configure the SELinux policy for PowerShell integrations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"Jm81OtxFyfg9vAwidyDl","title":"Migrate From Docker to Podman","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_eO0yu","description":"Migrate from Docker to Podman in Cortex XSOAR 6.13 on RHEL 8 or later.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"5H0j8F9QqibZV5vf8g4r","title":"Troubleshoot Podman","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/podman/troubleshoot-podman","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot Podman in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"VJ5rCDctXaBg1SHbpyV1","title":"Proxy","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/proxy","siteSpaceId":"sitesp_eO0yu","description":"Configure proxy settings in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"RPaLARXxulsc5uWZJGzU","title":"Configure Proxy Settings","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/proxy/configure-proxy-settings","siteSpaceId":"sitesp_eO0yu","description":"Configure global proxy settings in Cortex XSOAR 6.13 using a server configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"kHFLVEmsL2ogtkI3MwCj","title":"Configure how to bypass proxy settings","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/proxy/configure-how-to-bypass-proxy-settings","siteSpaceId":"sitesp_eO0yu","description":"Configure proxy bypass settings in Cortex XSOAR 6.13 using a server configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"oAVpk5YuY5bgE3bIv8Hg","title":"Use NGINX as a Reverse Proxy to the Server","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/proxy/use-nginx-as-a-reverse-proxy-to-the-server","siteSpaceId":"sitesp_eO0yu","description":"Use NGINX as a reverse proxy for the Cortex XSOAR 6.13 server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"uAaDGDZ0cH4xYT4IDcFy","title":"High Availability","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability","siteSpaceId":"sitesp_eO0yu","description":"Configure high availability in Cortex XSOAR 6.13 using Elasticsearch, additional app servers, and signed certificates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"xtiDchKFrRpwilXG8Dgd","title":"High Availability Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/high-availability-overview","siteSpaceId":"sitesp_eO0yu","description":"Review high availability deployment architectures in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"g5p7U87q9BGO7A2JbYOj","title":"Set Up High Availability","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/set-up-high-availability","siteSpaceId":"sitesp_eO0yu","description":"Set up high availability for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"578cDhnBfbsas5ucaWv0","title":"Sizing Requirements for High Availability Deployments","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/sizing-requirements-for-high-availability-deployments","siteSpaceId":"sitesp_eO0yu","description":"Review sizing requirements for Cortex XSOAR 6.13 high availability deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"o3jqdDus5h74SS8Gg0x8","title":"Monitor the Health of the App Servers","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/monitor-the-health-of-the-app-servers","siteSpaceId":"sitesp_eO0yu","description":"Monitor app server health in a Cortex XSOAR 6.13 high availability environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"PU9c5QeiJswmCBtMoAW4","title":"Migrate a Single Instance for High Availability","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/migrate-a-single-instance-for-high-availability","siteSpaceId":"sitesp_eO0yu","description":"Migrate a Cortex XSOAR 6.13 single-instance deployment for high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"3F2l0fOIuCNPIvwDGnqu","title":"Migrate a Multi-Tenant Deployment for High Availability","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/migrate-a-multi-tenant-deployment-for-high-availability","siteSpaceId":"sitesp_eO0yu","description":"Migrate a Cortex XSOAR 6.13 multi-tenant deployment for high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"H7X8WCjqS23zxCbPVc56","title":"Install Additional App Servers","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/install-additional-app-servers","siteSpaceId":"sitesp_eO0yu","description":"Install additional app servers for Cortex XSOAR 6.13 high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"VJT1NyRbkm7dHTErhR6m","title":"Deploy Engines in a High Availability Environment","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/deploy-engines-in-a-high-availability-environment","siteSpaceId":"sitesp_eO0yu","description":"Deploy engines in a Cortex XSOAR 6.13 high availability environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"AobxmggUWQs5YipZgHvg","title":"Use a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/high-availability/use-a-signed-certificate","siteSpaceId":"sitesp_eO0yu","description":"Use a signed certificate in a Cortex XSOAR 6.13 high availability deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"bdZSnd0ikUrsYXEhyhx2","title":"Disaster Recovery and Live Backup","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup","siteSpaceId":"sitesp_eO0yu","description":"Configure live backup and disaster recovery in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"B1UVZ3yi3M6l5D4s0wFi","title":"Disaster Recovery and Live Backup Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/disaster-recovery-and-live-backup-overview","siteSpaceId":"sitesp_eO0yu","description":"Review live backup and disaster recovery options in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"WCq75xKsstJhfnATbTRF","title":"Host Names, DNS, and Disaster Recovery","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/host-names-dns-and-disaster-recovery","siteSpaceId":"sitesp_eO0yu","description":"Configure host names and DNS for Cortex XSOAR 6.13 disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"MBT1gXBwrZ5905Sl2ose","title":"Configure the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment","siteSpaceId":"sitesp_eO0yu","description":"Configure a live backup environment in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"QybdYh4uVridNhhSpX4b","title":"Configure Live Backup for Multiple SAMLs","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/configure-live-backup-for-multiple-samls","siteSpaceId":"sitesp_eO0yu","description":"Configure live backup for multiple SAMLs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"ZEqofvCcjaL1BmlHMV5y","title":"DR Scenario: Testing the DR Environment","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-testing-the-dr-environment","siteSpaceId":"sitesp_eO0yu","description":"Test a disaster recovery environment in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"bs5Bn8dnQrLfhw5IwGWv","title":"DR Scenario: Unrecoverable Active Server Failure","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-unrecoverable-active-server-failure","siteSpaceId":"sitesp_eO0yu","description":"Recover from an active server failure in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"oBtdXGKOPsTXRmCVv8Gf","title":"DR Scenario: Unrecoverable Standby Server Failure","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment/dr-scenario-unrecoverable-standby-server-failure","siteSpaceId":"sitesp_eO0yu","description":"Recover from a standby server failure in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"},{"label":"Configure the Live Backup Environment"}]},{"id":"e7Yu1SI68hJgMkoJ91pr","title":"Transition an Active Server to Standby Mode","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-an-active-server-to-standby-mode","siteSpaceId":"sitesp_eO0yu","description":"Transition an active server to standby mode in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"Z53DArR7cNk9VzsFRKhT","title":"Transition a Standby Server to Active Mode","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-a-standby-server-to-active-mode","siteSpaceId":"sitesp_eO0yu","description":"Transition a standby server to active mode in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"Gspi9gmFMHVnCiFRTl6U","title":"Transition Between DR States Through the Configuration File","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-between-dr-states-through-the-configuration-file","siteSpaceId":"sitesp_eO0yu","description":"Transition disaster recovery states through configuration in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"Kz4l30qFQVylf4deSHoj","title":"Upgrade the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_eO0yu","description":"Upgrade the live backup environment for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"M44FLy8pws6CY80cLegu","title":"Engines and Disaster Recovery Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/engines-and-disaster-recovery-troubleshooting","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot engine failover during Cortex XSOAR 6.13 disaster recovery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"xs6LBcgwBaNWETWo6EMH","title":"Back up the Database","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/back-up-the-database","siteSpaceId":"sitesp_eO0yu","description":"Back up the Cortex XSOAR 6.13 database manually or automatically.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"JQtrY5qACGoPl0OmrKzE","title":"Restore the Database","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-the-database","siteSpaceId":"sitesp_eO0yu","description":"Restore the database from a backup in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"vO8nRqEFvUkp0ttFzxCE","title":"Restore a Partition","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-a-partition","siteSpaceId":"sitesp_eO0yu","description":"Restore database partitions in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"rrv13JPlQly67dvyTmbe","title":"Troubleshoot Live Backup","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/disaster-recovery-and-live-backup/troubleshoot-live-backup","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot live backup scenarios in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"1KUY2Of0PD8HuHlquXAP","title":"Users and Roles","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles","siteSpaceId":"sitesp_eO0yu","description":"Manage users, roles, permissions, and authentication in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"YqNqlWO9EsvqjOSWFofe","title":"Users and Roles Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/users-and-roles-overview","siteSpaceId":"sitesp_eO0yu","description":"Review user, role, invitation, and password policy management in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"r976nKbjGiMJMP4QSctc","title":"Roles in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Configure user roles and access levels in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"p2zKUVa1EHyaKPfN5H3g","title":"Pre-set Query per Role","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/pre-set-query-per-role","siteSpaceId":"sitesp_eO0yu","description":"Configure pre-set queries for roles in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"d3UTR8sxv6iM3jB8BQnm","title":"Define a Role","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/define-a-role","siteSpaceId":"sitesp_eO0yu","description":"Define a user role in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"Ur7b7PcLeGZR6Q780rlV","title":"Role-based Permission Levels","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/role-based-permission-levels","siteSpaceId":"sitesp_eO0yu","description":"Configure role-based permission levels in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"8cbE3FqBRhY0Mudl091y","title":"Shift Management","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management","siteSpaceId":"sitesp_eO0yu","description":"Manage user shifts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"Tj15kFjD1Z11st2JbyKx","title":"Managing Shifts","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management/managing-shifts","siteSpaceId":"sitesp_eO0yu","description":"Create and manage shifts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"},{"label":"Shift Management"}]},{"id":"3aCTZkEmsFA8qwh7ru09","title":"User Management","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management","siteSpaceId":"sitesp_eO0yu","description":"Invite and manage users in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"WiMu4zwtHExovd19NYcR","title":"User Invitations","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations","siteSpaceId":"sitesp_eO0yu","description":"Manage user invitations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"2xojOxXugx4RkH0GechX","title":"Invite a User","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations/invite-a-user","siteSpaceId":"sitesp_eO0yu","description":"Invite a user to Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"User Invitations"}]},{"id":"Cs1UUiEGGSAH3GMSTpaJ","title":"Set the User as Default Administrator","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/set-the-user-as-default-administrator","siteSpaceId":"sitesp_eO0yu","description":"Set a user as the default administrator in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"bb9TGsfF5bI3GRmwt3J1","title":"Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users","siteSpaceId":"sitesp_eO0yu","description":"Configure self-service read-only users in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"yCJufomAiogk6zHxxCup","title":"Configure the Server for Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/configure-the-server-for-self-service-read-only-users","siteSpaceId":"sitesp_eO0yu","description":"Configure the server for self-service read-only users in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"QI1O5eOs7k9J8cIQWGtd","title":"Create the Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-self-service-read-only-users","siteSpaceId":"sitesp_eO0yu","description":"Create self-service read-only users in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"AZL5HkVPjXqas35np1sv","title":"Create the Read-Only Dashboard","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-dashboard","siteSpaceId":"sitesp_eO0yu","description":"Create a read-only dashboard in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"UJLHY3l4BcqkccK57oaI","title":"Create the Read-Only Incident Type and Layout","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-incident-type-and-layout","siteSpaceId":"sitesp_eO0yu","description":"Create a read-only incident type and layout in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"DD37XiK0TS2qqloS3u5e","title":"Disable a User","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/disable-a-user","siteSpaceId":"sitesp_eO0yu","description":"Disable a user in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"LbQotGe2QSKAQ0q3rpRw","title":"Remove a User","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/remove-a-user","siteSpaceId":"sitesp_eO0yu","description":"Remove a user from Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"YsVXrbIlT3PQKImLOaoe","title":"Clear Users Data Using the CLI","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-the-cli","siteSpaceId":"sitesp_eO0yu","description":"Clear user data using the CLI in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"DR3r05Uxs6xO52KoME9D","title":"Clear Users Data Using a Playbook","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-a-playbook","siteSpaceId":"sitesp_eO0yu","description":"Clear user data using a playbook in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"uoVk24UelsB6AzAEqufe","title":"Configure Users Data Using Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/configure-users-data-using-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Configure user data using server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"BV3CQU9K27hFixckF0xD","title":"User Settings and Preferences","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/user-settings-and-preferences","siteSpaceId":"sitesp_eO0yu","description":"Manage user settings and preferences in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"dZaSdkEwKQkVxzPxUMzr","title":"Configure User Settings","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/configure-user-settings","siteSpaceId":"sitesp_eO0yu","description":"Configure user settings in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"pM3wXcivMdSo6Yzmy3HH","title":"Manually Refresh the Number of Licenses in Use","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/user-management/manually-refresh-the-number-of-licenses-in-use","siteSpaceId":"sitesp_eO0yu","description":"Refresh the number of licenses in use in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"FaSTXDgkryV002Wr93ah","title":"Integration Permissions","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/integration-permissions","siteSpaceId":"sitesp_eO0yu","description":"Configure integration command permissions in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"63jcF8HoKyT4Qsfwcxak","title":"Password Policy","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/password-policy","siteSpaceId":"sitesp_eO0yu","description":"Configure password policies in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"EQnKuJWY9v4aaJEYNY1u","title":"Create a Password Policy","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/password-policy/create-a-password-policy","siteSpaceId":"sitesp_eO0yu","description":"Create a password policy in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"btsnucgpe8huC2uyR8jf","title":"Edit a Default Password Policy","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy","siteSpaceId":"sitesp_eO0yu","description":"Edit the default password policy in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"tJ1iBrMAQy6OWnaL7wiD","title":"Default Password Policy Keys","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy/default-password-policy-keys","siteSpaceId":"sitesp_eO0yu","description":"Review default password policy keys in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"},{"label":"Edit a Default Password Policy"}]},{"id":"LODcn54Rmezn1Ss5HYmp","title":"Change the Administrator Password","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/change-the-administrator-password","siteSpaceId":"sitesp_eO0yu","description":"Change the administrator password in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"gWFF2IoGOEcVNsq40hVd","title":"Authenticate Users with SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0","siteSpaceId":"sitesp_eO0yu","description":"Authenticate users with SAML 2.0 in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"YUB5zYCSOsHn5aRVyAP8","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_eO0yu","description":"Set up Okta as a SAML 2.0 identity provider in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"qi1DCm83SvGUHdJYpINn","title":"Create Okta Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/create-okta-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_eO0yu","description":"Create Okta groups for Cortex XSOAR 6.13 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"se5ruLL7644NtsvOxWS4","title":"Define the Okta Application to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Define an Okta application to authenticate Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"Rod52j51pU8trnMFAUYO","title":"SAML Settings for the Okta Application","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar/saml-settings-for-the-okta-application","siteSpaceId":"sitesp_eO0yu","description":"Configure SAML settings for an Okta application in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Define the Okta Application to authenticate Cortex XSOAR"}]},{"id":"e4WTm2eV145A7IZb8ogy","title":"Configure the SAML 2.0 Integration for Okta","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta","siteSpaceId":"sitesp_eO0yu","description":"Configure the SAML 2.0 integration for Okta in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"11ebPqADpZVDxdQTx25A","title":"SAML 2.0 Okta Parameters","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta/saml-2.0-okta-parameters","siteSpaceId":"sitesp_eO0yu","description":"Configure SAML 2.0 Okta parameters in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Okta"}]},{"id":"wvOQA5T7PMgGlF2gzvsJ","title":"Map Okta Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/map-okta-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_eO0yu","description":"Map Okta groups to Cortex XSOAR 6.13 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"2SpyXYTIr6QtAaT0qDWi","title":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_eO0yu","description":"Set up Microsoft Entra ID as a SAML 2.0 identity provider in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"vYxnTyTQZwx670obSfzh","title":"Configure Microsoft Entra ID to Authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-microsoft-entra-id-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Configure Microsoft Entra ID to authenticate Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"yLnHnOrJGGM0AS13tA5X","title":"Configure the SAML 2.0 Integration for Microsoft Entra ID","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id","siteSpaceId":"sitesp_eO0yu","description":"Configure the SAML 2.0 integration for Microsoft Entra ID in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"iUYD5fdG7g8zeZ1jzYIE","title":"SAML 2.0 Microsoft Entra ID Parameters","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id/saml-2.0-microsoft-entra-id-parameters","siteSpaceId":"sitesp_eO0yu","description":"Configure SAML 2.0 Microsoft Entra ID parameters in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Microsoft Entra ID"}]},{"id":"ao7IDVuWoVJGUnJXxEeh","title":"Set up ADFS as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_eO0yu","description":"Set up ADFS as a SAML 2.0 identity provider in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"IEYxh4jQ5UxqEMp6ptJR","title":"Create Relying Party Trust in ADFS","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/create-relying-party-trust-in-adfs","siteSpaceId":"sitesp_eO0yu","description":"Create a relying party trust in ADFS for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"a9MSVWeiv44TzhakIRDm","title":"Define the Claim Issuance Policy","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/define-the-claim-issuance-policy","siteSpaceId":"sitesp_eO0yu","description":"Define a claim issuance policy for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"4eoPZolfOGovrDRmqtE4","title":"Configure the SAML 2.0 Integration for ADFS","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs","siteSpaceId":"sitesp_eO0yu","description":"Configure the SAML 2.0 integration for ADFS in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"3THkOXHY5iQfkc0Oovcr","title":"SAML 2.0 ADFS Parameters","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs/saml-2.0-adfs-parameters","siteSpaceId":"sitesp_eO0yu","description":"Configure SAML 2.0 ADFS parameters in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for ADFS"}]},{"id":"3dN1L1FiZ9nGmRgQLuUF","title":"Map ADFS Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/map-adfs-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_eO0yu","description":"Map ADFS groups to Cortex XSOAR 6.13 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"aFMzQFk234T3yFlqcUo9","title":"Duo for Single Sign-On","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on","siteSpaceId":"sitesp_eO0yu","description":"Configure Duo single sign-on in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"SmifGW7ISUWU1MxUopQS","title":"Create Duo Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/create-duo-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_eO0yu","description":"Create Duo groups for Cortex XSOAR 6.13 users.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"uFiZGA0OfbHbz1OCThoG","title":"Define Duo to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/define-duo-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Define Duo to authenticate Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"mhHXlVeyHRQfU47Mz1b7","title":"Configure the SAML 2.0 Integration for Duo","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/configure-the-saml-2.0-integration-for-duo","siteSpaceId":"sitesp_eO0yu","description":"Configure the SAML 2.0 integration for Duo in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"BoLnwdLStInnE9tT1U6N","title":"Map Duo Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/map-duo-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_eO0yu","description":"Map Duo groups to Cortex XSOAR 6.13 roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"ybkuPL3JFeftvwq4IfIp","title":"Set the Default Theme for New Users","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/set-the-default-theme-for-new-users","siteSpaceId":"sitesp_eO0yu","description":"Set the default theme for new users in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"3Sa0miOvWxnNgfKHphVo","title":"Authenticate Users with Active Directory","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-active-directory","siteSpaceId":"sitesp_eO0yu","description":"Authenticate users with Active Directory in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"oG1jaYch5kIXkQYokGr8","title":"Marketplace","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace","siteSpaceId":"sitesp_eO0yu","description":"Access Marketplace content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"nb0vfDqQAWMCXVwJWc9W","title":"Marketplace Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/marketplace-overview","siteSpaceId":"sitesp_eO0yu","description":"Use Marketplace to manage content in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"ubioUTN4LwslDxEmqATl","title":"Content Packs Support Types","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-packs-support-types","siteSpaceId":"sitesp_eO0yu","description":"Review Marketplace content pack support types in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"W6N0XDqMzvJBcsHEmDQR","title":"Marketplace FAQs","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_eO0yu","description":"Find Marketplace content pack answers for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"TFAGjDA1BNmMtuxoX63q","title":"Search and Navigate in the Marketplace","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/search-and-navigate-in-the-marketplace","siteSpaceId":"sitesp_eO0yu","description":"Search Marketplace content in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"UZTlKMAncaQ04z63vxEd","title":"Convert Existing Content to Content Pack Format","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/convert-existing-content-to-content-pack-format","siteSpaceId":"sitesp_eO0yu","description":"Convert existing content to content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"JxNxUwX4Xgnlqoav1Szk","title":"Use Cases","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/use-cases","siteSpaceId":"sitesp_eO0yu","description":"Explore Marketplace use cases in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"CQfUbnOoiG2oWGwWtxmD","title":"Content Pack Installation","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-installation","siteSpaceId":"sitesp_eO0yu","description":"Install and manage content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"tQoOGgFxwW1Tsxlyydvt","title":"Install a Content Pack","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack","siteSpaceId":"sitesp_eO0yu","description":"Install Marketplace content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"TynOiEPXNzZmXAW5LD1o","title":"Set up Your Use Case with the Deployment Wizard","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_eO0yu","description":"Configure a content pack with Deployment Wizard in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"},{"label":"Install a Content Pack"}]},{"id":"K8DhjP6Y6cCSwogT4Mz3","title":"Update a Content Pack","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-installation/update-a-content-pack","siteSpaceId":"sitesp_eO0yu","description":"Update Marketplace content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"6BEgNeSq7jhY0bAnR8Uw","title":"Delete a Content Pack","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-installation/delete-a-content-pack","siteSpaceId":"sitesp_eO0yu","description":"Delete Marketplace content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"ez0C8bPZIS7s8xulMHWl","title":"Revert a Content Pack","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-installation/revert-a-content-pack","siteSpaceId":"sitesp_eO0yu","description":"Revert Marketplace content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"35xWMuoUWEtQ1GwBc63n","title":"Install a Content Pack Offline","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/install-a-content-pack-offline","siteSpaceId":"sitesp_eO0yu","description":"Install Marketplace content packs offline in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"bZBP9wabtStJMF5iguie","title":"Content Pack Update Notifications","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_eO0yu","description":"Enable content pack update notifications in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"RLR62OtLv188e2AX4dsn","title":"Marketplace Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/marketplace-troubleshooting","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot Marketplace issues in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"Zmo6OK5JyyVc4uAVqMc3","title":"Content Pack Contributions","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_eO0yu","description":"Contribute Marketplace content packs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"U5pNcCwWMazgnoi0bQ9F","title":"Create a Content Pack","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_eO0yu","description":"Create a Marketplace content pack in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"0QrUeaP4mCNAZzpQnDQG","title":"Resubmit a Content Pack","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_eO0yu","description":"Resubmit a Marketplace content pack in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"n9rHjY7tb25k4DZWSCg8","title":"Remote Repositories in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Configure remote repositories in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"0yOKSrNzPJa9XYyciE71","title":"Content Management in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Manage content development in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"SEY2AoRiqa96aY9NVXNK","title":"Remote Repositories Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/remote-repositories-overview","siteSpaceId":"sitesp_eO0yu","description":"Review remote repository workflows in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"qAcOhDncOwn5lXCQzf7M","title":"Configure a Remote Repository on a Development Machine","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_eO0yu","description":"Configure a development remote repository in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"D0TYiPgb4u7xH0bv1MSn","title":"Configure a Remote Repository on the Production Machine","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-the-production-machine","siteSpaceId":"sitesp_eO0yu","description":"Configure a production remote repository in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"pPZpTx3gULz1oejedR5i","title":"Edit and Push Content to a Remote Repository","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_eO0yu","description":"Edit and push remote repository content in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"Sqz5cNBuI3lqNkiCWeS2","title":"Upgrade Remote Repositories from Versions 5.5 and below","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/upgrade-remote-repositories-from-versions-5.5-and-below","siteSpaceId":"sitesp_eO0yu","description":"Upgrade remote repositories in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"Hf3kf3xebI3Ld2cPcLQW","title":"Troubleshoot a Remote Repository Configuration","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot remote repositories in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"V2iGlQ8RWnTyIaRTaTd4","title":"Engines","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines","siteSpaceId":"sitesp_eO0yu","description":"Install and manage engines in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"ylX35FnSrPUetm3LByGE","title":"Cortex XSOAR Engines Overview","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/cortex-xsoar-engines-overview","siteSpaceId":"sitesp_eO0yu","description":"Review engine architecture in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"NZF7UuaaAUQWUZBvV7sl","title":"Engine Installation","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/engine-installation","siteSpaceId":"sitesp_eO0yu","description":"Review engine installation options in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"2IqROnraHRz2SGbtUubp","title":"Install a Cortex XSOAR Engine","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine","siteSpaceId":"sitesp_eO0yu","description":"Install an engine in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"NYFzvFczX3yfOVS4UNk6","title":"Install a Signed Engine","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/engine-installation/install-a-signed-engine","siteSpaceId":"sitesp_eO0yu","description":"Install a signed engine in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"v6qmWu38S63Cvc1CqM9e","title":"Install a Cortex XSOAR Engine Offline","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine-offline","siteSpaceId":"sitesp_eO0yu","description":"Install an engine offline in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"c4JjGvDHykl1lNZaRvsV","title":"Use an Engine in an Integration","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_eO0yu","description":"Use an engine with integrations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"ArYyGfckKHJU29fOQd7L","title":"Run a Script using an Engine","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_eO0yu","description":"Run scripts using engines in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"vYLJC24hNcWmwFi0rLis","title":"Manage Engines","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_eO0yu","description":"Manage engines and load balancing groups in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"DC64iRkwNxzz6ULZPkxk","title":"Configure Engines","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_eO0yu","description":"Configure engines in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"BgvLnJ7NvTsw4Qma4HO7","title":"Edit the Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration","siteSpaceId":"sitesp_eO0yu","description":"Edit an engine configuration in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"Pu6GvA43Fy9AktkMQzKF","title":"Common Properties When Editing an Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/common-properties-when-editing-an-engine-configuration","siteSpaceId":"sitesp_eO0yu","description":"Review engine configuration properties in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"ZHmYWRTpI02vNkNjWvGh","title":"Configure the Engine to Use a Web Proxy","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_eO0yu","description":"Configure an engine web proxy in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"kjBTZoUJHbHSWwfzMAtZ","title":"Configure the Engine to Call the Server Without Using a Proxy","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_eO0yu","description":"Configure direct engine server calls in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"w880gpPH2nivosaLBoDm","title":"Configure the Number of Workers for the Server","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/configure-the-number-of-workers-for-the-server","siteSpaceId":"sitesp_eO0yu","description":"Configure engine workers in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"ASyKEzdmOlgwoS5XMUj2","title":"Configure Access to Communication Tasks through an Engine","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/configure-access-to-communication-tasks-through-an-engine","siteSpaceId":"sitesp_eO0yu","description":"Configure engine communication task access in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"Xg94Wfc8BJ7ukKNphRBC","title":"Configure an Engine to Use Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_eO0yu","description":"Configure custom engine certificates in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"fkww6rDvC9lijX9d3Pre","title":"Notify Users When an Engine Disconnects","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/configure-engines/notify-users-when-an-engine-disconnects","siteSpaceId":"sitesp_eO0yu","description":"Configure engine disconnect notifications in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"YEebO0bMPGv1tDlLoaJb","title":"Remove an Engine","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_eO0yu","description":"Remove an engine in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"TAof2l4DCJWXhA2kgo2t","title":"Troubleshoot Cortex XSOAR Engines","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot engines in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"LGxxaeb2BCvMImuxvC8g","title":"Troubleshoot Engine Installation","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines/troubleshoot-engine-installation","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot engine installation in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Troubleshoot Cortex XSOAR Engines"}]},{"id":"SVuXcT7UlA53asl0yE0z","title":"Troubleshoot Engine Upgrades","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines/troubleshoot-engine-upgrades","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot engine upgrades in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Troubleshoot Cortex XSOAR Engines"}]},{"id":"7PLIej3AMUp9eN0E1CPs","title":"Troubleshoot Engine Connectivity","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines/troubleshoot-engine-connectivity","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot engine connectivity in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Troubleshoot Cortex XSOAR Engines"}]},{"id":"N1lokLmsxpFhR6uEqtKJ","title":"Troubleshoot Integrations Running on Engines","pathname":"/xsoar-6-administrator-guide/6.13/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines/troubleshoot-integrations-running-on-engines","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot engine integration issues in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Troubleshoot Cortex XSOAR Engines"}]},{"id":"4zSTGzXSpkVu5LHj38LE","title":"Customize and Configure Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Customize and configure your Cortex XSOAR 6.13 deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"}]},{"id":"j9qXgbNltbZsAcJawxml","title":"Incidents","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents","siteSpaceId":"sitesp_eO0yu","description":"Manage and investigate incidents in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"nP29ZZSr4l04TxeAAaPX","title":"Incident Lifecycle","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle","siteSpaceId":"sitesp_eO0yu","description":"Manage the incident lifecycle in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"ALKAamZw3MEeevGXOqAO","title":"Fetch Incidents From an Integration Instance","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/fetch-incidents-from-an-integration-instance","siteSpaceId":"sitesp_eO0yu","description":"Fetch incidents from an integration instance in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Lifecycle"}]},{"id":"d3L7DhCKop4NPXbW4AWB","title":"Receive Notification on an Incident Fetch Error","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/receive-notification-on-an-incident-fetch-error","siteSpaceId":"sitesp_eO0yu","description":"Configure incident fetch error notifications in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Lifecycle"}]},{"id":"QFU9Oh8J5dqnju5QlW8R","title":"Incident Context Data","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-context-data","siteSpaceId":"sitesp_eO0yu","description":"Manage incident context data in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"4PE2yutKmJunt4WxZdmk","title":"Incident Customization","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization","siteSpaceId":"sitesp_eO0yu","description":"Customize incidents in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"ujXyIYiGeWt8hDNqTUnC","title":"Create an Incident Type","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_eO0yu","description":"Create an incident type in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"ET6UawXMgC9HCyBl9sJg","title":"Customize Incident Layouts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/customize-incident-layouts","siteSpaceId":"sitesp_eO0yu","description":"Customize incident layouts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"JHd8rRreRwgTRXOhGyo2","title":"Incident Fields","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields","siteSpaceId":"sitesp_eO0yu","description":"Manage incident fields in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"QHeuOa8Rt0U4EwkWCLML","title":"Create a Custom Incident Field","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-custom-incident-field","siteSpaceId":"sitesp_eO0yu","description":"Create a custom incident field in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"tDIDh0RxnFbIPvxZ6bD3","title":"Create a Grid Field for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-grid-field-for-an-incident-type","siteSpaceId":"sitesp_eO0yu","description":"Create a grid field for an incident type in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"FT0CfJTAtvrcuQr9jAKd","title":"Use Scripts with the Grid Field","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/use-scripts-with-the-grid-field","siteSpaceId":"sitesp_eO0yu","description":"Use scripts with grid fields in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"cOxKJU96b4EFEtXy4Ny2","title":"Incident Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/incident-field-trigger-scripts","siteSpaceId":"sitesp_eO0yu","description":"Configure incident field trigger scripts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"wJCz38NHt6Aa0Ow6fhqV","title":"Troubleshoot Closing Case Incident after Changing Field Type","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/troubleshoot-closing-case-incident-after-changing-field-type","siteSpaceId":"sitesp_eO0yu","description":"Resolve incident closing issues after changing a field type in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"FpvSvVdij19mR2kYYdST","title":"Create an Evidence Field","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-an-evidence-field","siteSpaceId":"sitesp_eO0yu","description":"Create an evidence field in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"FIHSGlvcnCouSIRXfEwr","title":"Incident De-Duplication","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication","siteSpaceId":"sitesp_eO0yu","description":"De-duplicate incidents in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"rQKGgauRtg6L9vxEvI7e","title":"Manually De-Duplicate Incidents","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/manually-de-duplicate-incidents","siteSpaceId":"sitesp_eO0yu","description":"Manually de-duplicate incidents in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident De-Duplication"}]},{"id":"GKZLTNOWyGUjzYZxlz9W","title":"Automatic De-Duplication Using Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/automatic-de-duplication-using-scripts","siteSpaceId":"sitesp_eO0yu","description":"Automate incident de-duplication with scripts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident De-Duplication"}]},{"id":"46FsJ45fl7r45yw7XBpv","title":"Pre-Process Rules","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules","siteSpaceId":"sitesp_eO0yu","description":"Configure incident pre-process rules in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"zInxOz4hlfPQllBzS2HJ","title":"Create Pre-Process Rules for Incidents","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/create-pre-process-rules-for-incidents","siteSpaceId":"sitesp_eO0yu","description":"Create incident pre-process rules in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Pre-Process Rules"}]},{"id":"GxVZrOGqI3rM3RqNkQEm","title":"Rule Actions for Pre-Process Rules","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/rule-actions-for-pre-process-rules","siteSpaceId":"sitesp_eO0yu","description":"Configure pre-process rule actions in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Pre-Process Rules"}]},{"id":"DhTLaZRArFMJHAKVqE6t","title":"Post Processing for Incidents","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents","siteSpaceId":"sitesp_eO0yu","description":"Configure incident post-processing in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"N9kxBULRIpPoJAoDRsHW","title":"Create a Post-Processing Script","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/create-a-post-processing-script","siteSpaceId":"sitesp_eO0yu","description":"Create a post-processing script in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Post Processing for Incidents"}]},{"id":"sxsNqNqyDKNfl5DDnbwA","title":"Add a Post-Processing Script to the Incident Type","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/add-a-post-processing-script-to-the-incident-type","siteSpaceId":"sitesp_eO0yu","description":"Add a post-processing script to an incident type in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Post Processing for Incidents"}]},{"id":"fyebqtefY7nQ4AOCZm7C","title":"War Room Overview","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview","siteSpaceId":"sitesp_eO0yu","description":"Use the War Room for incident investigations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"uyzXTvBFoXDkfQWewHMO","title":"Schedule a Command","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/schedule-a-command","siteSpaceId":"sitesp_eO0yu","description":"Schedule a command in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"zrDYeMgE5zYdNo3QH6tE","title":"Add a Custom Widget in the War Room","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/add-a-custom-widget-in-the-war-room","siteSpaceId":"sitesp_eO0yu","description":"Add a custom War Room widget in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"faBiaI0zi4qg9CrgMA3A","title":"War Room Indexing","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing","siteSpaceId":"sitesp_eO0yu","description":"Configure War Room indexing in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"gsdmLnB0zchs47nQNwy6","title":"Index War Room Entries Using Bolt DB","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-bolt-db","siteSpaceId":"sitesp_eO0yu","description":"Index War Room entries using Bolt DB in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"4DRsfuV0yidagCA2NW8L","title":"Index War Room Entries Using Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-elasticsearch","siteSpaceId":"sitesp_eO0yu","description":"Index War Room entries using Elasticsearch in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"Z7vx4W6McR3A5nTiXMQA","title":"Incident Access Control Configuration","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration","siteSpaceId":"sitesp_eO0yu","description":"Configure incident access control in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"8DNV60WgsXkylThwzfco","title":"Limit Access to Investigations using RBAC","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/limit-access-to-investigations-using-rbac","siteSpaceId":"sitesp_eO0yu","description":"Limit investigation access with RBAC in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Access Control Configuration"}]},{"id":"xNqmu1GWbADx5oDZaQPa","title":"Restrict an Investigation","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/restrict-an-investigation","siteSpaceId":"sitesp_eO0yu","description":"Restrict an investigation in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Access Control Configuration"}]},{"id":"l2axiyiDFZquMzcmEdni","title":"Classification and Mapping","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping","siteSpaceId":"sitesp_eO0yu","description":"Classify and map integration data in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"JftEqTOjJBw0VB2hzKkS","title":"Classify Events Using a Classification Key","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/classify-events-using-a-classification-key","siteSpaceId":"sitesp_eO0yu","description":"Classify events using a classification key in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Classification and Mapping"}]},{"id":"VlMQZlhYiFcaIAVBnvaZ","title":"Create a Mapper","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/create-a-mapper","siteSpaceId":"sitesp_eO0yu","description":"Create a mapper in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Classification and Mapping"}]},{"id":"ELHZmBrPc0oERpZb9juB","title":"Incident Mirroring","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-mirroring","siteSpaceId":"sitesp_eO0yu","description":"Configure incident mirroring in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"IF5PEsKDxXxREm4Kk4OU","title":"Customize Incident Close Reasons","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/customize-incident-close-reasons","siteSpaceId":"sitesp_eO0yu","description":"Customize incident close reasons in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"LHHcwZEtYRObfdbvb5K9","title":"Change the Display Name of Security Incidents","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/change-the-display-name-of-security-incidents","siteSpaceId":"sitesp_eO0yu","description":"Change security incident display names in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"P1BFbzNFnBFSpfreL1Z7","title":"Playbooks","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_eO0yu","description":"Create and manage playbooks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"Lc3pPNX8gbOaqFTA2Usn","title":"What Are Playbooks?","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/what-are-playbooks","siteSpaceId":"sitesp_eO0yu","description":"Learn about playbooks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"BRel4Jjo3YfZ3m8bPh10","title":"Playbook Development","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-development","siteSpaceId":"sitesp_eO0yu","description":"Develop playbooks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"9fPmib1ANRx5YAF72tOk","title":"Configure IoT Security Playbooks","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-iot-security-playbooks","siteSpaceId":"sitesp_eO0yu","description":"Configure IoT Security playbooks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"Es8G0uTHW0nRTcmxCfYs","title":"Manage Playbook Settings","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings","siteSpaceId":"sitesp_eO0yu","description":"Manage playbook settings in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"plqM4hvZU9zSmTCApEiP","title":"Obtain Playbook Metadata","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings/obtain-playbook-metadata","siteSpaceId":"sitesp_eO0yu","description":"Obtain playbook metadata in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Manage Playbook Settings"}]},{"id":"AnZvCFoZjmCeYIi09Rsj","title":"Version Control","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/version-control","siteSpaceId":"sitesp_eO0yu","description":"Manage playbook versions in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"kqenySF6TKXNHzEOI9pI","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields","siteSpaceId":"sitesp_eO0yu","description":"Configure playbook task fields in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"ffbHWat2sRynv0VmRLXn","title":"Create Section Headers","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-section-headers","siteSpaceId":"sitesp_eO0yu","description":"Create playbook section headers in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"jDGwv5FEEKWG2q5RgmNz","title":"Create a Conditional Task","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-a-conditional-task","siteSpaceId":"sitesp_eO0yu","description":"Create conditional playbook tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"BcH8REU9ByVRowS29mgj","title":"Communication Tasks","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks","siteSpaceId":"sitesp_eO0yu","description":"Configure communication tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"IZyMctbm3cD3WxSH16JQ","title":"Create an Ask Task","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task","siteSpaceId":"sitesp_eO0yu","description":"Create Ask tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"wFe3MAbNJ7jhfbbBi8e7","title":"Ask Task Examples","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/ask-task-examples","siteSpaceId":"sitesp_eO0yu","description":"Review Ask task examples in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"XDidtevHA9FwtfJ0CozO","title":"Customize an Ask Task","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/customize-an-ask-task","siteSpaceId":"sitesp_eO0yu","description":"Customize Ask tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"vdYwoLmkdb2omx4sbu0q","title":"Create a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task","siteSpaceId":"sitesp_eO0yu","description":"Create data collection tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"sBYeEwOHKL7OKFiTYB8s","title":"Data Collection Task Examples","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/data-collection-task-examples","siteSpaceId":"sitesp_eO0yu","description":"Review data collection task examples in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"3TD518Guoo4P1qrNI1d7","title":"Customize a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/customize-a-data-collection-task","siteSpaceId":"sitesp_eO0yu","description":"Customize data collection tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"464GMqXH7TbTW6zqnC5u","title":"Customize the SOC Name","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/customize-the-soc-name","siteSpaceId":"sitesp_eO0yu","description":"Customize the SOC name in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"gdrdMKFAyIDxlUi9cJre","title":"Create Communication Task Authentication","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-communication-task-authentication","siteSpaceId":"sitesp_eO0yu","description":"Configure communication task authentication in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"XrBnDJ8igdAsxUTdjrSm","title":"Add Ad Hoc Tasks to a Work Plan","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/add-ad-hoc-tasks-to-a-work-plan","siteSpaceId":"sitesp_eO0yu","description":"Add ad hoc work plan tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"ZWlQriZAE0kgIQjgfxAP","title":"Handle Errors in a Playbook","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/handle-errors-in-a-playbook","siteSpaceId":"sitesp_eO0yu","description":"Handle playbook errors in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"lbLJPY7vTJ3845xpHylh","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/playbook-task-fields","siteSpaceId":"sitesp_eO0yu","description":"Review playbook task fields in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"GgbodXkUS3Ei4ogpAeg6","title":"Playbook Inputs and Outputs","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs","siteSpaceId":"sitesp_eO0yu","description":"Configure playbook inputs and outputs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"rf4tFVHUehaZNbbAHoCd","title":"Extend Context","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context","siteSpaceId":"sitesp_eO0yu","description":"Extend context in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"5v9jFNdLiRtvfbx5wRi9","title":"Extend Context in a Playbook Task","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-in-a-playbook-task","siteSpaceId":"sitesp_eO0yu","description":"Extend context in a playbook task in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"1BiN35BRAQAmTTTiyUjL","title":"Extend Context using the Command Line","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-using-the-command-line","siteSpaceId":"sitesp_eO0yu","description":"Extend context from the command line in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"whWkE2bZC3msWQoZj8XZ","title":"Use DT syntax to get select keys from a list of dictionaries","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/use-dt-syntax-to-get-select-keys-from-a-list-of-dictionaries","siteSpaceId":"sitesp_eO0yu","description":"Use DT syntax in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Extend Context"}]},{"id":"xQ9GuGeU6OJGk5iokIGW","title":"Filters and Transformers","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers","siteSpaceId":"sitesp_eO0yu","description":"Use filters and transformers in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"5C23zR7hYwnPp5sx6P78","title":"Create Filters and Transformers in a Playbook","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook","siteSpaceId":"sitesp_eO0yu","description":"Create playbook filters and transformers in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"Czx4Qb9TBWX2xe7eoB9a","title":"Create a Filter Example","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-example","siteSpaceId":"sitesp_eO0yu","description":"Create a filter example in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"CzpVthHRTj3cfaqmz5fl","title":"Create a Filter (Advanced) Example","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-advanced-example","siteSpaceId":"sitesp_eO0yu","description":"Create an advanced filter example in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"eeUofIBHCqDubg35rdhj","title":"Filter Operators","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators","siteSpaceId":"sitesp_eO0yu","description":"Review filter operators in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"iTdMcIWRGTNnWypRiiNB","title":"Built-in Filters","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/built-in-filters","siteSpaceId":"sitesp_eO0yu","description":"Use built-in filters in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"WkBiN24ukuILY45X5PpS","title":"Transformers Operators","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/transformers-operators","siteSpaceId":"sitesp_eO0yu","description":"Use transformer operators in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"yeagsrACNxyZjC1VPocz","title":"Create Custom Filter and Transformer Operators","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/create-custom-filter-and-transformer-operators","siteSpaceId":"sitesp_eO0yu","description":"Create custom filter and transformer operators in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"nhLSuUiBNmbDXLZzVd2V","title":"Automations","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations","siteSpaceId":"sitesp_eO0yu","description":"Create and edit automations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"s4ZGMsQxbBcCjhvhRCFw","title":"Special Automation Tags","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/special-automation-tags","siteSpaceId":"sitesp_eO0yu","description":"Use special automation tags in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Automations"}]},{"id":"GaV4rAEqFpe1saioB5iv","title":"Common Scripts to use in Automations","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/common-scripts-to-use-in-automations","siteSpaceId":"sitesp_eO0yu","description":"Use common automation scripts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Automations"}]},{"id":"CTj15LUQBi6CL6YNic1q","title":"Configure a Sub-playbook Loop","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_eO0yu","description":"Configure a sub-playbook loop in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"xPmvbwl5Lqn0IT7IJ6hU","title":"Playbook Polling","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-polling","siteSpaceId":"sitesp_eO0yu","description":"Configure playbook polling in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"jx9nabdEWsgWtGOsgh6E","title":"Create Incident Fields in a Playbook","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/create-incident-fields-in-a-playbook","siteSpaceId":"sitesp_eO0yu","description":"Create incident fields in a playbook in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"eL4BYOPhJYJnZr59bQO9","title":"Playbook Testing","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing","siteSpaceId":"sitesp_eO0yu","description":"Test playbooks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"kzs46OpqOUHiqXwVhgoz","title":"Debug a Playbook","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debug-a-playbook","siteSpaceId":"sitesp_eO0yu","description":"Debug a playbook in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Testing"}]},{"id":"FfVhgOBQkvfNZw6kFZ3r","title":"Debugger Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debugger-troubleshooting","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot the playbook debugger in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Testing"}]},{"id":"kBBEx6k0SYfQFZOmRk9R","title":"Best Practices","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_eO0yu","description":"Apply playbook best practices in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"DjqrQWxIFXqwVIdQuupP","title":"Jobs","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_eO0yu","description":"Configure jobs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"IIjZUTZYhuyf0cr5CFik","title":"Create a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_eO0yu","description":"Create time-triggered jobs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"tkk36jEFETUlPRhlV8IN","title":"Create a Job Triggered by a Delta in Feed","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-feed","siteSpaceId":"sitesp_eO0yu","description":"Create feed delta-triggered jobs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"MEEkL184CQCcSFtHN4AL","title":"Time Triggered Job Parameters","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/time-triggered-job-parameters","siteSpaceId":"sitesp_eO0yu","description":"Review time-triggered job parameters in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"8quLoG2fOLDnC9dtos7a","title":"Process Indicators Using a Job Triggered By Delta","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/process-indicators-using-a-job-triggered-by-delta","siteSpaceId":"sitesp_eO0yu","description":"Process indicators with feed delta jobs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"4uJeG8hcnMpkDGR1IjgT","title":"Add Indicators to SIEM Using a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/add-indicators-to-siem-using-a-time-triggered-job","siteSpaceId":"sitesp_eO0yu","description":"Send indicators to SIEM with jobs in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"ve2MB5dFXs41GZMGWJIK","title":"Work with SLAs","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas","siteSpaceId":"sitesp_eO0yu","description":"Configure SLAs and timers in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"V3lFTmiCB81gpih0ZYZJ","title":"SLA Overview","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/sla-overview","siteSpaceId":"sitesp_eO0yu","description":"Learn about SLA fields and timers in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"5cRIdRGDtk61rrzOFji4","title":"Create an SLA Field","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-field","siteSpaceId":"sitesp_eO0yu","description":"Create SLA and timer fields in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"poC0K8VUZZdQXvqfHMFz","title":"Manage SLA and Timer Fields in an Incident","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/manage-sla-and-timer-fields-in-an-incident","siteSpaceId":"sitesp_eO0yu","description":"Manage incident SLA and timer fields in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"eZdQmyA0UQqsjIjYjTB6","title":"Create an SLA Trigger","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-trigger","siteSpaceId":"sitesp_eO0yu","description":"Create SLA triggers for playbooks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"ot4mSTT41TVRsvqs72kw","title":"Customize SLA Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/customize-sla-scripts","siteSpaceId":"sitesp_eO0yu","description":"Customize SLA breach scripts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"iLsozT3WdBkN3CWDdsPq","title":"Search Incidents using SLA and Timer Fields","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/search-incidents-using-sla-and-timer-fields","siteSpaceId":"sitesp_eO0yu","description":"Search incidents by SLA and timer fields in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"zpNVadDcdtYxEPAkotWF","title":"Configure the Global Risk Threshold","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_eO0yu","description":"Configure the global SLA risk threshold in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"MPg9MOyYsb5AaV9BSJrk","title":"Machine Learning","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning","siteSpaceId":"sitesp_eO0yu","description":"Understand machine learning models in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"8hZCSuGW0c2y8WcygKbG","title":"Machine Learning Capabilities","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-capabilities","siteSpaceId":"sitesp_eO0yu","description":"Explore machine learning capabilities in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"OxeSdOnuZpENdkSBbxHp","title":"Machine Learning Models","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-models","siteSpaceId":"sitesp_eO0yu","description":"Use machine learning models in Cortex XSOAR 6.13 to predict phishing incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"WmXOiSCbweMeMki6gZLz","title":"Use the Phishing Classifier in Production","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/use-the-phishing-classifier-in-production","siteSpaceId":"sitesp_eO0yu","description":"Use the phishing classifier in production in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"mqPeTJCO0YjMnriu78b1","title":"Create a Machine Learning Model","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/create-a-machine-learning-model","siteSpaceId":"sitesp_eO0yu","description":"Create a machine learning model in Cortex XSOAR 6.13 for phishing classification.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"8Rj4fX2Erfrv8NvI28hO","title":"Phishing Classifier Demo","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/phishing-classifier-demo","siteSpaceId":"sitesp_eO0yu","description":"Use the phishing classifier demo in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"oAZ0wrj5HFwQ0zqLMAr9","title":"Train a Phishing Classifier on Non-English Languages","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/train-a-phishing-classifier-on-non-english-languages","siteSpaceId":"sitesp_eO0yu","description":"Train phishing classifiers for non-English languages in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"84EWU4x4cdZSfD4lPpZL","title":"Additional Machine Learning Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/additional-machine-learning-scripts","siteSpaceId":"sitesp_eO0yu","description":"Use additional machine learning scripts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"QV5bQbq3bCntGWYiXp30","title":"Lists","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists","siteSpaceId":"sitesp_eO0yu","description":"Create and manage lists in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"7bPVz7DPjBNA6W6u1a5m","title":"Work With Lists","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists","siteSpaceId":"sitesp_eO0yu","description":"Manage lists in Cortex XSOAR 6.13 with automations and playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"HxQFTTm919PWxt3ib3Yl","title":"Work with JSON Lists","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists/work-with-json-lists","siteSpaceId":"sitesp_eO0yu","description":"Work with JSON lists in Cortex XSOAR 6.13 playbooks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"},{"label":"Work With Lists"}]},{"id":"ZYCuel11YXPC6baxIwAO","title":"Create a List","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_eO0yu","description":"Create lists in Cortex XSOAR 6.13 for scripts and War Rooms.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"Tt7r2qDJSn3Ral0y1jEs","title":"Set the List Separator Character","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/set-the-list-separator-character","siteSpaceId":"sitesp_eO0yu","description":"Set the list separator character in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"2IRYMrrr7auUDyNTHCqd","title":"Transform a List into an Array","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_eO0yu","description":"Transform a list into an array in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"fzoOEaWifUAIZ4U6YBMz","title":"Indicators","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 analyzes indicators, including types, layouts, and exclusion lists.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"jbOgQPZWac1mGslSxYGU","title":"Indicator Concepts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-concepts","siteSpaceId":"sitesp_eO0yu","description":"Learn threat intelligence management concepts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"QG4ZdXroFELiBl6gHbGN","title":"Indicator Verdict","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-verdict","siteSpaceId":"sitesp_eO0yu","description":"Learn how indicator verdicts work in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"SnnQgjGBiyaao2Ksq7JW","title":"Indicator Ingestion","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-ingestion","siteSpaceId":"sitesp_eO0yu","description":"Learn how indicators are detected and ingested in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"o6cA159kB9OhkDwT1k66","title":"Indicator Customization","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization","siteSpaceId":"sitesp_eO0yu","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"CHD0ak9jKyExUbYiPeen","title":"Indicator Types","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_eO0yu","description":"Configure indicator types and their associated scripts and fields.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"oErokuu9lSVMK4OGX702","title":"File Indicators","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_eO0yu","description":"Manage file indicators and their associated hashes.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"4piUNuhdJIzjmoZOJlyB","title":"File Indicator Merging Strategy","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators/file-indicator-merging-strategy","siteSpaceId":"sitesp_eO0yu","description":"Understand how file indicators merge by hash.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"},{"label":"File Indicators"}]},{"id":"0sZBpNNJG00VbDBvnUbA","title":"Create an Indicator Type","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_eO0yu","description":"Create a custom indicator type.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"lswXhmK8Z51ZYS2an4eX","title":"Indicator Type Profile","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_eO0yu","description":"Configure indicator type profile settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"rkFQhDjfFEFH5G0tK09R","title":"Map Custom Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_eO0yu","description":"Map custom fields to indicator data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"XC4VrF1itAwFelYwqUJz","title":"Formatting Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_eO0yu","description":"Format indicator values and output.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"Wtbzo8SD5K12l0oQcMzW","title":"Enhancement Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_eO0yu","description":"Configure scripts that enhance indicators on demand.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"5iMIFk1YdhyE1K1RKDLc","title":"Reputation Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_eO0yu","description":"Configure scripts that calculate indicator verdicts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"cKOZVivcpvK2k0b6E5yI","title":"Reputation Commands","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_eO0yu","description":"Configure commands that calculate indicator verdicts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"4G9UQwuBMDORha4GAWvc","title":"Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_eO0yu","description":"Create and configure fields for indicators.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"MAEz2MfMozSa9ZyCoTvR","title":"Create a Custom Indicator Field","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_eO0yu","description":"Create a custom field for indicators.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"of8De9E4AAZtybeohbha","title":"Configure the HTML Field","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field/configure-the-html-field","siteSpaceId":"sitesp_eO0yu","description":"Configure HTML fields for indicators.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"},{"label":"Create a Custom Indicator Field"}]},{"id":"zfpoEjtnFvzFvp0XxT24","title":"Indicator Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_eO0yu","description":"Run scripts when indicator field values change.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"3IsC8jgM14j1f6jdM0q2","title":"Indicator Layouts","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_eO0yu","description":"Customize layouts for indicator types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"utabWIuCD7d0k7Nd9nqM","title":"Customize an Indicator Type Layout","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_eO0yu","description":"Customize a layout for an indicator type.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"WuqpYtdGvcKk2pvFDqdU","title":"Add a Script in the Indicator Layout","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_eO0yu","description":"Add dynamic script output to an indicator layout.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"hcVmIUBSRGfQkYdYkJUF","title":"Indicator Extraction","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction","siteSpaceId":"sitesp_eO0yu","description":"Indicator extraction extracts indicators from incident fields and enriches them with commands and scripts defined for the indicator type.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"xKU7b98Af2cmsMvDvyDX","title":"Indicator Extraction Modes","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_eO0yu","description":"Indicator extraction modes and their behavior.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"VsF5sJ0MR6m7Pr7bo7IH","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_eO0yu","description":"Configure indicator extraction rules for incident types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"M0aS9oZDKuJ19X9VcWE0","title":"Run Indicator Extraction in the CLI","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_eO0yu","description":"Extract and enrich indicators from the command line.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"KOfXfpc0LbJIgXGUmS9A","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_eO0yu","description":"Configure indicator extraction for playbook tasks.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"AzgmFCaxff8lPV0pMVOf","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_eO0yu","description":"Disable indicator extraction for specific automations or integrations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"dJyzR3TZmf3gakwJs6zN","title":"Indicator Expiration","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-expiration","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR indicators have an active or expired status which can be set to expire after a period of time or never to expire. Set default expiration method.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"o5DgJ9bjTpJoljNTutkK","title":"Feed Integrations","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations","siteSpaceId":"sitesp_eO0yu","description":"Feed integrations fetch indicators from a threat intelligence feed and add them to Cortex XSOAR for processing and handling.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"w9Z46dQp0FczwHswTWBx","title":"Set the Source Reliability of Enrichment Integrations","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations/set-the-source-reliability-of-enrichment-integrations","siteSpaceId":"sitesp_eO0yu","description":"","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Feed Integrations"}]},{"id":"rFdCciFYEE2ACGVnlkhF","title":"Dashboards","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards","siteSpaceId":"sitesp_eO0yu","description":"Create, edit, and share dashboards in Cortex XSOAR 6.13. Add widgets and configure a default dashboard.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"EFYW3V40wziIYRQgrbel","title":"Dashboard Overview","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/dashboard-overview","siteSpaceId":"sitesp_eO0yu","description":"Cortex XSOAR 6.13 dashboards provide visual data from customizable widgets. Create, edit, import, share, and delete dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"Jt9fog8rI4uVRl3JzG3C","title":"Create a Dashboard","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/create-a-dashboard","siteSpaceId":"sitesp_eO0yu","description":"Create and customize dashboards in Cortex XSOAR 6.13. Add widgets to a dashboard.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"3DARF7XLAcUNpXQ2nVMt","title":"Add a Widget to a Dashboard","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/add-a-widget-to-a-dashboard","siteSpaceId":"sitesp_eO0yu","description":"Add widgets to dashboards in Cortex XSOAR 6.13. Configure widget parameters, including date range.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"ffkSZSmJZ5AtRRb1Tubb","title":"Share a Dashboard","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/share-a-dashboard","siteSpaceId":"sitesp_eO0yu","description":"Share dashboards with other users by role in Cortex XSOAR 6.13. Set permissions for shared dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"iylPTsA1O6TPJfNf7AtS","title":"Edit a Dashboard","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/edit-a-dashboard","siteSpaceId":"sitesp_eO0yu","description":"Edit dashboards in Cortex XSOAR 6.13. Add, delete, or change widgets, dates, size, and position.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"W40NdIA33fE5fpfFS0os","title":"Reports","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports","siteSpaceId":"sitesp_eO0yu","description":"Create, edit, and customize reports in Cortex XSOAR 6.13. Schedule reports with Cron expressions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"29X0UvZJkiQV90PpYL7w","title":"Reports Overview","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/reports-overview","siteSpaceId":"sitesp_eO0yu","description":"Review reports in Cortex XSOAR 6.13. Create and edit reports, analyze data, and upload logos.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"Pd2q7gTN9WbOTyXpix6B","title":"Create a Report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-a-report","siteSpaceId":"sitesp_eO0yu","description":"Create reports in Cortex XSOAR 6.13. Add widgets, customize reports, and schedule delivery.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"1UPdD5vAW3H0N0Bv1tLN","title":"Schedule a report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/schedule-a-report","siteSpaceId":"sitesp_eO0yu","description":"Schedule reports in Cortex XSOAR 6.13. Send reports by email and choose recipients.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"KiYGIYE9TiOBrCqOdJVl","title":"Customize the Email When Sending a Report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/customize-the-email-when-sending-a-report","siteSpaceId":"sitesp_eO0yu","description":"Customize scheduled report emails in Cortex XSOAR 6.13. Change the subject and body.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"ppEYMuOV2qAC4xQToUiE","title":"Create an Incident Summary Report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-an-incident-summary-report","siteSpaceId":"sitesp_eO0yu","description":"Create incident summary reports in Cortex XSOAR 6.13. Save reports as templates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"A6HMktHwLqo2REwi68A0","title":"Select and Customize Sections to Export to a Summary Report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/select-and-customize-sections-to-export-to-a-summary-report","siteSpaceId":"sitesp_eO0yu","description":"Select sections for summary reports in Cortex XSOAR 6.13. Save reports as templates.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"dk7PalQ0qohlgR6OVohb","title":"Add a Widget to a Report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/add-a-widget-to-a-report","siteSpaceId":"sitesp_eO0yu","description":"Add widgets to reports in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"kQJ0zC4S68Z05GZ6tTy0","title":"Edit a report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/edit-a-report","siteSpaceId":"sitesp_eO0yu","description":"Edit reports in Cortex XSOAR 6.13. Change widgets, layouts, and output types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"g4qeN8cjbaMfAoxItKNS","title":"Change the Report Logo","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/change-the-report-logo","siteSpaceId":"sitesp_eO0yu","description":"Change report logos in Cortex XSOAR 6.13. Configure logos with server settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"bq3Na02FUgRbdyWYPxmW","title":"Configure the Time Zone and Format in a Report","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/configure-the-time-zone-and-format-in-a-report","siteSpaceId":"sitesp_eO0yu","description":"Configure time zones and formats for reports in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"BpL8GXDBBiF0JnEg29Th","title":"Troubleshoot Reports","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/troubleshoot-reports","siteSpaceId":"sitesp_eO0yu","description":"Troubleshoot reports in Cortex XSOAR 6.13. View report JSON files with a temporary server configuration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"iqP81M21peVqYgv53x5s","title":"Widgets","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets","siteSpaceId":"sitesp_eO0yu","description":"Create and edit widgets in Cortex XSOAR 6.13 for reports and dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"sqiLj41A5HvNkKBNP1Zo","title":"Widgets Overview","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/widgets-overview","siteSpaceId":"sitesp_eO0yu","description":"Learn how widgets in Cortex XSOAR 6.13 analyze and display dashboard and report data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"1kJzqXFfGAAZgbMraV3t","title":"Create a Widget using the Widget Builder","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_eO0yu","description":"Create widgets in Cortex XSOAR 6.13 with the Widget Builder. Add them to dashboards or reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"dYh760JJjp7QOgCZndW4","title":"Create a Custom Widget Using a JSON File","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_eO0yu","description":"Create custom widgets in Cortex XSOAR 6.13 with JSON files for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"cRjtaXMrN1O4Np14zPKA","title":"Create a Custom Widget Using an Automation Script","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-an-automation-script","siteSpaceId":"sitesp_eO0yu","description":"Create custom widgets in Cortex XSOAR 6.13 with automation scripts for dashboards and reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"azIXEw8qnbzwb6mSWdqj","title":"Edit a Widget","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/edit-a-widget","siteSpaceId":"sitesp_eO0yu","description":"Edit widgets in Cortex XSOAR 6.13 from the Widgets Library, dashboards, or reports.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"h4WIDGUAWJ346UWjU8Ow","title":"Create a Used Percentage Widget for a Disk Partition","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-used-percentage-widget-for-a-disk-partition","siteSpaceId":"sitesp_eO0yu","description":"Create a disk partition used-percentage widget in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"dhUyY2vPjh7SZ6Gx0Qo8","title":"Saved By Dbot (ROI) Widget","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_eO0yu","description":"Configure the Saved by Dbot ROI widget in Cortex XSOAR 6.13 with a server setting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"AwTKItKWbp6h4cMQBI6d","title":"Manage Data","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data","siteSpaceId":"sitesp_eO0yu","description":"Manage data in Cortex XSOAR 6.13 by reindexing databases, freeing disk space, migrating data, and restoring archives.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"AQWZTtZakXcljlaCXVK6","title":"Reindex the Entire Database","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-entire-database","siteSpaceId":"sitesp_eO0yu","description":"Reindex the entire database in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"KDXs32eZkCmliLGzYKRj","title":"Reindex a Specific Index Database","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-a-specific-index-database","siteSpaceId":"sitesp_eO0yu","description":"Reindex one or more index databases in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"Muofr38YapnPMv1tNI1M","title":"Reindex the Audit Log","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-audit-log","siteSpaceId":"sitesp_eO0yu","description":"Reindex the audit log in Cortex XSOAR 6.13 to recover historical audit trail data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"KsgKv7v8ZKeuyDcm0QhH","title":"Free up Disk Space with Data Archiving","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/free-up-disk-space-with-data-archiving","siteSpaceId":"sitesp_eO0yu","description":"Free disk space in Cortex XSOAR 6.13 by archiving unused data folders.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"0hBwJm3sYBRf3r5wCHPV","title":"Archive Artifacts and Attachments","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/archive-artifacts-and-attachments","siteSpaceId":"sitesp_eO0yu","description":"Archive artifact and attachment folders in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"hIFqrd0QsBv4EMfWGOr4","title":"Store Incident/Artifact Files in the Cloud","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/store-incidentartifact-files-in-the-cloud","siteSpaceId":"sitesp_eO0yu","description":"Store incident attachments and artifact files in the cloud in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"23GZ4Qk66Uj37fJmBoJM","title":"Migrate Data to Another Server","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server","siteSpaceId":"sitesp_eO0yu","description":"Migrate Cortex XSOAR 6.13 data to another server, including files and directories.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"sYGiINYoai7CRZz08lpZ","title":"Migrate Data to Another Server for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server-for-multi-tenant","siteSpaceId":"sitesp_eO0yu","description":"Migrate Cortex XSOAR 6.13 data to another server in a multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"nDVQcwrjo90TA7nd0equ","title":"Move Data Folders to Another Location on the Server","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/move-data-folders-to-another-location-on-the-server","siteSpaceId":"sitesp_eO0yu","description":"Move Cortex XSOAR 6.13 data folders to another server location.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"56rk5qS4eE4kC6XIif54","title":"Restore an Archived Folder","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/restore-an-archived-folder","siteSpaceId":"sitesp_eO0yu","description":"Restore an archived folder in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"IwmssExDgbbdvSK6AjlK","title":"Logs","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs","siteSpaceId":"sitesp_eO0yu","description":"View server logs, audit trails, and log bundles in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"OdNDLGvLF8wN1SnbIlza","title":"Logs Overview","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/logs-overview","siteSpaceId":"sitesp_eO0yu","description":"Use Cortex XSOAR 6.13 logs to troubleshoot system activity.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"967FfI2jdRRz4jLJr12d","title":"Configure the Server Log","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-server-log","siteSpaceId":"sitesp_eO0yu","description":"Configure server log size, level, backups, and retention in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"1YFdfuEdAow3oOZqFh8I","title":"Configure the Access Log for HTTPS Requests","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-access-log-for-https-requests","siteSpaceId":"sitesp_eO0yu","description":"Configure access logging for HTTP and HTTPS requests in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"fxql2XKwH4TVgfFeg9qF","title":"Create a Log Bundle","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/create-a-log-bundle","siteSpaceId":"sitesp_eO0yu","description":"Create a log bundle for troubleshooting in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"HjNPAlSQihEARLKy2Hfm","title":"Audit Trail","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/audit-trail","siteSpaceId":"sitesp_eO0yu","description":"View, export, extract, and purge administrative audit trail actions in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"wSVOeK4JFlWQYepE1Ef3","title":"Send the Audit Trail to an External Log Service","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/send-the-audit-trail-to-an-external-log-service","siteSpaceId":"sitesp_eO0yu","description":"Send the Cortex XSOAR 6.13 audit trail to an external log service using server configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"deTrWxqOQNTR5sSqsSD7","title":"System Settings","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings","siteSpaceId":"sitesp_eO0yu","description":"Customize logos, login messages, system emails, and notifications in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"1ZvAhlASGeVy5vcwMGUo","title":"Customize the Logo","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-logo","siteSpaceId":"sitesp_eO0yu","description":"Customize full-size and minimized logos in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"T2QbzkOHML2bWrH9VN39","title":"Customize the Login Message","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-login-message","siteSpaceId":"sitesp_eO0yu","description":"Customize the login-page message in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"qnKpILE4PTIOeVMDLJVN","title":"Customize System Emails","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-system-emails","siteSpaceId":"sitesp_eO0yu","description":"Customize system email subjects, bodies, and formats in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"qBu6kMahvNOjE6P7XuOj","title":"Configure System Notifications","pathname":"/xsoar-6-administrator-guide/6.13/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/configure-system-notifications","siteSpaceId":"sitesp_eO0yu","description":"Configure email system notifications and senders in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Customize Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"hjrQ4HzdS5qXVsFsPs2V","title":"Day to Day Tasks in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Manage daily incident and indicator management tasks in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"}]},{"id":"tgrZGW0N6x1kxtbaIhBl","title":"Incident Management","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management","siteSpaceId":"sitesp_eO0yu","description":"Open, investigate, and manage incidents in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"lZtWwZLgd9ciFRJsz1IB","title":"Create an Incident","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-an-incident","siteSpaceId":"sitesp_eO0yu","description":"Create incidents manually, from feeds, or by importing JSON in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"OPcf9ZSqdzdlJX0mjiyb","title":"Create a Search Query for Incidents","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-search-query-for-incidents","siteSpaceId":"sitesp_eO0yu","description":"Create and save incident search queries in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"NZmPsrBlIb74S2WDJQZF","title":"Create a Widget From an Incident","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-widget-from-an-incident","siteSpaceId":"sitesp_eO0yu","description":"Create widgets from incident searches in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"qhkqAZejPPEb75CwbSpi","title":"Export an Incident to CSV Using the UTF8-BOM Format","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_eO0yu","description":"Export incidents to CSV with UTF8-BOM encoding in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"qqVdqzRD95Xw6ZNtdlZa","title":"Incident Investigation","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-investigation","siteSpaceId":"sitesp_eO0yu","description":"Open incidents and view their details in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"LUPQASP5oJ7LhV7QnYJX","title":"Work Plan","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/work-plan","siteSpaceId":"sitesp_eO0yu","description":"Monitor and manage incident Playbook workflows in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"wyNZ7lU9fYBJ3n3t48yo","title":"Investigate an Incident Using the Canvas","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_eO0yu","description":"Visually map incident investigations with the canvas in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"p2NW3LcWHfNsLjBTGozB","title":"Auto Populate the Canvas","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/auto-populate-the-canvas","siteSpaceId":"sitesp_eO0yu","description":"Automatically populate the investigation canvas in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"YpU5TlmAz1h0rTt2dAiV","title":"Dbot Suggestions: Quick View Window","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/dbot-suggestions-quick-view-window","siteSpaceId":"sitesp_eO0yu","description":"View Dbot suggestions in the Quick View window in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"yn1KEgoItYb6N1uCW7XD","title":"Edit Dbot Incident and Indicator Suggestions","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas/edit-dbot-incident-and-indicator-suggestions","siteSpaceId":"sitesp_eO0yu","description":"Edit Dbot incident and indicator suggestions in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Investigate an Incident Using the Canvas"}]},{"id":"mX9AQxpRrP5JmXTTx6qS","title":"Incident Actions","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-actions","siteSpaceId":"sitesp_eO0yu","description":"Manage tasks, notes, reports, and restrictions in Cortex XSOAR 6.13 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"mhKTgSjCLRUqraG8XWKg","title":"Evidence Handling","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/evidence-handling","siteSpaceId":"sitesp_eO0yu","description":"Add and manage investigation evidence in the Cortex XSOAR 6.13 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"sprzH69WVVBOh1QtxqR0","title":"Incident Tasks","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-tasks","siteSpaceId":"sitesp_eO0yu","description":"Add and manage Playbook and to-do tasks in Cortex XSOAR 6.13 incidents.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"NkmHgsMJMwnHBQLgZZ3J","title":"Link Incidents","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents","siteSpaceId":"sitesp_eO0yu","description":"Link related incidents through the UI, rules, or CLI in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"UVOxWwySVjfcizazm1ey","title":"Manage Related Incidents","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents/manage-related-incidents","siteSpaceId":"sitesp_eO0yu","description":"Manage related incidents in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Link Incidents"}]},{"id":"SVEmsqR4KTlWVZJLmWqk","title":"Link and Unlink incidents in the CLI","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents/link-and-unlink-incidents-in-the-cli","siteSpaceId":"sitesp_eO0yu","description":"Link and unlink incidents from the CLI in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"},{"label":"Link Incidents"}]},{"id":"xkBs8fbJtmOB2TwJdPzS","title":"Configure Incident Fields for Related Incidents","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/configure-incident-fields-for-related-incidents","siteSpaceId":"sitesp_eO0yu","description":"Configure fields for related incidents in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"xDT5QMsA2pBsrRQv5ELL","title":"Indicator Management","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management","siteSpaceId":"sitesp_eO0yu","description":"Manage, search, create, edit, export, and delete indicators in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"wBEdhpzNswPXCUvEFx2h","title":"Indicator Query","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/indicator-query","siteSpaceId":"sitesp_eO0yu","description":"Search, create, edit, export, and delete indicators in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"qMH6bj7oyyhnuDY6wBYh","title":"Configure the Indicator Timeline","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_eO0yu","description":"Configure and improve the indicator timeline in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"kHDoFVADA8VpXptDbN45","title":"Exclusion List","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/exclusion-list","siteSpaceId":"sitesp_eO0yu","description":"Add indicators to exclusion lists in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"poMkgMFsbCiECX6zERdG","title":"Export Indicators","pathname":"/xsoar-6-administrator-guide/6.13/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators","siteSpaceId":"sitesp_eO0yu","description":"Export indicators as lists or files in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"K6y3DEB2vnOywAgM3vGz","title":"Reference","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference","siteSpaceId":"sitesp_eO0yu","description":"Reference information for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"}]},{"id":"0MRvkP9fIgI6ZGY446b5","title":"Navigation Cheat Sheet","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/navigation-cheat-sheet","siteSpaceId":"sitesp_eO0yu","description":"Learn about commonly used features in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"dN5nRwRBIRZVHzZgxotW","title":"Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Server configurations for customization and troubleshooting in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"8eYC6qoJP7wZq5SmH1C2","title":"Modify Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/modify-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Customize and troubleshoot Cortex XSOAR 6.13 with server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"DgNDAFAhRfmz8wpGfzVE","title":"Active Directory Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/active-directory-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review Active Directory server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"OwBfymwHC8DFVtsFEehF","title":"Automation Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/automation-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review automation server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"wBTr8TUfqjSkHa1VACu0","title":"Dashboard Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/dashboard-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review dashboard server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"W8Folk2o0lWunHo5mUEI","title":"Database Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/database-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review database server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"P4oY9y42qZ1X0NBXhZ8Z","title":"Disaster Recovery Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/disaster-recovery-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review disaster recovery server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"XmQAU9UUVXYXISwxH8CG","title":"Docker Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/docker-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review Docker server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"UizQFERfwVKACmSB68Uo","title":"Elasticsearch Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/elasticsearch-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review Elasticsearch server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"LEjbUZtzxHP9Hq9Qn30P","title":"Engine Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/engine-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review engine server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"226Wvyrlphrsb2QswgLh","title":"General Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/general-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review general server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"iwYYwh9SnFuNIDliIyQC","title":"Google API Server Configuration","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/google-api-server-configuration","siteSpaceId":"sitesp_eO0yu","description":"Review Google API server configuration in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"ecd3OFJswSCreAbQO5Uu","title":"Incident Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/incident-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review incident server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"i523glcCGHNN3Quo6MnD","title":"Indicator Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/indicator-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review indicator server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"4hFcD0mLBgn4c0BXGchU","title":"Integration Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/integration-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review integration server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"XIzz4IMjWajjHbLeZvha","title":"List Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/list-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review list server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"13LrgbtKMgSLF2knfjNB","title":"Logs Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/logs-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review log server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"6ErNZ1ydIpuPFGrVU40G","title":"Marketplace Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/marketplace-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review Marketplace server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"mOyEVqgUm4QVUrNpToUz","title":"Multi-Tenant Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/multi-tenant-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review multi-tenant server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"NkqNCPRNNrbh0GtAdYEY","title":"Notification Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/notification-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review notification server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"uJvSc6nq262iV8lLnQZG","title":"Playbook Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/playbook-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review playbook server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"neh4FOgoLW1dZLYgAv5l","title":"Proxy Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/proxy-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review proxy server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"AnXEUlpKyKKJQRspGfr7","title":"Remote Repository Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/remote-repository-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review remote repository server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"1hIzLSjLUGAiyj2IpVYh","title":"Report Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/report-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review report server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"B4ZLhoHoO5lvjrHPuzRE","title":"Security Headers Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/security-headers-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review security header server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"Wg3XXpWVRBLoqawcbheh","title":"SLA Server Configuration","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/sla-server-configuration","siteSpaceId":"sitesp_eO0yu","description":"Review SLA server configuration in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"V9XcB9hfTBaT0dfuXteH","title":"System Diagnostics Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/system-diagnostics-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review system diagnostics server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"9w1Y295xKb7ayNck9Y2b","title":"Users and Roles Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/users-and-roles-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review user and role server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"cOsqgDT5GDYNyEUV8wwv","title":"War Room Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/war-room-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review War Room server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"BYxzHXTtRl20USbU6pyG","title":"Widget Server Configurations","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/server-configurations/widget-server-configurations","siteSpaceId":"sitesp_eO0yu","description":"Review widget server configurations in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"fb266qpV4RfPwpP3okMQ","title":"System Diagnostics","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/system-diagnostics","siteSpaceId":"sitesp_eO0yu","description":"Find and fix system performance issues in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"7JrJjrzUZXXhMDnKznk5","title":"Fix System Diagnostics Issues","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/system-diagnostics/fix-system-diagnostics-issues","siteSpaceId":"sitesp_eO0yu","description":"Fix System Diagnostics alerts in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"System Diagnostics"}]},{"id":"ytd9EBRPkCMm30QCFjKC","title":"Performance Tuning for Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/performance-tuning-for-cortex-xsoar","siteSpaceId":"sitesp_eO0yu","description":"Optimize system performance in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"xkfa7jZBgpE7KA0jfroW","title":"Supported Ciphers","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/supported-ciphers","siteSpaceId":"sitesp_eO0yu","description":"Review TLS 1.2 and TLS 1.3 cipher suites in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"j4d8aD4tkfsBpnaXIgzX","title":"Telemetry","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/telemetry","siteSpaceId":"sitesp_eO0yu","description":"Configure telemetry data collection in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"06OH529ZrqNJnX8RdzLr","title":"Keyboard Shortcuts","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/keyboard-shortcuts","siteSpaceId":"sitesp_eO0yu","description":"Use keyboard shortcuts for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"cEPwB5KcSwgHJv1g4F4J","title":"Indicator Fields Structure","pathname":"/xsoar-6-administrator-guide/6.13/reference-docs/reference/indicator-fields-structure","siteSpaceId":"sitesp_eO0yu","description":"Review STIX-aligned indicator field structures in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"3h2PVHC1rdCvcD0jqbQt","title":"Navigate the Cortex XSOAR 6.12 Administrator Guide","pathname":"/xsoar-6-administrator-guide/6.12","siteSpaceId":"sitesp_bcGJl","description":"Start here for a visual overview of the main Cortex XSOAR 6.12 (EoL) documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"mAay89nnrqZsqBu5eNfT","title":"Overview","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/overview","siteSpaceId":"sitesp_bcGJl","description":"Cortex XSOAR 6.12 provides security orchestration, incident management, and interactive investigation. Overview of Cortex XSOAR 6.12 features and concepts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"YAoIaX19COUj7yVTp3jH","title":"Get Started in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Learn Cortex XSOAR 6.12 concepts, licenses, lifecycle details, API keys, search, CLI, and Markdown.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"}]},{"id":"kne3b2x5Ji3beEUYnJ1j","title":"Licenses","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/licenses","siteSpaceId":"sitesp_bcGJl","description":"Manage license types, user quotas, and access in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"e8Z29atuu8QX9u6EPaG9","title":"FIPS Version","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/fips-version","siteSpaceId":"sitesp_bcGJl","description":"Use the vendor-affirmed FIPS version in Cortex XSOAR 6.12 with FIPS 140-3 validated cryptography.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"eKmXtU5j6qR3Rqc8SYdQ","title":"Concepts","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/concepts","siteSpaceId":"sitesp_bcGJl","description":"Learn core concepts, including incidents, integrations, playbooks, and automations, in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"K0P48JRQWkX8ciMIYArt","title":"Product Support Lifecycle","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/product-support-lifecycle","siteSpaceId":"sitesp_bcGJl","description":"Review the product support lifecycle and end-of-life dates for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"yfrFdeWCekZi4LhshBdH","title":"API Keys","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/api-keys","siteSpaceId":"sitesp_bcGJl","description":"Generate, manage, revoke, and secure API keys in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"Q2J6NhUsiSah2k3gUSzt","title":"Use the Command Line Interface","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/use-the-command-line-interface","siteSpaceId":"sitesp_bcGJl","description":"Run system and integration commands from the CLI in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"KzN7m2Z5lCHo9rdGnDhW","title":"How to Search","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-search","siteSpaceId":"sitesp_bcGJl","description":"Search incidents, indicators, and more in Cortex XSOAR 6.12 using query syntax.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"fDSjCFtu05Yv2FT3TmtT","title":"How to Use Markdown","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/how-to-use-markdown","siteSpaceId":"sitesp_bcGJl","description":"Format text with Markdown in Cortex XSOAR 6.12 across supported contexts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"ofp11n56dBnwj7UoR2xh","title":"New User FAQ","pathname":"/xsoar-6-administrator-guide/6.12/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/new-user-faq","siteSpaceId":"sitesp_bcGJl","description":"Find answers to common new-user questions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Learn about Cortex XSOAR"},{"label":"Get Started in Cortex XSOAR"}]},{"id":"wLcFWaThg6XID798UiJY","title":"Onboarding in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/onboarding-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Onboarding process for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"azt7RNwGe4rhleP890FV","title":"Deployment Checklist - Best Practices","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/deployment-checklist-best-practices","siteSpaceId":"sitesp_bcGJl","description":"Overview of the deployment process, including best practices for Cortex XSOAR 6.12 installation and maintenance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"KnN8Agp0ePlX2LNjNBUN","title":"Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment","siteSpaceId":"sitesp_bcGJl","description":"Install and configure a single-server deployment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"hUpob0w0jNRKD5Cspc0I","title":"System Requirements","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/system-requirements","siteSpaceId":"sitesp_bcGJl","description":"Verify the software, hardware, and network requirements in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"oCNcKNDN1IaqixusoqNv","title":"Install the Server for a Single Server Deployment","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/install-the-server-for-a-single-server-deployment","siteSpaceId":"sitesp_bcGJl","description":"Install Cortex XSOAR 6.12 with the application and database servers on one machine.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"pkohIctIh4r2ROIbYst7","title":"Installer Flags","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/install-the-server-for-a-single-server-deployment/installer-flags","siteSpaceId":"sitesp_bcGJl","description":"Review installer flags for a single-server deployment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Install the Server for a Single Server Deployment"}]},{"id":"Gn8PNZlzcwQhNcG3USh2","title":"Install the Server with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/install-the-server-with-elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Install Cortex XSOAR 6.12 with Elasticsearch as the database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"QUKQxEmVIHPsRxXmYTqt","title":"Install the Server Offline","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline","siteSpaceId":"sitesp_bcGJl","description":"Install Cortex XSOAR 6.12 without internet access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"UpK3sUnGoUSOjjZyer0I","title":"Dependencies for Offline Installation","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/install-the-server-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_bcGJl","description":"Prepare required dependencies for an offline installation of Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Install the Server Offline"}]},{"id":"wzzWfFsuRxyv99VvHuI7","title":"Add a License","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/add-a-license","siteSpaceId":"sitesp_bcGJl","description":"Add a license file through the UI or server in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"9lXpYiPK8ifMVWk8amwA","title":"Post-Installation Checklist","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist","siteSpaceId":"sitesp_bcGJl","description":"Complete post-installation tasks and troubleshoot Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"m5yi5DdP5r8n7uub2K7P","title":"Server Post-Installation Health Check","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/server-post-installation-health-check","siteSpaceId":"sitesp_bcGJl","description":"Verify server health after installing Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"WTqZSEixK9vmbB8FHCff","title":"Monitor Components","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/monitor-components","siteSpaceId":"sitesp_bcGJl","description":"Monitor server components in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"MqZkedhMsuPKqWIDCnTS","title":"HTTPS with a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate","siteSpaceId":"sitesp_bcGJl","description":"Configure HTTPS with a signed certificate in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"beo5Ub3u91BFChuKL7ac","title":"Create a Self-Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate/create-a-self-signed-certificate","siteSpaceId":"sitesp_bcGJl","description":"Create a self-signed certificate for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"},{"label":"HTTPS with a Signed Certificate"}]},{"id":"uNA6O7Bgp1CBbhhb21XU","title":"Install or Renew a Custom Certificate","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/https-with-a-signed-certificate/install-or-renew-a-custom-certificate","siteSpaceId":"sitesp_bcGJl","description":"Install or renew a custom certificate in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"},{"label":"HTTPS with a Signed Certificate"}]},{"id":"7C5hIo26k9K7h0V6ZI4J","title":"Configure the Server to Listen on HTTP","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/configure-the-server-to-listen-on-http","siteSpaceId":"sitesp_bcGJl","description":"Configure an HTTP listener for the server in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"TiZRrSm1MxGRBbZdvYun","title":"Troubleshoot WebSockets","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/post-installation-checklist/troubleshoot-websockets","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot WebSocket connectivity in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"},{"label":"Post-Installation Checklist"}]},{"id":"GHmDKio9yrj5B9VW4Pu7","title":"Upgrade the Cortex XSOAR Server","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_bcGJl","description":"Prepare, upgrade, and complete post-upgrade tasks for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"2w10bia6YBwx9Ywp5TZB","title":"Uninstall the Server","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/single-server-deployment/uninstall-the-server","siteSpaceId":"sitesp_bcGJl","description":"Uninstall the server and preserve relevant files in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Single Server Deployment"}]},{"id":"tTxR8bRTUpHRNMbqErjV","title":"Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Set up, secure, migrate, and troubleshoot Elasticsearch in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"ZHSP98OUMjG34FLi7bME","title":"Elasticsearch Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand Elasticsearch data migration and indexing in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"ACQICtlF7ZIctaIxkZuS","title":"Elasticsearch Setup","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup","siteSpaceId":"sitesp_bcGJl","description":"Configure Elasticsearch sizing, settings, and best practices for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"GIODbjhGUrd7HJmnNYCu","title":"Elasticsearch System Requirements","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-system-requirements","siteSpaceId":"sitesp_bcGJl","description":"Review Elasticsearch system requirements for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"lVHvpAmvCa0IERFHz3DE","title":"Elasticsearch Configurations","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-configurations","siteSpaceId":"sitesp_bcGJl","description":"Configure Elasticsearch settings for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"FcsmuoLpTPk0ihAV2v3i","title":"Elasticsearch Data Management","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-setup/elasticsearch-data-management","siteSpaceId":"sitesp_bcGJl","description":"Manage Elasticsearch data in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Setup"}]},{"id":"1QqHMc8e9prT3e9yrt5k","title":"Elasticsearch Security","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-security","siteSpaceId":"sitesp_bcGJl","description":"Apply Elasticsearch security guidelines in Cortex XSOAR 6.12 deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"rk2LSxPiDvCxTGlbMHUV","title":"Elasticsearch General Security Guidelines","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_bcGJl","description":"Apply general Elasticsearch security guidelines in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"H96NN7zPC24us0caRhc2","title":"Elasticsearch Security Guidelines - Multi-tenant Deployments","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/elasticsearch-security/elasticsearch-security-guidelines-multi-tenant-deployments","siteSpaceId":"sitesp_bcGJl","description":"Secure multi-tenant Elasticsearch deployments in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Elasticsearch Security"}]},{"id":"VsskYj47V9HucrQ29Aib","title":"Migration","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration","siteSpaceId":"sitesp_bcGJl","description":"Migrate Cortex XSOAR 6.12 data to Elasticsearch for single-server or multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"RxFZNJ3ummLN62wsXlOQ","title":"Elasticsearch Migration Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-migration-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand Elasticsearch migration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"M7OyF4efSeqiqPM5ZAez","title":"Migrate Objects to Elasticsearch for a Single Server","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-single-server","siteSpaceId":"sitesp_bcGJl","description":"Migrate single-server objects to Elasticsearch in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"eE7UKrF49fcRt6rE5wI3","title":"Migrate Objects to Elasticsearch for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-multi-tenant","siteSpaceId":"sitesp_bcGJl","description":"Migrate multi-tenant objects to Elasticsearch in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"P0RSXw3WsqBeZrQoYjSS","title":"Migrate an Existing Elasticsearch Deployment","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/migrate-an-existing-elasticsearch-deployment","siteSpaceId":"sitesp_bcGJl","description":"Migrate an existing Elasticsearch deployment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"GNJTJGYOL9kvtitMHtxN","title":"Migrate Objects to Elasticsearch for a Distributed Database","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/migrate-objects-to-elasticsearch-for-a-distributed-database","siteSpaceId":"sitesp_bcGJl","description":"Migrate distributed database objects to Elasticsearch in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"ZKNAU8qZH98ZYwl6NfQQ","title":"Manage Partial Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/manage-partial-migration-to-elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Manage partial Elasticsearch migration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"78bdWaC2Hn88Og4kBxeo","title":"Validate the Migration to Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/validate-the-migration-to-elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Validate an Elasticsearch migration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"vtVaG7ZI7sWFyOaGwOEg","title":"Elasticsearch Post Migration Health Check","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/migration/elasticsearch-post-migration-health-check","siteSpaceId":"sitesp_bcGJl","description":"Verify Elasticsearch health after migration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Migration"}]},{"id":"qIrrrgzeIpDnVnpaBRBO","title":"Disaster Recovery for Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Back up and restore Elasticsearch deployments in Cortex XSOAR 6.12 using snapshots.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"}]},{"id":"q79vr6fwHByuf6cX1VnJ","title":"Create Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/create-elasticsearch-snapshots","siteSpaceId":"sitesp_bcGJl","description":"Create Elasticsearch snapshots in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"ZjUhziUGYfv8kc2gprc2","title":"Restore Elasticsearch Snapshots","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/restore-elasticsearch-snapshots","siteSpaceId":"sitesp_bcGJl","description":"Restore Elasticsearch snapshots in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"FwthkyI24O93QGN0jocx","title":"Archive Data with Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/archive-data-with-elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Archive Cortex XSOAR 6.12 data with Elasticsearch index lifecycle management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"EK3xVXD6W36mLQCXmRsy","title":"Troubleshoot Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/elasticsearch/disaster-recovery-for-elasticsearch/troubleshoot-elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot Elasticsearch deployments in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Elasticsearch"},{"label":"Disaster Recovery for Elasticsearch"}]},{"id":"KHr1eARKSgFU7EXcyEZd","title":"Docker","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker","siteSpaceId":"sitesp_bcGJl","description":"Install, configure, secure, and troubleshoot Docker in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"EMjAGVpPKDaWriWZsO1T","title":"Docker Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand Docker usage, security, and predictability in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"9ctIBUGAlL3vqvqOoovs","title":"Docker Installation","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-installation","siteSpaceId":"sitesp_bcGJl","description":"Install and troubleshoot Docker on supported platforms in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"8A0nP7TIfTHv2phC5h2Z","title":"Configure Python Docker Integrations to Trust Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/configure-python-docker-integrations-to-trust-custom-certificates","siteSpaceId":"sitesp_bcGJl","description":"Configure Python Docker integrations to trust custom certificates in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"tlJDbjt2xo5bNEMKyBUl","title":"Docker Images in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Run scripts and integrations in Docker images in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"4S6G2BD4wMinAgefMOf5","title":"Create a Docker Image In Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/create-a-docker-image-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Create a Docker image in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"GlgTW60b6p1qvhibcvuj","title":"Install Docker Images Offline","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/install-docker-images-offline","siteSpaceId":"sitesp_bcGJl","description":"Install Docker images offline in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"eub9TbiM0ih5seFVu9Lm","title":"Docker Image Security","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/docker-image-security","siteSpaceId":"sitesp_bcGJl","description":"Secure Docker images in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"S9U1ZeSY8VAlXii4B0e2","title":"Manage Docker Images","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/manage-docker-images","siteSpaceId":"sitesp_bcGJl","description":"Manage Docker images in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"VpKrDnqsohv5gxch6Zta","title":"Change the Docker Image for Automations and Integrations","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/change-the-docker-image-for-automations-and-integrations","siteSpaceId":"sitesp_bcGJl","description":"Change automation and integration Docker images in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"asaHULSIWKMqhehiR94B","title":"Use the Cortex XSOAR Container Registry","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-images-in-cortex-xsoar/use-the-cortex-xsoar-container-registry","siteSpaceId":"sitesp_bcGJl","description":"Use the container registry in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Images in Cortex XSOAR"}]},{"id":"VSpBWyJ3RIcbv0gzxXFE","title":"Docker Hardening Guide","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide","siteSpaceId":"sitesp_bcGJl","description":"Apply Docker hardening settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"1v5f2juLE2srp9aSdWn4","title":"Run Docker with Non-Root Internal Users","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/run-docker-with-non-root-internal-users","siteSpaceId":"sitesp_bcGJl","description":"Run Docker with non-root internal users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"3WzAXptZTlV81Y2nvl2F","title":"Configure Memory Limit Support Without Swap Limit Capabilities","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-memory-limit-support-without-swap-limit-capabilities","siteSpaceId":"sitesp_bcGJl","description":"Configure memory limits without swap support in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"3CyIE1PXn3uJx7bB2MWT","title":"Configure the Memory Limitation","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-memory-limitation","siteSpaceId":"sitesp_bcGJl","description":"Configure Docker memory limits in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"dr8sMkq9772ookfESgCC","title":"Test the Memory Limit","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/test-the-memory-limit","siteSpaceId":"sitesp_bcGJl","description":"Test Docker memory limits in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"01HSBIvOSul224gO0i3K","title":"Limit Available CPU","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/limit-available-cpu","siteSpaceId":"sitesp_bcGJl","description":"Limit Docker CPU resources in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"kEu485QHlM7rhXKea5Vq","title":"Configure the PIDs Limit","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-pids-limit","siteSpaceId":"sitesp_bcGJl","description":"Configure Docker process limits in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"WPoIFIBQLJ7O8ABPLBK3","title":"Configure the Open File Descriptors Limit","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/configure-the-open-file-descriptors-limit","siteSpaceId":"sitesp_bcGJl","description":"Configure Docker open file descriptor limits in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"xx1BN9S1SgdDyVyND9J8","title":"Docker Network Hardening","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-hardening-guide/docker-network-hardening","siteSpaceId":"sitesp_bcGJl","description":"Harden Docker networking in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"},{"label":"Docker Hardening Guide"}]},{"id":"F8g1AclsuF3BZlrRS59y","title":"Docker FAQs","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/docker-faqs","siteSpaceId":"sitesp_bcGJl","description":"Find Docker answers and guidance in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"T9TGy5LDILHlm8lNXBsc","title":"Troubleshoot Docker Networking Issues","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/troubleshoot-docker-networking-issues","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot Docker networking issues in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"6Tuft7GfSjn73PhpI2BR","title":"Troubleshoot Docker Performance Issues","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/troubleshoot-docker-performance-issues","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot Docker performance issues in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"64D8t9cxyVPLGkeZnnBI","title":"Configure Docker Pull Rate Limit","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/configure-docker-pull-rate-limit","siteSpaceId":"sitesp_bcGJl","description":"Configure Docker image pull rate limits in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"jbNgI008RRTWjgS2WAeX","title":"Change the Docker Installation Folder","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/docker/change-the-docker-installation-folder","siteSpaceId":"sitesp_bcGJl","description":"Change the Docker installation folder in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Docker"}]},{"id":"M7oXF2NYg7ePqlAAYkAo","title":"Podman","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/podman","siteSpaceId":"sitesp_bcGJl","description":"Run Podman containers instead of Docker in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"NvPiW3ntWEIBN1sHUiXf","title":"Podman Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/podman/podman-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand Podman containers for Cortex XSOAR 6.12 deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"x6rG9iMnIGSFjlS1GcpK","title":"Change container storage directory","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/podman/change-container-storage-directory","siteSpaceId":"sitesp_bcGJl","description":"Change the Podman container storage directory in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"Lq88AnEXxnTuPHEF9B0y","title":"Podman Installation","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/podman/podman-installation","siteSpaceId":"sitesp_bcGJl","description":"Install Podman for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"uJMbe5Y66VXjruLIlmYz","title":"Configure the SELinux Policy for PowerShell Integrations","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/podman/configure-the-selinux-policy-for-powershell-integrations","siteSpaceId":"sitesp_bcGJl","description":"Configure the SELinux policy for PowerShell integrations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"wPT3lrbrnK3gAxMWIjtO","title":"Migrate From Docker to Podman","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/podman/migrate-from-docker-to-podman","siteSpaceId":"sitesp_bcGJl","description":"Migrate from Docker to Podman in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"nEjSws5N6lxEYXSNb1J3","title":"Troubleshoot Podman","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/podman/troubleshoot-podman","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot Podman issues in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Podman"}]},{"id":"XtHzy1IR8UOqHmz9aSvD","title":"Proxy","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/proxy","siteSpaceId":"sitesp_bcGJl","description":"Configure proxy settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"FCbjtAS5fYl5IZ2JdiAN","title":"Configure Proxy Settings","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/proxy/configure-proxy-settings","siteSpaceId":"sitesp_bcGJl","description":"Configure global proxy settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"ZhRXAkD1f0s7bqaUw24d","title":"Configure how to bypass proxy settings","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/proxy/configure-how-to-bypass-proxy-settings","siteSpaceId":"sitesp_bcGJl","description":"Configure proxy bypass settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"PsYKfwiXLgUSnm7J5vAp","title":"Use NGINX as a Reverse Proxy to the Server","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/proxy/use-nginx-as-a-reverse-proxy-to-the-server","siteSpaceId":"sitesp_bcGJl","description":"Use NGINX as a reverse proxy in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Proxy"}]},{"id":"0OG8fHyhnM2AV2G9w5B3","title":"High Availability","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability","siteSpaceId":"sitesp_bcGJl","description":"Configure high availability with Elasticsearch in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"smpCSKfPiubwwu9pN2Hq","title":"High Availability Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/high-availability-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand high availability deployment architectures in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"nFd2Ynfi9l8BUEWgzfdT","title":"Set Up High Availability","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/set-up-high-availability","siteSpaceId":"sitesp_bcGJl","description":"Set up high availability in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"tG8EqA0O9T4RhP00zCXF","title":"Sizing Requirements for High Availability Deployments","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/sizing-requirements-for-high-availability-deployments","siteSpaceId":"sitesp_bcGJl","description":"Review high availability sizing requirements for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"PNX16FGbAAwK3y7yYCDC","title":"Monitor the Health of the App Servers","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/monitor-the-health-of-the-app-servers","siteSpaceId":"sitesp_bcGJl","description":"Monitor application server health in Cortex XSOAR 6.12 high availability deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"OO7niullkYCTqR5Ptkok","title":"Migrate a Single Instance for High Availability","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/migrate-a-single-instance-for-high-availability","siteSpaceId":"sitesp_bcGJl","description":"Migrate a single instance to high availability in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"w0NjVwmPcZ4zTKs2CHtz","title":"Migrate a Multi-Tenant Deployment for High Availability","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/migrate-a-multi-tenant-deployment-for-high-availability","siteSpaceId":"sitesp_bcGJl","description":"Migrate a multi-tenant deployment to high availability in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"ioEzIQjiivdQ9SuJkgD6","title":"Install Additional App Servers","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/install-additional-app-servers","siteSpaceId":"sitesp_bcGJl","description":"Install additional application servers in Cortex XSOAR 6.12 high availability deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"FXlYsfbLgHSEcoCvVvvl","title":"Deploy Engines in a High Availability Environment","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/deploy-engines-in-a-high-availability-environment","siteSpaceId":"sitesp_bcGJl","description":"Deploy engines in a high availability environment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"8KroKDZQMOJKSKeEUScH","title":"Use a Signed Certificate","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/high-availability/use-a-signed-certificate","siteSpaceId":"sitesp_bcGJl","description":"Use a signed certificate in Cortex XSOAR 6.12 high availability deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"High Availability"}]},{"id":"TLLMNYjw3n4OYW4iITj6","title":"Disaster Recovery and Live Backup","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup","siteSpaceId":"sitesp_bcGJl","description":"Configure live backup and disaster recovery in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"iq3uYEtcroUKF0ir9K2f","title":"Disaster Recovery and Live Backup Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/disaster-recovery-and-live-backup-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand live backup and disaster recovery in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"fsBtaL1hULAw9GHgoih9","title":"Host Names, DNS, and Disaster Recovery","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/host-names-dns-and-disaster-recovery","siteSpaceId":"sitesp_bcGJl","description":"Configure host names and DNS for disaster recovery in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"DWiROi9gAsQl6axKXbAs","title":"Configure the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/configure-the-live-backup-environment","siteSpaceId":"sitesp_bcGJl","description":"Configure a live backup environment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"8ZThg98GtYhiC4y7E5ZH","title":"Transition an Active Server to Standby Mode","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-an-active-server-to-standby-mode","siteSpaceId":"sitesp_bcGJl","description":"Transition an active server to standby mode in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"jqX2MolFhezjwUlriWxE","title":"Transition a Standby Server to Active Mode","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-a-standby-server-to-active-mode","siteSpaceId":"sitesp_bcGJl","description":"Transition a standby server to active mode in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"almtYpao8vMpef1k1yKY","title":"Transition Between DR States Through the Configuration File","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/transition-between-dr-states-through-the-configuration-file","siteSpaceId":"sitesp_bcGJl","description":"Transition disaster recovery states using configuration files in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"EezNWrOFtBj6QJdVNjen","title":"Upgrade the Live Backup Environment","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_bcGJl","description":"Upgrade the live backup environment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"otFCnKkICqjC4ar33GwC","title":"Engines and Disaster Recovery Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/engines-and-disaster-recovery-troubleshooting","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot engine failover during disaster recovery in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"io1sRM2IYOUDbFfw4Y18","title":"Back up the Database","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/back-up-the-database","siteSpaceId":"sitesp_bcGJl","description":"Back up the database in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"6u9bMP15KGWa5q1IVwr3","title":"Restore the Database","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-the-database","siteSpaceId":"sitesp_bcGJl","description":"Restore the database from a backup in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"IPemAUQese9dOL7rAsOH","title":"Restore a Partition","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/restore-a-partition","siteSpaceId":"sitesp_bcGJl","description":"Restore database partitions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"oObgVlYOTWA4R24JpJat","title":"Troubleshoot Live Backup","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/disaster-recovery-and-live-backup/troubleshoot-live-backup","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot live backup scenarios in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Disaster Recovery and Live Backup"}]},{"id":"FwrS3WkTV0S44P2vSeHT","title":"Users and Roles","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles","siteSpaceId":"sitesp_bcGJl","description":"Manage users, roles, and authentication in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"huwOGogbzDG8JL3A4Hdc","title":"Users and Roles Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/users-and-roles-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand user and role management in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"PziYGI0lliLoUw0u3sfH","title":"Roles in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Manage roles and permissions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"yRtA9qBQm0bACVQOYVwF","title":"Pre-set Query per Role","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/pre-set-query-per-role","siteSpaceId":"sitesp_bcGJl","description":"Configure pre-set queries for roles in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"At0w1Yxk7gMS5ZSjV1B6","title":"Define a Role","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/define-a-role","siteSpaceId":"sitesp_bcGJl","description":"Define a role and its permissions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"JKh0qVeZxarsWvyXlGrG","title":"Role-based Permission Levels","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/role-based-permission-levels","siteSpaceId":"sitesp_bcGJl","description":"Understand role-based permission levels in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"bq88KeKDBZEnO7vCAyxf","title":"Shift Management","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management","siteSpaceId":"sitesp_bcGJl","description":"Manage user shifts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"}]},{"id":"lAXmn9dH3Hf5EiGvliPj","title":"Managing Shifts","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/roles-in-cortex-xsoar/shift-management/managing-shifts","siteSpaceId":"sitesp_bcGJl","description":"Manage shift schedules in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Roles in Cortex XSOAR"},{"label":"Shift Management"}]},{"id":"SxmWF62sIbeRfZNA0qFn","title":"User Management","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management","siteSpaceId":"sitesp_bcGJl","description":"Invite and manage users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"bQb7Nn9wXokFrExdoffj","title":"User Invitations","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations","siteSpaceId":"sitesp_bcGJl","description":"Manage user invitations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"iKkL20otRFkH34l0SATR","title":"Invite a User","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/user-invitations/invite-a-user","siteSpaceId":"sitesp_bcGJl","description":"Invite a user in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"User Invitations"}]},{"id":"A7hF1IqRW6XaYWsJ2C3f","title":"Set the User as Default Administrator","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/set-the-user-as-default-administrator","siteSpaceId":"sitesp_bcGJl","description":"Set a user as the default administrator in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"lgJiYp9rtaiC94euMEL2","title":"Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users","siteSpaceId":"sitesp_bcGJl","description":"Configure self-service read-only users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"edzFyKO5HhUvTwia6QP8","title":"Configure the Server for Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/configure-the-server-for-self-service-read-only-users","siteSpaceId":"sitesp_bcGJl","description":"Configure self-service read-only users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"LmNNTjMyMBeyXvqfewq8","title":"Create the Self-Service Read-Only Users","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-self-service-read-only-users","siteSpaceId":"sitesp_bcGJl","description":"Create self-service read-only users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"lAiyxK6cfpjesSBto6pH","title":"Create the Read-Only Dashboard","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-dashboard","siteSpaceId":"sitesp_bcGJl","description":"Create a read-only dashboard in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"mshI9VaYLkV42f8yT38y","title":"Create the Read-Only Incident Type and Layout","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/self-service-read-only-users/create-the-read-only-incident-type-and-layout","siteSpaceId":"sitesp_bcGJl","description":"Create read-only incident types and layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"},{"label":"Self-Service Read-Only Users"}]},{"id":"ROnAfcDbfwM6jdfgqn4Y","title":"Disable a User","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/disable-a-user","siteSpaceId":"sitesp_bcGJl","description":"Disable a user in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"tktvpxNSmDlDwe6PzQkR","title":"Remove a User","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/remove-a-user","siteSpaceId":"sitesp_bcGJl","description":"Remove a user in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"kNOR62QLQbIqIf4Ubb9H","title":"Clear Users Data Using the CLI","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-the-cli","siteSpaceId":"sitesp_bcGJl","description":"Clear user data with the CLI in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"UhLQdvpg2TCLQ1sFYVcV","title":"Clear Users Data Using a Playbook","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/clear-users-data-using-a-playbook","siteSpaceId":"sitesp_bcGJl","description":"Clear user data with a playbook in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"drX3P67NWfjyn9soqbya","title":"Configure Users Data Using Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/configure-users-data-using-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Configure user data with server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"O7Rbyb060zCBSGOD0tjX","title":"User Settings and Preferences","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/user-settings-and-preferences","siteSpaceId":"sitesp_bcGJl","description":"Manage user settings and preferences in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"eRVvO80z0lEv4bjHkdKe","title":"Configure User Settings","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/configure-user-settings","siteSpaceId":"sitesp_bcGJl","description":"Configure user settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"BKlTzL5PNT4GyfKyB7zR","title":"Manually Refresh the Number of Licenses in Use","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/user-management/manually-refresh-the-number-of-licenses-in-use","siteSpaceId":"sitesp_bcGJl","description":"Refresh license usage manually in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"User Management"}]},{"id":"12Q2GKQc69ZBk2qTTR56","title":"Integration Permissions","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/integration-permissions","siteSpaceId":"sitesp_bcGJl","description":"Assign integration command permissions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"8hNqzpN3HE2wMBCdWG9i","title":"Password Policy","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/password-policy","siteSpaceId":"sitesp_bcGJl","description":"Configure password policies in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"UPRUE5sHhOaw3bLbj5tl","title":"Create a Password Policy","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/password-policy/create-a-password-policy","siteSpaceId":"sitesp_bcGJl","description":"Create a password policy in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"ro5lRtW94k3fBFjt7u7t","title":"Edit a Default Password Policy","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy","siteSpaceId":"sitesp_bcGJl","description":"Edit the default password policy in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"6SQwLv0jcIVGHgbsJKzU","title":"Default Password Policy Keys","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/password-policy/edit-a-default-password-policy/default-password-policy-keys","siteSpaceId":"sitesp_bcGJl","description":"Reference default password policy keys in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"},{"label":"Edit a Default Password Policy"}]},{"id":"Uix8PlKBYtyCWntxTPtj","title":"Change the Administrator Password","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/password-policy/change-the-administrator-password","siteSpaceId":"sitesp_bcGJl","description":"Change the administrator password in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Password Policy"}]},{"id":"roTMXuD3ABOACsPr15Jb","title":"Authenticate Users with SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0","siteSpaceId":"sitesp_bcGJl","description":"Authenticate users with SAML 2.0 in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"QIH01fOGXkquhpJl5Wtb","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_bcGJl","description":"Set up Okta SAML authentication in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"UMfEH28PqFBRXujGDgFK","title":"Create Okta Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/create-okta-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_bcGJl","description":"Create Okta groups for users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"E2hoAxAfH2oRs7QDiWxL","title":"Define the Okta Application to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Define an Okta application for Cortex XSOAR 6.12 authentication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"wjYLQyq4tR5twaKSITrA","title":"SAML Settings for the Okta Application","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/define-the-okta-application-to-authenticate-cortex-xsoar/saml-settings-for-the-okta-application","siteSpaceId":"sitesp_bcGJl","description":"Configure SAML settings for an Okta application in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Define the Okta Application to authenticate Cortex XSOAR"}]},{"id":"13HwmaWUUzwGQWNUVaPI","title":"Configure the SAML 2.0 Integration for Okta","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta","siteSpaceId":"sitesp_bcGJl","description":"Configure the Okta SAML 2.0 integration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"DMhbRykWymmvQQNfdqdV","title":"SAML 2.0 Okta Parameters","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-okta/saml-2.0-okta-parameters","siteSpaceId":"sitesp_bcGJl","description":"Reference Okta SAML 2.0 parameters in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Okta"}]},{"id":"YYYVnxn2GSBVcDUu3Wjp","title":"Map Okta Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-okta-as-the-identity-provider-using-saml-2.0/map-okta-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_bcGJl","description":"Map Okta groups to roles in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up Okta as the Identity Provider Using SAML 2.0"}]},{"id":"AaLTMLFI1hoo7OZ1gkT3","title":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_bcGJl","description":"Set up Microsoft Entra ID SAML authentication in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"vT22KDy0EyJjlH4KPoeU","title":"Configure Microsoft Entra ID to Authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-microsoft-entra-id-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Configure Microsoft Entra ID authentication for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"eLW1UR7tUwxcz0e35xwi","title":"Configure the SAML 2.0 Integration for Microsoft Entra ID","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id","siteSpaceId":"sitesp_bcGJl","description":"Configure Microsoft Entra ID SAML integration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"}]},{"id":"HqaB6FFBKIetUStMwf9c","title":"SAML 2.0 Microsoft Entra ID Parameters","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-microsoft-entra-id/saml-2.0-microsoft-entra-id-parameters","siteSpaceId":"sitesp_bcGJl","description":"Reference Microsoft Entra ID SAML parameters in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set Up Microsoft Entra ID as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for Microsoft Entra ID"}]},{"id":"tIbHaqS8FuAgjTx6nCqA","title":"Set up ADFS as the Identity Provider Using SAML 2.0","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_bcGJl","description":"Set up ADFS SAML authentication in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"3i9JRs0dqRMuv6xFHDjd","title":"Create Relying Party Trust in ADFS","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/create-relying-party-trust-in-adfs","siteSpaceId":"sitesp_bcGJl","description":"Create an ADFS relying party trust for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"cxQpmIYGoWJkU3U0BedB","title":"Define the Claim Issuance Policy","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/define-the-claim-issuance-policy","siteSpaceId":"sitesp_bcGJl","description":"Define an ADFS claim issuance policy for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"cn7hUtRNlYYrGyBY94bp","title":"Configure the SAML 2.0 Integration for ADFS","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs","siteSpaceId":"sitesp_bcGJl","description":"Configure the ADFS SAML 2.0 integration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"HCp8VDSzUl7aY9NKFpuu","title":"SAML 2.0 ADFS Parameters","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/configure-the-saml-2.0-integration-for-adfs/saml-2.0-adfs-parameters","siteSpaceId":"sitesp_bcGJl","description":"Reference ADFS SAML 2.0 parameters in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"},{"label":"Configure the SAML 2.0 Integration for ADFS"}]},{"id":"92JZ5wCBzgFeU2I7grxy","title":"Map ADFS Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-adfs-as-the-identity-provider-using-saml-2.0/map-adfs-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_bcGJl","description":"Map ADFS groups to roles in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Set up ADFS as the Identity Provider Using SAML 2.0"}]},{"id":"V9xK8XZoKZzBpggYWpaC","title":"Duo for Single Sign-On","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on","siteSpaceId":"sitesp_bcGJl","description":"Configure Duo single sign-on in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"TAlnr9kuFopfhrew2cZz","title":"Create Duo Groups for Cortex XSOAR Users","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/create-duo-groups-for-cortex-xsoar-users","siteSpaceId":"sitesp_bcGJl","description":"Create Duo groups for users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"8jcIIsBfmDqAplUbneIa","title":"Define Duo to authenticate Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/define-duo-to-authenticate-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Define Duo authentication for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"jnMuIiEQqrcPjv095yNg","title":"Configure the SAML 2.0 Integration for Duo","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/configure-the-saml-2.0-integration-for-duo","siteSpaceId":"sitesp_bcGJl","description":"Configure the Duo SAML 2.0 integration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"cmD6sVWzgUa2C5QSUA2H","title":"Map Duo Groups to Cortex XSOAR Roles","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/duo-for-single-sign-on/map-duo-groups-to-cortex-xsoar-roles","siteSpaceId":"sitesp_bcGJl","description":"Map Duo groups to roles in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"},{"label":"Duo for Single Sign-On"}]},{"id":"e5nt6x1SQpEXe4awGgRU","title":"Change the Default Administrator to a SAML User","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/change-the-default-administrator-to-a-saml-user","siteSpaceId":"sitesp_bcGJl","description":"Change the default Cortex XSOAR 6.12 administrator to a SAML user.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"AXX3CKMxFYojSd3JEtAy","title":"Set Up SAML Logout","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-saml-2.0/set-up-saml-logout","siteSpaceId":"sitesp_bcGJl","description":"Set up SAML log out for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"},{"label":"Authenticate Users with SAML 2.0"}]},{"id":"aw2sxzFWrbos4MrK4sZm","title":"Set the Default Theme for New Users","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/set-the-default-theme-for-new-users","siteSpaceId":"sitesp_bcGJl","description":"Set the default theme for new users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"5IxucZZmQXWL5QYWP1pO","title":"Authenticate Users with Active Directory","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/users-and-roles/authenticate-users-with-active-directory","siteSpaceId":"sitesp_bcGJl","description":"Authenticate users with Active Directory in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Users and Roles"}]},{"id":"12jnyLPBepCfrVJs70zS","title":"Marketplace","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace","siteSpaceId":"sitesp_bcGJl","description":"Access Marketplace content and manage content packs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"tVQnxeNQRc8Hm59rINQJ","title":"Marketplace Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/marketplace-overview","siteSpaceId":"sitesp_bcGJl","description":"Explore and manage Marketplace content in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"iCLIBwLnxwbCm3iAgmNL","title":"Content Packs Support Types","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-packs-support-types","siteSpaceId":"sitesp_bcGJl","description":"Understand content pack support types in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"QUKOX2n6Lto2sAXdkSti","title":"Marketplace FAQs","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/marketplace-faqs","siteSpaceId":"sitesp_bcGJl","description":"Find Marketplace answers for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"jfEU2y6txT8uC0xSdjv6","title":"Search and Navigate in the Marketplace","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/search-and-navigate-in-the-marketplace","siteSpaceId":"sitesp_bcGJl","description":"Search and navigate Marketplace content in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"uF3m46yTay8lYECeUxNP","title":"Convert Existing Content to Content Pack Format","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/convert-existing-content-to-content-pack-format","siteSpaceId":"sitesp_bcGJl","description":"Convert existing content to content packs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"wsCoaA1eilrmG2LWY9Z7","title":"Use Cases","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/use-cases","siteSpaceId":"sitesp_bcGJl","description":"Explore Marketplace use cases in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"DaDWXJmmVvjHabYEO5u9","title":"Content Pack Installation","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-installation","siteSpaceId":"sitesp_bcGJl","description":"Install and manage content packs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"qarYtPSc4kcGxA35ttqG","title":"Install a Content Pack","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack","siteSpaceId":"sitesp_bcGJl","description":"Install Marketplace content packs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"54bdRdOB1fs03Mbdzt9V","title":"Set up Your Use Case with the Deployment Wizard","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-installation/install-a-content-pack/set-up-your-use-case-with-the-deployment-wizard","siteSpaceId":"sitesp_bcGJl","description":"Configure a use case with the Deployment Wizard in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"},{"label":"Install a Content Pack"}]},{"id":"I7gDidVElrXk6OfE3heq","title":"Update a Content Pack","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-installation/update-a-content-pack","siteSpaceId":"sitesp_bcGJl","description":"Update Marketplace content packs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"cbxX3RHcpnd6icgoH4p6","title":"Delete a Content Pack","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-installation/delete-a-content-pack","siteSpaceId":"sitesp_bcGJl","description":"Delete Marketplace content packs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"dlUQVSIfsSDCZ5dU5qhq","title":"Revert a Content Pack","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-installation/revert-a-content-pack","siteSpaceId":"sitesp_bcGJl","description":"Revert content packs to earlier versions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Installation"}]},{"id":"qv8MoBHC7hPQ0G9pbWlO","title":"Install a Content Pack Offline","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/install-a-content-pack-offline","siteSpaceId":"sitesp_bcGJl","description":"Install Marketplace content packs offline in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"W9UbReEHX96HOLuE2fy4","title":"Content Pack Update Notifications","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-update-notifications","siteSpaceId":"sitesp_bcGJl","description":"Enable content pack update notifications in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"K7Kln0DZS8TM7qsbjo7H","title":"Marketplace Troubleshooting","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/marketplace-troubleshooting","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot Marketplace issues in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"3kG2yPMVe2ZfgQl7pGd8","title":"Content Pack Contributions","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-contributions","siteSpaceId":"sitesp_bcGJl","description":"Contribute content packs to Marketplace in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"}]},{"id":"WKp9uhwDKr9rNJyxcAVZ","title":"Create a Content Pack","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-contributions/create-a-content-pack","siteSpaceId":"sitesp_bcGJl","description":"Create a content pack in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"jyqhhJHa1V9Rt2DL0Bc7","title":"Resubmit a Content Pack","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/marketplace/content-pack-contributions/resubmit-a-content-pack","siteSpaceId":"sitesp_bcGJl","description":"Resubmit a content pack in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Marketplace"},{"label":"Content Pack Contributions"}]},{"id":"CjV68bDwqZ1JaWrF10bJ","title":"Remote Repositories in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Configure and manage remote repositories in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"MQlD885K3WAL4ZywLir9","title":"Content Management in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/content-management-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Manage content development and CI/CD in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"Pj3UXdOmHgnOntIbvWg5","title":"Remote Repositories Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/remote-repositories-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand remote repositories in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"cE9lzC0GhlfTVVDnbQMg","title":"Configure a Remote Repository on a Development Machine","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_bcGJl","description":"Configure a development remote repository in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"KDR8QA5jvFySxtQ0cnwd","title":"Configure a Remote Repository on the Production Machine","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/configure-a-remote-repository-on-the-production-machine","siteSpaceId":"sitesp_bcGJl","description":"Configure a production remote repository in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"LqR56ZGktKSGJrfOTWqD","title":"Edit and Push Content to a Remote Repository","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_bcGJl","description":"Edit and push remote repository content in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"BWYHw5zJDCZXIAffL2RA","title":"Upgrade Remote Repositories from Versions 5.5 and below","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/upgrade-remote-repositories-from-versions-5.5-and-below","siteSpaceId":"sitesp_bcGJl","description":"Upgrade remote repositories for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"JZQKIM0qAJZbroQEzhmr","title":"Troubleshoot a Remote Repository Configuration","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot remote repository configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Remote Repositories in Cortex XSOAR"}]},{"id":"VrHlshHrVdZKsRIUmGxb","title":"Engines","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines","siteSpaceId":"sitesp_bcGJl","description":"Install and manage engines in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"}]},{"id":"cpUsZX6Mmvax7whCwWNZ","title":"Cortex XSOAR Engines Overview","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/cortex-xsoar-engines-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand engine architecture in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"oMKFeBZTMISZiph8qISu","title":"Engine Installation","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/engine-installation","siteSpaceId":"sitesp_bcGJl","description":"Review engine installation options in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"Chs2wwI5ZQ7IDkPQpbUe","title":"Install a Cortex XSOAR Engine","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine","siteSpaceId":"sitesp_bcGJl","description":"Install an engine in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"F1dG9s4K6snpnBTY5HT8","title":"Install a Signed Engine","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/engine-installation/install-a-signed-engine","siteSpaceId":"sitesp_bcGJl","description":"Install a signed engine in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"gjwWWJ6YuyMFu5XrU2uk","title":"Install a Cortex XSOAR Engine Offline","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine-offline","siteSpaceId":"sitesp_bcGJl","description":"Install an engine offline in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Engine Installation"}]},{"id":"fdtZdYli6eXM3FbtWIz2","title":"Use an Engine in an Integration","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_bcGJl","description":"Use an engine with an integration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"Rlzq9TY3mlKOZn29xdUg","title":"Run a Script using an Engine","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_bcGJl","description":"Run scripts using an engine in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"Xg8wivkItEQuw4K1Zwbq","title":"Manage Engines","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/manage-engines","siteSpaceId":"sitesp_bcGJl","description":"Manage engines and load-balancing groups in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"gvuugEZbAU5Q1JbDSs9H","title":"Configure Engines","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines","siteSpaceId":"sitesp_bcGJl","description":"Configure engines and their settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"nXR1QvzeM5VIG23KEfOb","title":"Edit the Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration","siteSpaceId":"sitesp_bcGJl","description":"Edit an engine configuration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"}]},{"id":"IPU5QTIQJOC7juJtcAtL","title":"Common Properties When Editing an Engine Configuration","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration/common-properties-when-editing-an-engine-configuration","siteSpaceId":"sitesp_bcGJl","description":"Configure common engine properties in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"},{"label":"Edit the Engine Configuration"}]},{"id":"q5cwwF4DqbL6v3yX0V87","title":"Configure the Engine to Use a Web Proxy","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration/common-properties-when-editing-an-engine-configuration/configure-the-engine-to-use-a-web-proxy","siteSpaceId":"sitesp_bcGJl","description":"Configure an engine web proxy in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"},{"label":"Edit the Engine Configuration"},{"label":"Common Properties When Editing an Engine Configuration"}]},{"id":"PpGNFi8spbsDRMv8xx18","title":"Configure the Engine to Call the Server Without Using a Proxy","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration/configure-the-engine-to-call-the-server-without-using-a-proxy","siteSpaceId":"sitesp_bcGJl","description":"Configure direct engine-server communication in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"},{"label":"Edit the Engine Configuration"}]},{"id":"O0pV91U05G0ZYGjdghUB","title":"Configure Access to Communication Tasks through an Engine","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration/configure-access-to-communication-tasks-through-an-engine","siteSpaceId":"sitesp_bcGJl","description":"Configure communication task access through an engine in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"},{"label":"Edit the Engine Configuration"}]},{"id":"PN3jI9ac0C0kLSSmxOxG","title":"Configure the Number of Workers for the Server","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration/configure-the-number-of-workers-for-the-server","siteSpaceId":"sitesp_bcGJl","description":"Configure server workers through an engine in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"},{"label":"Edit the Engine Configuration"}]},{"id":"AQ7wsiONK6oyZyw7hNuy","title":"Configure an Engine to Use Custom Certificates","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration/configure-an-engine-to-use-custom-certificates","siteSpaceId":"sitesp_bcGJl","description":"Configure custom certificates for an engine in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"},{"label":"Edit the Engine Configuration"}]},{"id":"ifQJXNqit4Q06K1RsrkG","title":"Notify Users When an Engine Disconnects","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/configure-engines/edit-the-engine-configuration/notify-users-when-an-engine-disconnects","siteSpaceId":"sitesp_bcGJl","description":"Configure engine disconnect notifications in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"},{"label":"Configure Engines"},{"label":"Edit the Engine Configuration"}]},{"id":"Nzbjy7d7Mi5sG51sCwbv","title":"Remove an Engine","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/remove-an-engine","siteSpaceId":"sitesp_bcGJl","description":"Remove an engine in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"NvQWHiwtJtnHOOzPteri","title":"Troubleshoot Cortex XSOAR Engines","pathname":"/xsoar-6-administrator-guide/6.12/onboard-cortex-xsoar/engines/troubleshoot-cortex-xsoar-engines","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot engines in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Onboard Cortex XSOAR"},{"label":"Engines"}]},{"id":"wAuyLvplnUJHrGyxwAja","title":"Customize and Configure Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Customize and configure your Cortex XSOAR 6.12 deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"}]},{"id":"8pSBwiN9p6MS0E5UN3Sa","title":"Incidents","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents","siteSpaceId":"sitesp_bcGJl","description":"Manage and investigate incidents in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"YMntc8Vo08iGnkIogctN","title":"Incident Lifecycle","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle","siteSpaceId":"sitesp_bcGJl","description":"Understand the incident lifecycle in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"2d3in5unF1VSEUS8LG4t","title":"Incident Context Data","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-context-data","siteSpaceId":"sitesp_bcGJl","description":"Manage incident context data in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"0Hk1pBemZRRePNUYUWdP","title":"Incident Customization","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization","siteSpaceId":"sitesp_bcGJl","description":"Customize incidents, fields, and layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"4tqFNNM2VdaKnpGKPyLG","title":"Create an Incident Type","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/create-an-incident-type","siteSpaceId":"sitesp_bcGJl","description":"Create an incident type in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"d0wi4nkk6BhpVUPVHUd5","title":"Customize Incident Layouts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/customize-incident-layouts","siteSpaceId":"sitesp_bcGJl","description":"Customize incident layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"nv7nzJvTBglbFveXtI6Z","title":"Incident Fields","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields","siteSpaceId":"sitesp_bcGJl","description":"Manage incident fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"}]},{"id":"GKjknXa4BsDvEkb28geT","title":"Create a Custom Incident Field","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-custom-incident-field","siteSpaceId":"sitesp_bcGJl","description":"Create a custom incident field in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"5NiD1H1NvcpRk2qQQ2pu","title":"Create a Grid Field for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-grid-field-for-an-incident-type","siteSpaceId":"sitesp_bcGJl","description":"Create a grid field for an incident type in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"jQpxXD0mL5LbwaQjM4QO","title":"Use Scripts with the Grid Field","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/use-scripts-with-the-grid-field","siteSpaceId":"sitesp_bcGJl","description":"Use scripts with grid fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"TOqZISghBFSRyTiTCwvT","title":"Incident Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/incident-field-trigger-scripts","siteSpaceId":"sitesp_bcGJl","description":"Configure incident field trigger scripts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"k1CmlkL5oKd0g6Lf4lEI","title":"Troubleshoot Closing Case Incident after Changing Field Type","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/troubleshoot-closing-case-incident-after-changing-field-type","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot case closure after field changes in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"aZQXSQn5d9EzHeYz7zae","title":"Create an Evidence Field","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-an-evidence-field","siteSpaceId":"sitesp_bcGJl","description":"Create an evidence field in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"Incident Customization"},{"label":"Incident Fields"}]},{"id":"dDzxh0vvckQ3JfLwpRP3","title":"Incident De-Duplication","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication","siteSpaceId":"sitesp_bcGJl","description":"De-duplicate incidents in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"CweHReCkThnkalWV4vZi","title":"Pre-Process Rules","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules","siteSpaceId":"sitesp_bcGJl","description":"Create incident pre-process rules in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"xF5Zx46FFf5ZZCLCtz0e","title":"Post Processing for Incidents","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents","siteSpaceId":"sitesp_bcGJl","description":"Configure incident post-processing in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"aHY0IgGHf8ChB0YHbvF8","title":"War Room Overview","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview","siteSpaceId":"sitesp_bcGJl","description":"Investigate incidents with the War Room in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"hCoEtWp0IjiF1ZAdAxuB","title":"Schedule a Command","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/schedule-a-command","siteSpaceId":"sitesp_bcGJl","description":"Schedule a command in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"UU7pLfnaHjCwaAXGA6VK","title":"Add a Custom Widget in the War Room","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/add-a-custom-widget-in-the-war-room","siteSpaceId":"sitesp_bcGJl","description":"Add a custom War Room widget in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"u6AC0EztwOd72Tevf7wZ","title":"War Room Indexing","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing","siteSpaceId":"sitesp_bcGJl","description":"Configure War Room indexing in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"}]},{"id":"qW8dGBJzj9YL2IfvqSOD","title":"Index War Room Entries Using Bolt DB","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-bolt-db","siteSpaceId":"sitesp_bcGJl","description":"Index War Room entries with Bolt DB in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"7e6zUQRD5rtT4H4LeGsi","title":"Index War Room Entries Using Elasticsearch","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-elasticsearch","siteSpaceId":"sitesp_bcGJl","description":"Index War Room entries with Elasticsearch in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"},{"label":"War Room Overview"},{"label":"War Room Indexing"}]},{"id":"szYanwjQ9UlqFtszPIgo","title":"Incident Access Control Configuration","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration","siteSpaceId":"sitesp_bcGJl","description":"Configure incident access control in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"HiB2qDeqm7jx348rGALl","title":"Classification and Mapping","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping","siteSpaceId":"sitesp_bcGJl","description":"Classify and map incident data in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"iPpYjdEs4fhCEltlgR06","title":"Incident Mirroring","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-mirroring","siteSpaceId":"sitesp_bcGJl","description":"Mirror incidents with integrations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"XDN6L8zkfIVZ8p0DQAG3","title":"Customize Incident Close Reasons","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/customize-incident-close-reasons","siteSpaceId":"sitesp_bcGJl","description":"Customize incident close reasons in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"AlEedjkblQ855yVOC9ro","title":"Change the Display Name of Security Incidents","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/change-the-display-name-of-security-incidents","siteSpaceId":"sitesp_bcGJl","description":"Change security incident display names in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Incidents"}]},{"id":"dk8RQwuXVtpY04TwSVyt","title":"Playbooks","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks","siteSpaceId":"sitesp_bcGJl","description":"Build security workflows with playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"tB0Mu3xYbyDZtDABunkC","title":"What Are Playbooks?","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/what-are-playbooks","siteSpaceId":"sitesp_bcGJl","description":"Understand playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"lUTdjfPZdt3ABlROzZWS","title":"Playbook Development","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-development","siteSpaceId":"sitesp_bcGJl","description":"Develop playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"9vM02SZcOxqOH8TccTCz","title":"Configure IoT Security Playbooks","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-iot-security-playbooks","siteSpaceId":"sitesp_bcGJl","description":"Configure IoT Security playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"5E8kjKIlGcVSaCBwzHAj","title":"Manage Playbook Settings","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings","siteSpaceId":"sitesp_bcGJl","description":"Manage playbook settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"OZwSXupIGPbWrXXqEBE9","title":"Version Control","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/version-control","siteSpaceId":"sitesp_bcGJl","description":"Manage playbook versions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"ziBdHIM2xzAjB7gNoPba","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields","siteSpaceId":"sitesp_bcGJl","description":"Configure playbook task fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"pDTmYP8RmRJDskvbTYkv","title":"Create Section Headers","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-section-headers","siteSpaceId":"sitesp_bcGJl","description":"Create playbook section headers in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"oVkD9ldA4cJ7pNlAdwCp","title":"Create a Conditional Task","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-a-conditional-task","siteSpaceId":"sitesp_bcGJl","description":"Create conditional playbook tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"0dDthSInjG1Cb8bPSsCj","title":"Communication Tasks","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks","siteSpaceId":"sitesp_bcGJl","description":"Configure communication tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"}]},{"id":"K57DIJ6ll1OFBJEntTS8","title":"Create an Ask Task","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task","siteSpaceId":"sitesp_bcGJl","description":"Create Ask tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"WGbHPsXOsjlC7SKWL91P","title":"Ask Task Examples","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/ask-task-examples","siteSpaceId":"sitesp_bcGJl","description":"Review Ask task examples in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"Uj4zW57jdgq1pBcmbS3a","title":"Customize an Ask Task","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/customize-an-ask-task","siteSpaceId":"sitesp_bcGJl","description":"Customize Ask tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create an Ask Task"}]},{"id":"Q8eafUO79FCBxlgJGL8e","title":"Create a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task","siteSpaceId":"sitesp_bcGJl","description":"Create data collection tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"u3Dr7k14e77gm73TLjcv","title":"Data Collection Task Examples","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/data-collection-task-examples","siteSpaceId":"sitesp_bcGJl","description":"Review data collection task examples in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"HSvmXQapm67hmA0NC2uo","title":"Customize a Data Collection Task","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/customize-a-data-collection-task","siteSpaceId":"sitesp_bcGJl","description":"Customize data collection tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"},{"label":"Create a Data Collection Task"}]},{"id":"L4YRLB1yTcqfV8jF15fg","title":"Customize the SOC Name","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/customize-the-soc-name","siteSpaceId":"sitesp_bcGJl","description":"Customize the SOC name in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"xS311u6PnuxZlqJLd0t9","title":"Create Communication Task Authentication","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-communication-task-authentication","siteSpaceId":"sitesp_bcGJl","description":"Configure communication task authentication in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"BWKRtSQtZXyHmIAIwFio","title":"Add Ad Hoc Tasks to a Work Plan","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/add-ad-hoc-tasks-to-a-work-plan","siteSpaceId":"sitesp_bcGJl","description":"Add ad hoc Work Plan tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"LMAcOOgcj8kJQOcZHWhw","title":"Handle Errors in a Playbook","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/handle-errors-in-a-playbook","siteSpaceId":"sitesp_bcGJl","description":"Handle playbook errors in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"yoM2SCLGSEUMsIGDMqqP","title":"Playbook Task Fields","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/playbook-task-fields","siteSpaceId":"sitesp_bcGJl","description":"Reference playbook task fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Playbook Task Fields"},{"label":"Communication Tasks"}]},{"id":"iEFomR6EblxmIua8wxyT","title":"Playbook Inputs and Outputs","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs","siteSpaceId":"sitesp_bcGJl","description":"Configure playbook inputs and outputs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"uDbPNJWzWGiepOiQUInf","title":"Extend Context","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context","siteSpaceId":"sitesp_bcGJl","description":"Extend context data in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"IiVbYnb0w8OWr9axeABd","title":"Filters and Transformers","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers","siteSpaceId":"sitesp_bcGJl","description":"Use filters and transformers in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"pzFitgHJUAzaG9lQwQGU","title":"Create Filters and Transformers in a Playbook","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook","siteSpaceId":"sitesp_bcGJl","description":"Create playbook filters and transformers in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"dyZ6U2z0XuKtD0Spki5D","title":"Create a Filter Example","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-example","siteSpaceId":"sitesp_bcGJl","description":"Review a filter example in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"tsRAS4DSkif8CvNbsFOc","title":"Create a Filter (Advanced) Example","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-advanced-example","siteSpaceId":"sitesp_bcGJl","description":"Review an advanced filter example in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Create Filters and Transformers in a Playbook"}]},{"id":"gc18QaDKTPVbm1PqmeBc","title":"Filter Operators","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators","siteSpaceId":"sitesp_bcGJl","description":"Reference filter operators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"}]},{"id":"yvm5I0U6eTRFOkEaRysJ","title":"Built-in Filters","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/built-in-filters","siteSpaceId":"sitesp_bcGJl","description":"Reference built-in filters in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"WkTpY8csuagJJvLN6HB0","title":"Transformers Operators","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/transformers-operators","siteSpaceId":"sitesp_bcGJl","description":"Reference transformer operators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"EfTasphIScLQ01iQwfEZ","title":"Create Custom Filter and Transformer Operators","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/create-custom-filter-and-transformer-operators","siteSpaceId":"sitesp_bcGJl","description":"Create custom filter and transformer operators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"},{"label":"Filters and Transformers"},{"label":"Filter Operators"}]},{"id":"iy0xkMaLspR0kFd7pogZ","title":"Automations","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations","siteSpaceId":"sitesp_bcGJl","description":"Create and manage automations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"SJPE99msczw8fpqtkLdU","title":"Configure a Sub-playbook Loop","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-a-sub-playbook-loop","siteSpaceId":"sitesp_bcGJl","description":"Configure sub-playbook loops in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"TMBBBUdUPpCblQh9VrcM","title":"Playbook Polling","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-polling","siteSpaceId":"sitesp_bcGJl","description":"Configure playbook polling in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"Xz2dwJkOlQHstI25mabp","title":"Create Incident Fields in a Playbook","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/create-incident-fields-in-a-playbook","siteSpaceId":"sitesp_bcGJl","description":"Create incident fields with playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"8uXesODswPGauzyFRhPu","title":"Playbook Testing","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing","siteSpaceId":"sitesp_bcGJl","description":"Test playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"urmAWDR1xHYn19j6d5nj","title":"Best Practices","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/best-practices","siteSpaceId":"sitesp_bcGJl","description":"Apply playbook best practices in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Playbooks"}]},{"id":"vSDkUpHpgHzO3dyONJHQ","title":"Jobs","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs","siteSpaceId":"sitesp_bcGJl","description":"Configure and manage jobs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"bJnShlhoiSeRjoomxjN4","title":"Create a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-time-triggered-job","siteSpaceId":"sitesp_bcGJl","description":"Create time-triggered jobs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"fJZ8bvIWCbzV3tg1kpGj","title":"Create a Job Triggered by a Delta in Feed","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-feed","siteSpaceId":"sitesp_bcGJl","description":"Create feed delta-triggered jobs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"fXn0IuuC9e0kzLs1hdPZ","title":"Time Triggered Job Parameters","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/time-triggered-job-parameters","siteSpaceId":"sitesp_bcGJl","description":"Reference time-triggered job parameters in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"7gdpsFqkkuwj9NdClypi","title":"Process Indicators Using a Job Triggered By Delta","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/process-indicators-using-a-job-triggered-by-delta","siteSpaceId":"sitesp_bcGJl","description":"Process indicators with delta-triggered jobs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"xq9fdeDuk9rkZZsNk0md","title":"Add Indicators to SIEM Using a Time Triggered Job","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/add-indicators-to-siem-using-a-time-triggered-job","siteSpaceId":"sitesp_bcGJl","description":"Send indicators to a SIEM with jobs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Jobs"}]},{"id":"VrdKWj60k6to9UePPSmN","title":"Work with SLAs","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas","siteSpaceId":"sitesp_bcGJl","description":"Create and manage SLAs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"Za5X1pDt5XHcheA9VfzW","title":"SLA Overview","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/sla-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand SLA fields and timers in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"5w3Mhe1eoYeT28c1HF6H","title":"Create an SLA Field","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-field","siteSpaceId":"sitesp_bcGJl","description":"Create SLA fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"iVk9FiEs6hsRYWnPLdF4","title":"Manage SLA and Timer Fields in an Incident","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/manage-sla-and-timer-fields-in-an-incident","siteSpaceId":"sitesp_bcGJl","description":"Manage incident SLA and timer fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"FeOpCAm7xwsZknUnaNvi","title":"Create an SLA Trigger","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-trigger","siteSpaceId":"sitesp_bcGJl","description":"Create SLA triggers in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"LY6finUI86fgLokpnmqQ","title":"Customize SLA Scripts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/customize-sla-scripts","siteSpaceId":"sitesp_bcGJl","description":"Customize SLA scripts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"OJjba8mc4Bpc2cy8wK5Y","title":"Search Incidents using SLA and Timer Fields","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/search-incidents-using-sla-and-timer-fields","siteSpaceId":"sitesp_bcGJl","description":"Search incidents using SLA and timer fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"167WeHkmpe4LhedZI6nv","title":"Configure the Global Risk Threshold","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/configure-the-global-risk-threshold","siteSpaceId":"sitesp_bcGJl","description":"Configure the global SLA risk threshold in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Work with SLAs"}]},{"id":"GG6b2g3wa2eBdnfVtY2C","title":"Machine Learning","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning","siteSpaceId":"sitesp_bcGJl","description":"Understand machine learning models in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"G0nC4HL4VtqRXZwG3yNY","title":"Machine Learning Capabilities","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-capabilities","siteSpaceId":"sitesp_bcGJl","description":"Explore machine learning capabilities in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"vDp4339cqvVMWUrR5ATW","title":"Machine Learning Models","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-models","siteSpaceId":"sitesp_bcGJl","description":"Use machine learning models for phishing incidents in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"fZd4e4DHRLjZWYj1xuHG","title":"Use the Phishing Classifier in Production","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/use-the-phishing-classifier-in-production","siteSpaceId":"sitesp_bcGJl","description":"Use the phishing classifier in production in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"n8fC7BXaH0tzTa09fa5f","title":"Create a Machine Learning Model","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/create-a-machine-learning-model","siteSpaceId":"sitesp_bcGJl","description":"Create phishing classification models in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"rwUbFMoF9n8GNEj8FKcV","title":"Phishing Classifier Demo","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/phishing-classifier-demo","siteSpaceId":"sitesp_bcGJl","description":"Run the phishing classifier demonstration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"uwmnBXyfXJXUAzXyW9nB","title":"Train a Phishing Classifier on Non-English Languages","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/train-a-phishing-classifier-on-non-english-languages","siteSpaceId":"sitesp_bcGJl","description":"Train phishing classifiers for non-English emails in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"OYW6vsvOUaEW7ppYtabH","title":"Additional Machine Learning Scripts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/additional-machine-learning-scripts","siteSpaceId":"sitesp_bcGJl","description":"Use additional machine learning scripts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Machine Learning"}]},{"id":"ZNRF1G6QbxvtT2o4zMzO","title":"Lists","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/lists","siteSpaceId":"sitesp_bcGJl","description":"Create and manage lists in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"v731Iu3pIHkusS6HIYsn","title":"Work With Lists","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists","siteSpaceId":"sitesp_bcGJl","description":"Manage lists for automations and playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"HwanHsFpvRVxYHTQp2ke","title":"Work with JSON Lists","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists/work-with-json-lists","siteSpaceId":"sitesp_bcGJl","description":"Work with JSON lists in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"},{"label":"Work With Lists"}]},{"id":"KnFfFbnEcIU7T9OSi6cM","title":"Create a List","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/create-a-list","siteSpaceId":"sitesp_bcGJl","description":"Create lists for scripts and playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"rgZHrgBNlwdSOdFZ96gi","title":"Set the List Separator Character","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/set-the-list-separator-character","siteSpaceId":"sitesp_bcGJl","description":"Set list separator characters in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"SL3HCJRi31bnZ0OjL8Yd","title":"Transform a List into an Array","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/transform-a-list-into-an-array","siteSpaceId":"sitesp_bcGJl","description":"Transform lists into arrays in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Lists"}]},{"id":"ubPDfCg7Z6r0ZBB08StK","title":"Indicators","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators","siteSpaceId":"sitesp_bcGJl","description":"Manage indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"msnrkKOdDMIosyEqrGCD","title":"Indicator Concepts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-concepts","siteSpaceId":"sitesp_bcGJl","description":"Understand indicator concepts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"rDhzsWpSfZZJ5a0wOPS0","title":"Indicator Verdict","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-verdict","siteSpaceId":"sitesp_bcGJl","description":"Understand indicator verdicts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"PjOe2jYhB0YMhGULxgLJ","title":"Indicator Ingestion","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-ingestion","siteSpaceId":"sitesp_bcGJl","description":"Ingest indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"DyO4x88vtsmercF9hfwm","title":"Indicator Customization","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization","siteSpaceId":"sitesp_bcGJl","description":"Customize indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"1lg86EL6s9GLTlqWAKql","title":"Indicator Types","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator types in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"54xuSivE4lsZZgveR3jn","title":"File Indicators","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_bcGJl","description":"Manage file indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"FdJWT9N7pHnnVnIU03Va","title":"File Indicator Merging Strategy","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators/file-indicator-merging-strategy","siteSpaceId":"sitesp_bcGJl","description":"Understand file indicator merging in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"},{"label":"File Indicators"}]},{"id":"7lQfMGci4V89A1alOmL7","title":"Create an Indicator Type","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_bcGJl","description":"Create indicator types in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"1gMzAK9K8dyA1wDq8xvE","title":"Indicator Type Profile","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator type profiles in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"H1JoIBZ3rqLNsAXFusWP","title":"Map Custom Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_bcGJl","description":"Map custom indicator fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"7vdwXpSgd9X91plQW0pl","title":"Formatting Scripts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_bcGJl","description":"Format indicator values in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"N2Ck00td7cXD7Cdp2PrR","title":"Enhancement Scripts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator enhancement scripts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"Jng7iQAtckRw8FdtLAhZ","title":"Reputation Scripts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator reputation scripts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"z1jhf1wn0rV3gJSfYvje","title":"Reputation Commands","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator reputation commands in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"6lymo2pboXWQMwdenBAK","title":"Indicator Fields","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"beZP4alQvucQZiS2aP1a","title":"Create a Custom Indicator Field","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_bcGJl","description":"Create custom indicator fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"T1BkO3aBbsg2P2UGJIiH","title":"Configure the HTML Field","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field/configure-the-html-field","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator HTML fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"},{"label":"Create a Custom Indicator Field"}]},{"id":"6ciXs5JaGCMSD9yp3tDs","title":"Indicator Field Trigger Scripts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_bcGJl","description":"Run indicator field trigger scripts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"2WQJy98qButjXeSoujWv","title":"Indicator Layouts","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_bcGJl","description":"Customize indicator layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"}]},{"id":"BtQzSkZ4u4fI4r0yfVJL","title":"Customize an Indicator Type Layout","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_bcGJl","description":"Customize indicator type layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"5kzrUztxu2lxsjXoW3Hx","title":"Add a Script in the Indicator Layout","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_bcGJl","description":"Add scripts to indicator layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"Tr5r6ecbqFXK9NMPiRN8","title":"Indicator Extraction","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction","siteSpaceId":"sitesp_bcGJl","description":"Extract indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"9eQkWvsg8plfxsjNzzkG","title":"Indicator Extraction Modes","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_bcGJl","description":"Understand indicator extraction modes in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"Qg6UXHMhMK16aGrSVvwh","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_bcGJl","description":"Configure incident indicator extraction rules in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"yeeVcuTzWnDQ70fqB8uD","title":"Run Indicator Extraction in the CLI","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_bcGJl","description":"Run indicator extraction from the CLI in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"DAjawY5yrT93PQRPsBCM","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator extraction for playbook tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"irE5fdCNwDgiw42MlaEj","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_bcGJl","description":"Disable indicator extraction in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"},{"label":"Indicator Extraction"}]},{"id":"Dfq6xVpJn7ch9zWA2cOm","title":"Indicator Expiration","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-expiration","siteSpaceId":"sitesp_bcGJl","description":"Configure indicator expiration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"hRNeh56cmjVYfkOitVEK","title":"Feed Integrations","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations","siteSpaceId":"sitesp_bcGJl","description":"Configure feed integrations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Indicators"}]},{"id":"hbz7w2uIS4Q1yAblZdv8","title":"Dashboards","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards","siteSpaceId":"sitesp_bcGJl","description":"Create, edit, and share dashboards in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"HuWkgIvjOljKOzPemLLR","title":"Dashboard Overview","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/dashboard-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand dashboards and widgets in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"rBmdlJP5RQHyXa3EjS03","title":"Create a Dashboard","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/create-a-dashboard","siteSpaceId":"sitesp_bcGJl","description":"Create and customize dashboards in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"9VHX5UzouRhqTNrtW9vh","title":"Add a Widget to a Dashboard","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/add-a-widget-to-a-dashboard","siteSpaceId":"sitesp_bcGJl","description":"Add and configure dashboard widgets in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"rLLovEw1FJwI5z8vC6jj","title":"Share a Dashboard","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/share-a-dashboard","siteSpaceId":"sitesp_bcGJl","description":"Share dashboards with users by role in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"8GeAk9bH8Wt7vYRWQKCs","title":"Edit a Dashboard","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/edit-a-dashboard","siteSpaceId":"sitesp_bcGJl","description":"Edit dashboards and widgets in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Dashboards"}]},{"id":"JPxQEj4xHUQ5oS3wM9NW","title":"Reports","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports","siteSpaceId":"sitesp_bcGJl","description":"Create, edit, and customize reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"ls1hrlj0yz8NW55Ic877","title":"Reports Overview","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/reports-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"g34lS2XLxyMw4OQUXnLG","title":"Create a Report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-a-report","siteSpaceId":"sitesp_bcGJl","description":"Create and customize reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"uFnuaeSFGdvJZnBgqj5x","title":"Schedule a report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/schedule-a-report","siteSpaceId":"sitesp_bcGJl","description":"Schedule reports and email delivery in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"Nz8rv8qr7ciPioOtuTr1","title":"Customize the Email When Sending a Report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/customize-the-email-when-sending-a-report","siteSpaceId":"sitesp_bcGJl","description":"Customize report emails in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"sZr77K8sPYMY339NZll6","title":"Create an Incident Summary Report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-an-incident-summary-report","siteSpaceId":"sitesp_bcGJl","description":"Create incident summary reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"eF6T0iaPQPMewxEDbTtB","title":"Select and Customize Sections to Export to a Summary Report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/select-and-customize-sections-to-export-to-a-summary-report","siteSpaceId":"sitesp_bcGJl","description":"Select summary report sections in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"efxb2tWixyU6Mux7rFJe","title":"Add a Widget to a Report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/add-a-widget-to-a-report","siteSpaceId":"sitesp_bcGJl","description":"Add widgets to reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"vpOp8KVmoV5g3VaNTFr6","title":"Edit a report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/edit-a-report","siteSpaceId":"sitesp_bcGJl","description":"Edit report widgets, layouts, and output types in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"UdGwvrAUFjrLBxOGexe2","title":"Change the Report Logo","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/change-the-report-logo","siteSpaceId":"sitesp_bcGJl","description":"Change report logos in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"25WWmsGun4YW7MEpbdXh","title":"Configure the Time Zone and Format in a Report","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/configure-the-time-zone-and-format-in-a-report","siteSpaceId":"sitesp_bcGJl","description":"Configure report time zones and formats in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"f56LPLOVc0aEnEsRplLh","title":"Troubleshoot Reports","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/troubleshoot-reports","siteSpaceId":"sitesp_bcGJl","description":"Troubleshoot reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Reports"}]},{"id":"ji2BDmGQx4aIm8sf7Rr9","title":"Widgets","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets","siteSpaceId":"sitesp_bcGJl","description":"Create and edit widgets in Cortex XSOAR 6.12 for reports and dashboards.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"e0NIqbRpHKSRQkfO1UOe","title":"Widgets Overview","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/widgets-overview","siteSpaceId":"sitesp_bcGJl","description":"Understand widget creation and usage in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"XPeJFpkknoyEdVtOka3Z","title":"Create a Widget using the Widget Builder","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-widget-using-the-widget-builder","siteSpaceId":"sitesp_bcGJl","description":"Create widgets with Widget Builder in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"o2bfyL8Axh07x8SB0vgx","title":"Create a Custom Widget Using a JSON File","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-a-json-file","siteSpaceId":"sitesp_bcGJl","description":"Create custom JSON widgets in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"j74jvT53bEwr3WjZs8U9","title":"Create a Custom Widget Using an Automation Script","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-an-automation-script","siteSpaceId":"sitesp_bcGJl","description":"Create automation-based custom widgets in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"HnHlofIlyzqKUTRuuufO","title":"Edit a Widget","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/edit-a-widget","siteSpaceId":"sitesp_bcGJl","description":"Edit widgets in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"4ssbvHNBrtfirDAZCri7","title":"Create a Used Percentage Widget for a Disk Partition","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-used-percentage-widget-for-a-disk-partition","siteSpaceId":"sitesp_bcGJl","description":"Create disk-partition usage widgets in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"2ZGoFmpvYqDjwKLQSDf5","title":"Saved By Dbot (ROI) Widget","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/saved-by-dbot-roi-widget","siteSpaceId":"sitesp_bcGJl","description":"Configure the Saved by Dbot ROI widget in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Widgets"}]},{"id":"N7bOIz0zdmOnFqxFY7c0","title":"Manage Data","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data","siteSpaceId":"sitesp_bcGJl","description":"Manage data operations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"D9Ey2QaFsrURtteSTTmA","title":"Reindex the Entire Database","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-entire-database","siteSpaceId":"sitesp_bcGJl","description":"Reindex the entire database in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"TjESxeC3eQKpkv4LyuMh","title":"Reindex a Specific Index Database","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-a-specific-index-database","siteSpaceId":"sitesp_bcGJl","description":"Reindex specific index databases in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"0YZTR0Qpj1A5bYDDOvqd","title":"Reindex the Audit Log","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-audit-log","siteSpaceId":"sitesp_bcGJl","description":"Reindex audit logs in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"BcFbpBOUa9qyIrn2XiRT","title":"Free up Disk Space with Data Archiving","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/free-up-disk-space-with-data-archiving","siteSpaceId":"sitesp_bcGJl","description":"Archive data to free disk space in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"eIAwKv0GptVGrHvNify3","title":"Archive Artifacts and Attachments","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/archive-artifacts-and-attachments","siteSpaceId":"sitesp_bcGJl","description":"Archive artifacts and attachments in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"h1qlNtcL7jsDmDE8Xh2J","title":"Store Incident/Artifact Files in the Cloud","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/store-incidentartifact-files-in-the-cloud","siteSpaceId":"sitesp_bcGJl","description":"Store incident and artifact files in the cloud in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"vZCRae4JTAUnmf5OrGpo","title":"Migrate Data to Another Server","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server","siteSpaceId":"sitesp_bcGJl","description":"Migrate data to another server in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"TgLIC2YSQI7Rl8TCRwy9","title":"Migrate Data to Another Server for Multi-Tenant","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server-for-multi-tenant","siteSpaceId":"sitesp_bcGJl","description":"Migrate multi-tenant data to another server in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"PlBJMmB9Vr2e6Owurp7B","title":"Move Data Folders to Another Location on the Server","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/move-data-folders-to-another-location-on-the-server","siteSpaceId":"sitesp_bcGJl","description":"Move data folders to another server location in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"3Y21ApAJFjOexL7WB0ML","title":"Restore an Archived Folder","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/restore-an-archived-folder","siteSpaceId":"sitesp_bcGJl","description":"Restore archived folders in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Manage Data"}]},{"id":"AcfaV2QaWQEwwqW43VU4","title":"Logs","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/logs","siteSpaceId":"sitesp_bcGJl","description":"Manage server logs and audit trails in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"e8FBYzGdJLEngxAfqDcR","title":"Logs Overview","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/logs-overview","siteSpaceId":"sitesp_bcGJl","description":"Use logs to troubleshoot Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"PLV8bM67fdXDkKzNkcdG","title":"Configure the Server Log","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-server-log","siteSpaceId":"sitesp_bcGJl","description":"Configure server log size, levels, backups, and retention in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"1GVtzmNfaKVrXonBpRo4","title":"Configure the Access Log for HTTPS Requests","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-access-log-for-https-requests","siteSpaceId":"sitesp_bcGJl","description":"Configure access logging for HTTPS requests in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"HtgNQFQpH8YfrF6Y50qJ","title":"Create a Log Bundle","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/create-a-log-bundle","siteSpaceId":"sitesp_bcGJl","description":"Create log bundles for troubleshooting in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"z1b0CxCfUDH7DD36nTOm","title":"Audit Trail","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/audit-trail","siteSpaceId":"sitesp_bcGJl","description":"View, export, extract, and purge audit trails in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"yvShsMY5rl9SQryzDwrB","title":"Send the Audit Trail to an External Log Service","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/send-the-audit-trail-to-an-external-log-service","siteSpaceId":"sitesp_bcGJl","description":"Send audit trails to an external log service in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"Logs"}]},{"id":"dGb7A6IJ3NIbvYeKryDO","title":"System Settings","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings","siteSpaceId":"sitesp_bcGJl","description":"Customize system settings in Cortex XSOAR 6.12, including branding, emails, and notifications.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"}]},{"id":"AsGESVEdfTjDgWSzv5SQ","title":"Customize the Logo","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-logo","siteSpaceId":"sitesp_bcGJl","description":"Customize full-size and minimized logos in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"K5WTlQOkE3zgSymIspnM","title":"Customize the Login Message","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-login-message","siteSpaceId":"sitesp_bcGJl","description":"Customize the login message for users in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"ChpO93u4OaBzMaJSb72m","title":"Customize System Emails","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-system-emails","siteSpaceId":"sitesp_bcGJl","description":"Customize system email content and formats in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"i9F6fnzV8czZIpFJZSaW","title":"Configure System Notifications","pathname":"/xsoar-6-administrator-guide/6.12/configure-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/configure-system-notifications","siteSpaceId":"sitesp_bcGJl","description":"Configure email system notifications in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Configure Cortex XSOAR"},{"label":"Customize and Configure Cortex XSOAR"},{"label":"System Settings"}]},{"id":"KfkfaIEvGAvGbAvreVXP","title":"Day to Day Tasks in Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Manage daily incident and indicator management tasks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"}]},{"id":"01hoDrYPkFmy8qNi51bj","title":"Incident Management","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management","siteSpaceId":"sitesp_bcGJl","description":"Open, investigate, and manage incidents in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"DxCGiaSDoHYghkiZJPvq","title":"Create an Incident","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-an-incident","siteSpaceId":"sitesp_bcGJl","description":"Create incidents manually, from feeds, or by importing JSON files in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"x2uMG9O6OQ49NYVyjwlt","title":"Create a Search Query for Incidents","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-search-query-for-incidents","siteSpaceId":"sitesp_bcGJl","description":"Create, customize, and save incident search queries in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"t6TqBLjJCe1uvfMJIKLw","title":"Create a Widget From an Incident","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/create-a-widget-from-an-incident","siteSpaceId":"sitesp_bcGJl","description":"Create custom widgets from incident searches in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"8aRWlDRTPQI0QnuMSrZk","title":"Export an Incident to CSV Using the UTF8-BOM Format","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/export-an-incident-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_bcGJl","description":"Export incidents with Cyrillic characters to UTF8-BOM CSV files in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"muWcKvg2KRZodmnupFOc","title":"Incident Investigation","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-investigation","siteSpaceId":"sitesp_bcGJl","description":"Open incidents and view their details in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"vwQfFudCLdqIh4oWNVzc","title":"Work Plan","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/work-plan","siteSpaceId":"sitesp_bcGJl","description":"Monitor and manage incident playbook workflows in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"N2YTbxQTio6ExFor5Jyy","title":"Investigate an Incident Using the Canvas","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/investigate-an-incident-using-the-canvas","siteSpaceId":"sitesp_bcGJl","description":"Visually map and investigate incidents using the canvas in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"bSYZWxKWZijoadOh9O3N","title":"Incident Actions","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-actions","siteSpaceId":"sitesp_bcGJl","description":"Manage incident actions, tasks, reports, and restrictions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"yZAC54MNvGTG7SZMQIL8","title":"Evidence Handling","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/evidence-handling","siteSpaceId":"sitesp_bcGJl","description":"Add and manage investigation evidence in the Cortex XSOAR 6.12 War Room.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"vdoAkigfqTKoLhJMvCXE","title":"Incident Tasks","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/incident-tasks","siteSpaceId":"sitesp_bcGJl","description":"Manage playbook and to-do tasks during investigations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"4pyMfQAXloKFQxy2i6gU","title":"Link Incidents","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/link-incidents","siteSpaceId":"sitesp_bcGJl","description":"Link related incidents using the UI, rules, or CLI in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"vAkt1eUyAh2YxO84ZmNR","title":"Configure Incident Fields for Related Incidents","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management/configure-incident-fields-for-related-incidents","siteSpaceId":"sitesp_bcGJl","description":"Configure related incident fields using server settings in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Incident Management"}]},{"id":"iKblpjSfIaZsTr1KnvTc","title":"Indicator Management","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management","siteSpaceId":"sitesp_bcGJl","description":"Manage, search, create, edit, export, and delete indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"}]},{"id":"RIWePwEmpiQrFk9daJOO","title":"Indicator Query","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/indicator-query","siteSpaceId":"sitesp_bcGJl","description":"Search, create, edit, export, and delete indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"3R89Cf955QxLXX77gabL","title":"Configure the Indicator Timeline","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_bcGJl","description":"Configure and optimize the indicator timeline in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"IX1HZEYXmz8nEuQcg7Ox","title":"Exclusion List","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/exclusion-list","siteSpaceId":"sitesp_bcGJl","description":"Exclude indicators from system processing in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"zEBFBkHtSAmFMoswtirs","title":"Export Indicators","pathname":"/xsoar-6-administrator-guide/6.12/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management/export-indicators","siteSpaceId":"sitesp_bcGJl","description":"Export indicators as lists, dynamic lists, or files in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Investigate and Respond to Threats"},{"label":"Day to Day Tasks in Cortex XSOAR"},{"label":"Indicator Management"}]},{"id":"8tBs0pAjPmilosMNPFl8","title":"Reference","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference","siteSpaceId":"sitesp_bcGJl","description":"Reference information for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"}]},{"id":"8CdZ1lF6ULUAo7R8yKsa","title":"Navigation Cheat Sheet","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/navigation-cheat-sheet","siteSpaceId":"sitesp_bcGJl","description":"Learn about commonly used features in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"hMnQ5YtMJ4FcM7Vffz0S","title":"Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference server configurations for Cortex XSOAR 6.12 customization and troubleshooting.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"RqhkNe3QxdIqseowlrh4","title":"Modify Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/modify-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Customize and troubleshoot Cortex XSOAR 6.12 with server configuration settings.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"fRJQNIJ5hQl95LjRIFOV","title":"Active Directory Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/active-directory-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference Active Directory server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"bkOndm0ZADTC3RdhaeZq","title":"Automation Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/automation-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference automation server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"DdMsFj2MpOBG88OKg7Xd","title":"Dashboard Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/dashboard-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference dashboard server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"iU7LVld4hKwmvXm4iZF4","title":"Database Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/database-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference database server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"IKUzr99xlFj0oBW1zkeF","title":"Disaster Recovery Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/disaster-recovery-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference disaster recovery server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"DI3n9kbg7McarJOXRrZa","title":"Docker Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/docker-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference Docker server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"uHjKSwrTM3G2wr0sbCLC","title":"Elasticsearch Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/elasticsearch-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference Elasticsearch server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"7QzwDYSXHV2355eXOvdZ","title":"Engine Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/engine-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference engine server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"mRuK0SzqqK0o8GYcq59X","title":"General Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/general-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference general server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"NwMZ9QpZnoggtCSSMBUm","title":"Google API Server Configuration","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/google-api-server-configuration","siteSpaceId":"sitesp_bcGJl","description":"Reference Google API server configuration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"YhclLsfCgcABPWl1dv1c","title":"Incident Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/incident-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference incident server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"QbApAgNsOFemL52cQR6Z","title":"Indicator Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/indicator-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference indicator server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"piCpjX5FQtr12aM38nKo","title":"Integration Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/integration-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference integration server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"qsdpk76r0KxCbRQHUO46","title":"List Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/list-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference list server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"x9f7hjZQDmmSZayFzSts","title":"Logs Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/logs-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference log server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"fJ5PkTPJRhJC8CaSiMLL","title":"Marketplace Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/marketplace-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference Marketplace server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"KKNJY9AvbLG2wk0Ti8p4","title":"Multi-Tenant Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/multi-tenant-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference multi-tenant server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"5FfW8eK2Rod35zZJXbm6","title":"Notification Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/notification-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference notification server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"JL6KxITy0YOuggt1Ira5","title":"Playbook Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/playbook-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference playbook server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"GzVD5wl54SfyTRJmnM1I","title":"Proxy Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/proxy-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference proxy server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"BTkLRdZBMsXhFUyQXT7Z","title":"Remote Repository Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/remote-repository-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference remote repository server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"xkUC8L4N07S2fpGxQVQB","title":"Report Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/report-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference report server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"KDtZGZgDxfCkahqCk9XI","title":"Security Headers Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/security-headers-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference security header server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"Vfxe04GHAdzAhCpOdn9M","title":"SLA Server Configuration","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/sla-server-configuration","siteSpaceId":"sitesp_bcGJl","description":"Reference SLA server configuration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"a1XI4lQjHbOYsh0TC39V","title":"System Diagnostics Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/system-diagnostics-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference system diagnostics server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"57sTHFCpyspT73C1qCtc","title":"Users and Roles Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/users-and-roles-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference users and roles server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"myUboP3QrcWrUkYMYXLg","title":"War Room Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/war-room-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference War Room server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"5BEPWJQVj7l2OLnIvh07","title":"Widget Server Configurations","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/server-configurations/widget-server-configurations","siteSpaceId":"sitesp_bcGJl","description":"Reference widget server configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"Server Configurations"}]},{"id":"snDBA9wV0HJuNnTxsqu0","title":"System Diagnostics","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/system-diagnostics","siteSpaceId":"sitesp_bcGJl","description":"Find and fix system performance issues in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"guBuVMl73edRLY2ia76W","title":"Fix System Diagnostics Issues","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/system-diagnostics/fix-system-diagnostics-issues","siteSpaceId":"sitesp_bcGJl","description":"Fix System Diagnostics alerts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"},{"label":"System Diagnostics"}]},{"id":"Zkd24r0GccgrLLu5DyPt","title":"Performance Tuning for Cortex XSOAR","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/performance-tuning-for-cortex-xsoar","siteSpaceId":"sitesp_bcGJl","description":"Tune Cortex XSOAR 6.12 performance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"45zO0cOnUJodN8QPToYV","title":"Supported Ciphers","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/supported-ciphers","siteSpaceId":"sitesp_bcGJl","description":"Reference TLS 1.2 and TLS 1.3 ciphers supported in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"AFfsldkNYnM9plRvlqAq","title":"Telemetry","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/telemetry","siteSpaceId":"sitesp_bcGJl","description":"Enable or disable telemetry collection in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"srdOHSAmoqePlCGnFzXG","title":"Keyboard Shortcuts","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/keyboard-shortcuts","siteSpaceId":"sitesp_bcGJl","description":"Use keyboard shortcuts to navigate Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"UUqxKnvJYH53Umo2AM18","title":"Indicator Fields Structure","pathname":"/xsoar-6-administrator-guide/6.12/reference-docs/reference/indicator-fields-structure","siteSpaceId":"sitesp_bcGJl","description":"Reference the STIX-aligned indicator field structure in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Administrator Guides"},{"label":"Reference Docs"},{"label":"Reference"}]},{"id":"Ci76IyAIsTlXnEmEGpsQ","title":"Cortex XSOAR 6 Threat Intel Management Guides","pathname":"/cortex-xsoar-6-threat-intel-management-guides","siteSpaceId":"sitesp_2pDUE","description":"Start here to choose the right Cortex XSOAR 6 version.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"}]},{"id":"HYBNjbe0vEEA0pZZ6hjN","title":"Navigate the Threat Intel Management Guide","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15","siteSpaceId":"sitesp_Lgmnc","description":"Start here for a visual overview of the main Cortex XSOAR Threat Intel Management 6.15 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"RBhwq2RZA7yYUKof1xI3","title":"Threat Intel Management Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/learn-about-threat-intel-management/readme-1","siteSpaceId":"sitesp_Lgmnc","description":"Learn about native threat intelligence management capabilities in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"XuxDIRqF4nQFO0LD0Yrr","title":"Indicator Concepts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/learn-about-threat-intel-management/readme-1/indicator-concepts","siteSpaceId":"sitesp_Lgmnc","description":"Explore indicator concepts in Cortex XSOAR 6.15, including ingestion, enrichment, smart merge, and expiration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"xZO4uZ7zLEITL5zIHg1l","title":"Indicator Verdict","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/learn-about-threat-intel-management/readme-1/indicator-verdict","siteSpaceId":"sitesp_Lgmnc","description":"Learn how Cortex XSOAR 6.15 assigns indicator verdicts using source reliability and reputation data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"vvzuMbwhwQmVPl7F7VvO","title":"Indicator Ingestion","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/learn-about-threat-intel-management/readme-1/indicator-ingestion","siteSpaceId":"sitesp_Lgmnc","description":"Learn how Cortex XSOAR 6.15 detects and ingests indicators through integrations, extraction, and manual methods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"8Iw9256ag7aoJMtmWxhn","title":"Indicator Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization","siteSpaceId":"sitesp_Lgmnc","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"O1CkCpoJlfjcu3N9E2An","title":"Indicator Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_Lgmnc","description":"Learn how Cortex XSOAR 6.15 identifies and manages indicator types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"oU4TCigumW6jHiB6spix","title":"File Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_Lgmnc","description":"Configure file indicators and hash-based indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"F5XnWOTZjbymzAhsU87d","title":"Create an Indicator Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_Lgmnc","description":"Create custom indicator types alongside system types in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"j58g48lfbNUxbjHQfmtI","title":"Indicator Type Profile","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_Lgmnc","description":"Configure indicator type profiles and fields in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"Y1OG3BDNKG8zgzuk9oAb","title":"Formatting Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_Lgmnc","description":"Use formatting scripts to validate input and format indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"g1T2qXWJmm4kUbBq1nDq","title":"Enhancement Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_Lgmnc","description":"Use enhancement scripts to enrich indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"pfIechWfoIy5epjUYcZT","title":"Reputation Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_Lgmnc","description":"Use reputation scripts for indicator enrichment in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"sT1RiZKZx8eiEC2VqeBZ","title":"Reputation Commands","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_Lgmnc","description":"Learn how reputation commands return indicator verdicts in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"zvEGoovId6jbZtJAc4Ge","title":"Map Custom Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_Lgmnc","description":"Map custom indicator fields to context data in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"3uz0CAFcSwLpUMYk8jlY","title":"Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_Lgmnc","description":"Configure indicator fields for specific or all types in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"pKBFA97RCoHC6AXI0QL8","title":"Create a Custom Indicator Field","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_Lgmnc","description":"Create custom indicator fields in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"FIhZkkcpiVmhs6AIUbBG","title":"Indicator Field Trigger Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_Lgmnc","description":"Trigger scripts when indicator fields change in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"W89VBU2zgJIljnRIMunJ","title":"Indicator Fields Structure","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-fields/indicator-fields-structure","siteSpaceId":"sitesp_Lgmnc","description":"Understand STIX-aligned indicator field structures in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"xxO0y8qknPbI4XebN1KQ","title":"Indicator Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_Lgmnc","description":"Learn about indicator view layouts in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"8Fse7ddqSVeuyBXqOuAj","title":"Customize an Indicator Type Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_Lgmnc","description":"Customize layouts for each indicator type in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"v9ZqvHxAd8BORyKrgwjE","title":"Add a Script in the Indicator Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_Lgmnc","description":"Add automation script content to indicator layouts in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"MjRCl6ssvmqfjurbxzxU","title":"Indicator Extraction","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-extraction","siteSpaceId":"sitesp_Lgmnc","description":"Configure and run indicator extraction and enrichment in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"GOfIN2GgEjiO6aTHbqXl","title":"Indicator Extraction Modes","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_Lgmnc","description":"Configure indicator extraction modes in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"LkHarD25wfkkaEs3JiIE","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_Lgmnc","description":"Create indicator extraction rules for incident types in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"NFgW3vDHPdHm0PoJQgtW","title":"Run Indicator Extraction in the CLI","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_Lgmnc","description":"Run indicator extraction and enrichment commands in the Cortex XSOAR 6.15 CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"OBx3k08rj8tmu2PNGMss","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_Lgmnc","description":"Create indicator extraction rules for playbook tasks in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"Uzw9RMxUXn1ryUk2DxRm","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_Lgmnc","description":"Disable indicator extraction for automations or integrations in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"F7zvG5Eykw60190zrM13","title":"Indicator Expiration","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-expiration","siteSpaceId":"sitesp_Lgmnc","description":"Cortex XSOAR 6.15 indicators have an active or expired status, which can be set to expire after a period of time or never to expire. Set default expiration method.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"4pflzZfovoCiXQydLKfl","title":"Threat Intel Feeds","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/threat-intel-feeds","siteSpaceId":"sitesp_Lgmnc","description":"Import and export threat intelligence feeds in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"e5EnTJfXPtvKkIQ4LaWI","title":"Feed Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/threat-intel-feeds/feed-integrations","siteSpaceId":"sitesp_Lgmnc","description":"Configure feed integrations that fetch indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"orAQrJGatXkL8NEHsv4e","title":"Set the Source Reliability of Enrichment Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/threat-intel-feeds/set-the-source-reliability-of-enrichment-integrations","siteSpaceId":"sitesp_Lgmnc","description":"Set enrichment integration source reliability in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"RdQs31Kp1Y2RET3sNZ8k","title":"Configure threat intelligence management playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/threat-intel-feeds/threat-intelligence-management-playbooks","siteSpaceId":"sitesp_Lgmnc","description":"Configure threat intelligence management playbooks and indicator queries in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"Qo5uKvxnSquLVEznWl8Q","title":"Indicator Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management","siteSpaceId":"sitesp_Lgmnc","description":"Create, manage, search, and export indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"5oe2ChKv4CuTNTdLWHtN","title":"Indicator Query","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/indicator-query","siteSpaceId":"sitesp_Lgmnc","description":"Search for and manage indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"EExnIPkTAOzRb5BCCX0n","title":"Configure the Indicator Timeline","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_Lgmnc","description":"Configure the indicator timeline and its performance in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"UYri2AjoQifnCDW7DdM8","title":"Exclusion List","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/exclusion-list","siteSpaceId":"sitesp_Lgmnc","description":"Add indicators to exclusion lists in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"ZZHj9qgcLdpuXum99bet","title":"Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/export-indicators","siteSpaceId":"sitesp_Lgmnc","description":"Export indicators as lists, files, and feeds from Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"Qcs8QUoLUK4Ie3TJ980Y","title":"Manually Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/export-indicators/manually-export-indicators","siteSpaceId":"sitesp_Lgmnc","description":"Manually export indicators to files from Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"WrGUaJ03wBG8yKAQjlpr","title":"Export Indicators Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/export-indicators/export-indicators-integrations","siteSpaceId":"sitesp_Lgmnc","description":"Export indicators with outbound-feed integrations in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"VxULO6EmkzdFl5rqETEF","title":"Export Indicators Playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/export-indicators/export-indicators-playbooks","siteSpaceId":"sitesp_Lgmnc","description":"Use playbooks to process and export indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"k1U981nM4gvA62JHUt60","title":"Export an Indicator to CSV Using the UTF8-BOM Format","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/export-indicators/export-an-indicator-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_Lgmnc","description":"Export indicators to UTF-8 BOM CSV files in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"XzzniPf8qPXZjAUUCsg6","title":"Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/indicator-relationships","siteSpaceId":"sitesp_Lgmnc","description":"Create and manage relationships between indicators in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"9lXx2bOvVySpH9xV9oBJ","title":"Create Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/indicator-relationships/create-indicator-relationships","siteSpaceId":"sitesp_Lgmnc","description":"Create indicator relationships that enhance investigations in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"gSxAc8CblwqoAKRzfXWk","title":"Leverage Relationships in the Canvas","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/configure-indicators/indicator-management/indicator-relationships/leverage-relationships-in-the-canvas","siteSpaceId":"sitesp_Lgmnc","description":"Use Canvas indicator relationships to enrich investigations in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"T1ib64W8s9G6dYzbTp0C","title":"Threat Intel Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports","siteSpaceId":"sitesp_Lgmnc","description":"Create and manage threat intelligence reports in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"}]},{"id":"mNOPMkWFDLyJbnNeIWOe","title":"Threat Intel Reports Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-overview","siteSpaceId":"sitesp_Lgmnc","description":"Learn how to work with threat intelligence reports in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"BbKuLwMC2zyOw4L3MIxF","title":"Threat Intel Reports Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-customization","siteSpaceId":"sitesp_Lgmnc","description":"Set up and customize threat intelligence report types in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"3ykdaA9ly06yDLdlXlsA","title":"Configure Threat Intel Report Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-types","siteSpaceId":"sitesp_Lgmnc","description":"Configure threat intelligence report types in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"ZYldfTa2UjDb6GTqWICd","title":"Configure Threat Intel Report Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-fields","siteSpaceId":"sitesp_Lgmnc","description":"Configure threat intelligence report fields in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"LlFOc67u0zZGSdIyJoqr","title":"Configure Threat Intel Report Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-layouts","siteSpaceId":"sitesp_Lgmnc","description":"Configure threat intelligence report layouts in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"vx2ujD7Z4SeHWxejry71","title":"Threat Intel Reports Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-management","siteSpaceId":"sitesp_Lgmnc","description":"Manage threat intelligence reports in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"Pv8lHqseYyjOXL6Oe3Km","title":"Create a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-management/create-a-threat-intel-report","siteSpaceId":"sitesp_Lgmnc","description":"Create a threat intelligence report from a type and layout in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"4OlflzFusYPXDju3Nt7L","title":"RBAC for Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-management/rbac-for-reports","siteSpaceId":"sitesp_Lgmnc","description":"Control threat intelligence report access with RBAC in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"zihEP6rDiy1FvFwyRsvB","title":"Generate a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-management/generate-a-threat-intel-report","siteSpaceId":"sitesp_Lgmnc","description":"Generate, export, and share threat intelligence reports in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"oil1E8J2jV9w7r7D1LCu","title":"Publish a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.15/reports/threat-intel-reports/threat-intel-reports-management/publish-a-threat-intel-report","siteSpaceId":"sitesp_Lgmnc","description":"Publish threat intelligence reports with read-only access in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"HYBNjbe0vEEA0pZZ6hjN","title":"Navigate the Threat Intel Management Guide","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14","siteSpaceId":"sitesp_GXB5U","description":"Start here for a visual overview of the main Cortex XSOAR Threat Intel Management 6.14 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"RBhwq2RZA7yYUKof1xI3","title":"Threat Intel Management Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/learn-about-threat-intel-management/readme-1","siteSpaceId":"sitesp_GXB5U","description":"Learn about native threat intelligence management capabilities in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"XuxDIRqF4nQFO0LD0Yrr","title":"Indicator Concepts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/learn-about-threat-intel-management/readme-1/indicator-concepts","siteSpaceId":"sitesp_GXB5U","description":"Explore indicator concepts in Cortex XSOAR 6.14, including ingestion, enrichment, smart merge, and expiration.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"xZO4uZ7zLEITL5zIHg1l","title":"Indicator Verdict","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/learn-about-threat-intel-management/readme-1/indicator-verdict","siteSpaceId":"sitesp_GXB5U","description":"Learn how Cortex XSOAR 6.14 assigns indicator verdicts using source reliability and reputation data.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"vvzuMbwhwQmVPl7F7VvO","title":"Indicator Ingestion","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/learn-about-threat-intel-management/readme-1/indicator-ingestion","siteSpaceId":"sitesp_GXB5U","description":"Learn how Cortex XSOAR 6.14 detects and ingests indicators through integrations, extraction, and manual methods.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"8Iw9256ag7aoJMtmWxhn","title":"Indicator Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization","siteSpaceId":"sitesp_GXB5U","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"O1CkCpoJlfjcu3N9E2An","title":"Indicator Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_GXB5U","description":"Learn how Cortex XSOAR 6.14 identifies and manages indicator types.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"oU4TCigumW6jHiB6spix","title":"File Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_GXB5U","description":"Configure file indicators and hash-based indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"F5XnWOTZjbymzAhsU87d","title":"Create an Indicator Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_GXB5U","description":"Create custom indicator types alongside system types in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"j58g48lfbNUxbjHQfmtI","title":"Indicator Type Profile","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_GXB5U","description":"Configure indicator type profiles and fields in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"Y1OG3BDNKG8zgzuk9oAb","title":"Formatting Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_GXB5U","description":"Use formatting scripts to validate input and format indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"g1T2qXWJmm4kUbBq1nDq","title":"Enhancement Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_GXB5U","description":"Use enhancement scripts to enrich indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"pfIechWfoIy5epjUYcZT","title":"Reputation Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_GXB5U","description":"Use reputation scripts for indicator enrichment in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"sT1RiZKZx8eiEC2VqeBZ","title":"Reputation Commands","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_GXB5U","description":"Learn how reputation commands return indicator verdicts in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"zvEGoovId6jbZtJAc4Ge","title":"Map Custom Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_GXB5U","description":"Map custom indicator fields to context data in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"3uz0CAFcSwLpUMYk8jlY","title":"Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_GXB5U","description":"Configure indicator fields for specific or all types in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"pKBFA97RCoHC6AXI0QL8","title":"Create a Custom Indicator Field","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_GXB5U","description":"Create custom indicator fields in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"FIhZkkcpiVmhs6AIUbBG","title":"Indicator Field Trigger Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_GXB5U","description":"Trigger scripts when indicator fields change in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"W89VBU2zgJIljnRIMunJ","title":"Indicator Fields Structure","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-fields/indicator-fields-structure","siteSpaceId":"sitesp_GXB5U","description":"Understand STIX-aligned indicator field structures in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"xxO0y8qknPbI4XebN1KQ","title":"Indicator Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_GXB5U","description":"Learn about indicator view layouts in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"8Fse7ddqSVeuyBXqOuAj","title":"Customize an Indicator Type Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_GXB5U","description":"Customize layouts for each indicator type in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"v9ZqvHxAd8BORyKrgwjE","title":"Add a Script in the Indicator Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_GXB5U","description":"Add automation script content to indicator layouts in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"MjRCl6ssvmqfjurbxzxU","title":"Indicator Extraction","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-extraction","siteSpaceId":"sitesp_GXB5U","description":"Configure and run indicator extraction and enrichment in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"GOfIN2GgEjiO6aTHbqXl","title":"Indicator Extraction Modes","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_GXB5U","description":"Configure indicator extraction modes in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"LkHarD25wfkkaEs3JiIE","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_GXB5U","description":"Create indicator extraction rules for incident types in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"NFgW3vDHPdHm0PoJQgtW","title":"Run Indicator Extraction in the CLI","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_GXB5U","description":"Run indicator extraction and enrichment commands in the Cortex XSOAR 6.14 CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"OBx3k08rj8tmu2PNGMss","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_GXB5U","description":"Create indicator extraction rules for playbook tasks in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"Uzw9RMxUXn1ryUk2DxRm","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_GXB5U","description":"Disable indicator extraction for automations or integrations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"F7zvG5Eykw60190zrM13","title":"Indicator Expiration","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-expiration","siteSpaceId":"sitesp_GXB5U","description":"Cortex XSOAR 6.14 indicators have an active or expired status, which can be set to expire after a period of time or never to expire. Set default expiration method.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"4pflzZfovoCiXQydLKfl","title":"Threat Intel Feeds","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/threat-intel-feeds","siteSpaceId":"sitesp_GXB5U","description":"Import and export threat intelligence feeds in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"e5EnTJfXPtvKkIQ4LaWI","title":"Feed Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/threat-intel-feeds/feed-integrations","siteSpaceId":"sitesp_GXB5U","description":"Configure feed integrations that fetch indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"qPoet1wMM56M68WeNu4R","title":"Feed-Triggered Jobs","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/threat-intel-feeds/feed-integrations/feed-triggered-jobs","siteSpaceId":"sitesp_GXB5U","description":"Configure jobs triggered by threat intelligence feed updates in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"},{"label":"Feed Integrations"}]},{"id":"orAQrJGatXkL8NEHsv4e","title":"Set the Source Reliability of Enrichment Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/threat-intel-feeds/set-the-source-reliability-of-enrichment-integrations","siteSpaceId":"sitesp_GXB5U","description":"Set enrichment integration source reliability in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"RdQs31Kp1Y2RET3sNZ8k","title":"Threat Intelligence Management Playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/threat-intel-feeds/threat-intelligence-management-playbooks","siteSpaceId":"sitesp_GXB5U","description":"Configure threat intelligence management playbooks in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"Qo5uKvxnSquLVEznWl8Q","title":"Indicator Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management","siteSpaceId":"sitesp_GXB5U","description":"Create, manage, search, and export indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"5oe2ChKv4CuTNTdLWHtN","title":"Indicator Query","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/indicator-query","siteSpaceId":"sitesp_GXB5U","description":"Search for and manage indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"EExnIPkTAOzRb5BCCX0n","title":"Configure the Indicator Timeline","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_GXB5U","description":"Configure the indicator timeline and its performance in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"UYri2AjoQifnCDW7DdM8","title":"Exclusion List","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/exclusion-list","siteSpaceId":"sitesp_GXB5U","description":"Add indicators to exclusion lists in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"ZZHj9qgcLdpuXum99bet","title":"Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/export-indicators","siteSpaceId":"sitesp_GXB5U","description":"Export indicators as lists, files, and feeds from Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"Qcs8QUoLUK4Ie3TJ980Y","title":"Manually Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/export-indicators/manually-export-indicators","siteSpaceId":"sitesp_GXB5U","description":"Manually export indicators to files from Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"WrGUaJ03wBG8yKAQjlpr","title":"Export Indicators Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/export-indicators/export-indicators-integrations","siteSpaceId":"sitesp_GXB5U","description":"Export indicators with outbound-feed integrations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"VxULO6EmkzdFl5rqETEF","title":"Export Indicators Playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/export-indicators/export-indicators-playbooks","siteSpaceId":"sitesp_GXB5U","description":"Use playbooks to process and export indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"k1U981nM4gvA62JHUt60","title":"Export an Indicator to CSV Using the UTF8-BOM Format","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/export-indicators/export-an-indicator-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_GXB5U","description":"Export indicators to UTF-8 BOM CSV files in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"XzzniPf8qPXZjAUUCsg6","title":"Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/indicator-relationships","siteSpaceId":"sitesp_GXB5U","description":"Create and manage relationships between indicators in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"9lXx2bOvVySpH9xV9oBJ","title":"Create Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/indicator-relationships/create-indicator-relationships","siteSpaceId":"sitesp_GXB5U","description":"Create indicator relationships that enhance investigations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"gSxAc8CblwqoAKRzfXWk","title":"Leverage Relationships in the Canvas","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/configure-indicators/indicator-management/indicator-relationships/leverage-relationships-in-the-canvas","siteSpaceId":"sitesp_GXB5U","description":"Use Canvas indicator relationships to enrich investigations in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"T1ib64W8s9G6dYzbTp0C","title":"Threat Intel Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports","siteSpaceId":"sitesp_GXB5U","description":"Create and manage threat intelligence reports in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"}]},{"id":"mNOPMkWFDLyJbnNeIWOe","title":"Threat Intel Reports Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-overview","siteSpaceId":"sitesp_GXB5U","description":"Learn how to work with threat intelligence reports in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"BbKuLwMC2zyOw4L3MIxF","title":"Threat Intel Reports Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-customization","siteSpaceId":"sitesp_GXB5U","description":"Set up and customize threat intelligence report types in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"3ykdaA9ly06yDLdlXlsA","title":"Configure Threat Intel Report Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-types","siteSpaceId":"sitesp_GXB5U","description":"Configure threat intelligence report types in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"ZYldfTa2UjDb6GTqWICd","title":"Configure Threat Intel Report Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-fields","siteSpaceId":"sitesp_GXB5U","description":"Configure threat intelligence report fields in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"LlFOc67u0zZGSdIyJoqr","title":"Configure Threat Intel Report Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-layouts","siteSpaceId":"sitesp_GXB5U","description":"Configure threat intelligence report layouts in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"vx2ujD7Z4SeHWxejry71","title":"Threat Intel Reports Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-management","siteSpaceId":"sitesp_GXB5U","description":"Manage threat intelligence reports in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"Pv8lHqseYyjOXL6Oe3Km","title":"Create a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-management/create-a-threat-intel-report","siteSpaceId":"sitesp_GXB5U","description":"Create a threat intelligence report from a type and layout in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"4OlflzFusYPXDju3Nt7L","title":"RBAC for Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-management/rbac-for-reports","siteSpaceId":"sitesp_GXB5U","description":"Control threat intelligence report access with RBAC in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"zihEP6rDiy1FvFwyRsvB","title":"Generate a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-management/generate-a-threat-intel-report","siteSpaceId":"sitesp_GXB5U","description":"Generate, export, and share threat intelligence reports in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"oil1E8J2jV9w7r7D1LCu","title":"Publish a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.14/reports/threat-intel-reports/threat-intel-reports-management/publish-a-threat-intel-report","siteSpaceId":"sitesp_GXB5U","description":"Publish threat intelligence reports with read-only access in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"LugTaUtfhSI6vwMWOgCx","title":"Navigate the Threat Intel Management Guide","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13","siteSpaceId":"sitesp_1Vrm9","description":"Navigate Cortex XSOAR 6.13 Threat Intel Management documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"KyFDOpoaqceAaLL2FVF6","title":"Threat Intel Management Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/learn-about-threat-intel-management/readme-1","siteSpaceId":"sitesp_1Vrm9","description":"Learn threat intel capabilities in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"o1hQELPghKysb3dr18Sg","title":"Indicator Concepts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/learn-about-threat-intel-management/readme-1/indicator-concepts","siteSpaceId":"sitesp_1Vrm9","description":"Learn indicator concepts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"pVhIx2nGiGNqf1ln0dcd","title":"Indicator Verdict","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/learn-about-threat-intel-management/readme-1/indicator-verdict","siteSpaceId":"sitesp_1Vrm9","description":"Learn indicator verdicts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"6mLH4uSQqLmyiSDFusu0","title":"Indicator Ingestion","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/learn-about-threat-intel-management/readme-1/indicator-ingestion","siteSpaceId":"sitesp_1Vrm9","description":"Learn indicator ingestion in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"JuvpyESyIdehlqpSIKJZ","title":"Indicator Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization","siteSpaceId":"sitesp_1Vrm9","description":"Customize indicators in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"W41mAEQUIXyj0x9mf61u","title":"Indicator Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_1Vrm9","description":"Configure indicator types in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"6G4b2N44YUzENMNCGUkh","title":"File Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_1Vrm9","description":"Work with file indicators in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"HKpqPdwZ68HDyVpHQ07z","title":"Create an Indicator Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_1Vrm9","description":"Create indicator types in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"tJiWODv5gijagaJZJ20J","title":"Indicator Type Profile","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_1Vrm9","description":"Configure type profiles in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"oRLFlj1SELgeja0BiU6D","title":"Formatting Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_1Vrm9","description":"Use formatting scripts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"O93h49rX1cMSswEVwXK7","title":"Enhancement Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_1Vrm9","description":"Use enhancement scripts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"H36jCXj5Aa6sAdWPTEP6","title":"Reputation Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_1Vrm9","description":"Use reputation scripts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"T5cXUuF2GjQEtXJG4zS9","title":"Reputation Commands","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_1Vrm9","description":"Use reputation commands in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"1un8k849iotJnGuUHNKC","title":"Map Custom Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_1Vrm9","description":"Map custom fields in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"DEMcpKvRGWRsUo1k10PJ","title":"Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_1Vrm9","description":"Configure indicator fields in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"BE0HXkIF2xcd7aHsSQxQ","title":"Create a Custom Indicator Field","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_1Vrm9","description":"Create custom fields in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"2pI1vsNYGbeeLRJHynBE","title":"Indicator Field Trigger Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_1Vrm9","description":"Configure field triggers in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"aCAwpAM16amdtiqJPO8l","title":"Indicator Fields Structure","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields/indicator-fields-structure","siteSpaceId":"sitesp_1Vrm9","description":"Understand field structure in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"CBWj6uO2cvNE2sYlJfCk","title":"Indicator Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_1Vrm9","description":"Configure indicator layouts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"sMFRju3ojt6ErhKnd0hV","title":"Customize an Indicator Type Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_1Vrm9","description":"Customize layouts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"uUB0JufxgYrClHkTU1Rx","title":"Add a Script in the Indicator Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_1Vrm9","description":"Add layout scripts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"GdpTWXgVp2LI2yKdvRdE","title":"Indicator Extraction","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction","siteSpaceId":"sitesp_1Vrm9","description":"Configure indicator extraction in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"H4H5SPO7DBwKYU89MS6m","title":"Indicator Extraction Modes","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_1Vrm9","description":"Configure extraction modes in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"TZbE0E9K4v9CyiDr8vop","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_1Vrm9","description":"Create extraction rules in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"meF6C5jNj4rb9nLU5hvG","title":"Run Indicator Extraction in the CLI","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_1Vrm9","description":"Run CLI extraction in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"bt4g6gMHIFAHvnqqCjRc","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_1Vrm9","description":"Create task extraction rules in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"MRuzDDyQCy5YuFdYB0h8","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_1Vrm9","description":"Disable extraction in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"NURzxH4VVKMrg2Gehe17","title":"Indicator Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management","siteSpaceId":"sitesp_1Vrm9","description":"Manage indicators in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"RpDQypG8etTKjks2rZqX","title":"Indicator Query","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-query","siteSpaceId":"sitesp_1Vrm9","description":"Query indicators in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"PUj51gYxPV5I0wryfGYc","title":"Configure the Indicator Timeline","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_1Vrm9","description":"Configure timelines in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"vkRQ0mrdsYmxaq1XhZPq","title":"Exclusion List","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/exclusion-list","siteSpaceId":"sitesp_1Vrm9","description":"Manage exclusions in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"MhdbUeKth8icd2IIwS5U","title":"Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators","siteSpaceId":"sitesp_1Vrm9","description":"Export indicators from Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"F5LOoXJ9DrBee1OxoVZo","title":"Manually Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/manually-export-indicators","siteSpaceId":"sitesp_1Vrm9","description":"Manually export indicators from Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"iFTniYq1uox4dnFV6n2V","title":"Export Indicators Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/export-indicators-integrations","siteSpaceId":"sitesp_1Vrm9","description":"Export using integrations in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"0iWwkAVNSeE1f5kY4DIb","title":"Export Indicators Playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/export-indicators-playbooks","siteSpaceId":"sitesp_1Vrm9","description":"Export through playbooks in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"h25muoZfpGkul3N5Wunl","title":"Export an Indicator to CSV Using the UTF8-BOM Format","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/export-an-indicator-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_1Vrm9","description":"Export UTF8-BOM CSV files in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"VpktFNiMonQELQAxQjAs","title":"Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-relationships","siteSpaceId":"sitesp_1Vrm9","description":"Use relationships in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"20rEtqb7tahOMLvZaBp5","title":"Create Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-relationships/create-indicator-relationships","siteSpaceId":"sitesp_1Vrm9","description":"Create relationships in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"D0hJY8AiSDSVKHQsAuAw","title":"Leverage Relationships in the Canvas","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-relationships/leverage-relationships-in-the-canvas","siteSpaceId":"sitesp_1Vrm9","description":"Use canvas relationships in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"GbKI0D4kRpbLX3sx0eRD","title":"Indicator Expiration","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-expiration","siteSpaceId":"sitesp_1Vrm9","description":"Configure expiration in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"TYPQObegbAbwkLTAEFQU","title":"Threat Intel Feeds","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds","siteSpaceId":"sitesp_1Vrm9","description":"Configure feeds in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"pidnW28VkXm1kLWWYiL8","title":"Feed Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/feed-integrations","siteSpaceId":"sitesp_1Vrm9","description":"Configure feed integrations in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"7tYEG3ad4G7DvOHoN6XG","title":"Feed-Triggered Jobs","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/feed-integrations/feed-triggered-jobs","siteSpaceId":"sitesp_1Vrm9","description":"Run feed-triggered jobs in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"},{"label":"Feed Integrations"}]},{"id":"Dt4F6MmPbDZAjnlD2Wy2","title":"Set the Source Reliability of Enrichment Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/set-the-source-reliability-of-enrichment-integrations","siteSpaceId":"sitesp_1Vrm9","description":"Set source reliability in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"UrVUMe9eMw9eOzyhI7hk","title":"Threat Intelligence Management Playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/threat-intelligence-management-playbooks","siteSpaceId":"sitesp_1Vrm9","description":"Configure playbooks in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"sZgBnWlzJxuI0NdrBgXq","title":"Threat Intel Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports","siteSpaceId":"sitesp_1Vrm9","description":"Work with reports in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"}]},{"id":"cVY3Z6MK3FwfN6Qon1BF","title":"Threat Intel Reports Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-overview","siteSpaceId":"sitesp_1Vrm9","description":"Explore reports in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"NjAuIY1milsk4S76ximO","title":"Threat Intel Reports Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-customization","siteSpaceId":"sitesp_1Vrm9","description":"Customize reports in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"iDgDgbVCijfdfIRrPM1e","title":"Configure Threat Intel Report Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-types","siteSpaceId":"sitesp_1Vrm9","description":"Configure report types in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"34oZcOd0n51qUzjyGJ6B","title":"Configure Threat Intel Report Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-fields","siteSpaceId":"sitesp_1Vrm9","description":"Configure report fields in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"mXalYEEvdOskBGWpRo2f","title":"Configure Threat Intel Report Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-layouts","siteSpaceId":"sitesp_1Vrm9","description":"Configure report layouts in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"O4V1duX74fCxGOa7ahf8","title":"Threat Intel Reports Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-management","siteSpaceId":"sitesp_1Vrm9","description":"Manage reports in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"DA8WQq897hskdtOqUJ5C","title":"Create a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-management/create-a-threat-intel-report","siteSpaceId":"sitesp_1Vrm9","description":"Create reports in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"l87b1rLtguWC7aQrXYGA","title":"RBAC for Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-management/rbac-for-reports","siteSpaceId":"sitesp_1Vrm9","description":"Control report access in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"i876KRtjQ8WEhfEhTJqN","title":"Generate a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-management/generate-a-threat-intel-report","siteSpaceId":"sitesp_1Vrm9","description":"Generate reports in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"3WnW9QCn2yt05X30ygim","title":"Publish a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.13/reports/threat-intel-reports/threat-intel-reports-management/publish-a-threat-intel-report","siteSpaceId":"sitesp_1Vrm9","description":"Publish reports in Cortex XSOAR 6.13 Threat Intel Management.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"ZnJTiuRJUI8oSkraSGYK","title":"Navigate the Threat Intel Management Guide","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12","siteSpaceId":"sitesp_bcGV0","description":"Start here for a visual overview of Cortex XSOAR 6.12 Threat Intel Management documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"kgrYFefqr1Zq4e1XDbiI","title":"Threat Intel Management Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/learn-about-threat-intel-management/threat-intel-management-overview","siteSpaceId":"sitesp_bcGV0","description":"Learn about native threat intel capabilities in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"}]},{"id":"5cUdAEkyQjMLZNiIEgiB","title":"Indicator Concepts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/learn-about-threat-intel-management/threat-intel-management-overview/indicator-concepts","siteSpaceId":"sitesp_bcGV0","description":"Learn about threat intelligence management concepts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"A3yDc1kKziIjXQDeIaxB","title":"Indicator Verdict","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/learn-about-threat-intel-management/threat-intel-management-overview/indicator-verdict","siteSpaceId":"sitesp_bcGV0","description":"Learn how source reliability assigns indicator verdicts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"4XxRJLA9IoYHkX0MfYFp","title":"Indicator Ingestion","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/learn-about-threat-intel-management/threat-intel-management-overview/indicator-ingestion","siteSpaceId":"sitesp_bcGV0","description":"Learn how indicators are detected and ingested in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Learn about Threat Intel Management"},{"label":"Threat Intel Management Overview"}]},{"id":"ERXHSUs0u4g9tftph8iN","title":"Indicator Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization","siteSpaceId":"sitesp_bcGV0","description":"Customize indicator types, fields, and layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"a8HXyGL5DQxOCYHd4Y6g","title":"Indicator Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types","siteSpaceId":"sitesp_bcGV0","description":"Learn how indicator types are determined in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"81Lqnc2FOgkx8GemMUDx","title":"File Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/file-indicators","siteSpaceId":"sitesp_bcGV0","description":"Configure file indicators and hashes in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"9DdEfIJJjmzV7aOJwYpo","title":"Create an Indicator Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/create-an-indicator-type","siteSpaceId":"sitesp_bcGV0","description":"Create custom indicator types in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"6HDqD6XzA64jTOiiULwg","title":"Indicator Type Profile","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/indicator-type-profile","siteSpaceId":"sitesp_bcGV0","description":"Configure indicator type profiles in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"7ZRYQ8bTDs9LW8gIinLJ","title":"Formatting Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/formatting-scripts","siteSpaceId":"sitesp_bcGV0","description":"Use formatting scripts for indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"FlMWbTD1A2kYNqrkYuYw","title":"Enhancement Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/enhancement-scripts","siteSpaceId":"sitesp_bcGV0","description":"Use enhancement scripts for indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"rUTa9pRLjH0QD0dPZ0QX","title":"Reputation Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/reputation-scripts","siteSpaceId":"sitesp_bcGV0","description":"Use reputation scripts for indicator enrichment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"uqRiOwfgh26IgbGBvov9","title":"Reputation Commands","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/reputation-commands","siteSpaceId":"sitesp_bcGV0","description":"Run reputation commands by indicator type in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"MKLeBCBBMgGuJCno0Hzg","title":"Map Custom Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-types/map-custom-indicator-fields","siteSpaceId":"sitesp_bcGV0","description":"Map custom indicator fields to context data in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Types"}]},{"id":"iAEeNk8sJgasYDvsdxBo","title":"Indicator Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-fields","siteSpaceId":"sitesp_bcGV0","description":"Add and associate indicator fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"cAZ0EQxlOvJeyrrsbBb6","title":"Create a Custom Indicator Field","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field","siteSpaceId":"sitesp_bcGV0","description":"Create custom indicator fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"Qd01ODrewGj1bZLsndvM","title":"Indicator Field Trigger Scripts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts","siteSpaceId":"sitesp_bcGV0","description":"Associate indicator fields with trigger scripts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"saURYBrdyvqLGFiP2VvX","title":"Indicator Fields Structure","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-fields/indicator-fields-structure","siteSpaceId":"sitesp_bcGV0","description":"Understand the STIX-aligned indicator field structure in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Fields"}]},{"id":"uf4tGqRoC0Rcqw8TLJJb","title":"Indicator Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-layouts","siteSpaceId":"sitesp_bcGV0","description":"Learn about indicator view layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"}]},{"id":"W4C8SOvMTeSn7XrhAVuz","title":"Customize an Indicator Type Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout","siteSpaceId":"sitesp_bcGV0","description":"Customize indicator type layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"X8NN4OM9Vjl4DRydqP7p","title":"Add a Script in the Indicator Layout","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout","siteSpaceId":"sitesp_bcGV0","description":"Add scripts to indicator layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Customization"},{"label":"Indicator Layouts"}]},{"id":"vX8Q6yUKKzxYZuy56rNR","title":"Indicator Extraction","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-extraction","siteSpaceId":"sitesp_bcGV0","description":"Extract and enrich indicators from incident fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"Md3y0RiRbyS8bi06CWoF","title":"Indicator Extraction Modes","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-extraction/indicator-extraction-modes","siteSpaceId":"sitesp_bcGV0","description":"Configure indicator extraction modes in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"5ZGxTXxyaAurHeWpiLvt","title":"Create Indicator Extraction Rules for an Incident Type","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type","siteSpaceId":"sitesp_bcGV0","description":"Create incident type extraction rules in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"Mm9IPWq129EKgoJj7UiJ","title":"Run Indicator Extraction in the CLI","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-extraction/run-indicator-extraction-in-the-cli","siteSpaceId":"sitesp_bcGV0","description":"Run indicator extraction commands in the Cortex XSOAR 6.12 CLI.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"42g7iciMbJ6vXuJY7QlX","title":"Create Indicator Extract Rules for a Playbook Task","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task","siteSpaceId":"sitesp_bcGV0","description":"Create playbook task extraction rules in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"cD5Pkfs6UMz5OKniocb9","title":"Disable Indicator Extraction for Automations or Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations","siteSpaceId":"sitesp_bcGV0","description":"Disable indicator extraction for automations and integrations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Extraction"}]},{"id":"jqXaiYnoepHWPxMyDS4D","title":"Indicator Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management","siteSpaceId":"sitesp_bcGV0","description":"Create, manage, search, and export indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"9FXlvymaIkg4269xVe8V","title":"Configure the Indicator Timeline","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/configure-the-indicator-timeline","siteSpaceId":"sitesp_bcGV0","description":"Configure the indicator timeline in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"Fot0EWPCuRPSt2wF7U6n","title":"Exclusion List","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/exclusion-list","siteSpaceId":"sitesp_bcGV0","description":"Add indicators to an exclusion list in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"UqnelE4taRYbiDKz2Ykf","title":"Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/export-indicators","siteSpaceId":"sitesp_bcGV0","description":"Export indicators as lists or files in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"y7dOHSEmm0VITbdnZ3V1","title":"Manually Export Indicators","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/export-indicators/manually-export-indicators","siteSpaceId":"sitesp_bcGV0","description":"Manually export indicators to a file in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"VTOlDV1DPuaMZJCryRZU","title":"Export Indicators Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/export-indicators/export-indicators-integrations","siteSpaceId":"sitesp_bcGV0","description":"Export indicators through integrations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"0qrxNjCpZopeQpWGnavr","title":"Export Indicators Playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/export-indicators/export-indicators-playbooks","siteSpaceId":"sitesp_bcGV0","description":"Export indicators through playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"qEMcsQBxZpvGankZD1Df","title":"Export an Indicator to CSV Using the UTF8-BOM Format","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/export-indicators/export-an-indicator-to-csv-using-the-utf8-bom-format","siteSpaceId":"sitesp_bcGV0","description":"Export indicators to UTF8-BOM CSV files in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Export Indicators"}]},{"id":"SaLc6M9tHR8Utew5GkuA","title":"Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/indicator-relationships","siteSpaceId":"sitesp_bcGV0","description":"Create connections between indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"}]},{"id":"9ifbaeZi2lxT5jcSvGH9","title":"Create Indicator Relationships","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/indicator-relationships/create-indicator-relationships","siteSpaceId":"sitesp_bcGV0","description":"Create indicator relationships in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"ty9Hdl1tXtUEV8M35DqP","title":"Leverage Relationships in the Canvas","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-management/indicator-relationships/leverage-relationships-in-the-canvas","siteSpaceId":"sitesp_bcGV0","description":"Use indicator relationships in the canvas in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Indicator Management"},{"label":"Indicator Relationships"}]},{"id":"ctJS27DGORiybtqhLD3Y","title":"Indicator Expiration","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/indicator-expiration","siteSpaceId":"sitesp_bcGV0","description":"Configure indicator expiration in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"Jd2Lts7K5QBuCxWp7oAN","title":"Threat Intel Feeds","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/threat-intel-feeds","siteSpaceId":"sitesp_bcGV0","description":"Import and export indicators through feeds in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"}]},{"id":"ccTIYUdDejbozTGOV5PQ","title":"Feed Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/threat-intel-feeds/feed-integrations","siteSpaceId":"sitesp_bcGV0","description":"Fetch indicators through feed integrations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"quTNdBVQwOmbWZhlLX4J","title":"Set the Source Reliability of Enrichment Integrations","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/threat-intel-feeds/set-the-source-reliability-of-enrichment-integrations","siteSpaceId":"sitesp_bcGV0","description":"Set enrichment integration source reliability in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"uSYm7VZbsjTmhCwLMt1d","title":"Threat Intelligence Management Playbooks","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/configure-indicators/threat-intel-feeds/threat-intelligence-management-playbooks","siteSpaceId":"sitesp_bcGV0","description":"Configure Threat Intel Management playbooks in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Configure Indicators"},{"label":"Threat Intel Feeds"}]},{"id":"5FAfgqGXnZO6wzBjPhpX","title":"Threat Intel Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports","siteSpaceId":"sitesp_bcGV0","description":"Create Threat Intel Reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"}]},{"id":"gwAARtuLGWenbcj2iMcn","title":"Threat Intel Reports Overview","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-overview","siteSpaceId":"sitesp_bcGV0","description":"Learn about threat intel reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"LMfVvl5rXOQCwR8lxuXI","title":"Threat Intel Reports Customization","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-customization","siteSpaceId":"sitesp_bcGV0","description":"Customize threat intel report types in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"mt717IeYtIm7H9HHVIdT","title":"Configure Threat Intel Report Types","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-types","siteSpaceId":"sitesp_bcGV0","description":"Configure threat intel report types in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"WH9n6y176LLFGZhs5scC","title":"Configure Threat Intel Report Fields","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-fields","siteSpaceId":"sitesp_bcGV0","description":"Configure threat intel report fields in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"pNbbwz1q2TtDaWzArVRV","title":"Configure Threat Intel Report Layouts","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-customization/configure-threat-intel-report-layouts","siteSpaceId":"sitesp_bcGV0","description":"Configure threat intel report layouts in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Customization"}]},{"id":"CHXhCyLWzRLdG53IapsZ","title":"Threat Intel Reports Management","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-management","siteSpaceId":"sitesp_bcGV0","description":"Manage threat intel reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"}]},{"id":"Ou8hqRGVcHYhpRx4DwhR","title":"Create a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-management/create-a-threat-intel-report","siteSpaceId":"sitesp_bcGV0","description":"Create a threat intel report from a type and layout in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"rTepqdJgryiF7gHtbLvs","title":"RBAC for Reports","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-management/rbac-for-reports","siteSpaceId":"sitesp_bcGV0","description":"Control threat intel report access with RBAC in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"pXzgIpEM2tT8aAH5eQzp","title":"Generate a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-management/generate-a-threat-intel-report","siteSpaceId":"sitesp_bcGV0","description":"Generate and share threat intel reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"t9uRDLrnAgjA6Mdn48o7","title":"Publish a Threat Intel Report","pathname":"/cortex-xsoar-6-threat-intel-management-guides/6.12/reports/threat-intel-reports/threat-intel-reports-management/publish-a-threat-intel-report","siteSpaceId":"sitesp_bcGV0","description":"Publish read-only threat intel reports in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Threat Intel Management Guides"},{"label":"Reports"},{"label":"Threat Intel Reports"},{"label":"Threat Intel Reports Management"}]},{"id":"8VxPAaYkRaCaj5D0EQe1","title":"Cortex XSOAR 6 Multi-Tenant Guides","pathname":"/cortex-xsoar-6-multi-tenant-guides","siteSpaceId":"sitesp_IoC4Y","description":"Start here to choose the right Cortex XSOAR 6 version.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"}]},{"id":"PzJfyjMuOqhWRwlyWV80","title":"Navigate the Multi-Tenant Guide","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15","siteSpaceId":"sitesp_A0FBt","description":"Start here for a visual overview of the Cortex XSOAR Multi-Tenant 6.15 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"}]},{"id":"9LLsJWNEP9ynZi1a8mOz","title":"Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/readme-1","siteSpaceId":"sitesp_A0FBt","description":"Explore Cortex XSOAR 6.15 multi-tenant deployments for MSSPs and enterprises, including architecture and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"}]},{"id":"BZ2jbSCp4yFgYX9ddIfU","title":"Multi-Tenant Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/readme-1/multi-tenant-overview","siteSpaceId":"sitesp_A0FBt","description":"Learn how Cortex XSOAR 6.15 multi-tenant deployments provide data segregation, centralized management, and scalable tenant operations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Multi-Tenant Deployments"}]},{"id":"FuxmjshqUnfZIcOUZ1Ba","title":"Multi-Tenant High Availability Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/readme-1/multi-tenant-high-availability-overview","siteSpaceId":"sitesp_A0FBt","description":"Understand high availability architecture, failover, and scaling for Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Multi-Tenant Deployments"}]},{"id":"WVGNm3nuaCgtrUVljVwu","title":"Plan Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/plan-your-multi-tenant-deployment","siteSpaceId":"sitesp_A0FBt","description":"Plan a Cortex XSOAR 6.15 multi-tenant deployment with sizing, security, SAML, and host-to-main communication guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"}]},{"id":"sSmKqmKLZ20VgkAVLrIi","title":"Multi-Tenant Sizing Requirements","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/plan-your-multi-tenant-deployment/multi-tenant-sizing-requirements","siteSpaceId":"sitesp_A0FBt","description":"Review Cortex XSOAR 6.15 multi-tenant sizing requirements for hosts and tenants, including production hardware recommendations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"cRlb90U54vETOC7t5m4W","title":"Configure Security Settings for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/plan-your-multi-tenant-deployment/configure-security-settings-for-multi-tenant-deployments","siteSpaceId":"sitesp_A0FBt","description":"Harden Cortex XSOAR 6.15 multi-tenant deployments with recommended server configurations for secure main and tenant communication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"usuIjJR4m5mepsyYKaYS","title":"SAML for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/plan-your-multi-tenant-deployment/saml-for-multi-tenant-deployments","siteSpaceId":"sitesp_A0FBt","description":"Configure SAML 2.0 authentication for main and tenant accounts in a Cortex XSOAR 6.15 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"wFurtIBetrsxn5pUIvDq","title":"Communication in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/plan-your-multi-tenant-deployment/communication-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_A0FBt","description":"Review ports, TLS requirements, and host-to-tenant communication for Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"POMgab9X3UOjrqBtW71V","title":"Change the Port for Host to Main Communication","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/learn-about-mult-tenant/plan-your-multi-tenant-deployment/change-the-port-for-host-to-main-communication","siteSpaceId":"sitesp_A0FBt","description":"Set a custom host-to-main communication port in a Cortex XSOAR 6.15 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"hAXHasX2lpW1SFbxknF1","title":"Multi-Tenant Deployment Installation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/onboard-multi-tenant/multi-tenant-deployment-installation","siteSpaceId":"sitesp_A0FBt","description":"Install or upgrade Cortex XSOAR 6.15 multi-tenant deployments with BoltDB or Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"}]},{"id":"pT2NVPUeKZow7HQIiYMl","title":"Install Cortex XSOAR for a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment","siteSpaceId":"sitesp_A0FBt","description":"Install Cortex XSOAR 6.15 for a multi-tenant deployment using the BoltDB database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"0EHPjmAV0XuN64U42vcR","title":"Installer Flags","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment/installer-flags","siteSpaceId":"sitesp_A0FBt","description":"Review supported installer flags for Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"},{"label":"Install Cortex XSOAR for a Multi-Tenant Deployment"}]},{"id":"ydeU49Z2sz6CP6LujPQy","title":"Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment-with-elasticsearch","siteSpaceId":"sitesp_A0FBt","description":"Install Cortex XSOAR 6.15 for a multi-tenant deployment with an Elasticsearch database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"vRz06IQjLqBFZeCUk3DG","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/onboard-multi-tenant/multi-tenant-deployment-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_A0FBt","description":"Prepare, upgrade, and validate a Cortex XSOAR 6.15 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"7ETt50ZdQWYpMiKFUE6C","title":"Get the Host Installer Manually","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/onboard-multi-tenant/multi-tenant-deployment-installation/get-the-host-installer-manually","siteSpaceId":"sitesp_A0FBt","description":"Manually download and run the host installer for Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"ctOu9MqHbDB0fRpXmuun","title":"Configure the Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment","siteSpaceId":"sitesp_A0FBt","description":"Configure hosts, tenants, backups, and engines in a Cortex XSOAR 6.15 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"q9OCabzUBv6JbcUCQw06","title":"Main Account to Tenant Communication Encryption","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/main-account-to-tenant-communication-encryption","siteSpaceId":"sitesp_A0FBt","description":"Configure encrypted, two-way main-account and tenant communication in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"AAzROAV1ntqbg1WukPMY","title":"Add a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-host","siteSpaceId":"sitesp_A0FBt","description":"Add host servers to scale Cortex XSOAR 6.15 multi-tenant deployments across tenant workloads.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"gBzzwGViGhQKKnTC5oYL","title":"Add a Tenant to a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-tenant-to-a-host","siteSpaceId":"sitesp_A0FBt","description":"Add tenant accounts to hosts and assign user roles in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"7X06uoeh0gmdTEVXImOz","title":"Delete a Tenant From a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-tenant-from-a-host","siteSpaceId":"sitesp_A0FBt","description":"Delete a tenant account from a host through Account Management in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"mV9313cv68lIYEMBYHKW","title":"Delete a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-host","siteSpaceId":"sitesp_A0FBt","description":"Delete a host from a Cortex XSOAR 6.15 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"ZSuWNMdVTZgj8X36fOv4","title":"Configure Live Backup","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-live-backup","siteSpaceId":"sitesp_A0FBt","description":"Configure Live Backup for main and host servers in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"C0Da6bh6a4JVPFgf4T16","title":"Configure the HTTP Request Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-http-request-timeout","siteSpaceId":"sitesp_A0FBt","description":"Configure HTTP request timeouts for main and tenant accounts in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"mlJDG2zT8CK7H2vAfdiO","title":"Configure the Account Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-account-timeout","siteSpaceId":"sitesp_A0FBt","description":"Configure account timeouts when moving large tenant accounts in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"wOPC9V32t9XKB78jPJoy","title":"Forward Server Configurations to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/forward-server-configurations-to-tenant-accounts","siteSpaceId":"sitesp_A0FBt","description":"Forward server configurations from the main account to tenants in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"slrQxn9b1B9ZGuSiS8zB","title":"Run a Command on Multiple Tenants","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_A0FBt","description":"Run commands on incidents across multiple tenants in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"crECTWuHu7PFmdnOaW2A","title":"Move a Tenant to a Different Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/move-a-tenant-to-a-different-host","siteSpaceId":"sitesp_A0FBt","description":"Back up and move a tenant to another host in a Cortex XSOAR 6.15 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"NSnjU3PtUX9GqPrh4tzZ","title":"Stop and Start a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/stop-and-start-a-tenant","siteSpaceId":"sitesp_A0FBt","description":"Start, stop, or reindex tenant accounts through the UI or API in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"zqJIOVr9ApaA9hvfgtJU","title":"Block and Unblock a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/block-and-unblock-a-tenant","siteSpaceId":"sitesp_A0FBt","description":"Block or unblock tenant accounts at the proxy level in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"E193oltQYUaOVHEXI8hF","title":"Reindex a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-tenant-database","siteSpaceId":"sitesp_A0FBt","description":"Reindex a tenant database in a Cortex XSOAR 6.15 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"126Kcy5frZxCWVFbcYMj","title":"Back Up a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/back-up-a-tenant","siteSpaceId":"sitesp_A0FBt","description":"Create manual or automatic backups of tenant databases in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"B3sDEhdwsNbX8HWB4IWJ","title":"Reindex a Specific Index for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-specific-index-for-a-tenant","siteSpaceId":"sitesp_A0FBt","description":"Reindex one or more indexes for an individual tenant in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"9ZaXNU0J27hnBYR0t565","title":"Restore a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-tenant-database","siteSpaceId":"sitesp_A0FBt","description":"Restore a tenant database from a manual or automated backup in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"lYa63GzbPZoonUTn7KtY","title":"Restore a Partition for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-partition-for-a-tenant","siteSpaceId":"sitesp_A0FBt","description":"Restore a partition for a specific tenant in a Cortex XSOAR 6.15 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"SdbAfxajMhZKLFWlS1IW","title":"Index War Room Entries in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/index-war-room-entries-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_A0FBt","description":"Index War Room entries and reindex incidents for tenant searches in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"ZBG6G4HWSPMRQVvZub1w","title":"Install Engines on Tenants in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-the-multi-tenant-deployment/install-engines-on-tenants-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_A0FBt","description":"Install tenant engines and configure firewall access in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"Mljakp810V1xamUK6fhZ","title":"Configure User Settings","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/configure-user-settings","siteSpaceId":"sitesp_A0FBt","description":"Cortex XSOAR 6.15 users can control details, preferences, and notifications, by changing the notifications settings in their user profile.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"BMDHv15Zy41lcULioeVc","title":"Manage Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content","siteSpaceId":"sitesp_A0FBt","description":"Manage propagation labels and sync tenant content in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"b5vu97R92WfnYl1lbabx","title":"Manage Content Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/manage-content-overview","siteSpaceId":"sitesp_A0FBt","description":"Understand propagation labels and content synchronization in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"4Jml6810c5qW2yTHfiA9","title":"Add Propagation Labels to an Existing Tenant Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/add-propagation-labels-to-an-existing-tenant-account","siteSpaceId":"sitesp_A0FBt","description":"Add propagation labels to tenant accounts to control content synchronization in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"uKaSTC4tpZqNBW7WIrQQ","title":"Add Propagation Labels to Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/add-propagation-labels-to-content","siteSpaceId":"sitesp_A0FBt","description":"Apply propagation labels to control content synchronized to tenant accounts in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"Vx9hwMnDmigyTsNDyasd","title":"Add Propagation Labels in Remote Repositories","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/add-propagation-labels-in-remote-repositories","siteSpaceId":"sitesp_A0FBt","description":"Add propagation labels through remote repositories in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"idru05K9dA7v3rP729lK","title":"Content Dependencies and Propagation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/content-dependencies-and-propagation","siteSpaceId":"sitesp_A0FBt","description":"Understand how content dependencies propagate to tenants in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"9whRp3MEKbk4youRZcai","title":"Sync Content to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts","siteSpaceId":"sitesp_A0FBt","description":"Synchronize content with individual or all tenant accounts in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"HzfwP82onUyyk2EnpSlO","title":"Troubleshoot Errors When Syncing All Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts/troubleshoot-errors-when-syncing-all-accounts","siteSpaceId":"sitesp_A0FBt","description":"Troubleshoot all-account sync errors in large Cortex XSOAR 6.15 multi-tenant environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"},{"label":"Sync Content to Tenant Accounts"}]},{"id":"oJG0SzpvjWvVNIuV8c9G","title":"Disable Propagation Labels","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/disable-propagation-labels","siteSpaceId":"sitesp_A0FBt","description":"Disable propagation labels and automatically synchronize tenant content in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"30HakBEJP3bbT43vClqW","title":"Restrict Actions for Custom Locked Content Items","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/manage-content/restrict-actions-for-custom-locked-content-items","siteSpaceId":"sitesp_A0FBt","description":"Restrict tenant actions for custom locked content items in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"5CEtrKdx8cniaLzEjc8A","title":"Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/share-indicators","siteSpaceId":"sitesp_A0FBt","description":"Share threat indicators between tenant accounts in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"6ZNh4q5gYVBZgnYheZOw","title":"Share Indicators Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/share-indicators/share-indicators-overview","siteSpaceId":"sitesp_A0FBt","description":"Share tenant indicators through shared Elasticsearch indexes in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"AbjNfhNEgKC3sNfgJGi8","title":"Manually Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/share-indicators/manually-share-indicators","siteSpaceId":"sitesp_A0FBt","description":"Manually share tenant indicators with a dedicated Elasticsearch index in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"fidsDdnwWafuEVeIec4W","title":"Export Indicators to the Shared Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/share-indicators/export-indicators-to-the-shared-index","siteSpaceId":"sitesp_A0FBt","description":"Configure tenant indicator exports to a shared index in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"Oig0lPNgOteUspeM2rxk","title":"Ingest Indicators from the Shared Indicators Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/share-indicators/ingest-indicators-from-the-shared-indicators-index","siteSpaceId":"sitesp_A0FBt","description":"Configure tenants to ingest shared indicators with Elasticsearch Feed in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"jKzGI8ESkpnyL5yl4zzy","title":"Remote Repositories for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments","siteSpaceId":"sitesp_A0FBt","description":"Configure remote repositories for Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"Yfp2EkQK4InFyqvLfqQ5","title":"Remote Repositories Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/remote-repositories-overview","siteSpaceId":"sitesp_A0FBt","description":"Develop, test, and synchronize tenant content with remote repositories in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"AFMicdyWFx77OUkkwDRS","title":"Configure a Remote Repository on a Development Machine","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_A0FBt","description":"Configure a development-machine remote repository for Cortex XSOAR 6.15 multi-tenant content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"JaiiEmOeZFAnU2flZHpB","title":"Configure a Remote Repository on the Main Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-the-main-account","siteSpaceId":"sitesp_A0FBt","description":"Configure a main-account remote repository for Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"33JBxPjH6zlEjSGJ468g","title":"Edit and Push Content to a Remote Repository","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_A0FBt","description":"Edit and push content to remote repositories in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"0Hvzi6dK2Mx945VRqjvJ","title":"Troubleshoot a Remote Repository Configuration","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_A0FBt","description":"Troubleshoot remote repository configuration issues in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"DUmromYlOfinp3G8wF2k","title":"Troubleshoot a Remote Repository Definition","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-definition","siteSpaceId":"sitesp_A0FBt","description":"Resolve remote repository definition errors in Cortex XSOAR 6.15 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"ELVFOB0pYDfISqzMfvUB","title":"Troubleshoot Editing and Pushing Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-editing-and-pushing-content","siteSpaceId":"sitesp_A0FBt","description":"Troubleshoot editing and pushing content to remote repositories in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"dkmEKvJiolrXNTxrmhiL","title":"Troubleshoot Content Issues","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.15/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-content-issues","siteSpaceId":"sitesp_A0FBt","description":"Troubleshoot remote repository content issues and restore missing content in Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"PzJfyjMuOqhWRwlyWV80","title":"Navigate the Multi-Tenant Guide","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14","siteSpaceId":"sitesp_bcAm5","description":"Start here for a visual overview of the Cortex XSOAR Multi-Tenant 6.14 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"}]},{"id":"9LLsJWNEP9ynZi1a8mOz","title":"Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/readme-1","siteSpaceId":"sitesp_bcAm5","description":"Explore Cortex XSOAR 6.14 multi-tenant deployments for MSSPs and enterprises, including architecture and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"}]},{"id":"BZ2jbSCp4yFgYX9ddIfU","title":"Multi-Tenant Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/readme-1/multi-tenant-overview","siteSpaceId":"sitesp_bcAm5","description":"Learn how Cortex XSOAR 6.14 multi-tenant deployments provide data segregation, centralized management, and scalable tenant operations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Multi-Tenant Deployments"}]},{"id":"FuxmjshqUnfZIcOUZ1Ba","title":"Multi-Tenant High Availability Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/readme-1/multi-tenant-high-availability-overview","siteSpaceId":"sitesp_bcAm5","description":"Understand high availability architecture, failover, and scaling for Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Multi-Tenant Deployments"}]},{"id":"WVGNm3nuaCgtrUVljVwu","title":"Plan Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/plan-your-multi-tenant-deployment","siteSpaceId":"sitesp_bcAm5","description":"Plan a Cortex XSOAR 6.14 multi-tenant deployment with sizing, security, SAML, and host-to-main communication guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"}]},{"id":"sSmKqmKLZ20VgkAVLrIi","title":"Multi-Tenant Sizing Requirements","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/plan-your-multi-tenant-deployment/multi-tenant-sizing-requirements","siteSpaceId":"sitesp_bcAm5","description":"Review Cortex XSOAR 6.14 multi-tenant sizing requirements for hosts and tenants, including production hardware recommendations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"cRlb90U54vETOC7t5m4W","title":"Configure Security Settings for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/plan-your-multi-tenant-deployment/configure-security-settings-for-multi-tenant-deployments","siteSpaceId":"sitesp_bcAm5","description":"Harden Cortex XSOAR 6.14 multi-tenant deployments with recommended server configurations for secure main and tenant communication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"usuIjJR4m5mepsyYKaYS","title":"SAML for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/plan-your-multi-tenant-deployment/saml-for-multi-tenant-deployments","siteSpaceId":"sitesp_bcAm5","description":"Configure SAML 2.0 authentication for main and tenant accounts in a Cortex XSOAR 6.14 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"wFurtIBetrsxn5pUIvDq","title":"Communication in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/plan-your-multi-tenant-deployment/communication-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_bcAm5","description":"Review ports, TLS requirements, and host-to-tenant communication for Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"wYQuyxI4AjzK5oJorZ4T","title":"Configure unidirectional communication","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/plan-your-multi-tenant-deployment/communication-in-a-multi-tenant-deployment/configure-unidirectional-communication","siteSpaceId":"sitesp_bcAm5","description":"Configure secure unidirectional host-to-main communication for a Cortex XSOAR 6.14 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"},{"label":"Communication in a Multi-Tenant Deployment"}]},{"id":"POMgab9X3UOjrqBtW71V","title":"Change the Port for Host to Main Communication","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/plan-your-multi-tenant-deployment/change-the-port-for-host-to-main-communication","siteSpaceId":"sitesp_bcAm5","description":"Set a custom host-to-main communication port in a Cortex XSOAR 6.14 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Mult-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"hAXHasX2lpW1SFbxknF1","title":"Multi-Tenant Deployment Installation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/onboard-multi-tenant/multi-tenant-deployment-installation","siteSpaceId":"sitesp_bcAm5","description":"Install or upgrade Cortex XSOAR 6.14 multi-tenant deployments with BoltDB or Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"}]},{"id":"pT2NVPUeKZow7HQIiYMl","title":"Install Cortex XSOAR for a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment","siteSpaceId":"sitesp_bcAm5","description":"Install Cortex XSOAR 6.14 for a multi-tenant deployment on a single server with the application and database services on one host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"0EHPjmAV0XuN64U42vcR","title":"Installer Flags","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment/installer-flags","siteSpaceId":"sitesp_bcAm5","description":"Review supported installer flags for Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"},{"label":"Install Cortex XSOAR for a Multi-Tenant Deployment"}]},{"id":"ydeU49Z2sz6CP6LujPQy","title":"Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment-with-elasticsearch","siteSpaceId":"sitesp_bcAm5","description":"Install Cortex XSOAR 6.14 for a multi-tenant deployment with an Elasticsearch database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"vRz06IQjLqBFZeCUk3DG","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/onboard-multi-tenant/multi-tenant-deployment-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_bcAm5","description":"Prepare, upgrade, and validate a Cortex XSOAR 6.14 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"7ETt50ZdQWYpMiKFUE6C","title":"Get the Host Installer Manually","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/onboard-multi-tenant/multi-tenant-deployment-installation/get-the-host-installer-manually","siteSpaceId":"sitesp_bcAm5","description":"Manually download and run the host installer for Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"ctOu9MqHbDB0fRpXmuun","title":"Configure the Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment","siteSpaceId":"sitesp_bcAm5","description":"Configure hosts, tenants, backups, and engines in a Cortex XSOAR 6.14 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"q9OCabzUBv6JbcUCQw06","title":"Main Account to Tenant Communication Encryption","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/main-account-to-tenant-communication-encryption","siteSpaceId":"sitesp_bcAm5","description":"Configure encrypted, two-way main-account and tenant communication in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"AAzROAV1ntqbg1WukPMY","title":"Add a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-host","siteSpaceId":"sitesp_bcAm5","description":"Add host servers to scale Cortex XSOAR 6.14 multi-tenant deployments across tenant workloads.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"gBzzwGViGhQKKnTC5oYL","title":"Add a Tenant to a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-tenant-to-a-host","siteSpaceId":"sitesp_bcAm5","description":"Add tenant accounts to hosts and assign user roles in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"7X06uoeh0gmdTEVXImOz","title":"Delete a Tenant From a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-tenant-from-a-host","siteSpaceId":"sitesp_bcAm5","description":"Delete a tenant account from a host through Account Management in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"mV9313cv68lIYEMBYHKW","title":"Delete a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-host","siteSpaceId":"sitesp_bcAm5","description":"Delete a host from a Cortex XSOAR 6.14 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"ZSuWNMdVTZgj8X36fOv4","title":"Configure Live Backup","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-live-backup","siteSpaceId":"sitesp_bcAm5","description":"Configure Live Backup for main and host servers in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"C0Da6bh6a4JVPFgf4T16","title":"Configure the HTTP Request Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-http-request-timeout","siteSpaceId":"sitesp_bcAm5","description":"Configure HTTP request timeouts for main and tenant accounts in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"mlJDG2zT8CK7H2vAfdiO","title":"Configure the Account Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-account-timeout","siteSpaceId":"sitesp_bcAm5","description":"Configure account timeouts when moving large tenant accounts in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"wOPC9V32t9XKB78jPJoy","title":"Forward Server Configurations to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/forward-server-configurations-to-tenant-accounts","siteSpaceId":"sitesp_bcAm5","description":"Forward server configurations from the main account to tenants in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"slrQxn9b1B9ZGuSiS8zB","title":"Run a Command on Multiple Tenants","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_bcAm5","description":"Run commands on incidents across multiple tenants in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"crECTWuHu7PFmdnOaW2A","title":"Move a Tenant to a Different Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/move-a-tenant-to-a-different-host","siteSpaceId":"sitesp_bcAm5","description":"Back up and move a tenant to another host in a Cortex XSOAR 6.14 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"NSnjU3PtUX9GqPrh4tzZ","title":"Stop and Start a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/stop-and-start-a-tenant","siteSpaceId":"sitesp_bcAm5","description":"Start, stop, or reindex tenant accounts through the UI or API in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"zqJIOVr9ApaA9hvfgtJU","title":"Block and Unblock a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/block-and-unblock-a-tenant","siteSpaceId":"sitesp_bcAm5","description":"Block or unblock tenant accounts at the proxy level in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"E193oltQYUaOVHEXI8hF","title":"Reindex a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-tenant-database","siteSpaceId":"sitesp_bcAm5","description":"Reindex a tenant database in a Cortex XSOAR 6.14 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"126Kcy5frZxCWVFbcYMj","title":"Back Up a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/back-up-a-tenant","siteSpaceId":"sitesp_bcAm5","description":"Create manual or automatic backups of tenant databases in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"B3sDEhdwsNbX8HWB4IWJ","title":"Reindex a Specific Index for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-specific-index-for-a-tenant","siteSpaceId":"sitesp_bcAm5","description":"Reindex one or more indexes for an individual tenant in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"9ZaXNU0J27hnBYR0t565","title":"Restore a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-tenant-database","siteSpaceId":"sitesp_bcAm5","description":"Restore a tenant database from a manual or automated backup in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"lYa63GzbPZoonUTn7KtY","title":"Restore a Partition for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-partition-for-a-tenant","siteSpaceId":"sitesp_bcAm5","description":"Restore a partition for a specific tenant in a Cortex XSOAR 6.14 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"SdbAfxajMhZKLFWlS1IW","title":"Index War Room Entries in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/index-war-room-entries-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_bcAm5","description":"Index War Room entries and reindex incidents for tenant searches in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"ZBG6G4HWSPMRQVvZub1w","title":"Install Engines on Tenants in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-the-multi-tenant-deployment/install-engines-on-tenants-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_bcAm5","description":"Install tenant engines and configure firewall access in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"Mljakp810V1xamUK6fhZ","title":"Configure User Settings","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/configure-user-settings","siteSpaceId":"sitesp_bcAm5","description":"Cortex XSOAR 6.14 users can control details, preferences, and notifications, by changing the notifications settings in their user profile.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"BMDHv15Zy41lcULioeVc","title":"Manage Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content","siteSpaceId":"sitesp_bcAm5","description":"Manage propagation labels and sync tenant content in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"b5vu97R92WfnYl1lbabx","title":"Manage Content Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/manage-content-overview","siteSpaceId":"sitesp_bcAm5","description":"Understand propagation labels and content synchronization in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"4Jml6810c5qW2yTHfiA9","title":"Add Propagation Labels to an Existing Tenant Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/add-propagation-labels-to-an-existing-tenant-account","siteSpaceId":"sitesp_bcAm5","description":"Add propagation labels to tenant accounts to control content synchronization in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"uKaSTC4tpZqNBW7WIrQQ","title":"Add Propagation Labels to Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/add-propagation-labels-to-content","siteSpaceId":"sitesp_bcAm5","description":"Apply propagation labels to control content synchronized to tenant accounts in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"Vx9hwMnDmigyTsNDyasd","title":"Add Propagation Labels in Remote Repositories","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/add-propagation-labels-in-remote-repositories","siteSpaceId":"sitesp_bcAm5","description":"Add propagation labels through remote repositories in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"idru05K9dA7v3rP729lK","title":"Content Dependencies and Propagation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/content-dependencies-and-propagation","siteSpaceId":"sitesp_bcAm5","description":"Understand how content dependencies propagate to tenants in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"9whRp3MEKbk4youRZcai","title":"Sync Content to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts","siteSpaceId":"sitesp_bcAm5","description":"Synchronize content with individual or all tenant accounts in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"HzfwP82onUyyk2EnpSlO","title":"Troubleshoot Errors When Syncing All Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts/troubleshoot-errors-when-syncing-all-accounts","siteSpaceId":"sitesp_bcAm5","description":"Troubleshoot all-account sync errors in large Cortex XSOAR 6.14 multi-tenant environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"},{"label":"Sync Content to Tenant Accounts"}]},{"id":"oJG0SzpvjWvVNIuV8c9G","title":"Disable Propagation Labels","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/disable-propagation-labels","siteSpaceId":"sitesp_bcAm5","description":"Disable propagation labels and automatically synchronize tenant content in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"30HakBEJP3bbT43vClqW","title":"Restrict Actions for Custom Locked Content Items","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/manage-content/restrict-actions-for-custom-locked-content-items","siteSpaceId":"sitesp_bcAm5","description":"Restrict tenant actions for custom locked content items in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"5CEtrKdx8cniaLzEjc8A","title":"Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/share-indicators","siteSpaceId":"sitesp_bcAm5","description":"Share threat indicators between tenant accounts in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"6ZNh4q5gYVBZgnYheZOw","title":"Share Indicators Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/share-indicators/share-indicators-overview","siteSpaceId":"sitesp_bcAm5","description":"Share tenant indicators through shared Elasticsearch indexes in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"AbjNfhNEgKC3sNfgJGi8","title":"Manually Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/share-indicators/manually-share-indicators","siteSpaceId":"sitesp_bcAm5","description":"Manually share tenant indicators with a dedicated Elasticsearch index in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"fidsDdnwWafuEVeIec4W","title":"Export Indicators to the Shared Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/share-indicators/export-indicators-to-the-shared-index","siteSpaceId":"sitesp_bcAm5","description":"Configure tenant indicator exports to a shared index in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"Oig0lPNgOteUspeM2rxk","title":"Ingest Indicators from the Shared Indicators Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/share-indicators/ingest-indicators-from-the-shared-indicators-index","siteSpaceId":"sitesp_bcAm5","description":"Configure tenants to ingest shared indicators with Elasticsearch Feed in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"jKzGI8ESkpnyL5yl4zzy","title":"Remote Repositories for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments","siteSpaceId":"sitesp_bcAm5","description":"Configure remote repositories for Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"Yfp2EkQK4InFyqvLfqQ5","title":"Remote Repositories Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/remote-repositories-overview","siteSpaceId":"sitesp_bcAm5","description":"Develop, test, and synchronize tenant content with remote repositories in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"AFMicdyWFx77OUkkwDRS","title":"Configure a Remote Repository on a Development Machine","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_bcAm5","description":"Configure a development-machine remote repository for Cortex XSOAR 6.14 multi-tenant content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"JaiiEmOeZFAnU2flZHpB","title":"Configure a Remote Repository on the Main Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-the-main-account","siteSpaceId":"sitesp_bcAm5","description":"Configure a main-account remote repository for Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"33JBxPjH6zlEjSGJ468g","title":"Edit and Push Content to a Remote Repository","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_bcAm5","description":"Edit and push content to remote repositories in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"0Hvzi6dK2Mx945VRqjvJ","title":"Troubleshoot a Remote Repository Configuration","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_bcAm5","description":"Troubleshoot remote repository configuration issues in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"DUmromYlOfinp3G8wF2k","title":"Troubleshoot a Remote Repository Definition","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-definition","siteSpaceId":"sitesp_bcAm5","description":"Resolve remote repository definition errors in Cortex XSOAR 6.14 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"ELVFOB0pYDfISqzMfvUB","title":"Troubleshoot Editing and Pushing Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-editing-and-pushing-content","siteSpaceId":"sitesp_bcAm5","description":"Troubleshoot editing and pushing content to remote repositories in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"dkmEKvJiolrXNTxrmhiL","title":"Troubleshoot Content Issues","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.14/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-content-issues","siteSpaceId":"sitesp_bcAm5","description":"Troubleshoot remote repository content issues and restore missing content in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"ZNkBOlOP3kDitrsKMqQd","title":"Navigate the Multi-Tenant Guide","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13","siteSpaceId":"sitesp_eON6I","description":"Start here for a visual overview of Cortex XSOAR 6.13 Multi-Tenant documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Multi-Tenant"}]},{"id":"yvsnhPBCvw7CdLbc1CZO","title":"Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/learn-about-multi-tenant/readme-1","siteSpaceId":"sitesp_eON6I","description":"Overview of Cortex XSOAR 6.13 multi-tenant deployments for MSSPs and enterprises.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Multi-Tenant"}]},{"id":"FrDZSw8pHJGJWArXJ1m7","title":"Multi-Tenant Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/learn-about-multi-tenant/readme-1/multi-tenant-overview","siteSpaceId":"sitesp_eON6I","description":"Cortex XSOAR 6.13 multi-tenant deployments for MSSPs and enterprises requiring tenant data segregation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Multi-Tenant"},{"label":"Multi-Tenant Deployments"}]},{"id":"Wh5DtdeKOXeImnyewIXd","title":"Multi-Tenant High Availability Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/learn-about-multi-tenant/readme-1/multi-tenant-high-availability-overview","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, understand high availability for a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Multi-Tenant"},{"label":"Multi-Tenant Deployments"}]},{"id":"HvefIPxwNQqPOoJdOyB9","title":"Plan Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/plan-your-multi-tenant-deployment","siteSpaceId":"sitesp_eON6I","description":"Plan Cortex XSOAR 6.13 multi-tenant deployments with sizing and security guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"}]},{"id":"8ft7rZ8FQ9PLyq0LMdap","title":"Multi-Tenant Sizing Requirements","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/plan-your-multi-tenant-deployment/multi-tenant-sizing-requirements","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, size multi-tenant deployments by hosts and tenants.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"MsnPcm95YOJ3pLIVLaxv","title":"Configure Security Settings for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/plan-your-multi-tenant-deployment/configure-security-settings-for-multi-tenant-deployments","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure security settings for multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"xkbFPKyyIKFPvdj5D5s9","title":"SAML for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/plan-your-multi-tenant-deployment/saml-for-multi-tenant-deployments","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, authenticate multi-tenant users with SAML 2.0.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"4rFBapAc4BUNqgaPkxq9","title":"Communication in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/plan-your-multi-tenant-deployment/communication-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, review ports for multi-tenant deployment communication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"rDcMYXPAZQCYCgUVTG96","title":"Change the Port for Host to Main Communication","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/plan-your-multi-tenant-deployment/change-the-port-for-host-to-main-communication","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, set a custom host-to-main port for multi-tenant communication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"vQ6dUBsngByXSoSuQqKP","title":"Multi-Tenant Deployment Installation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/multi-tenant-deployment-installation","siteSpaceId":"sitesp_eON6I","description":"Install or upgrade Cortex XSOAR 6.13 multi-tenant deployments with BoltDB or Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"}]},{"id":"4xO5Wof3Z1A1YOH7DqnD","title":"Install Cortex XSOAR for a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment","siteSpaceId":"sitesp_eON6I","description":"Install Cortex XSOAR 6.13 for a multi-tenant deployment using the BoltDB database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"fQfy7FKc7oMttVEs7ro2","title":"Installer Flags","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment/installer-flags","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, review supported installer flags for multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"},{"label":"Install Cortex XSOAR for a Multi-Tenant Deployment"}]},{"id":"RB0QdKchJ0loklEYjXES","title":"Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment-with-elasticsearch","siteSpaceId":"sitesp_eON6I","description":"Install Cortex XSOAR 6.13 for a multi-tenant deployment with an Elasticsearch database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"hC2DCv7QCUPC370RiqZs","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/multi-tenant-deployment-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_eON6I","description":"Prepare, upgrade, and validate a Cortex XSOAR 6.13 multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"1exAVPuHHPOElEIkgZP1","title":"Get the Host Installer Manually","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/onboard-multi-tenant/multi-tenant-deployment-installation/get-the-host-installer-manually","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, manually retrieve and run the multi-tenant host installer.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"bBsWOKVvbD7wBpEqsdFs","title":"Configure the Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure multi-tenant hosts, tenants, backups, and engines.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"CoHuXgib4Zi54my0EGC6","title":"Main Account to Tenant Communication Encryption","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/main-account-to-tenant-communication-encryption","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure encryption and API keys for tenant communication.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"o0cbdd6bpIaaNfcemKo7","title":"Add a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-host","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, add hosts and scale multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"t8kJQRjK2zeFne307v7v","title":"Add a Tenant to a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-tenant-to-a-host","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, add tenants to hosts and assign user roles.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"BqgxcQ1XG6NGs0XxIbmc","title":"Delete a Tenant From a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-tenant-from-a-host","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, delete a tenant from a multi-tenant host.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"LjVT1OJoSkfB2BuZ3hgd","title":"Delete a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-host","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, delete a host from a multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"iWANmoZ8FXljImFOfLFS","title":"Configure Live Backup","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-live-backup","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure Live Backup for multi-tenant main and host servers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"74PE83qsAKGBQ1SuqChQ","title":"Configure the HTTP Request Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-http-request-timeout","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure HTTP timeouts for multi-tenant accounts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"akzbRwG3A4yeqQFDlYrd","title":"Configure the Account Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-account-timeout","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure timeouts when moving large tenant accounts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"SjeZRDJSl7iyHfdfpFEi","title":"Forward Server Configurations to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/forward-server-configurations-to-tenant-accounts","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, forward server configurations to multi-tenant accounts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"RP32i5nwwGxs2NCWlUdm","title":"Run a Command on Multiple Tenants","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, run commands on incidents across multiple tenants.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"MN3QVtZvYwKfLjzUPm8L","title":"Move a Tenant to a Different Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/move-a-tenant-to-a-different-host","siteSpaceId":"sitesp_eON6I","description":"Move a tenant to a different host in a Cortex XSOAR multi-tenant deployment. Backup the tenant first.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"E7vz1PjNJVnQeoH2C81P","title":"Stop and Start a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/stop-and-start-a-tenant","siteSpaceId":"sitesp_eON6I","description":"Stop and start a tenant in a Cortex XSOAR multi-tenant deployment, through the API or the UI. Reindex a tenant.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"PS0RXzZ3noUnKGRwvrs0","title":"Block and Unblock a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/block-and-unblock-a-tenant","siteSpaceId":"sitesp_eON6I","description":"Block or unblock a tenant (account) at the proxy level for Cortex XSOAR multi-tenant deployment. Troubleshoot tenant performance issues.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"agNyIHw1OGOUpvZ5BayU","title":"Reindex a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-tenant-database","siteSpaceId":"sitesp_eON6I","description":"Reindex a tenant database in the Cortex XSOAR multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"5b5OHQO4UEFyFCZvQXVZ","title":"Back Up a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/back-up-a-tenant","siteSpaceId":"sitesp_eON6I","description":"Create a backup of a tenant account for a Cortex XSOAR multi-tenant deployment. Perform manual and automatic backups of the database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"xyiRkXb9LLZlq6O7V3Z3","title":"Reindex a Specific Index for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-specific-index-for-a-tenant","siteSpaceId":"sitesp_eON6I","description":"Reindex one or more indexes for an individual tenant in a multi-tenant deployment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"eDr8QTTdIWWphQkkSlfI","title":"Restore a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-tenant-database","siteSpaceId":"sitesp_eON6I","description":"Restore a tenant database from a manual backup or automated backup back up in Cortex XSOAR.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"aAqGbK1Bd0I29eQBjYbn","title":"Restore a Partition for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-partition-for-a-tenant","siteSpaceId":"sitesp_eON6I","description":"Restore a partition for a specific tenant in a multi tenant environment","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"gAfy5YuYAj6G1RrDN7LB","title":"Index War Room Entries in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/index-war-room-entries-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_eON6I","description":"Index Cortex XSOAR War Room entries to ensure that you can search for them in the Search Incidents. Re-index incidents for selected months.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"5ZnmgDGGIDMCr3yo6gsE","title":"Install Engines on Tenants in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-the-multi-tenant-deployment/install-engines-on-tenants-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_eON6I","description":"Install engines on tenants in a Cortex XSOAR multi-tenant deployment. Configure firewall to allow communication between engine and server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"MUt6gKWXomPxZm6b0K7z","title":"Configure User Settings","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/configure-user-settings","siteSpaceId":"sitesp_eON6I","description":"Cortex XSOAR 6.13 users can control details, preferences, and notifications, by changing the notifications settings in their user profile.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"0lTZfpcDRbsgEZ9d3o9h","title":"Manage Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, manage propagation labels and sync multi-tenant content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"fLzg0g358qTQCLpuB9Bi","title":"Manage Content Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/manage-content-overview","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, use propagation labels to push content to tenant accounts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"lZmSbiXybBOBqyWcBCmy","title":"Add Propagation Labels to an Existing Tenant Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/add-propagation-labels-to-an-existing-tenant-account","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, add propagation labels to control tenant content syncing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"2CHLIDnFiXE43VhxJWNj","title":"Add Propagation Labels to Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/add-propagation-labels-to-content","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, apply propagation labels to control tenant content syncing.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"iCl0CIUdOfnXzEF6x5x7","title":"Add Propagation Labels in Remote Repositories","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/add-propagation-labels-in-remote-repositories","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, use remote repositories to apply tenant propagation labels.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"bpgOFmtYA3bTdkI2gZwT","title":"Content Dependencies and Propagation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/content-dependencies-and-propagation","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, understand content dependencies and tenant propagation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"2aEa32Vgp8TY0PkknG3X","title":"Sync Content to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, sync content to one or all tenant accounts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"oLH8DJu5G2qqbaEtsvoU","title":"Troubleshoot Errors When Syncing All Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts/troubleshoot-errors-when-syncing-all-accounts","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, fix multi-tenant account sync errors at scale.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"},{"label":"Sync Content to Tenant Accounts"}]},{"id":"vtcFtS9f2ZXKiPH77bsk","title":"Disable Propagation Labels","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/disable-propagation-labels","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, disable propagation labels and automatically sync tenant content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"Gp5BsDvsChYJPJnUT9MB","title":"Restrict Actions for Custom Locked Content Items","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/manage-content/restrict-actions-for-custom-locked-content-items","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, restrict tenant actions for custom locked content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Manage Content"}]},{"id":"PILP3VmtvxyedrzR4n31","title":"Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/share-indicators","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, share indicators between multi-tenant accounts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"3CmWZM1OnsfikSTYPWtw","title":"Share Indicators Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/share-indicators/share-indicators-overview","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, share tenant indicators through a shared index.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"G3WqUQDBtUYseliHJ6sO","title":"Manually Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/share-indicators/manually-share-indicators","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, manually share tenant indicators through Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"KrLS5EsPTqi2PtXeqtUF","title":"Export Indicators to the Shared Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/share-indicators/export-indicators-to-the-shared-index","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, export tenant indicators to the shared index.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"PHhk31Jl0PZr9SyzXEh6","title":"Ingest Indicators from the Shared Indicators Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/share-indicators/ingest-indicators-from-the-shared-indicators-index","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, ingest shared indicators into multi-tenant accounts.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Share Indicators"}]},{"id":"wl3OcSQr3NrTwwFcF6Gx","title":"Remote Repositories for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure remote repositories for multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"}]},{"id":"wf1NZJfS15rv6Jcmmv8p","title":"Remote Repositories Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/remote-repositories-overview","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, use remote repositories for multi-tenant content development.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"2iarmI7akmC6LrBFvh2b","title":"Configure a Remote Repository on a Development Machine","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure development-machine remote repositories and selective propagation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"rmevOdwhZUn8RksOUqsf","title":"Configure a Remote Repository on the Main Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-the-main-account","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, configure main-account remote repositories for multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"Tan6wZ8NPUi3v5Oc7glN","title":"Edit and Push Content to a Remote Repository","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, edit and push multi-tenant content to remote repositories.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"ye2IkjoYLPnRB9r8F0ti","title":"Troubleshoot a Remote Repository Configuration","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, troubleshoot multi-tenant remote repository configurations.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"xRuM5pLQFNEJgkyZs3Na","title":"Troubleshoot a Remote Repository Definition","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-definition","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, troubleshoot multi-tenant remote repository definitions.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"4ZDgwxMH0MDFauXEaTFt","title":"Troubleshoot Editing and Pushing Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-editing-and-pushing-content","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, troubleshoot editing and pushing multi-tenant repository content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"lTwduhTx8v7rrqQ2fwFJ","title":"Troubleshoot Content Issues","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.13/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-content-issues","siteSpaceId":"sitesp_eON6I","description":"In Cortex XSOAR 6.13, troubleshoot remote repository content and restore backups.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Configure Multi-Tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"oFWdEtRDuoBYUBGVNifu","title":"Navigate the Multi-Tenant Guide","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12","siteSpaceId":"sitesp_q89vi","description":"Start here for a visual overview of the Cortex XSOAR Multi-Tenant 6.12 documentation areas.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Multi-Tenant"}]},{"id":"IeskGS7uxMmwll9BBNDT","title":"Multi-Tenant Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/learn-about-multi-tenant/multi-tenant-overview","siteSpaceId":"sitesp_q89vi","description":"Cortex XSOAR 6.12 multi-tenant deployments for Managed Security Service Providers and enterprises needing tenant data segregation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Multi-Tenant"}]},{"id":"FT4c1sgPzFLsKtGvPkkq","title":"Multi-Tenant High Availability Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/learn-about-multi-tenant/multi-tenant-high-availability-overview","siteSpaceId":"sitesp_q89vi","description":"A conceptual overview of high availability in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Learn about Multi-Tenant"}]},{"id":"M5HF1rePWxe545MOjf1Z","title":"Plan Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/plan-your-multi-tenant-deployment","siteSpaceId":"sitesp_q89vi","description":"Sizing requirements and security settings in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"}]},{"id":"TIQOrNRZAoq6E3PNK9BZ","title":"Multi-Tenant Sizing Requirements","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/plan-your-multi-tenant-deployment/multi-tenant-sizing-requirements","siteSpaceId":"sitesp_q89vi","description":"Sizing requirements in Cortex XSOAR 6.12 multi-tenant deployments depend on deployed hosts and tenants.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"NHekEkmQgufrJYHdUJz0","title":"Configure Security Settings for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/plan-your-multi-tenant-deployment/configure-security-settings-for-multi-tenant-deployments","siteSpaceId":"sitesp_q89vi","description":"Add server configurations to harden Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"V9jqKjYzQnkYVtnCoVCq","title":"SAML for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/plan-your-multi-tenant-deployment/saml-for-multi-tenant-deployments","siteSpaceId":"sitesp_q89vi","description":"Authenticate users with SAML 2.0 in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"sLSo8cgeN2PXGbnWIdcu","title":"Communication in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/plan-your-multi-tenant-deployment/communication-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_q89vi","description":"Ports used in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"TA0u1gEyPGQhPOVfIGce","title":"Change the Port for Host to Main Communication","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/plan-your-multi-tenant-deployment/change-the-port-for-host-to-main-communication","siteSpaceId":"sitesp_q89vi","description":"Set a custom host-to-main port in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Plan Your Multi-Tenant Deployment"}]},{"id":"Fecq761tQvgqjHSiaukV","title":"Multi-Tenant Deployment Installation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/multi-tenant-deployment-installation","siteSpaceId":"sitesp_q89vi","description":"Install or upgrade Cortex XSOAR 6.12 multi-tenant deployments with Bolt/Bleve or Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"}]},{"id":"O33cHy6S6dmr96JCN5ah","title":"Install Cortex XSOAR for a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment","siteSpaceId":"sitesp_q89vi","description":"Install Cortex XSOAR 6.12 for a multi-tenant deployment using Bolt/Bleve, not Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"Yrwih6bMZ2lrRUrG3wgT","title":"Installer Flags","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment/installer-flags","siteSpaceId":"sitesp_q89vi","description":"Supported installer flags in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"},{"label":"Install Cortex XSOAR for a Multi-Tenant Deployment"}]},{"id":"qfL917IY6SGY1BSbWRJG","title":"Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/multi-tenant-deployment-installation/install-cortex-xsoar-for-a-multi-tenant-deployment-with-elasticsearch","siteSpaceId":"sitesp_q89vi","description":"Install Cortex XSOAR 6.12 multi-tenant deployments with an Elasticsearch database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"vJ5EQY3BNi04ThJtdHeV","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/multi-tenant-deployment-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_q89vi","description":"Prepare, upgrade, and complete post-upgrade tasks in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"kKTeFMVj79BjCBW2soRW","title":"Get the Host Installer Manually","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/onboard-multi-tenant/multi-tenant-deployment-installation/get-the-host-installer-manually","siteSpaceId":"sitesp_q89vi","description":"Manually retrieve the host installer in Cortex XSOAR 6.12 when server access is unavailable.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"Onboard Multi-Tenant"},{"label":"Multi-Tenant Deployment Installation"}]},{"id":"yhyWDSYxuSItgeNXo01d","title":"Configure the Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment","siteSpaceId":"sitesp_q89vi","description":"Configure hosts, tenants, backups, and engines in Cortex XSOAR 6.12 Multi-Tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"}]},{"id":"QodlnaYtRnsKt6iPpYsO","title":"Main Account to Tenant Communication Encryption","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/main-account-to-tenant-communication-encryption","siteSpaceId":"sitesp_q89vi","description":"Configure main-account and tenant communication in Cortex XSOAR 6.12 Multi-Tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"9k5GDR2r5wuLUnbFAZU4","title":"Add a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-host","siteSpaceId":"sitesp_q89vi","description":"Add hosts and scale Cortex XSOAR 6.12 multi-tenant deployments across host servers.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"zhrUN2NwPz2HMAfsLsj3","title":"Add a Tenant to a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/add-a-tenant-to-a-host","siteSpaceId":"sitesp_q89vi","description":"Add a tenant and assign users in Cortex XSOAR 6.12 Multi-Tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"BWr16MeQ2TNUDsYQAELu","title":"Delete a Tenant From a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-tenant-from-a-host","siteSpaceId":"sitesp_q89vi","description":"Delete a tenant from a host in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"VWMz9q7gsxHcpz2EfIOB","title":"Delete a Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/delete-a-host","siteSpaceId":"sitesp_q89vi","description":"Delete a host from a Cortex XSOAR 6.12 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"tkijYVpJcYXsqOA4u2uo","title":"Configure Live Backup","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-live-backup","siteSpaceId":"sitesp_q89vi","description":"Configure Live Backup in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"VSPOjCv7QYMvZV44e1iw","title":"Configure the HTTP Request Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-http-request-timeout","siteSpaceId":"sitesp_q89vi","description":"Configure HTTP timeouts in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"1AA7LR1xrvG1mTFGcaLG","title":"Configure the Account Timeout","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/configure-the-account-timeout","siteSpaceId":"sitesp_q89vi","description":"Configure the account timeout in Cortex XSOAR 6.12 when moving large tenants.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"JuKbhvM56MA6hrhkofq1","title":"Forward Server Configurations to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/forward-server-configurations-to-tenant-accounts","siteSpaceId":"sitesp_q89vi","description":"Forward server configurations in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"GaFqHDjPqg3FZuNguMBy","title":"Run a Command on Multiple Tenants","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/run-a-command-on-multiple-tenants","siteSpaceId":"sitesp_q89vi","description":"Run commands across tenants in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"MkpeKTv0gHvj6V5t1FJj","title":"Move a Tenant to a Different Host","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/move-a-tenant-to-a-different-host","siteSpaceId":"sitesp_q89vi","description":"Move tenants between hosts in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"sBCpp7KmgihQkKpVQ1BR","title":"Stop and Start a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/stop-and-start-a-tenant","siteSpaceId":"sitesp_q89vi","description":"Stop, start, and reindex tenants in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"KK9uErCuqio3rmpZyOR0","title":"Block and Unblock a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/block-and-unblock-a-tenant","siteSpaceId":"sitesp_q89vi","description":"Block or unblock tenants in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"uLovusqhalo30RvEcJvk","title":"Reindex a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-tenant-database","siteSpaceId":"sitesp_q89vi","description":"Reindex tenant databases in Cortex XSOAR 6.12 multi-tenant environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"d4hlBisjmUfKxmyV8xfU","title":"Back Up a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/back-up-a-tenant","siteSpaceId":"sitesp_q89vi","description":"Back up tenant databases in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"9kutDlFyLOD38Rm34UDM","title":"Reindex a Specific Index for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/reindex-a-specific-index-for-a-tenant","siteSpaceId":"sitesp_q89vi","description":"Reindex individual tenant indexes in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"b3dUDN1WKZNtt0fEisxN","title":"Restore a Tenant Database","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-tenant-database","siteSpaceId":"sitesp_q89vi","description":"Restore tenant databases from backups in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"QGK0eVjO6IaBkL84GTI0","title":"Restore a Partition for a Tenant","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/restore-a-partition-for-a-tenant","siteSpaceId":"sitesp_q89vi","description":"Restore a tenant partition in a Cortex XSOAR 6.12 multi-tenant environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"ivKAWlzn3iyJI4de3xpA","title":"Index War Room Entries in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/index-war-room-entries-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_q89vi","description":"Index War Room entries in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"vgfd5956x7n1Hs985aIC","title":"Install Engines on Tenants in a Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-the-multi-tenant-deployment/install-engines-on-tenants-in-a-multi-tenant-deployment","siteSpaceId":"sitesp_q89vi","description":"Install tenant engines in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Configure the Multi-Tenant Deployment"}]},{"id":"Z6UTUW6T6FaNwkhXLsIN","title":"Configure User Settings","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/configure-user-settings","siteSpaceId":"sitesp_q89vi","description":"Configure user preferences and notifications in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"}]},{"id":"bH2C75Dz6peWlA5eSbhP","title":"Manage Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content","siteSpaceId":"sitesp_q89vi","description":"Apply propagation labels and sync content in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"}]},{"id":"vGnpxStBGpHxMkq72urB","title":"Manage Content Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/manage-content-overview","siteSpaceId":"sitesp_q89vi","description":"Manage content propagation in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"bXdMT4gfCmMRMUHAaQ8X","title":"Add Propagation Labels to an Existing Tenant Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/add-propagation-labels-to-an-existing-tenant-account","siteSpaceId":"sitesp_q89vi","description":"Add tenant propagation labels in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"gSMcXVrbepUF80IyCUAR","title":"Add Propagation Labels to Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/add-propagation-labels-to-content","siteSpaceId":"sitesp_q89vi","description":"Apply propagation labels in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"mJFLxJ1TVfEcpCkn864b","title":"Add Propagation Labels in Remote Repositories","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/add-propagation-labels-in-remote-repositories","siteSpaceId":"sitesp_q89vi","description":"Add propagation labels through remote repositories in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"nml5U0dEMZvaJQtC5sQ5","title":"Content Dependencies and Propagation","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/content-dependencies-and-propagation","siteSpaceId":"sitesp_q89vi","description":"Understand content dependencies and propagation in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"qWlMwTnspJKqwqCFbdCn","title":"Sync Content to Tenant Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts","siteSpaceId":"sitesp_q89vi","description":"Sync content to tenant accounts in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"hYqo0iPzcCD0YENdmA4W","title":"Troubleshoot Errors When Syncing All Accounts","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/sync-content-to-tenant-accounts/troubleshoot-errors-when-syncing-all-accounts","siteSpaceId":"sitesp_q89vi","description":"Fix content-sync errors in large Cortex XSOAR 6.12 multi-tenant environments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"},{"label":"Sync Content to Tenant Accounts"}]},{"id":"7QYe1bKgDkL5Q0ytxYf1","title":"Disable Propagation Labels","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/disable-propagation-labels","siteSpaceId":"sitesp_q89vi","description":"Disable propagation labels in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"xNRpUS8MSQOHZvCC20vY","title":"Restrict Actions for Custom Locked Content Items","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/manage-content/restrict-actions-for-custom-locked-content-items","siteSpaceId":"sitesp_q89vi","description":"Restrict locked custom content in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Manage Content"}]},{"id":"ejcBOulKwU0XqN1G1hnm","title":"Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/share-indicators","siteSpaceId":"sitesp_q89vi","description":"Share indicators in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"}]},{"id":"5jPMwJQvasrAQkgaBVwp","title":"Share Indicators Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/share-indicators/share-indicators-overview","siteSpaceId":"sitesp_q89vi","description":"Share indicators between tenants in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Share Indicators"}]},{"id":"UjcPDIBIzZflUYCz6LIx","title":"Manually Share Indicators","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/share-indicators/manually-share-indicators","siteSpaceId":"sitesp_q89vi","description":"Manually share tenant indicators in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Share Indicators"}]},{"id":"mJwQEYUlf78UST65uI5X","title":"Export Indicators to the Shared Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/share-indicators/export-indicators-to-the-shared-index","siteSpaceId":"sitesp_q89vi","description":"Export tenant indicators to a shared index in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Share Indicators"}]},{"id":"W7hnvrAALo9lUelxTZU6","title":"Ingest Indicators from the Shared Indicators Index","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/share-indicators/ingest-indicators-from-the-shared-indicators-index","siteSpaceId":"sitesp_q89vi","description":"Ingest shared indicators in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Share Indicators"}]},{"id":"mdeut1gGtKy38ja06Cxy","title":"Remote Repositories for Multi-Tenant Deployments","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments","siteSpaceId":"sitesp_q89vi","description":"Configure remote repositories in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"}]},{"id":"gAQX8npLr5SnE6LpvwEs","title":"Remote Repositories Overview","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/remote-repositories-overview","siteSpaceId":"sitesp_q89vi","description":"Use remote repositories in Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"d9etOJse8oI7LzLRi2mw","title":"Configure a Remote Repository on a Development Machine","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-a-development-machine","siteSpaceId":"sitesp_q89vi","description":"Configure development remote repositories in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"5xA9YetUX4m6nJ3N4uRy","title":"Configure a Remote Repository on the Main Account","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/configure-a-remote-repository-on-the-main-account","siteSpaceId":"sitesp_q89vi","description":"Configure main-account remote repositories in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"q84UcCu6miHGEyMZkyze","title":"Edit and Push Content to a Remote Repository","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/edit-and-push-content-to-a-remote-repository","siteSpaceId":"sitesp_q89vi","description":"Push content to remote repositories in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"PaZP5KJlYxkOcwoUwEde","title":"Troubleshoot a Remote Repository Configuration","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration","siteSpaceId":"sitesp_q89vi","description":"Troubleshoot remote repository configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"}]},{"id":"BgKGAq49mC235n8X4oQJ","title":"Troubleshoot a Remote Repository Definition","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-a-remote-repository-definition","siteSpaceId":"sitesp_q89vi","description":"Troubleshoot remote repository definitions in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"fZqcN6RKmFN1sUJzVaK4","title":"Troubleshoot Editing and Pushing Content","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-editing-and-pushing-content","siteSpaceId":"sitesp_q89vi","description":"Troubleshoot remote-content updates in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"Pt3yHBWKjRzEC5izvvdr","title":"Troubleshoot Content Issues","pathname":"/cortex-xsoar-6-multi-tenant-guides/6.12/configure-multi-tenant/remote-repositories-for-multi-tenant-deployments/troubleshoot-a-remote-repository-configuration/troubleshoot-content-issues","siteSpaceId":"sitesp_q89vi","description":"Troubleshoot remote repository content in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Multi-Tenant Guides"},{"label":"configure multi-tenant"},{"label":"Remote Repositories for Multi-Tenant Deployments"},{"label":"Troubleshoot a Remote Repository Configuration"}]},{"id":"kArfDBGOMljqyCu2RKNC","title":"Cortex XSOAR Installation Guides","pathname":"/cortex-xsoar-6-installation-guides","siteSpaceId":"sitesp_6PMlV","description":"Start here to choose the right Cortex XSOAR 6 version.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"}]},{"id":"lyCs7pp5KGk2wq9PKRyz","title":"Overview","pathname":"/cortex-xsoar-6-installation-guides/6.15","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 installation for single server and multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"Sm4AW2rNOAX1lcIk6UjG","title":"Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/readme/installation-overview","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 installation overview for single server, multi-tenant, BoltDB, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"QTa0hUESuwyzwsdq4DJQ","title":"Single Server Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/readme/single-server-installation-overview","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 single server deployment overview with Bolt, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"zsd4xeaQWpm1usgzdrRV","title":"Multi-Tenant Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/readme/multi-tenant-installation-overview","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 multi-tenant installation overview with Bolt, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"D67fr7lEXeY1HJ2f62A3","title":"System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/system-requirements","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 system requirements for installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"LXFHMK1iCz4fczE4PbbZ","title":"Cortex XSOAR System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/system-requirements/cortex-xsoar-system-requirements","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 system requirements for operating systems, hardware, Docker, and Podman.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"2EWXOl6GMG1kyuzdXfUQ","title":"Multi-Tenant System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/system-requirements/multi-tenant-system-requirements","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 multi-tenant server requirements and sizing examples.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"tgJlezlEn1RkfaulVpBt","title":"Elasticsearch System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/system-requirements/elasticsearch-system-requirements","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 Elasticsearch requirements and sizing guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"AqUkkRGwpWy9qAdIBCpU","title":"Supported Web Browsers","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/system-requirements/supported-web-browsers","siteSpaceId":"sitesp_HA3pc","description":"Supported web browsers for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"GSMsf0nZDWuMFnkuYgeb","title":"Single Server Installation","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 single server installation guides.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"uBbstcc7UjPCoIaASMfS","title":"Install Cortex XSOAR with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database","siteSpaceId":"sitesp_HA3pc","description":"Install Cortex XSOAR 6.15 on a single server with the Bolt database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"fpKQ8gVUJo0J0dw0IGQS","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database/installer-flags","siteSpaceId":"sitesp_HA3pc","description":"Supported installer flags for Cortex XSOAR 6.15 installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Bolt Database"}]},{"id":"Z18eXTdlwBhYr8TfP8hH","title":"Install Cortex XSOAR with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch","siteSpaceId":"sitesp_HA3pc","description":"Install Cortex XSOAR 6.15 with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"60jnzTxo37g8R25WU59P","title":"Elasticsearch Configurations","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-configurations","siteSpaceId":"sitesp_HA3pc","description":"Supported Elasticsearch configurations for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"mY24B59TiYKGeJn9368D","title":"Elasticsearch General Security Guidelines","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_HA3pc","description":"Elasticsearch security guidance for Cortex XSOAR 6.15 single-server deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"YemRJVTCtdzj4X2U1tkl","title":"Elasticsearch Installation","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-installation","siteSpaceId":"sitesp_HA3pc","description":"Install Cortex XSOAR 6.15 on a single server with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"V0WOqWyUbVjHZFXbUtod","title":"Elasticsearch Best Practices","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-best-practices","siteSpaceId":"sitesp_HA3pc","description":"Elasticsearch configuration best practices for Cortex XSOAR 6.15.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"NLrkRS5jDEHJ9v9PBmqX","title":"Install Cortex XSOAR Offline","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline","siteSpaceId":"sitesp_HA3pc","description":"Install Cortex XSOAR 6.15 without internet access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"l6X5qbWCNEJ6eZxZbMcu","title":"Dependencies for Offline Installation","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_HA3pc","description":"Offline installation dependencies for Cortex XSOAR 6.15 on supported Linux operating systems.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR Offline"}]},{"id":"e4zWaPGpp8OXcL3KVLkf","title":"Uninstall the Server","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/single-server-installation/uninstall-the-server","siteSpaceId":"sitesp_HA3pc","description":"Uninstall Cortex XSOAR 6.15 and retain configuration and engine-created files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"rXbqjjHVZolop7UCeRIW","title":"Multi-Tenant Installation","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/multi-tenant-installation","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 multi-tenant installation planning and guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"vO9C4s0MePXioJTn3qNS","title":"Install Multi-Tenant with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database","siteSpaceId":"sitesp_HA3pc","description":"Install Cortex XSOAR 6.15 for multi-tenant deployments with the Bolt database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"lJUhetVHviMMVw2uBeA2","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database/installer-flags","siteSpaceId":"sitesp_HA3pc","description":"Supported installer flags for Cortex XSOAR 6.15 multi-tenant installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"},{"label":"Install Multi-Tenant with Bolt Database"}]},{"id":"baFHlhS0J0aQspx6220v","title":"Install Multi-Tenant with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-elasticsearch","siteSpaceId":"sitesp_HA3pc","description":"Install Cortex XSOAR 6.15 for multi-tenant deployments with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"MG6ghxOW6Kx4UUMKIUEb","title":"Post Installation Checklist","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/post-installation-checklist","siteSpaceId":"sitesp_HA3pc","description":"Cortex XSOAR 6.15 post-installation checklist for validating and monitoring components.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"AGOFj9lOysFZCUbVGRBR","title":"Add a License","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/post-installation-checklist/add-a-license","siteSpaceId":"sitesp_HA3pc","description":"Add a Cortex XSOAR 6.15 license through the UI or directly on the server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"0CwP6RtvZPc57SbaLwS7","title":"Server Post-Installation Health Check","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/post-installation-checklist/server-post-installation-health-check","siteSpaceId":"sitesp_HA3pc","description":"Run Cortex XSOAR 6.15 post-installation health checks for Docker, integrations, reporting, and content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"kD91UZ1cWvCDYFzKRirz","title":"Monitor Cortex XSOAR Components","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/post-installation-checklist/monitor-cortex-xsoar-components","siteSpaceId":"sitesp_HA3pc","description":"Monitor Cortex XSOAR 6.15 system components and health.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"GpV1L8F21pnBON8rz3fF","title":"Upgrade Your Installation","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/upgrade-your-installation","siteSpaceId":"sitesp_HA3pc","description":"Upgrade Cortex XSOAR 6.15 single server, multi-tenant, and live backup deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"NycUDwmwLhNJLijlgyvo","title":"Upgrade the Cortex XSOAR Server","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_HA3pc","description":"Upgrade your Cortex XSOAR server to version 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"cvGbxSfVqDedHSDFiaBP","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_HA3pc","description":"Upgrade a Cortex XSOAR 6.15 multi-tenant deployment, including preparation and post-upgrade steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"okXtrNknmBkCiAOS051g","title":"Upgrade the Live Backup Environment","pathname":"/cortex-xsoar-6-installation-guides/6.15/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_HA3pc","description":"Upgrade the Cortex XSOAR 6.15 live backup environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"lyCs7pp5KGk2wq9PKRyz","title":"Overview","pathname":"/cortex-xsoar-6-installation-guides/6.14","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 installation for single server and multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"Sm4AW2rNOAX1lcIk6UjG","title":"Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/readme/installation-overview","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 installation overview for single server, multi-tenant, BoltDB, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"QTa0hUESuwyzwsdq4DJQ","title":"Single Server Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/readme/single-server-installation-overview","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 single server deployment overview with Bolt, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"zsd4xeaQWpm1usgzdrRV","title":"Multi-Tenant Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/readme/multi-tenant-installation-overview","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 multi-tenant installation overview with Bolt, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"D67fr7lEXeY1HJ2f62A3","title":"System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/system-requirements","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 system requirements for installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"LXFHMK1iCz4fczE4PbbZ","title":"Cortex XSOAR System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/system-requirements/cortex-xsoar-system-requirements","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 system requirements for operating systems, hardware, Docker, and Podman.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"2EWXOl6GMG1kyuzdXfUQ","title":"Multi-Tenant System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/system-requirements/multi-tenant-system-requirements","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 multi-tenant server requirements and sizing examples.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"tgJlezlEn1RkfaulVpBt","title":"Elasticsearch System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/system-requirements/elasticsearch-system-requirements","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 Elasticsearch requirements and sizing guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"AqUkkRGwpWy9qAdIBCpU","title":"Supported Web Browsers","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/system-requirements/supported-web-browsers","siteSpaceId":"sitesp_uRSSh","description":"Supported web browsers for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"GSMsf0nZDWuMFnkuYgeb","title":"Single Server Installation","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 single server installation guides.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"uBbstcc7UjPCoIaASMfS","title":"Install Cortex XSOAR with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database","siteSpaceId":"sitesp_uRSSh","description":"Install Cortex XSOAR 6.14 on a single server with the Bolt database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"fpKQ8gVUJo0J0dw0IGQS","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database/installer-flags","siteSpaceId":"sitesp_uRSSh","description":"Supported installer flags for Cortex XSOAR 6.14 installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Bolt Database"}]},{"id":"Z18eXTdlwBhYr8TfP8hH","title":"Install Cortex XSOAR with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch","siteSpaceId":"sitesp_uRSSh","description":"Install Cortex XSOAR 6.14 with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"60jnzTxo37g8R25WU59P","title":"Elasticsearch Configurations","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-configurations","siteSpaceId":"sitesp_uRSSh","description":"Supported Elasticsearch configurations for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"mY24B59TiYKGeJn9368D","title":"Elasticsearch General Security Guidelines","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_uRSSh","description":"Elasticsearch security guidance for Cortex XSOAR 6.14 single-server deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"YemRJVTCtdzj4X2U1tkl","title":"Elasticsearch Installation","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-installation","siteSpaceId":"sitesp_uRSSh","description":"Install Cortex XSOAR 6.14 on a single server with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"V0WOqWyUbVjHZFXbUtod","title":"Elasticsearch Best Practices","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-best-practices","siteSpaceId":"sitesp_uRSSh","description":"Elasticsearch configuration best practices for Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"NLrkRS5jDEHJ9v9PBmqX","title":"Install Cortex XSOAR Offline","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline","siteSpaceId":"sitesp_uRSSh","description":"Install Cortex XSOAR 6.14 without internet access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"l6X5qbWCNEJ6eZxZbMcu","title":"Dependencies for Offline Installation","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_uRSSh","description":"Offline installation dependencies for Cortex XSOAR 6.14 on supported Linux operating systems.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR Offline"}]},{"id":"e4zWaPGpp8OXcL3KVLkf","title":"Uninstall the Server","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/single-server-installation/uninstall-the-server","siteSpaceId":"sitesp_uRSSh","description":"Uninstall Cortex XSOAR 6.14 and retain configuration and engine-created files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"rXbqjjHVZolop7UCeRIW","title":"Multi-Tenant Installation","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/multi-tenant-installation","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 multi-tenant installation planning and guidance.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"vO9C4s0MePXioJTn3qNS","title":"Install Multi-Tenant with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database","siteSpaceId":"sitesp_uRSSh","description":"Install Cortex XSOAR 6.14 for multi-tenant deployments with the Bolt database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"lJUhetVHviMMVw2uBeA2","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database/installer-flags","siteSpaceId":"sitesp_uRSSh","description":"Supported installer flags for Cortex XSOAR 6.14 multi-tenant installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"},{"label":"Install Multi-Tenant with Bolt Database"}]},{"id":"baFHlhS0J0aQspx6220v","title":"Install Multi-Tenant with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-elasticsearch","siteSpaceId":"sitesp_uRSSh","description":"Install Cortex XSOAR 6.14 for multi-tenant deployments with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"MG6ghxOW6Kx4UUMKIUEb","title":"Post Installation Checklist","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/post-installation-checklist","siteSpaceId":"sitesp_uRSSh","description":"Cortex XSOAR 6.14 post-installation checklist for validating and monitoring components.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"AGOFj9lOysFZCUbVGRBR","title":"Add a License","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/post-installation-checklist/add-a-license","siteSpaceId":"sitesp_uRSSh","description":"Add a Cortex XSOAR 6.14 license through the UI or directly on the server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"0CwP6RtvZPc57SbaLwS7","title":"Server Post-Installation Health Check","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/post-installation-checklist/server-post-installation-health-check","siteSpaceId":"sitesp_uRSSh","description":"Run Cortex XSOAR 6.14 post-installation health checks for Docker, integrations, reporting, and content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"kD91UZ1cWvCDYFzKRirz","title":"Monitor Cortex XSOAR Components","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/post-installation-checklist/monitor-cortex-xsoar-components","siteSpaceId":"sitesp_uRSSh","description":"Monitor Cortex XSOAR 6.14 system components and health.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"GpV1L8F21pnBON8rz3fF","title":"Upgrade Your Installation","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/upgrade-your-installation","siteSpaceId":"sitesp_uRSSh","description":"Upgrade Cortex XSOAR 6.14 single server, multi-tenant, and live backup deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"NycUDwmwLhNJLijlgyvo","title":"Upgrade the Cortex XSOAR Server","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_uRSSh","description":"Upgrade your Cortex XSOAR server to version 6.14.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"cvGbxSfVqDedHSDFiaBP","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_uRSSh","description":"Upgrade a Cortex XSOAR 6.14 multi-tenant deployment, including preparation and post-upgrade steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"okXtrNknmBkCiAOS051g","title":"Upgrade the Live Backup Environment","pathname":"/cortex-xsoar-6-installation-guides/6.14/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_uRSSh","description":"Upgrade the Cortex XSOAR 6.14 live backup environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"gYiAkh5cuzGQ5F4cTBAm","title":"Overview","pathname":"/cortex-xsoar-6-installation-guides/6.13","siteSpaceId":"sitesp_6P99z","description":"Installation for single server and multi-tenant deployments of Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"AYOPNMiheNuksc5nfYYz","title":"Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/readme/installation-overview","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 installation overview for single server, multi-tenant, BoltDB, Elasticsearch, and high availability deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"iphFHKeEXrr4vhOD5jDI","title":"Single Server Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/readme/single-server-installation-overview","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 single server deployment overview with Bolt, Elasticsearch, and high availability options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"VDfP2ASNWbu3a4ckzWf5","title":"Multi-Tenant Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/readme/multi-tenant-installation-overview","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 multi-tenant installation overview with Bolt, Elasticsearch, and high availability options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"4lNK626JrD6WEURFxFHS","title":"System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/system-requirements","siteSpaceId":"sitesp_6P99z","description":"System requirements for installing Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"NWd5knQvsN0O90LVP0Yl","title":"Cortex XSOAR System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/system-requirements/cortex-xsoar-system-requirements","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 system requirements for operating systems, hardware, Docker, and Podman.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"MeavKKJIuh48t733x7i0","title":"Multi-Tenant System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/system-requirements/multi-tenant-system-requirements","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 multi-tenant server requirements and examples.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"JEmEIndeyoHypOqLCOmk","title":"Elasticsearch System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/system-requirements/elasticsearch-system-requirements","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 Elasticsearch implementation and sizing requirements.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"d3aDVNfLhpXqZYRMeqpn","title":"Supported Web Browsers","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/system-requirements/supported-web-browsers","siteSpaceId":"sitesp_6P99z","description":"Supported web browsers for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"OKq5yhAQWXaT0H3XXWuw","title":"Single Server Installation","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 single server installation options and deployment resources.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"O3IhwhGqr7wk8s4gMzgi","title":"Install Cortex XSOAR with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database","siteSpaceId":"sitesp_6P99z","description":"Install Cortex XSOAR 6.13 on a single server with the Bolt database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"FcqZVulagnlQ9TFGTIqF","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database/installer-flags","siteSpaceId":"sitesp_6P99z","description":"Supported installer flags for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Bolt Database"}]},{"id":"hb4vQ5mpNSsDAbgSaSFw","title":"Install Cortex XSOAR with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch","siteSpaceId":"sitesp_6P99z","description":"Install Cortex XSOAR 6.13 with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"WCIKFXpD26aXmr33UWKk","title":"Elasticsearch Configurations","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-configurations","siteSpaceId":"sitesp_6P99z","description":"Supported Elasticsearch configurations for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"lkYBSjL6W8LH3cFJlhkH","title":"Elasticsearch General Security Guidelines","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_6P99z","description":"Elasticsearch security guidelines for Cortex XSOAR 6.13 single-server deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"3dIAJgZlK30B89GAojci","title":"Elasticsearch Installation","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-installation","siteSpaceId":"sitesp_6P99z","description":"Install a Cortex XSOAR 6.13 single-server deployment with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"6kuowF7cx4wEf7YSk2Rs","title":"Elasticsearch Best Practices","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-best-practices","siteSpaceId":"sitesp_6P99z","description":"Elasticsearch configuration best practices for Cortex XSOAR 6.13 high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"cWra9iwunH1TW0zJFSB2","title":"Install Cortex XSOAR Offline","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline","siteSpaceId":"sitesp_6P99z","description":"Install Cortex XSOAR 6.13 without internet access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"K4fwDFLbrphQylVVTHBq","title":"Dependencies for Offline Installation","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_6P99z","description":"Offline installation dependencies for Cortex XSOAR 6.13 on CentOS, Red Hat, Ubuntu, and Debian.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR Offline"}]},{"id":"qbkAuuQdpAIbhDyHIpS1","title":"Uninstall the Server","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/single-server-installation/uninstall-the-server","siteSpaceId":"sitesp_6P99z","description":"Uninstall Cortex XSOAR 6.13 while preserving configuration and engine-created files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"bgMOjArQKf4808Fc6qk9","title":"Multi-Tenant Installation","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/multi-tenant-installation","siteSpaceId":"sitesp_6P99z","description":"Plan your Cortex XSOAR 6.13 multi-tenant installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"dqGGY1lrk2Ls4wtFxvdr","title":"Install Multi-Tenant with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database","siteSpaceId":"sitesp_6P99z","description":"Install Cortex XSOAR 6.13 for multi-tenant deployments with the Bolt or Bleve database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"AIW21shveVGGn4OXuufZ","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database/installer-flags","siteSpaceId":"sitesp_6P99z","description":"Supported multi-tenant installer flags for Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"},{"label":"Install Multi-Tenant with Bolt Database"}]},{"id":"uNFB7wpRDCDuVMXLMdOg","title":"Install Multi-Tenant with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-elasticsearch","siteSpaceId":"sitesp_6P99z","description":"Install Cortex XSOAR 6.13 multi-tenant deployments with Elasticsearch and review created files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"USexjNX4fEO3QGW8yZPS","title":"Post Installation Checklist","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/post-installation-checklist","siteSpaceId":"sitesp_6P99z","description":"Cortex XSOAR 6.13 post-installation checklist for verifying components and system health.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"VaWAlgmjgaw0uNvf7Twl","title":"Add a License","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/post-installation-checklist/add-a-license","siteSpaceId":"sitesp_6P99z","description":"Add a Cortex XSOAR 6.13 license through the UI or directly on the server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"Eu7eGYbxmMdAzPlemDnx","title":"Server Post-Installation Health Check","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/post-installation-checklist/server-post-installation-health-check","siteSpaceId":"sitesp_6P99z","description":"Run Cortex XSOAR 6.13 post-installation health checks for Docker, integrations, commands, reporting, and content.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"JlsfUzQdHsVjBRjRFczC","title":"Monitor Cortex XSOAR Components","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/post-installation-checklist/monitor-cortex-xsoar-components","siteSpaceId":"sitesp_6P99z","description":"Monitor Cortex XSOAR 6.13 system components after installation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"eN4eFOCEd2D99gL3SVLU","title":"Upgrade Your Installation","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/upgrade-your-installation","siteSpaceId":"sitesp_6P99z","description":"Upgrade Cortex XSOAR 6.13 single-server, multi-tenant, or live backup deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"n05uYU0nSkAYTScbqc17","title":"Upgrade the Cortex XSOAR Server","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_6P99z","description":"Upgrade your Cortex XSOAR 6.13 server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"Ui1kdRla4bZpoq2JuuOU","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_6P99z","description":"Upgrade Cortex XSOAR 6.13 multi-tenant deployments with preparation and post-upgrade steps.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"guiJMBUvXDoMsMnDOjmP","title":"Upgrade the Live Backup Environment","pathname":"/cortex-xsoar-6-installation-guides/6.13/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_6P99z","description":"Upgrade your Cortex XSOAR 6.13 live backup environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"gAQeqLpguViflYgLluHu","title":"Overview","pathname":"/cortex-xsoar-6-installation-guides/6.12","siteSpaceId":"sitesp_ChFF0","description":"Installation for single server and multi-tenant deployments in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"CyXnKSsFslHtmP6gMtHS","title":"Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/readme/installation-overview","siteSpaceId":"sitesp_ChFF0","description":"Installation overview in Cortex XSOAR 6.12, including single server and multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"t5JTxqMAjlWEOtuQ83nj","title":"Single Server Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/readme/single-server-installation-overview","siteSpaceId":"sitesp_ChFF0","description":"Single server deployment overview in Cortex XSOAR 6.12 with Bolt, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"DYle5FW0sizYgoaIRhEA","title":"Multi-Tenant Installation Overview","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/readme/multi-tenant-installation-overview","siteSpaceId":"sitesp_ChFF0","description":"Multi-tenant installation overview in Cortex XSOAR 6.12 with Bolt, Elasticsearch, and high availability.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Overview"}]},{"id":"6ChG6IEfUK4nnxHias8B","title":"System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/system-requirements","siteSpaceId":"sitesp_ChFF0","description":"System requirements for installing Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"rZWVesxB78ijqGYUqc8f","title":"Cortex XSOAR System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/system-requirements/cortex-xsoar-system-requirements","siteSpaceId":"sitesp_ChFF0","description":"Cortex XSOAR 6.12 system requirements for operating systems, hardware, and Docker or Podman.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"eljFnt84BLN5B5E8kRJc","title":"Multi-Tenant System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/system-requirements/multi-tenant-system-requirements","siteSpaceId":"sitesp_ChFF0","description":"Multi-tenant server requirements and examples in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"8kvp0JllrAsfZcUdNuVK","title":"Elasticsearch System Requirements","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/system-requirements/elasticsearch-system-requirements","siteSpaceId":"sitesp_ChFF0","description":"Review Cortex XSOAR 6.12 requirements for Elasticsearch and its sizing options.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"qH3QvfHxxPZd4HcHv5nv","title":"Supported Web Browsers","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/system-requirements/supported-web-browsers","siteSpaceId":"sitesp_ChFF0","description":"Supported web browsers for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"System Requirements"}]},{"id":"NNFvhvCeS3keWDmHVimi","title":"Single Server Installation","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation","siteSpaceId":"sitesp_ChFF0","description":"Single server deployment resources in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"SvT23VvkmNAX67Wrwwf1","title":"Install Cortex XSOAR with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database","siteSpaceId":"sitesp_ChFF0","description":"Install Cortex XSOAR 6.12 on one server with a Bolt database.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"bQWN5gWUYeigBlUzj0ss","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-bolt-database/installer-flags","siteSpaceId":"sitesp_ChFF0","description":"Supported installer flags for Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Bolt Database"}]},{"id":"GEbc1czIZjbOn9myH7Wi","title":"Install Cortex XSOAR with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch","siteSpaceId":"sitesp_ChFF0","description":"Install Cortex XSOAR 6.12 with Elasticsearch.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"LgdkdyUmmeon6OTxsOM6","title":"Elasticsearch Configurations","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-configurations","siteSpaceId":"sitesp_ChFF0","description":"Supported Elasticsearch configurations in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"lqGYNGwBNiR8xdkMMwgi","title":"Elasticsearch General Security Guidelines","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-general-security-guidelines","siteSpaceId":"sitesp_ChFF0","description":"Elasticsearch security guidelines for Cortex XSOAR 6.12 single-instance deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"QIqeqsNIlKF1Tkbziewd","title":"Elasticsearch Installation","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-installation","siteSpaceId":"sitesp_ChFF0","description":"Install a single server deployment with Elasticsearch in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"F402evsfyYdIhB5LtA64","title":"Elasticsearch Best Practices","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-with-elasticsearch/elasticsearch-best-practices","siteSpaceId":"sitesp_ChFF0","description":"Configure Elasticsearch for high availability in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR with Elasticsearch"}]},{"id":"FsRgwoZtLp8rOsZdVvyA","title":"Install Cortex XSOAR Offline","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline","siteSpaceId":"sitesp_ChFF0","description":"Install Cortex XSOAR 6.12 without internet access.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"uP1XWEtnUjZzeYz4V4oB","title":"Dependencies for Offline Installation","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/install-cortex-xsoar-offline/dependencies-for-offline-installation","siteSpaceId":"sitesp_ChFF0","description":"Offline installation dependencies for Cortex XSOAR 6.12 on supported Linux systems.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"},{"label":"Install Cortex XSOAR Offline"}]},{"id":"mMJMkysl8VPljWeJ7IZr","title":"Uninstall the Server","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/single-server-installation/uninstall-the-server","siteSpaceId":"sitesp_ChFF0","description":"Uninstall Cortex XSOAR 6.12 while preserving configuration and engine-created files.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Single Server Installation"}]},{"id":"p4xYoC3IwVRMeJPTQkQI","title":"Multi-Tenant Installation","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/multi-tenant-installation","siteSpaceId":"sitesp_ChFF0","description":"Plan a multi-tenant installation in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"mVatxofjRqwIe61t3Viw","title":"Install Multi-Tenant with Bolt Database","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database","siteSpaceId":"sitesp_ChFF0","description":"Install a multi-tenant Bolt or Bleve deployment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"j0UFaUtSsHkJgtqweM4a","title":"Installer Flags","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-bolt-database/installer-flags","siteSpaceId":"sitesp_ChFF0","description":"Supported installer flags for Cortex XSOAR 6.12 multi-tenant deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"},{"label":"Install Multi-Tenant with Bolt Database"}]},{"id":"wen4pLT413fQcNEYGagG","title":"Install Multi-Tenant with Elasticsearch","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/multi-tenant-installation/install-multi-tenant-with-elasticsearch","siteSpaceId":"sitesp_ChFF0","description":"Install a multi-tenant Elasticsearch deployment in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Multi-Tenant Installation"}]},{"id":"oqbCq7AVsBIFQVc3yoTf","title":"Post Installation Checklist","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/post-installation-checklist","siteSpaceId":"sitesp_ChFF0","description":"Use the post-installation checklist in Cortex XSOAR 6.12 to verify system health.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"Dnd1nOlWQyPWXVRBhhhH","title":"Add a License","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/post-installation-checklist/add-a-license","siteSpaceId":"sitesp_ChFF0","description":"Add a Cortex XSOAR 6.12 license through the UI or directly on the server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"AFz52IskgIOa2mGGVDay","title":"Server Post-Installation Health Check","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/post-installation-checklist/server-post-installation-health-check","siteSpaceId":"sitesp_ChFF0","description":"Run Cortex XSOAR 6.12 post-installation health checks for server components.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"sPlLjmnQK5X1ORzk2bDA","title":"Monitor Cortex XSOAR Components","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/post-installation-checklist/monitor-cortex-xsoar-components","siteSpaceId":"sitesp_ChFF0","description":"Monitor Cortex XSOAR 6.12 system components.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Post Installation Checklist"}]},{"id":"3dvF4FB5H17eLiZD8iOz","title":"Upgrade Your Installation","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/upgrade-your-installation","siteSpaceId":"sitesp_ChFF0","description":"Upgrade Cortex XSOAR 6.12 for single server, multi-tenant, or live backup deployments.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"}]},{"id":"Pdq0J4dUJ0p0WRNISsdo","title":"Upgrade the Cortex XSOAR Server","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-cortex-xsoar-server","siteSpaceId":"sitesp_ChFF0","description":"Upgrade your Cortex XSOAR 6.12 server.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"KJNqEVFkvQIRIdL6NYDo","title":"Upgrade Your Multi-Tenant Deployment","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-your-multi-tenant-deployment","siteSpaceId":"sitesp_ChFF0","description":"Upgrade a Cortex XSOAR 6.12 multi-tenant deployment from preparation through validation.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"kYEWJaQcLEDXYkf83HW7","title":"Upgrade the Live Backup Environment","pathname":"/cortex-xsoar-6-installation-guides/6.12/cortex-xsoar-installation-guide/upgrade-your-installation/upgrade-the-live-backup-environment","siteSpaceId":"sitesp_ChFF0","description":"Upgrade your Cortex XSOAR 6.12 live backup environment.","breadcrumbs":[{"label":"Cortex XSOAR 6","icon":"circle-share-nodes"},{"label":"Cortex XSOAR 6 Installation Guides"},{"label":"Cortex XSOAR Installation Guide"},{"label":"Upgrade Your Installation"}]},{"id":"66efcd109daef1d9fa89863f431aa12b847617dc","title":"What is Cortex Data Security?","pathname":"/data-security-documentation","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"}]},{"id":"213f1c57837055ac0557c509cf063e0e6cd1da4f","title":"Key features","pathname":"/data-security-documentation/get-started-with-cortex-data-security/key-features","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"}]},{"id":"v9nWWaWBTtAoNoiZQsSN","title":"Supported web browsers","pathname":"/data-security-documentation/get-started-with-cortex-data-security/supported-web-browsers","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"}]},{"id":"c8bfc9ea19a317c7356668eb1f3ce2d9fccef10f","title":"Use the interface","pathname":"/data-security-documentation/get-started-with-cortex-data-security/use-the-interface","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"}]},{"id":"XR6d36MABrEBJIwn4LGJ","title":"Understand Cortex Data Security Licenses","pathname":"/data-security-documentation/get-started-with-cortex-data-security/understand-cortex-data-security-licenses","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"}]},{"id":"fOgzTOmk7Z4plzAfNanb","title":"Data retention in Cortex Data Security","pathname":"/data-security-documentation/get-started-with-cortex-data-security/understand-cortex-data-security-licenses/data-retention-in-cortex-data-security","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"},{"label":"Understand Cortex Data Security Licenses"}]},{"id":"rASOdoIN6zYUKDDy2Axs","title":"Data storage lifecycle","pathname":"/data-security-documentation/get-started-with-cortex-data-security/understand-cortex-data-security-licenses/data-storage-lifecycle","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"},{"label":"Understand Cortex Data Security Licenses"}]},{"id":"yd4PeNDg96bbRic7rk5d","title":"License allocation","pathname":"/data-security-documentation/get-started-with-cortex-data-security/understand-cortex-data-security-licenses/license-allocation","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"},{"label":"Understand Cortex Data Security Licenses"}]},{"id":"Bcu0GApwRSnxtt4oAvPU","title":"License expiration","pathname":"/data-security-documentation/get-started-with-cortex-data-security/understand-cortex-data-security-licenses/license-expiration","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Get started with Cortex Data Security"},{"label":"Understand Cortex Data Security Licenses"}]},{"id":"6UwdDhvoil7Az9iwky4j","title":"Cortex Data Security terminology","pathname":"/data-security-documentation/data-security/cortex-data-security-terminology","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"}]},{"id":"8lsU27tVk8LsrqMvn0HY","title":"Data Security Posture Management","pathname":"/data-security-documentation/data-security/data-security-posture-management","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"}]},{"id":"G7EQQbAy1pE9b8g7T7uu","title":"Data Detection and Response","pathname":"/data-security-documentation/data-security/data-detection-and-response","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"}]},{"id":"PO5AqgvVf0TFpksQxdeK","title":"AI Security Posture Management","pathname":"/data-security-documentation/data-security/ai-security-posture-management","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"}]},{"id":"wcTrkYMgIdD8KWIdOPGR","title":"Data Access Governance","pathname":"/data-security-documentation/data-security/data-access-governance","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"}]},{"id":"HQLx9kfOCKNAagae7ohS","title":"Supported assets in Cortex Data Security","pathname":"/data-security-documentation/data-security/supported-assets-in-cortex-data-security","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"}]},{"id":"2M1MOKnagkPkYgr3VttN","title":"Data Classification","pathname":"/data-security-documentation/data-security/data-classification","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"}]},{"id":"yNkuljkseChMYosUp3Pu","title":"What is Cortex Data Classification?","pathname":"/data-security-documentation/data-security/data-classification/what-is-cortex-data-classification","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"}]},{"id":"LBWQDlJ0YBKbr3qxTfhi","title":"How to create and validate a custom data pattern","pathname":"/data-security-documentation/data-security/data-classification/how-to-create-and-validate-a-custom-data-pattern","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"}]},{"id":"89xf4d24dREBW44K6Ozq","title":"Custom data patterns: Guardrails and syntax guide","pathname":"/data-security-documentation/data-security/data-classification/how-to-create-and-validate-a-custom-data-pattern/custom-data-patterns-guardrails-and-syntax-guide","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"},{"label":"How to create and validate a custom data pattern"}]},{"id":"Wavm8amvQzqz6aXgMz97","title":"How to disable and enable data patterns in Data Classification","pathname":"/data-security-documentation/data-security/data-classification/how-to-disable-and-enable-data-patterns-in-data-classification","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"}]},{"id":"nENY8zIdzRvcKQOB3SR3","title":"How to create and validate a custom data profile","pathname":"/data-security-documentation/data-security/data-classification/how-to-create-and-validate-a-custom-data-profile","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"}]},{"id":"cIswSPlfBf4x2YDgU2dK","title":"How to disable and enable data profiles in Cortex Data Classification","pathname":"/data-security-documentation/data-security/data-classification/how-to-disable-and-enable-data-profiles-in-cortex-data-classification","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"}]},{"id":"FZIk2lJ7LSGosJF9aqmD","title":"How to use information protection labels in Cortex Data Security","pathname":"/data-security-documentation/data-security/data-classification/how-to-use-information-protection-labels-in-cortex-data-security","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"}]},{"id":"KVmP07DEfFnLAcwzAhQL","title":"Topic classification","pathname":"/data-security-documentation/data-security/data-classification/topic-classification","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data Security"},{"label":"Data Classification"}]},{"id":"054466eda7b7ed808aa4a197c63a26d64856e886","title":"About Agentic AI & the Cortex Agentic Assistant","pathname":"/data-security-documentation/agentic-ai-and-cortex-agentic-assistant/agentic-ai","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Agentic AI & Cortex Agentic Assistant"}]},{"id":"9dd97b434643e9858a8fe35d951d1199fb221fba","title":"Agentic Assistant use cases","pathname":"/data-security-documentation/agentic-ai-and-cortex-agentic-assistant/agentic-assistant-use-cases","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Agentic AI & Cortex Agentic Assistant"}]},{"id":"SN2tiEWPQhAC7CK228aY","title":"Agentic Assistant security","pathname":"/data-security-documentation/agentic-ai-and-cortex-agentic-assistant/agentic-assistant-security","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Agentic AI & Cortex Agentic Assistant"}]},{"id":"7NzfN4CP4e2a1izwLrTb","title":"Data security agent","pathname":"/data-security-documentation/agentic-ai-and-cortex-agentic-assistant/data-security-agent","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Agentic AI & Cortex Agentic Assistant"}]},{"id":"c01b4e8bb3094e28c9472eea9026935cf9bb5c70","title":"Plan and prepare","pathname":"/data-security-documentation/onboard-and-configure/plan-and-prepare","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"}]},{"id":"072d96159a01981b8ea561ea3f8181817c62ddca","title":"Deployment checklist","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"}]},{"id":"e8b935e692aa8b72f537b8057c23fee47ae8f205","title":"Activation","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/activation","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"}]},{"id":"8ubGYwfjG2ibR4CdepUC","title":"Supported regions","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/activation/supported-regions","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Activation"}]},{"id":"ayYQWSoQ0iwfgb8NVfwK","title":"Enable access to required PANW resources","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/activation/enable-access-to-required-panw-resources","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Activation"}]},{"id":"J6QPBVaYUaM1Il4Go1Po","title":"Regional egress resources","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/activation/enable-access-to-required-panw-resources/regional-egress-resources","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Activation"},{"label":"Enable access to required PANW resources"}]},{"id":"EnKT74q42h3ER9QKpLD8","title":"Engines IP addresses (outbound) - fix tables","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/activation/enable-access-to-required-panw-resources/engines-ip-addresses-outbound-fix-tables","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Activation"},{"label":"Enable access to required PANW resources"}]},{"id":"ZjxIW43EaxVdKFmsfEwg","title":"Inbound source resources - fix tables","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/activation/enable-access-to-required-panw-resources/inbound-source-resources-fix-tables","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Activation"},{"label":"Enable access to required PANW resources"}]},{"id":"QJzTutM1zgMUXxAEpY5o","title":"FedRAMP and the US Federal Government required resources","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/activation/enable-access-to-required-panw-resources/fedramp-and-the-us-federal-government-required-resources","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Activation"},{"label":"Enable access to required PANW resources"}]},{"id":"zbEicrHUKnFIln5cohRV","title":"Set up users, groups, and roles","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-users-and-roles","siteSpaceId":"sitesp_yiQJj","description":"Learn how to set up users and roles in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"}]},{"id":"cw4O6IbHG6aUd5cbH01Y","title":"User group management","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-users-and-roles/user-group-management","siteSpaceId":"sitesp_yiQJj","description":"Create and manage user groups, roles, and scopes.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Set up users, groups, and roles"}]},{"id":"1frK3LYizIzLDjdD9HLV","title":"Assign user roles and groups","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-users-and-roles/assign-user-roles-and-groups","siteSpaceId":"sitesp_yiQJj","description":"Assign roles and group memberships to users.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Set up users, groups, and roles"}]},{"id":"Ksu7urBSKHcHAjtZ68p9","title":"Manage API keys","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/manage-api-keys","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"}]},{"id":"zrsix2g0uKEc199BqCXM","title":"Set up authentication","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-authentication","siteSpaceId":"sitesp_yiQJj","description":"Authenticate Cortex Data Security users using SAML 2.0 or Customer Support Portal (CSP).","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"}]},{"id":"u73qZcs7MLf9smczF1D5","title":"Authenticate users through the Customer Support Portal","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_yiQJj","description":"Authenticate users through the Customer Support Portal.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Set up authentication"}]},{"id":"uJWsXX2iwgUE3ev56JGg","title":"Authenticate users using SSO","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-authentication/authenticate-users-using-sso","siteSpaceId":"sitesp_yiQJj","description":"Configure SAML single sign-on for Cortex Data Security users.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Set up authentication"}]},{"id":"c8gwykWu4n3g6spYheXF","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_yiQJj","description":"Configure Okta as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Set up authentication"}]},{"id":"bW0IEqzeVjEwRxb2wmEg","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/data-security-documentation/onboard-and-configure/deployment-checklist/set-up-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_yiQJj","description":"Configure Microsoft Entra ID as a SAML 2.0 identity provider.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Deployment checklist"},{"label":"Set up authentication"}]},{"id":"347544153b24493483f0f0c96cebe0ad23b42b16","title":"Cloud service provider (CSP) onboarding","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"}]},{"id":"Z10F6MAOO0yFInuHkPhO","title":"Amazon Web Services cloud onboarding","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding","siteSpaceId":"sitesp_yiQJj","description":"Follow the AWS onboarding wizard, and Cortex Data Security creates a custom authentication template to be deployed in AWS.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"1hyZXSQqoFagV6W32DPF","title":"AWS security capabilities and deployment planning","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-capabilities-and-deployment-planning","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"eP5EPLLUAdmVPtyr0zye","title":"AWS resource inventory","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/aws-resource-inventory","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"iSDSRNJSt9f4vk6jeTQs","title":"AWS security model and authentication","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/aws-security-model-and-authentication","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"f21sC423xhCCRDgB9puA","title":"Cortex Data Security and AWS audit log collection architecture","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/cortex-cloud-and-aws-audit-log-collection-architecture","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"MPhmuxVUWDHG9ica5hOB","title":"Onboard Amazon Web Services","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/onboard-amazon-web-services","siteSpaceId":"sitesp_yiQJj","description":"Follow the AWS onboarding wizard, and Cortex Data Security creates a custom authentication template to be executed in AWS.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"1GeaZ6OdmrdJO80d56PD","title":"Prerequisites for onboarding AWS","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/prerequisites-for-onboarding-aws","siteSpaceId":"sitesp_yiQJj","description":"Before you begin onboarding AWS, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"MsNJXuRLtMfOOfkKc8w1","title":"How to onboard Amazon Web Services","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/how-to-onboard-amazon-web-services","siteSpaceId":"sitesp_yiQJj","description":"Follow the AWS onboarding wizard and Cortex Data Security creates a custom authentication template to be deployed in AWS CloudFormation.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"HRqRK8KJ99eeyL76FPPU","title":"Deploy the authentication template in AWS","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/deploy-the-authentication-template-in-aws","siteSpaceId":"sitesp_yiQJj","description":"Learn how to deploy the Terraform or CloudFormation authentication template in Amazon Web Services.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"tlDcjcDNaTRTZA76M36d","title":"Post-deployment: Custom (BYOB) and Control Tower audit log collection","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/post-deployment-custom-byob-audit-log-collection","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"BEXAv6ItUtKeFC2ZpNPm","title":"Grant cross-account KMS key access for Control Tower BYOB log collection","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/grant-cross-account-kms-key-access-for-control-tower-byob-log-collection","siteSpaceId":"sitesp_yiQJj","description":"Learn how to configure cross-account AWS KMS key permissions for Cortex Control Tower BYOB log collection. Step-by-step guide to updating KMS key policies.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"7XQQyRyhkJUCFqgO0wnd","title":"AWS post-deployment verification","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/aws-post-deployment-verification","siteSpaceId":"sitesp_yiQJj","description":"After you have completed the AWS onboarding wizard and you have deployed the authentication template in AWS (using CloudFormation or Terraform), verify that the deployment succeeded.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"Jib2dGOs3Nar3Hd6oKIQ","title":"Amazon Web Services (AWS) provider permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/amazon-web-services-cloud-onboarding/amazon-web-services-provider-permissions","siteSpaceId":"sitesp_yiQJj","description":"List of Amazon Web Services (AWS) permissions for use during Cortex Data Security onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Amazon Web Services cloud onboarding"}]},{"id":"ZgP7QEsRe3pXXQ8tpDN6","title":"Microsoft Azure cloud onboarding","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"MxYyZPckJDlwA1h1fG7J","title":"Onboard Microsoft Azure","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/onboard-microsoft-azure","siteSpaceId":"sitesp_yiQJj","description":"Follow the Azure onboarding wizard, and Cortex Data Security creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"zgb4Tsg3uFarDE622dPS","title":"Prerequisites for onboarding Azure","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/prerequisites-for-onboarding-azure","siteSpaceId":"sitesp_yiQJj","description":"Before you begin onboarding Microsoft Azure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"GZtwac8wFdl91hu5fVqA","title":"How to onboard Microsoft Azure","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/how-to-onboard-microsoft-azure","siteSpaceId":"sitesp_yiQJj","description":"Follow the Azure onboarding wizard, and Cortex creates a custom authentication template to be executed in Azure.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"tms2Ns8vADGNtAvuFOeV","title":"Finalize Microsoft Azure onboarding by executing the authentication template","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/finalize-microsoft-azure-onboarding-by-executing-the-authentication-template","siteSpaceId":"sitesp_yiQJj","description":"Learn how to execute the authentication template file in Microsoft Azure for subscriptions, tenants, and management groups. We provide instructions both for applying the Terraform template's configura","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"j8EniPQm8Y4Bacn27oF9","title":"Microsoft Azure offboarding overview","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview","siteSpaceId":"sitesp_yiQJj","description":"This section contains the technical procedures required to safely decommission and offboard your Cortex Data Security resources in Microsoft Azure.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"d9CI8QVSJTuhBjufXrJ9","title":"Offboard Terraform-based Azure deployments (all scopes)","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-terraform-based-azure-deployments-all-scopes","siteSpaceId":"sitesp_yiQJj","description":"How to offboard all Terraform-based Microsoft Azure scopes from Cortex Data Security: A step-by-step technical guide to safely running Terraform destroy and cleaning up policy-deployed resources.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"nay7qzD2tm9LJamJP2yN","title":"Offboard Azure subscription (ARM)","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-subscription-arm","siteSpaceId":"sitesp_yiQJj","description":"How to offboard a Microsoft Azure subscription scope that was onboarded using ARM: A step-by-step technical guide to safely running the interactive offboarding script and cleaning up all resources.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"WYsFV7Eq1VIa89sXXy3G","title":"Offboard Azure management group or tenant scope (ARM)","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-management-group-or-tenant-scope-arm","siteSpaceId":"sitesp_yiQJj","description":"How to offboard Microsoft Azure management group or tenant scopes from Cortex Cloud: A step-by-step technical guide to safely removing all Azure resources deployed by Cortex onboarding templates.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"7UzJz2GOeQAJCG5ddgbt","title":"Offboard Azure tenant with Entra ID only","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-offboarding-overview/offboard-azure-tenant-with-entra-id-only","siteSpaceId":"sitesp_yiQJj","description":"How to offboard a Microsoft Azure tenant onboarded with the Entra ID only option from Cortex Data Security: A step-by-step technical guide to safely removing deployed resources.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"},{"label":"Microsoft Azure offboarding overview"}]},{"id":"pvg23aIULzZL3TuOBOTx","title":"Microsoft Azure provider permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/microsoft-azure-cloud-onboarding/microsoft-azure-provider-permissions","siteSpaceId":"sitesp_yiQJj","description":"List of Microsoft Azure permissions for use during Cortex Data Security onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Microsoft Azure cloud onboarding"}]},{"id":"LH0XyxNpdZMQZliZT1GW","title":"Google Cloud Platform cloud onboarding","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"klJ7xPjlmDAyPWzajluz","title":"Onboard Google Cloud Platform","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/onboard-google-cloud-platform","siteSpaceId":"sitesp_yiQJj","description":"Follow the GCP onboarding wizard, and Cortex creates a custom authentication template to be executed in GCP.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"s91AUvxFAC3a7drDNr2m","title":"Prerequisites for onboarding GCP","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp","siteSpaceId":"sitesp_yiQJj","description":"Before you begin onboarding GCP, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"uJjMtktvg4wvFlry2uca","title":"Required APIs","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/prerequisites-for-onboarding-gcp/required-apis","siteSpaceId":"sitesp_yiQJj","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"},{"label":"Prerequisites for onboarding GCP"}]},{"id":"UudXqERzUHiaNQLz3Ovl","title":"How to onboard Google Cloud Platform","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/how-to-onboard-google-cloud-platform","siteSpaceId":"sitesp_yiQJj","description":"Follow the GCP onboarding wizard, and Cortex Data Security creates a custom authentication template to be applied in GCP.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"873oTcr8w3SE5vlromNj","title":"Deploy the Terraform authentication template in GCP","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/deploy-the-terraform-authentication-template-in-gcp","siteSpaceId":"sitesp_yiQJj","description":"Learn how to deploy the Terraform authentication template in Google Cloud Console.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"uC8g9x1jIOquH5lBT4ka","title":"Connect Google Workspace with your GCP cloud instance","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/connect-google-workspace-with-your-gcp-cloud-instance","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"nfrRyBwY8frV9Am7G33U","title":"Monitor GCP resources inside service perimeters","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/monitor-gcp-resources-inside-service-perimeters","siteSpaceId":"sitesp_yiQJj","description":"Learn how to grant authorization to Cortex Data Security to scan within your GCP service perimeter.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"O8wmnbKzCaVGHE6O66uX","title":"Google Cloud Platform (GCP) provider permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/google-cloud-platform-cloud-onboarding/google-cloud-platform-gcp-provider-permissions","siteSpaceId":"sitesp_yiQJj","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex Data Security onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Google Cloud Platform cloud onboarding"}]},{"id":"LSIKRKvrV9Y7yZiIkId5","title":"Oracle Cloud Infrastructure cloud onboarding","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding","siteSpaceId":"sitesp_yiQJj","description":"Follow the Oracle Cloud Infrastructure onboarding wizard and Cortex Data Security creates a custom Terraform authentication template to be deployed in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"BC4uZhAWAFJbS04WItW4","title":"Onboard Oracle Cloud Infrastructure","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_yiQJj","description":"Follow the OCI onboarding wizard, and Cortex creates a custom authentication template to be executed in OCI.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"YYm7p8zA0bMh8bdjZqyn","title":"Prerequisites for onboarding OCI","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/prerequisites-for-onboarding-oci","siteSpaceId":"sitesp_yiQJj","description":"Before you begin onboarding Oracle Cloud Infrastructure, you must review the following prerequisites.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"v9sYQxt5eoUKstFcGi69","title":"How to onboard Oracle Cloud Infrastructure","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/how-to-onboard-oracle-cloud-infrastructure","siteSpaceId":"sitesp_yiQJj","description":"Follow the OCI onboarding wizard and Cortex Data Security creates a custom authentication template to be applied in OCI.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"Jt7aOh65ObKmt2p1rY4A","title":"Deploy the Terraform authentication template in OCI","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/deploy-the-terraform-authentication-template-in-oci","siteSpaceId":"sitesp_yiQJj","description":"Learn how to deploy the Terraform authentication template in Oracle Cloud Infrastructure.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"IL2oPEkyqt1MVhBRMzsB","title":"Oracle Cloud Infrastructure provider permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/oracle-cloud-infrastructure-provider-permissions","siteSpaceId":"sitesp_yiQJj","description":"List of Oracle Cloud Infrastructure (OCI) permissions for use during Cortex Data Security onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Oracle Cloud Infrastructure cloud onboarding"}]},{"id":"fYQiac48Ld67NIBhCWFY","title":"Outpost onboarding","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding","siteSpaceId":"sitesp_yiQJj","description":"Learn about outposts, which are a dedicated set of infrastructure resources that extends the reach of Cortex Data Security into your environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"saPpwjWchKPVbYOkTGX0","title":"Outpost fundamentals and planning","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/outpost-fundamentals-and-planning","siteSpaceId":"sitesp_yiQJj","description":"An outpost enables you to have security scans performed on infrastructure in a cloud account owned by you. Learn about outpost fundamentals and what to consider when planning your outpost.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"QXo1EaR6glxc2G4FWOPP","title":"Outpost creation workflow","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/outpost-creation-workflow","siteSpaceId":"sitesp_yiQJj","description":"Learn about the creation process for an outposts, which facilitate security scanning performed on infrastructure in a cloud account owned by you.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"YfiBG9FwqNgQrP6OaiAR","title":"Working with standard outposts","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-standard-outposts","siteSpaceId":"sitesp_yiQJj","description":"Standard outposts are the recommended way to create dedicated set of infrastructure resources that extends the reach of Cortex Data Security into your environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"T3nBahJoiNmdwE9eQY24","title":"Create a standard outpost","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-standard-outposts/create-a-standard-outpost","siteSpaceId":"sitesp_yiQJj","description":"Instructions for creating a standard outpost while onboarding your CSP.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with standard outposts"}]},{"id":"SAoICGStemcglpEKyvjS","title":"Working with Bringing your own Azure app (BYOA) outposts","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts","siteSpaceId":"sitesp_yiQJj","description":"Using advanced settings while creating your outpost, you can deploy a Cortex Data Security Azure outpost using your own pre-created Entra ID app registration.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"BvLKFT87YIBOc9Bp5Zb3","title":"Task 1: Meet the prerequisites for Azure BYOA outposts","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-1-meet-the-prerequisites-for-azure-byoa-outposts","siteSpaceId":"sitesp_yiQJj","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page lists the prerequisites that must be met before customizing your outpost in this way.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"SSQbyggZEc86k9vrXQIh","title":"Task 2: Create the app registration for the Azure BYOA outpost","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-2-create-the-app-registration-for-the-azure-byoa-outpost","siteSpaceId":"sitesp_yiQJj","description":"You can customize your own outpost for Azure by bringing your own app (BYOA). This page describes the steps for creating the app registration.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"o8qSuNISQUEXkppF4bB4","title":"Task 3: Deploy the Azure BYOA outpost","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-3-deploy-the-azure-byoa-outpost","siteSpaceId":"sitesp_yiQJj","description":"You can customize your own outpost by bringing your own app (BYOA). This page describes the steps for deploying the Azure BYOA outpost.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"LFGgSTY0f5ZzSdUI5xjy","title":"Task 4: Verify the BYOA outpost deployment","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/task-4-verify-the-byoa-outpost-deployment","siteSpaceId":"sitesp_yiQJj","description":"You can customize your own Azure outpost by bringing your own app (BYOA). This page describes the steps for verifying your BYOA outpost deployment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"qYAdUAGDjMMzvufwqui8","title":"The shell script for Azure app registration","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/working-with-bringing-your-own-azure-app-byoa-outposts/the-shell-script-for-azure-app-registration","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Working with Bringing your own Azure app (BYOA) outposts"}]},{"id":"lb2jJDeKq5pbrLisO2yL","title":"Outpost troubleshooting","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/outpost-troubleshooting","siteSpaceId":"sitesp_yiQJj","description":"Check here for solutions to issues that might occur while configuring, deploying, and operating outposts.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"AIv5WdPWd7tQb2TSQxtO","title":"Outpost Cloud Service Provider (CSP) permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions","siteSpaceId":"sitesp_yiQJj","description":"This page lists and explains the various roles and permissions needed for working with resources for outposts by CSP.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"}]},{"id":"AbS9B6FN7IedmAWx1yUl","title":"Amazon Web Services (AWS) outpost permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/amazon-web-services-aws-outpost-permissions","siteSpaceId":"sitesp_yiQJj","description":"List of Amazon Web Services (AWS) permissions for use during Cortex Data Security outpost onboarding to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"pOU5gKw85HtI0O3LmgnI","title":"Microsoft Azure outpost permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/microsoft-azure-outpost-permissions","siteSpaceId":"sitesp_yiQJj","description":"List of Microsoft Azure provider outpost permissions for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"1jdlgz3NTWGounVAGsly","title":"Google Cloud Platform (GCP) outpost permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/outpost-onboarding/outpost-cloud-service-provider-csp-permissions/google-cloud-platform-gcp-outpost-permissions","siteSpaceId":"sitesp_yiQJj","description":"List of Google Cloud Platform (GCP) permissions for use during Cortex Data Security onboarding outposts to enable continuous monitoring in your cloud environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"},{"label":"Outpost onboarding"},{"label":"Outpost Cloud Service Provider (CSP) permissions"}]},{"id":"nZtYkM3eCNyTkvLkILOO","title":"Manually connect a cloud instance","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/manually-connect-a-cloud-instance-fix-tables","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"1xafxLpozogVONfVfut1","title":"Manage cloud instances","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/manage-cloud-instances","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"G23MpYeeoyobtK4ZH4SB","title":"Pending cloud instances","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/pending-cloud-instances","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"oBfBqZlJAzXiTYeFtVrH","title":"Edit your onboarded CSP configuration","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/edit-your-onboarded-csp-configuration","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"lx8RIBh2iDluxbaJLrhk","title":"Update cloud permissions after Cortex release updates","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"CTX21Q0g5WmPHVWIMive","title":"Troubleshoot errors on cloud instances","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"z9jdqWn8gr8hVteP1ohh","title":"Introduction to Terraform for Cloud service provider (CSP) onboarding","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/introduction-to-terraform-for-cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"BkyO5uxRiMtA2hECQiPc","title":"Cloud service provider permissions","pathname":"/data-security-documentation/onboard-and-configure/csp-onboarding/cloud-service-provider-permissions","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Cloud service provider (CSP) onboarding"}]},{"id":"HfZXWfKZgGw71wi5d6IY","title":"Post-onboarding","pathname":"/data-security-documentation/onboard-and-configure/post-onboarding","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"}]},{"id":"wPKsRyjAupy8pjcoDkEJ","title":"How to configure the scanning settings for supported services","pathname":"/data-security-documentation/onboard-and-configure/post-onboarding/how-to-configure-the-scanning-settings-for-supported-services","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Post-onboarding"}]},{"id":"cuY5TKX5Uv6FDMalw2pl","title":"How to review errors in Cortex Data Security","pathname":"/data-security-documentation/onboard-and-configure/post-onboarding/how-to-review-errors-in-cortex-data-security","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Post-onboarding"}]},{"id":"mGeD34hX3CaCMLx3d8nf","title":"Cortex MCP Server","pathname":"/data-security-documentation/onboard-and-configure/post-onboarding/cortex-mcp-server","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Onboard and configure"},{"label":"Post-onboarding"}]},{"id":"a4uUXgNcBL7siLXen2lH","title":"Broker VM","pathname":"/data-security-documentation/data-management/broker-vm","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"}]},{"id":"9vf3D7nyXQqdQTAk2JFd","title":"What is the Broker VM?","pathname":"/data-security-documentation/data-management/broker-vm/what-is-the-broker-vm","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"E3HrjSwKl1vnH5GZ9fTN","title":"Set up and configure Broker VM","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"HaNV85m9jJQkzxttuSVQ","title":"Broker VM image installations","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"FPQjmfOSDi1oHWrbLa29","title":"Set up Broker VM on Alibaba Cloud","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-alibaba-cloud","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"yH6T8defrQwn1sYJL5Qs","title":"Set up Broker VM on Amazon Web Services","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-amazon-web-services","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"6QXu604UJKaEfYqxVPDq","title":"Set up Broker VM on Google Cloud Platform (GCP)","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-google-cloud-platform-gcp","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"0OKjDqBqRRwjJqJExuri","title":"Set up Broker VM on KVM using Ubuntu","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-kvm-using-ubuntu","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"SSuqSqzn5ge1X5byvDUt","title":"Set up Broker VM on Microsoft Azure","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-azure","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"bNLt6DkYxfW7kAn3f05A","title":"Set up Broker VM on Microsoft Hyper-V","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-hyper-v","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"ur9I5f2cgNYrGfYpnkMg","title":"Set up Broker VM on Nutanix Hypervisor","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-nutanix-hypervisor","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"hraW3BeFos0bbQfb1YFA","title":"Set up Broker VM on VMware ESXi using vSphere Client","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-vmware-esxi-using-vsphere-client","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"},{"label":"Broker VM image installations"}]},{"id":"8yM6EHGvvsi0T8RoEIH3","title":"Broker VM data collector applets","pathname":"/data-security-documentation/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-applets","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Set up and configure Broker VM"}]},{"id":"ssmfqrFf390zxGu96nSS","title":"Manage Broker VM","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"qdy3X8Pht6efk5uNrPi4","title":"Edit Broker VM Configuration","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/edit-broker-vm-configuration","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"r8p1GbAhUnzzHsjml8tu","title":"Increase Broker VM storage allocated for data caching","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-caching","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"TGw29VH4jmsmtesdqVY7","title":"Monitor Broker VM using Prometheus","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/monitor-broker-vm-using-prometheus","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"ncBJXHlMxmN1bksU5Bim","title":"Collect Broker VM Logs","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/collect-broker-vm-logs","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"9GjMPHN7SuFjRchUJY5X","title":"Upgrade Broker VM","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/upgrade-broker-vm","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"uBYkAJeRezQo1Afgpci3","title":"Update Broker VM applets independently","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/update-broker-vm-applets-independently","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"CjnV8nURec38nMpWQb8c","title":"Import Broker VM Configuration","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/import-broker-vm-configuration","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"q3lCTvGfjYZhR77DEq0G","title":"Open Live Terminal","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/open-live-terminal","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"sKrV1RvjsZW153aPsEhO","title":"Add Broker VM to cluster","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/add-broker-vm-to-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"1LfZJV7i0G2beHlUhJis","title":"Switchover Primary Node in Cluster","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/switchover-primary-node-in-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"1awhITDjfQOqtb1cDXn1","title":"Remove from Cluster","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm/remove-from-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Manage Broker VM"}]},{"id":"jrMbXlj4cLmYtCW8ulsb","title":"Manage Broker VM data collector applets","pathname":"/data-security-documentation/data-management/broker-vm/manage-broker-vm-data-collector-applets","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"oQYL0Z7SwifTv8FWCNai","title":"Broker VM High Availability Cluster","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"rjYKAvXIUAs1JsOAZDc7","title":"Configure High Availability Cluster","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/configure-high-availability-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"94w0vfOUKgJe0LyKEM6Q","title":"Manage Broker VM clusters","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"}]},{"id":"qxEfrtstEuzJOniVt75Z","title":"View cluster details","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/view-cluster-details","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"NIzfPNTxfJ8tI5otzcVW","title":"Edit cluster","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/edit-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"TOM2jRygfkGouWUTNM3a","title":"Add applet to cluster","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-applet-to-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"GOQDyDk5AVzoR4NOx5rq","title":"Add Broker VM to cluster","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-broker-vm-to-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"AlGKNDD7thTvA1F5C616","title":"Remove cluster","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/remove-cluster","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"},{"label":"Broker VM High Availability Cluster"},{"label":"Manage Broker VM clusters"}]},{"id":"YD6Tq7h0EvDbsJWJiRXM","title":"Broker VM notifications","pathname":"/data-security-documentation/data-management/broker-vm/broker-vm-notifications","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"WXyEW6F103ErYNuFhsEF","title":"Monitor Broker VM activity","pathname":"/data-security-documentation/data-management/broker-vm/monitor-broker-vm-activity","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"Gnoy7rvUM5xqUW1sZdzk","title":"Troubleshoot Broker VM applet errors","pathname":"/data-security-documentation/data-management/broker-vm/troubleshoot-broker-vm-applet-errors","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Broker VM"}]},{"id":"mE3dDRTzJtwYiYnmi8G2","title":"Dataset management","pathname":"/data-security-documentation/data-management/dataset-management","siteSpaceId":"sitesp_yiQJj","description":"Learn more about managing your datasets and understanding your overall data storage, period-based retention.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"}]},{"id":"VSLGZZoGb6gCdX4n0chS","title":"What are datasets?","pathname":"/data-security-documentation/data-management/dataset-management/what-are-datasets","siteSpaceId":"sitesp_yiQJj","description":"Learn how to import, delete, and interact with custom or third-party datasets in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"GevVdnCI7C9DtA0et0E7","title":"Lookup datasets","pathname":"/data-security-documentation/data-management/dataset-management/lookup-datasets","siteSpaceId":"sitesp_yiQJj","description":"Learn more about lookup datasets to correlate data from a data source with events in your environment.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"5w9lpfYnqCq7NlqpyPA4","title":"Import a lookup dataset","pathname":"/data-security-documentation/data-management/dataset-management/lookup-datasets/import-a-lookup-dataset","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"ght4nP722XwbUJFnM3uM","title":"Download JSON file of lookup dataset","pathname":"/data-security-documentation/data-management/dataset-management/lookup-datasets/download-json-file-of-lookup-dataset","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"Bm2iVZbSk6FEaSHpNrKQ","title":"Set time to live for lookup datasets","pathname":"/data-security-documentation/data-management/dataset-management/lookup-datasets/set-time-to-live-for-lookup-datasets","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Dataset management"},{"label":"Lookup datasets"}]},{"id":"xGAHvX4T5y6gAbKTvY1B","title":"Monitor datasets and dataset views activity","pathname":"/data-security-documentation/data-management/dataset-management/monitor-datasets-and-dataset-views-activity","siteSpaceId":"sitesp_yiQJj","description":"Learn more about the monitored Cortex Data Security datasets and dataset views activities.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Dataset management"}]},{"id":"PJbINPwp1tJUkwWnRlly","title":"Manage compute units","pathname":"/data-security-documentation/data-management/manage-compute-units","siteSpaceId":"sitesp_yiQJj","description":"Learn more about managing and tracking your compute units usage for API and Cold Storage XQL queries.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"}]},{"id":"gsovvA5jtTa0Q21Pit01","title":"Compute units usage","pathname":"/data-security-documentation/data-management/manage-compute-units/compute-units-usage","siteSpaceId":"sitesp_yiQJj","description":"Learn more about how to compute units CU) works according to your license and available options after reaching your quota.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Data management"},{"label":"Manage compute units"}]},{"id":"8AjaVxxI4Rjlosl8Q3j2","title":"What are Cortex Data Security data sources and connectors?","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/what-are-cortex-data-security-data-sources-and-connectors","siteSpaceId":"sitesp_yiQJj","description":"Learn more about Cortex Data Security data sources and connectors with a unified approach to integrations.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"HdOXpvGPENLwAT4cZqzi","title":"What is the data source and connector catalog?","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/what-is-the-data-source-and-connector-catalog","siteSpaceId":"sitesp_yiQJj","description":"Learn more about the complete data source and connector catalog available in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"omdQ0z1HHdyyLoS7WoCb","title":"Vendor-specific data sources and connectors","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors","siteSpaceId":"sitesp_yiQJj","description":"Browse vendor-specific data sources and connectors for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"RzsuSM8NSHH8MNOb5g28","title":"Amazon","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/amazon","siteSpaceId":"sitesp_yiQJj","description":"Configure the Amazon data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"SAXVzhs6VWGYa2l6UX7B","title":"Amazon Web Services","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/amazon/amazon-web-services","siteSpaceId":"sitesp_yiQJj","description":"Use Amazon Web Services in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Amazon"}]},{"id":"nZBRAfy3ANg3eZ0uvSlY","title":"Anthropic","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/anthropic","siteSpaceId":"sitesp_yiQJj","description":"Configure the Anthropic connector for Cortex XSIAM.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"R2XmcxNb7rXSqAiRm0qs","title":"Claude","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/anthropic/claude","siteSpaceId":"sitesp_yiQJj","description":"Use Claude with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Anthropic"}]},{"id":"ypQ8MFMYP6wOSWthnBQP","title":"Atlassian","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/atlassian","siteSpaceId":"sitesp_yiQJj","description":"Configure the Atlassian connector for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"tc3Hr9hqSA2MR4ywGCdS","title":"Atlassian","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/atlassian/atlassian","siteSpaceId":"sitesp_yiQJj","description":"Use Atlassian data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Atlassian"}]},{"id":"o0Z1q19hQ8A3oxo7x5Uk","title":"Box","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/box","siteSpaceId":"sitesp_yiQJj","description":"Configure the Box data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"nTlZ9V4uRgbAxpLcDxPV","title":"Ingest logs and data from Box","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/box/ingest-logs-and-data-from-box","siteSpaceId":"sitesp_yiQJj","description":"Collect Box data from Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Box"}]},{"id":"lBBIN5RjRfWwGLcz4hAc","title":"Databricks","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/databricks","siteSpaceId":"sitesp_yiQJj","description":"Configure the Databricks data source and connector for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"ziqtphkbzJPntbjdhN9o","title":"How to onboard Databricks","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/databricks/how-to-onboard-databricks","siteSpaceId":"sitesp_yiQJj","description":"Collect Databricks data in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"GDSzUYyRgcl4b0fcNoA6","title":"Databricks","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/databricks/databricks","siteSpaceId":"sitesp_yiQJj","description":"Use Databricks data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Databricks"}]},{"id":"3JfdkN1nr7Cio6DfJ1Qg","title":"Dropbox","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dropbox","siteSpaceId":"sitesp_yiQJj","description":"Configure the Dropbox data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"K3PNlMkwng3GHzyc1w4V","title":"Ingest logs and data from Dropbox","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/dropbox/ingest-logs-and-data-from-dropbox","siteSpaceId":"sitesp_yiQJj","description":"Collect dropbox data in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Dropbox"}]},{"id":"SmC4Bf5iu6JJg71yBSFt","title":"Google","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google","siteSpaceId":"sitesp_yiQJj","description":"Configure the Google data source and connector for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wqt6mY0d6vm6xchPdPMw","title":"Google Workspace","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-workspace","siteSpaceId":"sitesp_yiQJj","description":"Use Google Workspace data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"}]},{"id":"gz2FpfWImxf2yiFKJqn9","title":"Ingest logs and data from Google Workspace","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-workspace/ingest-logs-and-data-from-google-workspace","siteSpaceId":"sitesp_yiQJj","description":"Collect Google Workspace data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"qNanWdHQnyk0qePJBFJ1","title":"Google Workspace connector","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/google/google-workspace/google-workspace-connector","siteSpaceId":"sitesp_yiQJj","description":"Use Google Workspace with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Google"},{"label":"Google Workspace"}]},{"id":"M94vTO3iV7JoI6R9kAmk","title":"Microsoft","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft","siteSpaceId":"sitesp_yiQJj","description":"Configure the Microsoft data sources and connectors for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"esMfNcDiS1uS3dKzrnIf","title":"Microsoft Azure","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-azure","siteSpaceId":"sitesp_yiQJj","description":"Use Microsoft Azure data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"HUWkJDep45v2ApBkm5OY","title":"Microsoft Entra ID","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-entra-id","siteSpaceId":"sitesp_yiQJj","description":"Use Microsoft Entra ID data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"eXRQigOvTRpnRIx8XWnr","title":"Microsoft Office 365","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365","siteSpaceId":"sitesp_yiQJj","description":"Use Microsoft Office 365 data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"v0rhhc8TfZKITebnjdmx","title":"Ingest logs from Microsoft Office 365","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/ingest-logs-from-microsoft-office-365","siteSpaceId":"sitesp_yiQJj","description":"Collect Microsoft Office 365 data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"T8DXqHLFNJ3GzNf94Sn0","title":"Microsoft 365 (new)","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft-365-new","siteSpaceId":"sitesp_yiQJj","description":"Use Microsoft 365 data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"dtG7PpwzwCpFKKQGOkEj","title":"Create a Microsoft Entra ID","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft-365-new/create-a-microsoft-entra-id","siteSpaceId":"sitesp_yiQJj","description":"Learn more about creating a Microsoft Entra ID.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"},{"label":"Microsoft 365 (new)"}]},{"id":"yQxs0SOjUDpe2wkQrtnL","title":"Microsoft365 (legacy)","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft365-legacy","siteSpaceId":"sitesp_yiQJj","description":"Use Microsoft365 data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"}]},{"id":"fvAzjeaTEKuk6iBalA04","title":"Migrate to new Microsoft 365 connector","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-office-365/microsoft365-legacy/migrate-to-new-microsoft-365-connector","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"},{"label":"Microsoft Office 365"},{"label":"Microsoft365 (legacy)"}]},{"id":"wVQ04NAMDVp47GUGJX64","title":"Microsoft Teams","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/microsoft/microsoft-teams","siteSpaceId":"sitesp_yiQJj","description":"Use Microsoft Teams data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Microsoft"}]},{"id":"wEzPe087FBEgGu8NODRT","title":"MongoDB","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mongodb","siteSpaceId":"sitesp_yiQJj","description":"Configure the MongoDB data source and connector for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"wm0i9vhWnvhey4C9lKp3","title":"How to onboard MongoDB Atlas (Posture)","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mongodb/how-to-onboard-mongodb-atlas","siteSpaceId":"sitesp_yiQJj","description":"Use MongoDB Atlas (Posture) data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"phoENznDgrwJSxeYJMr9","title":"MongoDB Atlas","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/mongodb/mongodb-atlas","siteSpaceId":"sitesp_yiQJj","description":"Use MongoDB Atlas data with Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"MongoDB"}]},{"id":"DUQlyU5gTHTAZohym6md","title":"Okta","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/okta","siteSpaceId":"sitesp_yiQJj","description":"Configure the Okta data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"Dz7bTZq3HNkcQzEQxl1a","title":"Ingest logs and data from Okta","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/okta/ingest-logs-and-data-from-okta","siteSpaceId":"sitesp_yiQJj","description":"Configure Okta log and data collection for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Okta"}]},{"id":"hVoNyutKRu6cTB4vPGKW","title":"OneLogin","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/onelogin","siteSpaceId":"sitesp_yiQJj","description":"Configure the OneLogin data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"bSvqFC9JdwD3j0zCWl1E","title":"Ingest logs and data from OneLogin","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/onelogin/ingest-logs-and-data-from-onelogin","siteSpaceId":"sitesp_yiQJj","description":"Configure OneLogin log and directory data collection for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"OneLogin"}]},{"id":"YrLx94KAJHuBMaFcFGSA","title":"Oracle","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/oracle","siteSpaceId":"sitesp_yiQJj","description":"Configure the Oracle data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"cUKpkpfCLXGq4wMu1AUt","title":"Oracle Cloud Infrastructure","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/oracle/oracle-cloud-infrastructure","siteSpaceId":"sitesp_yiQJj","description":"Configure Oracle Cloud Infrastructure data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Oracle"}]},{"id":"6mc8PI7YYJCDrjlYq3E7","title":"Ping Identity","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ping-identity","siteSpaceId":"sitesp_yiQJj","description":"Configure the Ping Identity data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"PdiOCpyW4PyrRdg86P6K","title":"PingOne","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ping-identity/pingone","siteSpaceId":"sitesp_yiQJj","description":"Configure PingOne data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"}]},{"id":"OmQCO8VpOayXtS1C28XV","title":"Ingest authentication logs and data from PingOne","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/ping-identity/pingone/ingest-authentication-logs-and-data-from-pingone","siteSpaceId":"sitesp_yiQJj","description":"Ingest PingOne authentication logs and data into Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Ping Identity"},{"label":"PingOne"}]},{"id":"Bfb4Jyp5Qp9dIR6vE6Vc","title":"Salesforce","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/salesforce","siteSpaceId":"sitesp_yiQJj","description":"Configure the Salesforce data source and connector for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"1fzI0TcaQSvzXVuaz8oz","title":"Ingest logs and data from Salesforce","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/salesforce/ingest-logs-and-data-from-salesforce","siteSpaceId":"sitesp_yiQJj","description":"Ingest Salesforce logs and data into Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"jYouo4RFLPg2plFVK6az","title":"Salesforce connector","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/salesforce/ingest-and-run-salesforce-automation-and-remediation","siteSpaceId":"sitesp_yiQJj","description":"Use Salesforce data in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Salesforce"}]},{"id":"zX0pVKJP9qUufFIawzVf","title":"ServiceNow","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/servicenow","siteSpaceId":"sitesp_yiQJj","description":"Configure the ServiceNow connector for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"sk9vAgm1Z1Tz8HxhQddY","title":"ServiceNow","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/servicenow/servicenow","siteSpaceId":"sitesp_yiQJj","description":"Use ServiceNow data in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"ServiceNow"}]},{"id":"6YIr1zaDU9DUHvfsrmdv","title":"Slack","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/slack","siteSpaceId":"sitesp_yiQJj","description":"Configure the Slack connector for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"EQ8vInQJ2oM3DhINOCtn","title":"Slack Enterprise","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/slack/slack-enterprise","siteSpaceId":"sitesp_yiQJj","description":"Configure Slack Enterprise identity and SaaS posture monitoring for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Slack"}]},{"id":"z0fbu3CQt3Pye4W7imNq","title":"Snowflake","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/snowflake","siteSpaceId":"sitesp_yiQJj","description":"Configure the Snowflake data source for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"}]},{"id":"zhhIDugN2F1kouZraLpn","title":"How to onboard Snowflake","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources-and-connectors/snowflake/how-to-onboard-snowflake","siteSpaceId":"sitesp_yiQJj","description":"Onboard Snowflake as a data source in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Vendor-specific data sources and connectors"},{"label":"Snowflake"}]},{"id":"FKdresDxyePPaXLx9WuO","title":"Connectors","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/connectors","siteSpaceId":"sitesp_yiQJj","description":"Configure connectors that collect and enrich data in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"4gX1u7CZLHEkce71cZTe","title":"Standard data sources","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/standard-data-sources","siteSpaceId":"sitesp_yiQJj","description":"Configure standard data sources to ingest telemetry into Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"ueol1AaCrN2h7mQKrB33","title":"Cloud service provider (CSP) onboarding","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/cloud-service-provider-csp-onboarding","siteSpaceId":"sitesp_yiQJj","description":"Learn about onboarding your cloud service provider to Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"BKTuZI5zf1MsXE69rStO","title":"Generic on-premise data collectors","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/generic-on-premise-data-collectors","siteSpaceId":"sitesp_yiQJj","description":"Configure generic on-premise data collectors for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"rDofZ1BZKdNOV2Hlc5mV","title":"Broker VM data collector applets","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets","siteSpaceId":"sitesp_yiQJj","description":"Configure Broker VM data collector applets for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Generic on-premise data collectors"}]},{"id":"Ut0NtAgW2ARkFuz3ae6y","title":"Activate DSPM Database","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-database","siteSpaceId":"sitesp_yiQJj","description":"Configure the DSPM Database applet for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"7tUKTmq3c6J0OBTuevSd","title":"Activate DSPM Fileshare","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-dspm-fileshare","siteSpaceId":"sitesp_yiQJj","description":"Configure the DSPM Fileshare applet for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"wSZIZxoIEO7tvWlJYOiX","title":"Activate Transporter","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-transporter","siteSpaceId":"sitesp_yiQJj","description":"Configure Transporter applet for Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Generic on-premise data collectors"},{"label":"Broker VM data collector applets"}]},{"id":"ofMdtCbon1I9TdrYFWlO","title":"Administration and troubleshooting","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting","siteSpaceId":"sitesp_yiQJj","description":"Learn more about the administration and troubleshooting of the different data collector integrations in Cortex Cloud.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"}]},{"id":"hrZU9iTFHTiMrWqjEtGj","title":"Manage instances","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"fyNC4JERSZumarku7N45","title":"Add a new data source or instance","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/add-a-new-data-source-or-instance","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"MT6H96UU7NOd7iXuWU5Y","title":"How to configure the scanning settings for supported services","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/how-to-configure-the-scanning-settings-for-supported-services","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"ZQL51SAD6jhU5HfrUAf1","title":"Manage cloud instances","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/manage-cloud-instances","siteSpaceId":"sitesp_yiQJj","description":"Manage cloud instances connected to Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"UVy8Qjt05dwrAruqpR1t","title":"Update cloud permissions after Cortex release updates","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/update-cloud-permissions-after-cortex-release-updates","siteSpaceId":"sitesp_yiQJj","description":"Update cloud permissions after Cortex Data Security releases.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"Yi8cfcRRTEav2g4FNEsR","title":"Pending cloud instances","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/pending-cloud-instances","siteSpaceId":"sitesp_yiQJj","description":"Review pending cloud instances in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"oBdKPLlMXakgasRC8z90","title":"Troubleshoot errors on cloud instances","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/troubleshoot-errors-on-cloud-instances","siteSpaceId":"sitesp_yiQJj","description":"Troubleshoot errors on cloud instances in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"mwMJEiITTUhGBkrlNbWT","title":"Manage Kubernetes Connector instances","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/manage-instances/manage-kubernetes-connector-instances","siteSpaceId":"sitesp_yiQJj","description":"Manage Kubernetes Connector instances in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Manage instances"}]},{"id":"H9zvVv5vEJnj2R8GV6dL","title":"Integrations","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/integrations","siteSpaceId":"sitesp_yiQJj","description":"Manage and configure integrations in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"aVaUWqMOguSGVuHqmKJN","title":"Add an integration instance","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/integrations/add-an-integration-instance","siteSpaceId":"sitesp_yiQJj","description":"Add and configure an integration instance in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"kh8jQ52FXQ2h1t5oXbjC","title":"Configure integration permissions","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/integrations/configure-integration-permissions","siteSpaceId":"sitesp_yiQJj","description":"Configure permissions for integrations in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"wCeIyKyPjwNA7tqWlJku","title":"Troubleshoot Integrations","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/integrations/troubleshoot-integrations","siteSpaceId":"sitesp_yiQJj","description":"Troubleshoot integration issues in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"Integrations"}]},{"id":"rqutcHITUjatBXKcRqDo","title":"Verify collector connectivity","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/verify-collector-connectivity","siteSpaceId":"sitesp_yiQJj","description":"Check collector connection status, investigate errors, and track connectivity changes in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"vUmBBVl1riuzt7Palpk0","title":"About health issues","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues","siteSpaceId":"sitesp_yiQJj","description":"Understand Cortex Data Security health issues, their types, and how to view and investigate them.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"}]},{"id":"oFmxP7lNKwCQdC7OSP3a","title":"Investigate and resolve health issues","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues/investigate-and-resolve-health-issues","siteSpaceId":"sitesp_yiQJj","description":"Investigate and resolve ingestion, collection, correlation, and automation health issues in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"jocqHTXo93ndLqWzVTXJ","title":"Monitor data ingestion health (BETA)","pathname":"/data-security-documentation/cortex-data-security-data-sources-and-connectors/administration-and-troubleshooting/about-health-issues/monitor-data-ingestion-health","siteSpaceId":"sitesp_yiQJj","description":"Monitor data ingestion health using metrics, custom rules, and built-in issue detection in Cortex Data Security.","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Cortex Data Security Data Sources and Connectors"},{"label":"Administration and troubleshooting"},{"label":"About health issues"}]},{"id":"MOlsn9glHfX4nztmHN22","title":"Asset management","pathname":"/data-security-documentation/inventory-and-monitoring/asset-management","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"}]},{"id":"LCFPNuNTpZfStHQik6X6","title":"Data Inventory","pathname":"/data-security-documentation/inventory-and-monitoring/asset-management/data-inventory","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Asset management"}]},{"id":"h4naZpxM0WaF0BSaKT0Q","title":"Dashboards and reports","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"}]},{"id":"cMNHRFJhs32weG16NAkx","title":"Overview of dashboards and reports","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/overview-of-dashboards-and-reports","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"}]},{"id":"7pM7gz6N85ZAwZC08Dp3","title":"Dashboard interface basics","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-interface-basics","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"wQnfPNtSVOFTI068gR0X","title":"Dashboard types","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/overview-of-dashboards-and-reports/dashboard-types","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"ALmo9i2WpEK61yowRwPW","title":"Report basics","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/overview-of-dashboards-and-reports/report-basics","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"UybJ1oCJKyCcSruVYQXD","title":"Widget Library","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/overview-of-dashboards-and-reports/widget-library","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Overview of dashboards and reports"}]},{"id":"vtzxIC5P0lIt4hlR5HwC","title":"Data Security dashboards","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/data-security-dashboards","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"}]},{"id":"6ddknUYXju9SHT1fVetn","title":"Cortex Data Security Command Center","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/data-security-dashboards/cortex-data-security-command-center","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Data Security dashboards"}]},{"id":"oOIjW1Cpha6WN1UUD6cJ","title":"Data Security dashboard","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/data-security-dashboards/data-security-dashboard","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Data Security dashboards"}]},{"id":"tpzO0PMnPkuAkHt3DNzH","title":"Access and visibility for dashboards and reports","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/access-and-visibility-for-dashboards-and-reports","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"}]},{"id":"CPNTit6gdMqIu9Dr6KKr","title":"Visibility settings","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/visibility-settings","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"Jxz8BB4mcZdffXRHxfEF","title":"Access to widgets","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-to-widgets","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"kOSQhtgdKKkFvYMyPawv","title":"Sharing icons","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/sharing-icons","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"D3ewe9n2fYcGHJiPuC3C","title":"Access and sharing cheat sheet","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/access-and-visibility-for-dashboards-and-reports/access-and-sharing-cheat-sheet","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Access and visibility for dashboards and reports"}]},{"id":"cQ6eJy0CIVkgO8X5FEMV","title":"Manage dashboards and reports","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"}]},{"id":"qnSUpGmRCV77k197NdO1","title":"Dashboard Manager","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/dashboard-manager","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"UGpIZwJQZobWQvpY2iU9","title":"Reports","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/reports","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"MkHDdbXoyATHPF8umvT0","title":"Duplicate dashboards and reports","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/duplicate-dashboards-and-reports","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"sWC1aAPoKhZIn0BmU32a","title":"Share custom dashboards and report templates","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/share-custom-dashboards-and-report-templates","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"btx6jZkHyfWMiXVB9Z3b","title":"Change ownership to dashboards and report templates","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/change-ownership-to-dashboards-and-report-templates","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"2NG2jwSG3NcAS24WqFDV","title":"Import and export dashboards and report templates","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/import-and-export-dashboards-and-report-templates","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"1MMYd2x4X8yCHKNEL74E","title":"Configure the notification rule for a failed report","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/configure-the-notification-rule-for-a-failed-report","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"FzgqcdUpuspnMEoQNoi7","title":"Deleted content","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/manage-dashboards-and-reports/deleted-content","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Manage dashboards and reports"}]},{"id":"I2GhvG1Ta7V1a1FnYV3Z","title":"Create dashboards","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/create-dashboards","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"}]},{"id":"CII2qGyHQ8vJOajfYirj","title":"Create a dashboard","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/create-dashboards/create-a-dashboard","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Create dashboards"}]},{"id":"Bsc4tuqR6V23x4P9wfOX","title":"Create reports","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/create-reports","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"}]},{"id":"m3jUwLnbaH3kH9YlrCYD","title":"Create a report template from scratch","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/create-reports/create-a-report-template-from-scratch","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Create reports"}]},{"id":"5GCi4WiPA0gZTvqN0AtE","title":"Advanced configuration","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"}]},{"id":"3HACatKUggCIsp49Xup2","title":"Create custom widgets","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration/create-custom-widgets","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"G14gYlfr3VqOetFiQLUD","title":"Create widgets using AI","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration/create-custom-widgets/create-widgets-using-ai","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"mONBSzn5QpbrlsLgVdEF","title":"Create XQL widgets","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration/create-custom-widgets/create-xql-widgets","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"dD310ze8CkJLZpb4qSf7","title":"Add parameters to a custom XQL widget","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration/create-custom-widgets/add-parameters-to-a-custom-xql-widget","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"0HYYIKcaCtQSIDrCtrZF","title":"Create script-based widgets","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration/create-custom-widgets/create-script-based-widgets","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Advanced configuration"},{"label":"Create custom widgets"}]},{"id":"91xHPnxTSVSVfwv7YY1V","title":"Configure global filters","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration/configure-global-filters","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"HcycC5h7JFX9z12hsis2","title":"Configure drilldowns","pathname":"/data-security-documentation/inventory-and-monitoring/dashboards-and-reports/advanced-configuration/configure-drilldowns","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Inventory & Monitoring"},{"label":"Dashboards and reports"},{"label":"Advanced configuration"}]},{"id":"e0360411ea822e75dd7b39971028e314e252c54e","title":"Cases and issues","pathname":"/data-security-documentation/issue-management/cases-and-issues","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Issue Management"}]},{"id":"f71354e3ad1a3ad1ad3d798a25b2d487a9b59cf0","title":"Investigation and response","pathname":"/data-security-documentation/issue-management/investigation-and-response","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Issue Management"}]},{"id":"T3woKaroQPtEFPnTDteV","title":"How to report a false positive in Cortex Data Classification","pathname":"/data-security-documentation/issue-management/how-to-report-a-false-positive-in-cortex-data-classification","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Issue Management"}]},{"id":"VnD2pt2vH7QlpZP67Yke","title":"Rules and policies","pathname":"/data-security-documentation/advanced-tools/rules-and-policies","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Advanced tools"}]},{"id":"ca95eb96b7e9f2bd4324a8aec37e2028e9ebbf55","title":"XQL query language","pathname":"/data-security-documentation/advanced-tools/xql-query-language","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Advanced tools"}]},{"id":"1073cf90c9d6872369f7f5cd70e041f2933455e4","title":"Graph search","pathname":"/data-security-documentation/advanced-tools/graph-search","siteSpaceId":"sitesp_yiQJj","description":"","breadcrumbs":[{"label":"Cortex Data Security","icon":"wave-square"},{"label":"Cortex Data Security Documentation","icon":"database"},{"label":"Advanced tools"}]},{"id":"yKkvKyeQDRFzjAIwO6Zk","title":"Learn about Cortex Xpanse","pathname":"/cortex-xpanse","siteSpaceId":"sitesp_dX5hl","description":"Understand how Cortex Xpanse discovers and enables you to protect your attack surface.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"d0hBdPzqWDYymAxYRdpi","title":"What is Cortex Xpanse?","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/what-is-cortex-xpanse","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse is a cloud-based attack surface management (ASM) platform that collects and correlates information about every device and service connected to the public internet.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"}]},{"id":"wtzCxSVFqG976QyAbX29","title":"Network mapping","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/network-mapping","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse discovers and intelligently attributes assets to organizations using AI and human experts.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"}]},{"id":"OgWnLmwgwZX2P1Wd3Luq","title":"Scanning","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/scanning","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse provides targeted scanning of customer networks from an attributed scanning infrastructure.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"}]},{"id":"q4wwB5wHqcrrsJbTHGon","title":"Scanning cadences","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/scanning/scanning-cadences","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse scans the internet to discover new services at varying cadences depending on several factors such as port, protocol, cloud provider ranges, and customer-attributed assets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"},{"label":"Scanning"}]},{"id":"ghfZ6eWsNvLYt27scBpn","title":"Known Assets Monitoring","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/scanning/known-assets-monitoring","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse performs targeted daily scans of known assets for customers who opt in.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"},{"label":"Scanning"}]},{"id":"q74tzi8DscVYJ7jz3Kse","title":"Scanning ports and protocols","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/scanning/scanning-ports-and-protocols","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse detects protocol-validated services on the IPv4 and IPv6 space of the internet.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"},{"label":"Scanning"}]},{"id":"A3DeTOD61wt3KpHdbZrE","title":"GeoIP data collection","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/geoip-data-collection","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse geoIP data confirms your global network distribution.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"}]},{"id":"nDWi61wAsnBiNhfnV6UI","title":"Cortex Xpanse use cases","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/cortex-xpanse-use-cases","siteSpaceId":"sitesp_dX5hl","description":"Common use cases for protecting your attack surface with Cortex Xpanse.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"}]},{"id":"1pzQcp9meLKE7ZbVo7hW","title":"Cortex Xpanse licenses","pathname":"/cortex-xpanse/learn-about-cortex-xpanse/cortex-xpanse-licenses","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse offers several different products and licenses.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Learn about Cortex Xpanse"}]},{"id":"HMJtl0yAbvKTxGghltTW","title":"Onboard and configure Cortex Xpanse","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"HVnMkj5O0n5mLYB9RBru","title":"Onboarding checklist","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/onboarding-checklist","siteSpaceId":"sitesp_dX5hl","description":"Review these steps to deploy and onboard Cortex Xpanse.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"31WKeHZJzmnKAzShq0W2","title":"Step 1: Activate Cortex Xpanse","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/step-1-activate-cortex-xpanse","siteSpaceId":"sitesp_dX5hl","description":"Learn how to activate Cortex Xpanse in the Cortex Gateway.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"KiFLADXXkGfMZAP8KqFg","title":"Step 2: Set up users and roles","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/step-2-set-up-users-and-roles","siteSpaceId":"sitesp_dX5hl","description":"Set up users, roles, groups, and user scope as part of the onboarding process.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"TfsT5ZH15UQhyG2bulQl","title":"Step 3: Set up authentication","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/step-3-set-up-authentication","siteSpaceId":"sitesp_dX5hl","description":"Authenticate users through the Customer Support Portal or using SAML SSO.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"ldUZXDZZNaDmk2Som635","title":"Step 4: Provide seed data for your enhanced production map","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/step-4-provide-seed-data-for-your-enhanced-production-map","siteSpaceId":"sitesp_dX5hl","description":"Provide basic information about your organization to create a more comprehensive and customized inventory of your external-facing assets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"NP9iC1OUciv67u3XOKQC","title":"Step 5: Begin asset validation and asset enrichment","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/step-5-begin-asset-validation-and-asset-enrichment","siteSpaceId":"sitesp_dX5hl","description":"Validate assets in your inventory as part of the onboarding process.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"PrXXw2dD0B5U527Lwive","title":"Step 6: Configure priority integrations","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/step-6-configure-priority-integrations","siteSpaceId":"sitesp_dX5hl","description":"Set up collection, automation, and outbound integrations as part of the Cortex Xpanse onboarding process.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"ylHTlwrXfnH9FOS2bLMU","title":"Post-deployment steps","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/post-deployment-steps","siteSpaceId":"sitesp_dX5hl","description":"Configure server settings, security settings, and log forwarding.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"wZxQ4bitETtvjUGVObrp","title":"Server Settings","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/post-deployment-steps/server-settings","siteSpaceId":"sitesp_dX5hl","description":"Configure server settings such as keyboard shortcuts and timestamp format.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"},{"label":"Post-deployment steps"}]},{"id":"SHkrPlnx3keuuU59str3","title":"Security Settings","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/post-deployment-steps/security-settings","siteSpaceId":"sitesp_dX5hl","description":"Configure security settings such as session expiration, user login expiration, and dashboard expiration.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"},{"label":"Post-deployment steps"}]},{"id":"fEA12rlH70Jejffr2FDH","title":"Log Forwarding","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/post-deployment-steps/log-forwarding","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse enables you to forward alerts, management audit logs, and reports to external applications.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"},{"label":"Post-deployment steps"}]},{"id":"67Y2g74eB53AlV8evrjp","title":"Configure Cortex Xpanse","pathname":"/cortex-xpanse/onboard-and-configure-cortex-xpanse/configure-cortex-xpanse","siteSpaceId":"sitesp_dX5hl","description":"Configure attack surface rules, risk scoring, dashboards, and other customizable features to match your use cases.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Onboard and configure Cortex Xpanse"}]},{"id":"dzq2V4lk79y0x767nPaI","title":"Users and roles","pathname":"/cortex-xpanse/users-and-roles","siteSpaceId":"sitesp_dX5hl","description":"Learn how to configure and manage Cortex Xpanse users, roles, and user groups. Assign roles and set up authentication for users.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"soXHblnzMy6AnfNVEpEB","title":"Manage Users","pathname":"/cortex-xpanse/users-and-roles/manage-users","siteSpaceId":"sitesp_dX5hl","description":"Manage users and user permissions in the Access Management section of Cortex Xpanse.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"}]},{"id":"andcjbF3noPT6YB9xHm7","title":"Manage Roles","pathname":"/cortex-xpanse/users-and-roles/manage-roles","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse enables you to manage roles in the Access Management console.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"}]},{"id":"2l2CW22snStuV4XDtCSO","title":"Predefined User Roles","pathname":"/cortex-xpanse/users-and-roles/manage-roles/predefined-user-roles","siteSpaceId":"sitesp_dX5hl","description":"Use predefined roles to easily assign View and Edit permissions to Expander users.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"},{"label":"Manage Roles"}]},{"id":"4aTL4uru1aEqGBvVQdP2","title":"Manage User Groups","pathname":"/cortex-xpanse/users-and-roles/manage-user-groups","siteSpaceId":"sitesp_dX5hl","description":"User groups enable you to define a common role and scope for multiple users at once in a Cortex Xpanse tenant.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"}]},{"id":"d5Z7ibLbxWv01wNi6qgd","title":"Manage User Scope","pathname":"/cortex-xpanse/users-and-roles/manage-user-scope","siteSpaceId":"sitesp_dX5hl","description":"Use tags and business units to restrict user access to data in Expander.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"}]},{"id":"Qn16Ckk44H9gUpvpHgH6","title":"User authentication","pathname":"/cortex-xpanse/users-and-roles/user-authentication","siteSpaceId":"sitesp_dX5hl","description":"Authenticate Cortex Xpanse users using SAML 2.0 or the Cortex Gateway.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"}]},{"id":"HiU1QXBUdls7zn5pKWst","title":"Authenticate users through the Customer Support Portal","pathname":"/cortex-xpanse/users-and-roles/user-authentication/authenticate-users-through-the-customer-support-portal","siteSpaceId":"sitesp_dX5hl","description":"Authenticate Cortex Xpanse users when using the Customer Support portal.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"},{"label":"User authentication"}]},{"id":"BChefRIpPUWYFBF5Vdox","title":"Authenticate users through the Cortex Xpanse tenant using SSO","pathname":"/cortex-xpanse/users-and-roles/user-authentication/authenticate-users-through-the-cortex-xpanse-tenant-using-sso","siteSpaceId":"sitesp_dX5hl","description":"Set up authentication in the Cortex Xpanse tenant using SSO.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"},{"label":"User authentication"}]},{"id":"pPegNPJDrHnKYeWGqXKc","title":"Set up Okta as the Identity Provider Using SAML 2.0","pathname":"/cortex-xpanse/users-and-roles/user-authentication/set-up-okta-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_dX5hl","description":"Use Okta to authenticate your Cortex Xpanse users.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"},{"label":"User authentication"}]},{"id":"GskxFwqnK0qH1VuOogvN","title":"Set up Microsoft Entra ID as the Identity Provider Using SAML 2.0","pathname":"/cortex-xpanse/users-and-roles/user-authentication/set-up-microsoft-entra-id-as-the-identity-provider-using-saml-2.0","siteSpaceId":"sitesp_dX5hl","description":"Use Microsoft Entra ID to authenticate your Cortex Xpanse users.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"},{"label":"User authentication"}]},{"id":"drFZn3Q62bJjYjoA3SYv","title":"Use Multiple SAML 2.0 Providers","pathname":"/cortex-xpanse/users-and-roles/user-authentication/use-multiple-saml-2.0-providers","siteSpaceId":"sitesp_dX5hl","description":"Configure multiple SAML SSO providers and route users to the correct identity provider by email domain.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"},{"label":"User authentication"}]},{"id":"wW1vg0TVUSmhi4H5LB6l","title":"Troubleshoot SAML 2.0 Issues","pathname":"/cortex-xpanse/users-and-roles/user-authentication/troubleshoot-saml-2.0-issues","siteSpaceId":"sitesp_dX5hl","description":"Resolve common SAML 2.0 authentication issues, including IdP configuration, attribute mapping, and group mapping errors.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Users and roles"},{"label":"User authentication"}]},{"id":"mvxy8xyNhA9BagGHFoDB","title":"Dataset management","pathname":"/cortex-xpanse/dataset-management","siteSpaceId":"sitesp_dX5hl","description":"Learn more about managing your datasets and understanding your overall data storage, period-based retention.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"UrHad71vly09ysEiNPIQ","title":"Dashboards and reports","pathname":"/cortex-xpanse/dashboards-and-reports","siteSpaceId":"sitesp_dX5hl","description":"Create or modify dashboards and reports, schedule automated reports for recurring needs, and design custom widgets to suit your visualization goals.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"TnBwfNeasPYtoX91o15t","title":"Dashboards","pathname":"/cortex-xpanse/dashboards-and-reports/dashboards","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse provides a comprehensive set of predefined dashboards and the ability to create custom dashboards.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"}]},{"id":"aGLhmTF2WUFNjrsvm2u1","title":"Predefined dashboards","pathname":"/cortex-xpanse/dashboards-and-reports/dashboards/predefined-dashboards","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Dashboards"}]},{"id":"nraKupzaCFb5OruTXSMJ","title":"Create a dashboard","pathname":"/cortex-xpanse/dashboards-and-reports/dashboards/create-a-dashboard","siteSpaceId":"sitesp_dX5hl","description":"Create custom Cortex Xpanse dashboards to display information that is most relevant to your organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Dashboards"}]},{"id":"Uny8euGQGsOqIQdqN5EW","title":"Manage dashboards","pathname":"/cortex-xpanse/dashboards-and-reports/dashboards/manage-dashboards","siteSpaceId":"sitesp_dX5hl","description":"From Dashboards Manager, you can delete, edit, disable, and perform additional management actions on your dashboards.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Dashboards"}]},{"id":"xPRHBS2OH6fPR3PO8Grf","title":"Reports","pathname":"/cortex-xpanse/dashboards-and-reports/reports","siteSpaceId":"sitesp_dX5hl","description":"Overview of Cortex Xpanse reports and how to create, edit, and download them.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"}]},{"id":"DF6eAthtIGg5nGPSEGtB","title":"Report templates","pathname":"/cortex-xpanse/dashboards-and-reports/reports/report-templates","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Reports"}]},{"id":"2p47BEeyniB0jtKzFbD4","title":"Run a Report","pathname":"/cortex-xpanse/dashboards-and-reports/reports/run-a-report","siteSpaceId":"sitesp_dX5hl","description":"Run reports and download them in PDF format.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Reports"}]},{"id":"O6K5o72No8djf93c0W43","title":"Create a report based on a dashboard","pathname":"/cortex-xpanse/dashboards-and-reports/reports/create-a-report-based-on-a-dashboard","siteSpaceId":"sitesp_dX5hl","description":"Create a report based on any dashboard in Cortex Xpanse.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Reports"}]},{"id":"203OaIx7QAjE6oBaZWo7","title":"Create a new report","pathname":"/cortex-xpanse/dashboards-and-reports/reports/create-a-new-report","siteSpaceId":"sitesp_dX5hl","description":"Create a new report template from scratch or by modifying an existing report template.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Reports"}]},{"id":"0ZKOIK817qAfisicR5z4","title":"Create the notification rule for a failed report","pathname":"/cortex-xpanse/dashboards-and-reports/reports/create-the-notification-rule-for-a-failed-report","siteSpaceId":"sitesp_dX5hl","description":"You can receive an email notification if a report fails to run.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"},{"label":"Reports"}]},{"id":"7pnwqqtRtIQvgRPx4i7d","title":"Widget Library","pathname":"/cortex-xpanse/dashboards-and-reports/widget-library","siteSpaceId":"sitesp_dX5hl","description":"Create, search, and view custom widgets in Cortex Xpanse, or use predefined widgets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Dashboards and reports"}]},{"id":"DEP27hqAwWP81pWDeKo9","title":"Attack surface rules","pathname":"/cortex-xpanse/attack-surface-rules","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse attack surface rules can be customized for your organization's specific needs and priorities.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"OmkXWay6kovAw5p50nh6","title":"Customize risk scoring","pathname":"/cortex-xpanse/customize-risk-scoring","siteSpaceId":"sitesp_dX5hl","description":"Create custom risk-scoring rules or manually assign risk scores to prioritize incidents based on your organization's unique requirements.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"fzy5le5yHS0RIC2CKGoo","title":"Integrations","pathname":"/cortex-xpanse/integrations","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse integrates with third-party tools and services to support many use cases.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"2ZWHPNG9aMG4cXZAmjtb","title":"Ingest Cloud Resources from Prisma Cloud","pathname":"/cortex-xpanse/integrations/ingest-cloud-resources-from-prisma-cloud","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse supports an integration with Prisma Cloud.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"}]},{"id":"DLUoNylfJbibsLYjS9Y8","title":"Generate an API Access Key in Prisma Cloud","pathname":"/cortex-xpanse/integrations/ingest-cloud-resources-from-prisma-cloud/generate-an-api-access-key-in-prisma-cloud","siteSpaceId":"sitesp_dX5hl","description":"Steps for generating an API access key in Prisma Cloud to use in the API integration with Cortex Xpanse.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"},{"label":"Ingest Cloud Resources from Prisma Cloud"}]},{"id":"UL6K4kHxWUWQsOdmi2kq","title":"Configure the Prisma Cloud Integration in Cortex Xpanse","pathname":"/cortex-xpanse/integrations/ingest-cloud-resources-from-prisma-cloud/configure-the-prisma-cloud-integration-in-cortex-xpanse","siteSpaceId":"sitesp_dX5hl","description":"Enable Cortex Xpanse to ingest Prisma Cloud data.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"},{"label":"Ingest Cloud Resources from Prisma Cloud"}]},{"id":"7O33PJmUNeMFKaSYw2iA","title":"Prisma Cloud resource types","pathname":"/cortex-xpanse/integrations/ingest-cloud-resources-from-prisma-cloud/prisma-cloud-resource-types","siteSpaceId":"sitesp_dX5hl","description":"Review cloud resource types ingested from Prisma Cloud CSPM through the Cortex Xpanse cloud integration.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"},{"label":"Ingest Cloud Resources from Prisma Cloud"}]},{"id":"v1v57KD2Q6PMiYl37ZUJ","title":"Configure Collection Integrations","pathname":"/cortex-xpanse/integrations/configure-collection-integrations","siteSpaceId":"sitesp_dX5hl","description":"Configure Cortex Xpanse collection integrations to ingest cloud assets from third-party sources.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"}]},{"id":"lxNnQYG1Hp0Iy7OG3eyn","title":"Ingest Cloud Assets from AWS","pathname":"/cortex-xpanse/integrations/configure-collection-integrations/ingest-cloud-assets-from-aws","siteSpaceId":"sitesp_dX5hl","description":"Extend Cortex Xpanse visibility into cloud assets from AWS.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"},{"label":"Configure Collection Integrations"}]},{"id":"0M1F9UCp7WEuh3GawrFg","title":"Ingest Cloud Assets from Google Cloud Platform","pathname":"/cortex-xpanse/integrations/configure-collection-integrations/ingest-cloud-assets-from-google-cloud-platform","siteSpaceId":"sitesp_dX5hl","description":"Extend Cortex Xpanse visibility into cloud assets from Google Cloud Platform.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"},{"label":"Configure Collection Integrations"}]},{"id":"GguEF3mTO38cq8wTQMSx","title":"Ingest Cloud Assets from Microsoft Azure","pathname":"/cortex-xpanse/integrations/configure-collection-integrations/ingest-cloud-assets-from-microsoft-azure","siteSpaceId":"sitesp_dX5hl","description":"Extend Cortex Xpanse visibility into cloud assets from Microsoft Azure.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"},{"label":"Configure Collection Integrations"}]},{"id":"OxDLhyqoAkp7jPT2WLkt","title":"Generate an API Key","pathname":"/cortex-xpanse/integrations/generate-an-api-key","siteSpaceId":"sitesp_dX5hl","description":"Before using the Expander API, generate an API Key and collect the API Key ID and FQDN.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Integrations"}]},{"id":"n2djZa0IUWWjAgug6dB2","title":"Security rating","pathname":"/cortex-xpanse/security-rating","siteSpaceId":"sitesp_dX5hl","description":"The Cortex Xpanse Security Rating represents the overall hygiene of an organization’s external-facing attack surface and the risk of a breach originating from external-facing assets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"JrwwYed1BCkV4lXyN5Ll","title":"Inventory","pathname":"/cortex-xpanse/inventory","siteSpaceId":"sitesp_dX5hl","description":"Access a comprehensive inventory of all the assets Cortex Xpanse has attributed to your organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"OftOKTsGZKF4Qds3JFyX","title":"Asset Types","pathname":"/cortex-xpanse/inventory/asset-types","siteSpaceId":"sitesp_dX5hl","description":"Explore the asset types available in the Cortex Xpanse Inventory.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"uLZ0iAydTPQXYOIWGIkp","title":"Domains","pathname":"/cortex-xpanse/inventory/asset-types/domains","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse gets its domains and DNS data from a combination of active and passive global collection techniques.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"Zn92YqDzE25eOy49F9mW","title":"Certificates","pathname":"/cortex-xpanse/inventory/asset-types/certificates","siteSpaceId":"sitesp_dX5hl","description":"View detailed information about each certificate in your inventory.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"ISwlrA3DtKkewtA8ducE","title":"Cloud Inventory","pathname":"/cortex-xpanse/inventory/asset-types/cloud-inventory","siteSpaceId":"sitesp_dX5hl","description":"View your Cloud Inventory, which includes assets discovered through our cloud integrations and Prisma Cloud integration.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"OLez47FsENWLelmTECzi","title":"Owned Responsive IPs","pathname":"/cortex-xpanse/inventory/asset-types/owned-responsive-ips","siteSpaceId":"sitesp_dX5hl","description":"Owned responsive IPs provide a single IP reference point when an active service is detected on an IPv4 or IPv6 range that has been attributed to an organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"qQH29zFobwI4pZDyUkID","title":"Services","pathname":"/cortex-xpanse/inventory/asset-types/services","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse provides a complete inventory of all of the public internet-facing services attributed to your organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"Pn3Ei9qOHn57PMXT49VF","title":"Owned IPv4 Ranges","pathname":"/cortex-xpanse/inventory/asset-types/owned-ipv4-ranges","siteSpaceId":"sitesp_dX5hl","description":"View all the IPv4 addresses, in the form of ranges, that Cortex Xpanse has attributed to your organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"o8C9C8dJYgP8F7I98Qdn","title":"Owned IPv6 Ranges","pathname":"/cortex-xpanse/inventory/asset-types/owned-ipv6-ranges","siteSpaceId":"sitesp_dX5hl","description":"View all the IPv6 addresses that you have provided or Cortex Xpanse has attributed to your organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"y3gxFHfzkvK1sAHQ3F16","title":"Websites","pathname":"/cortex-xpanse/inventory/asset-types/websites","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse scans your public-facing websites, identifying insecure websites, web components, and technologies running on your web assets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Types"}]},{"id":"85njtoWwbTeAwBEaP4uf","title":"Unified Inventory","pathname":"/cortex-xpanse/inventory/unified-inventory","siteSpaceId":"sitesp_dX5hl","description":"View all the assets Cortex Xpanse has attributed to your organization (excluding services, websites, and IP ranges) in the Unified Inventory table.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"6BfMnDAp1OREh5DDpsX8","title":"Manage Business Units","pathname":"/cortex-xpanse/inventory/manage-business-units","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse defines a business unit or BU as an organizational unit that is responsible for a specific set of assets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"srTfJlp9MukxVZmRrUNh","title":"Business Unit Management for Domains and Subdomains","pathname":"/cortex-xpanse/inventory/manage-business-units/business-unit-management-for-domains-and-subdomains","siteSpaceId":"sitesp_dX5hl","description":"Learn how to manage business unit assignments for domains and subdomains.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Manage Business Units"}]},{"id":"7kZLlCl7yr17oMMBePyx","title":"Business Unit Management for IP Ranges","pathname":"/cortex-xpanse/inventory/manage-business-units/business-unit-management-for-ip-ranges","siteSpaceId":"sitesp_dX5hl","description":"Learn about business unit assignments for user-defined and system-defined IPv4 ranges.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Manage Business Units"}]},{"id":"kkezIKiLKaKNrRuzOtxW","title":"Create a user-defined IPv4 range","pathname":"/cortex-xpanse/inventory/manage-business-units/create-a-user-defined-ipv4-range","siteSpaceId":"sitesp_dX5hl","description":"Create a new IPv4 address range and modify the business unit assignment.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Manage Business Units"}]},{"id":"dhzHS5Q0gcWTIMCLt4kS","title":"Modify the Business Unit for an IPv4 Range","pathname":"/cortex-xpanse/inventory/manage-business-units/modify-the-business-unit-for-an-ipv4-range","siteSpaceId":"sitesp_dX5hl","description":"Update the BU assignment for an IPv4 address range.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Manage Business Units"}]},{"id":"fMJiJdKQrVgIXBi231qw","title":"Modify the Business Unit for an Asset","pathname":"/cortex-xpanse/inventory/manage-business-units/modify-the-business-unit-for-an-asset","siteSpaceId":"sitesp_dX5hl","description":"Update the business unit assignment for an asset in the context of an incident or in the Inventory.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Manage Business Units"}]},{"id":"xn3mQ61VNErTSg0ajOTc","title":"Bulk business unit management","pathname":"/cortex-xpanse/inventory/manage-business-units/bulk-business-unit-management","siteSpaceId":"sitesp_dX5hl","description":"Bulk update business unit assignments for domains and IP ranges using a CSV file.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Manage Business Units"}]},{"id":"1pDM92eDc4gcGuin3tQN","title":"Asset Attribution","pathname":"/cortex-xpanse/inventory/asset-attribution","siteSpaceId":"sitesp_dX5hl","description":"Learn about the attribution information Cortex Xpanse provides about your assets, so you know why each asset was attributed to your organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"3EerN5SbIUIWSVwYIdHt","title":"Asset Tagging","pathname":"/cortex-xpanse/inventory/asset-tagging","siteSpaceId":"sitesp_dX5hl","description":"Learn about how Cortex Xpanse uses tags to support advanced data filtering, customized data, and to restrict or permit access to data.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"ugKl5hGnPvpD3GZUOiuo","title":"Create a New Tag","pathname":"/cortex-xpanse/inventory/asset-tagging/create-a-new-tag","siteSpaceId":"sitesp_dX5hl","description":"Create asset or IP range tags and optionally assign them to users and groups for scoped access.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Tagging"}]},{"id":"aiZ55QmJ1VE8dYX5zKQN","title":"Add an Existing Tag to an Asset","pathname":"/cortex-xpanse/inventory/asset-tagging/add-an-existing-tag-to-an-asset","siteSpaceId":"sitesp_dX5hl","description":"Add an existing tag to one or more assets in your Inventory.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Tagging"}]},{"id":"TtkSPW673Yx5Ypa2AGfF","title":"Remove Tags from Assets","pathname":"/cortex-xpanse/inventory/asset-tagging/remove-tags-from-assets","siteSpaceId":"sitesp_dX5hl","description":"Remove tags from one or more assets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Tagging"}]},{"id":"jos5BHnXCg3rW4coeYPg","title":"Create Inventory Tag Rules","pathname":"/cortex-xpanse/inventory/asset-tagging/create-inventory-tag-rules","siteSpaceId":"sitesp_dX5hl","description":"Define inventory tag rules to apply tags automatically to assets that match your rule criteria, including any new assets that are attributed to your organization.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Asset Tagging"}]},{"id":"49D4vGMuncACp6mn3iWA","title":"Asset Notes","pathname":"/cortex-xpanse/inventory/asset-notes","siteSpaceId":"sitesp_dX5hl","description":"Add and manage notes for individual assets from the Inventory or an incident.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"sLEypofA1LssNbenxDs7","title":"Upload or remove assets","pathname":"/cortex-xpanse/inventory/upload-or-remove-assets","siteSpaceId":"sitesp_dX5hl","description":"Adjust your inventory by adding or removing assets yourself through the Cortex Xpanse UI.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"04De2k1eZs7XwqAbVyjz","title":"Upload assets","pathname":"/cortex-xpanse/inventory/upload-or-remove-assets/upload-assets","siteSpaceId":"sitesp_dX5hl","description":"Add assets to your inventory through the UI.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Upload or remove assets"}]},{"id":"Ns9YHBjzh7dMZvDSOTW1","title":"Remove assets","pathname":"/cortex-xpanse/inventory/upload-or-remove-assets/remove-assets","siteSpaceId":"sitesp_dX5hl","description":"Remove assets from your inventory through the UI.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Upload or remove assets"}]},{"id":"hprECZOOPXylzoJJdqjM","title":"Undo an asset removal","pathname":"/cortex-xpanse/inventory/upload-or-remove-assets/undo-an-asset-removal","siteSpaceId":"sitesp_dX5hl","description":"Restore a previously removed asset to the Cortex Xpanse inventory.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"},{"label":"Upload or remove assets"}]},{"id":"8srJLIi4bblSUgqffKDq","title":"Investigating Assets","pathname":"/cortex-xpanse/inventory/investigating-assets","siteSpaceId":"sitesp_dX5hl","description":"Use filters to monitor and find potentially vulnerable assets in your Inventory","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Inventory"}]},{"id":"tRljBRs8VQN9H66ytJ7z","title":"Incidents and alerts","pathname":"/cortex-xpanse/incidents-and-alerts","siteSpaceId":"sitesp_dX5hl","description":"Learn about workflows and playbook-driven automation for monitoring, prioritizing, investigating, and remediating incidents and alerts.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"K004P0ZoYMEFyPRmfwyM","title":"Incidents","pathname":"/cortex-xpanse/incidents-and-alerts/incidents","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse provides an Incidents table that you can use to view all the incidents reported to and surfaced from your Cortex Xpanse instance.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"}]},{"id":"Sn9VkQ8Aw6fAB2uhCr5B","title":"Export an incident as a PDF","pathname":"/cortex-xpanse/incidents-and-alerts/incidents/export-an-incident-as-a-pdf","siteSpaceId":"sitesp_dX5hl","description":"Export incident details as a PDF report from the Incidents page.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Incidents"}]},{"id":"LmG5uXuLUjLNPAJy373B","title":"Incident Status","pathname":"/cortex-xpanse/incidents-and-alerts/incidents/incident-status","siteSpaceId":"sitesp_dX5hl","description":"Learn about each incident status.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Incidents"}]},{"id":"x1FoKXbgY1Kp04SNQsKQ","title":"Incident Starring","pathname":"/cortex-xpanse/incidents-and-alerts/incidents/incident-starring","siteSpaceId":"sitesp_dX5hl","description":"Create an incident starring configuration that categorizes and stars incidents when alerts contain attributes that you decide are important.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Incidents"}]},{"id":"zxFeWtSPrA5BixAh4KU0","title":"Incidents Fields","pathname":"/cortex-xpanse/incidents-and-alerts/incidents/incidents-fields","siteSpaceId":"sitesp_dX5hl","description":"You can sort, filter, and configure the fields to display in the Incidents table.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Incidents"}]},{"id":"vF3W0DU2gpC7i4DhWXS5","title":"Risk Scoring","pathname":"/cortex-xpanse/incidents-and-alerts/risk-scoring","siteSpaceId":"sitesp_dX5hl","description":"Learn about Cortex Xpanse risk scores and how they are calculated.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"}]},{"id":"KLcrG6ggVoPSDewlh2O3","title":"Incident Risk Details","pathname":"/cortex-xpanse/incidents-and-alerts/risk-scoring/incident-risk-details","siteSpaceId":"sitesp_dX5hl","description":"Understand how inferred CVEs, exploit data, and risk factors contribute to an incident’s risk score.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Risk Scoring"}]},{"id":"xXkQX43UCBFaxrg2r9rk","title":"Risk Factors","pathname":"/cortex-xpanse/incidents-and-alerts/risk-scoring/risk-factors","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse uses a set of Risk Factors when calculating incident risk scores.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Risk Scoring"}]},{"id":"C6pbp6nZ4cFq9WlgJ3D9","title":"Alerts","pathname":"/cortex-xpanse/incidents-and-alerts/alerts","siteSpaceId":"sitesp_dX5hl","description":"An alert is a potential security risk identified by Cortex Xpanse on your services and assets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"}]},{"id":"yz1opSxqA1MAdKZRuoAa","title":"Alert Status","pathname":"/cortex-xpanse/incidents-and-alerts/alerts/alert-status","siteSpaceId":"sitesp_dX5hl","description":"Learn about the alert lifecycle and definition of each alert status.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Alerts"}]},{"id":"egC7DQ0zSgRkfOa3WG29","title":"Alert Fields","pathname":"/cortex-xpanse/incidents-and-alerts/alerts/alert-fields","siteSpaceId":"sitesp_dX5hl","description":"Review the descriptions of the fields in the Alerts table.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Alerts"}]},{"id":"SV68icKNty38N4myKqkm","title":"Alert exclusions","pathname":"/cortex-xpanse/incidents-and-alerts/alerts/alert-exclusions","siteSpaceId":"sitesp_dX5hl","description":"Create a rule to exclude certain criteria from raising or reopening alerts in Cortex Xpanse.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Alerts"}]},{"id":"pYcJD9Z8GqGfqI1HdKny","title":"Export an alert as a PDF","pathname":"/cortex-xpanse/incidents-and-alerts/alerts/export-an-alert-as-a-pdf","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Incidents and alerts"},{"label":"Alerts"}]},{"id":"sp6o5smWBd2HIW7ZXGu1","title":"Threat Response Center","pathname":"/cortex-xpanse/threat-response-center","siteSpaceId":"sitesp_dX5hl","description":"Research and respond to zero-day exploits and global threat events in the Threat Response Center.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"xO1CHoOtGReMabyZNdEe","title":"Review the list of threat events","pathname":"/cortex-xpanse/threat-response-center/review-the-list-of-threat-events","siteSpaceId":"sitesp_dX5hl","description":"Review a curated list of zero-day exploits and global threat events on the Emerging Vulnerabilities page.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Threat Response Center"}]},{"id":"njTniljrPalEwMS30yg0","title":"Research a threat event","pathname":"/cortex-xpanse/threat-response-center/research-a-threat-event","siteSpaceId":"sitesp_dX5hl","description":"Review detailed information about a threat event, including related alerts and incidents, in the Threat Response Center.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Threat Response Center"}]},{"id":"op3BiHtYzLUEscIQi4JO","title":"Active Response","pathname":"/cortex-xpanse/active-response","siteSpaceId":"sitesp_dX5hl","description":"Automate ASM alert investigation and remediation with the Cortex Xpanse Active Response add-on module.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"GnEByJ3nVKIAFstdHjkU","title":"How Active Response Works","pathname":"/cortex-xpanse/active-response/how-active-response-works","siteSpaceId":"sitesp_dX5hl","description":"Learn how Active Response automates alert investigation, remediation, and resolution validation.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"RxxCLkufftchYdH6N6Oz","title":"Active Response License","pathname":"/cortex-xpanse/active-response/active-response-license","siteSpaceId":"sitesp_dX5hl","description":"Review Active Response licensing options and start a 60-day free trial.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"cD2jsJ1DdTFod0ehhl6H","title":"Set Up Active Response","pathname":"/cortex-xpanse/active-response/set-up-active-response","siteSpaceId":"sitesp_dX5hl","description":"Configure automation integrations and remediation path rules for Active Response.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"emd6SUADCvCKxcaHPt46","title":"Automation Integrations","pathname":"/cortex-xpanse/active-response/set-up-active-response/automation-integrations","siteSpaceId":"sitesp_dX5hl","description":"Automation integrations enable Active Response to enrich an alert or respond to an alert with an action, such as sending notifications or directly modifying the configuration of an asset, service, or","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Set Up Active Response"}]},{"id":"6Vv7KVNpdFJHUD6bAu7v","title":"Remediation Path Rules","pathname":"/cortex-xpanse/active-response/set-up-active-response/remediation-path-rules","siteSpaceId":"sitesp_dX5hl","description":"Create remediation path rules to customize Active Response to automatically respond to alerts with actions that meet your business requirements.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Set Up Active Response"}]},{"id":"bxLpLCumhHkEsx828711","title":"Playbook Configuration","pathname":"/cortex-xpanse/active-response/set-up-active-response/playbook-configuration","siteSpaceId":"sitesp_dX5hl","description":"Customize the email and ticket notifications generated by the Active Response playbook.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Set Up Active Response"}]},{"id":"PSaW5SmYs8puPnJvoXTl","title":"Resolve Incidents with Active Response","pathname":"/cortex-xpanse/active-response/resolve-incidents-with-active-response","siteSpaceId":"sitesp_dX5hl","description":"Use Active Response to automate the investigation and resolution of alerts and incidents in Expander.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"YJAsaM2CIkk1QJlHyGAF","title":"Troubleshoot Active Response","pathname":"/cortex-xpanse/active-response/troubleshoot-active-response","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"CLcvHtjjGeovyXnJrrTI","title":"Automated Remediation Capabilities Matrix","pathname":"/cortex-xpanse/active-response/automated-remediation-capabilities-matrix","siteSpaceId":"sitesp_dX5hl","description":"Learn about the specific ASM automated remediation and enrichment capabilities and criteria.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"XRLpis7Q1SDZSWRO7Liv","title":"Active Response FAQ","pathname":"/cortex-xpanse/active-response/active-response-faq","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"khAhx4c33VFrhh001YKs","title":"Engines","pathname":"/cortex-xpanse/active-response/engines","siteSpaceId":"sitesp_dX5hl","description":"Install, manage, configure, and troubleshoot engines.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"}]},{"id":"a2MhvFdIJBeHnyU8N14x","title":"Engines Use Case","pathname":"/cortex-xpanse/active-response/engines/engines-use-case","siteSpaceId":"sitesp_dX5hl","description":"Understand engine architecture and load balancing groups.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"AUk03ldRexN68pqrua7W","title":"Engine Installation","pathname":"/cortex-xpanse/active-response/engines/engine-installation","siteSpaceId":"sitesp_dX5hl","description":"Install, deploy and configure Cortex Xpanse engines.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"sgkSnxWWjg7ZlvrOJocK","title":"Docker","pathname":"/cortex-xpanse/active-response/engines/docker","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse Docker installation, configuration, security, and troubleshooting guides.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"vaPU7o7muJ8Xqp17h6kF","title":"Podman","pathname":"/cortex-xpanse/active-response/engines/podman","siteSpaceId":"sitesp_dX5hl","description":"Run Podman containers instead of Docker for RHEL v8.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"580hadBsQWFHB3rhZKQ8","title":"Configure Engines","pathname":"/cortex-xpanse/active-response/engines/configure-engines","siteSpaceId":"sitesp_dX5hl","description":"Configure Cortex Xpanse engines to use custom certificates and notify users if engine disconnects","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"agIImx92yUFegM4hwX4t","title":"Manage Engines","pathname":"/cortex-xpanse/active-response/engines/manage-engines","siteSpaceId":"sitesp_dX5hl","description":"Manage engines and load balancing groups.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"lUCHSmljK3xZAbCw3iz3","title":"Use an Engine in an Integration","pathname":"/cortex-xpanse/active-response/engines/use-an-engine-in-an-integration","siteSpaceId":"sitesp_dX5hl","description":"Use an engine or load-balancing group of engines to fetch alerts and run commands for an integration.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"PUsogn8x47aEmuK0tpWk","title":"Run a Script Using an Engine","pathname":"/cortex-xpanse/active-response/engines/run-a-script-using-an-engine","siteSpaceId":"sitesp_dX5hl","description":"Run a script on an engine or load-balancing group to distribute the workload and improve performance.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"osTn8RXiaY3G15cg5wec","title":"Remove an Engine","pathname":"/cortex-xpanse/active-response/engines/remove-an-engine","siteSpaceId":"sitesp_dX5hl","description":"Remove an engine by running the relevant command, depending on your operating system.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"vwjr0YX2mAWRGkDLqmyd","title":"Troubleshoot Engines","pathname":"/cortex-xpanse/active-response/engines/troubleshoot-engines","siteSpaceId":"sitesp_dX5hl","description":"Troubleshoot engines by accessing logs and viewing errors.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Active Response"},{"label":"Engines"}]},{"id":"KQiNYp4XoVOYXfpKCfwD","title":"Attack Surface Testing","pathname":"/cortex-xpanse/attack-surface-testing","siteSpaceId":"sitesp_dX5hl","description":"Attack Surface Testing runs benign exploits against your externally facing assets to confirm the presence of vulnerabilities.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"O465mg27UmTc47xVNWIa","title":"Attack surface tests","pathname":"/cortex-xpanse/attack-surface-testing/attack-surface-tests","siteSpaceId":"sitesp_dX5hl","description":"Attack surface tests are designed to minimize the potential impact to scanned and tested services.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"4T1a0t2cLGkbKZvpaGpL","title":"Attack surface tests for default credentials","pathname":"/cortex-xpanse/attack-surface-testing/attack-surface-tests/attack-surface-tests-for-default-credentials","siteSpaceId":"sitesp_dX5hl","description":"Identify default-credential attack surface tests and their non-invasive login checks.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"},{"label":"Attack surface tests"}]},{"id":"BKTLYHM894UBxm3GNNlr","title":"Attack Surface Testing intrusivity","pathname":"/cortex-xpanse/attack-surface-testing/attack-surface-testing-intrusivity","siteSpaceId":"sitesp_dX5hl","description":"Attack surface tests are categorized by their intrusiveness, enabling you to choose more intrusive methods to confirm specific vulnerabilities.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"RV0J4DJmTRUyevwZrpUC","title":"Set up Attack Surface Testing","pathname":"/cortex-xpanse/attack-surface-testing/set-up-attack-surface-testing","siteSpaceId":"sitesp_dX5hl","description":"Set up Attack Surface Testing by verifying permissions, accepting the EULA, and selecting targets.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"cA0UsiSizdAlYZTIlI6L","title":"Select targets for Attack Surface Testing","pathname":"/cortex-xpanse/attack-surface-testing/select-targets-for-attack-surface-testing","siteSpaceId":"sitesp_dX5hl","description":"Choose specific or all directly-discovered services for Attack Surface Testing.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"SDhMdqPp2jnoYLT2tUR5","title":"View attack surface test results","pathname":"/cortex-xpanse/attack-surface-testing/view-attack-surface-test-results","siteSpaceId":"sitesp_dX5hl","description":"Find, filter, and review Attack Surface Testing results in the Services inventory.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"0IPHZqIo97u51eMHYQot","title":"Alerts for positive attack surface test results","pathname":"/cortex-xpanse/attack-surface-testing/alerts-for-positive-attack-surface-test-results","siteSpaceId":"sitesp_dX5hl","description":"Confirmed positive Attack Surface Testing (AST) results automatically generate alerts.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"CPgarDINHWNV33nG1cGb","title":"AST Scan Now","pathname":"/cortex-xpanse/attack-surface-testing/ast-scan-now","siteSpaceId":"sitesp_dX5hl","description":"Trigger on-demand AST rescans from alerts to verify vulnerabilities and automatically update alert status.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"lr5rDxuiUuODGBerkOtw","title":"Enable new attack surface tests by default","pathname":"/cortex-xpanse/attack-surface-testing/enable-new-attack-surface-tests-by-default","siteSpaceId":"sitesp_dX5hl","description":"Configure which new attack surface tests will be enabled by default.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"Ibp3wZwR4mVplDlURyqN","title":"View attack surface tests","pathname":"/cortex-xpanse/attack-surface-testing/view-attack-surface-tests","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"UrOykvIC1E6KxHjmmOpa","title":"View source IP addresses for Attack Surface Testing scans","pathname":"/cortex-xpanse/attack-surface-testing/view-source-ip-addresses-for-attack-surface-testing-scans","siteSpaceId":"sitesp_dX5hl","description":"Locate Attack Surface Testing scan source IPs and apply recommended allow-list guidance.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Attack Surface Testing"}]},{"id":"hpwCMdxJxh49wedBllZq","title":"Reference","pathname":"/cortex-xpanse/reference","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"}]},{"id":"KQ9cA9MMRA9AxPI2RXPK","title":"Cortex Xpanse Expander FedRAMP support","pathname":"/cortex-xpanse/reference/cortex-xpanse-expander-fedramp-support","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse Expander supports features for FedRAMP Moderate and High environments.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"}]},{"id":"Ijz56T1OKeiOGmF8xIKm","title":"Scanning activity","pathname":"/cortex-xpanse/reference/scanning-activity","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse scanning activity on listed ranges is CFAA-compliant","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"}]},{"id":"zBCpxbIlfjGUdRT1C22h","title":"Cortex Xpanse Product Policies","pathname":"/cortex-xpanse/reference/cortex-xpanse-product-policies","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"}]},{"id":"MI0MkrvrxHtsmTP4zRbb","title":"Data Privacy","pathname":"/cortex-xpanse/reference/cortex-xpanse-product-policies/data-privacy","siteSpaceId":"sitesp_dX5hl","description":"Learn where Cortex Xpanse processes and hosts data, and how long it retains it.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Cortex Xpanse Product Policies"}]},{"id":"u0IDNJDiDVMPc3e4Y3kr","title":"Data Retention Policy","pathname":"/cortex-xpanse/reference/cortex-xpanse-product-policies/data-retention-policy","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse data retention policy.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Cortex Xpanse Product Policies"}]},{"id":"xQHeH9mNQYwySkcBpJiV","title":"API Use Policy","pathname":"/cortex-xpanse/reference/cortex-xpanse-product-policies/api-use-policy","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse API Use Policy.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Cortex Xpanse Product Policies"}]},{"id":"3I5M4xdLriDC34viJSj6","title":"Cortex Xpanse Product Security","pathname":"/cortex-xpanse/reference/cortex-xpanse-product-policies/cortex-xpanse-product-security","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse product security","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Cortex Xpanse Product Policies"}]},{"id":"rNuXi9Tm0i6oTqjP1kxZ","title":"Browser Support Policy","pathname":"/cortex-xpanse/reference/cortex-xpanse-product-policies/browser-support-policy","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse Browser Support Policy","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Cortex Xpanse Product Policies"}]},{"id":"bPzL8XN0pMY6dGhgtY1w","title":"Management Audit Logs","pathname":"/cortex-xpanse/reference/management-audit-logs","siteSpaceId":"sitesp_dX5hl","description":"View and export management audit logs in Cortex Xpanse.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"}]},{"id":"St0GKP7UfffOzd2AWvvS","title":"Monitor Compliance Violations","pathname":"/cortex-xpanse/reference/monitor-compliance-violations","siteSpaceId":"sitesp_dX5hl","description":"The Attack Surface Compliance Violations Dashboard helps customers better understand how the issues on their external network impact compliance controls.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"}]},{"id":"fimLOAn3k2Tc55RYlP84","title":"CMMC L1-L5 Unevaluated Controls","pathname":"/cortex-xpanse/reference/monitor-compliance-violations/cmmc-l1-l5-unevaluated-controls","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse does not make a determination regarding compliance with the listed CMMC L1-L5 controls.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Monitor Compliance Violations"}]},{"id":"B4y4PY3hSXNdxUZa9sPE","title":"NIST 800-53 Unevaluated Controls","pathname":"/cortex-xpanse/reference/monitor-compliance-violations/nist-800-53-unevaluated-controls","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse does not make a determination regarding compliance with the listed NIST 800-53 controls.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Monitor Compliance Violations"}]},{"id":"KV9RaBoY5Su7c1nHymNQ","title":"NIST 800-171 Unevaluated Controls","pathname":"/cortex-xpanse/reference/monitor-compliance-violations/nist-800-171-unevaluated-controls","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse does not make a determination regarding compliance with the listed NIST 800-171 controls.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"Monitor Compliance Violations"}]},{"id":"nFyx5RFcJE2EQ2HtXB8e","title":"Navigation Cheat Sheet","pathname":"/cortex-xpanse/reference/navigation-cheat-sheet","siteSpaceId":"sitesp_dX5hl","description":"Cortex Xpanse provides an easy-to-use interface.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"}]},{"id":"V5v1gVsivbeqESxwRQtc","title":"List View Options","pathname":"/cortex-xpanse/reference/list-view-options","siteSpaceId":"sitesp_dX5hl","description":"In the Cortex Xpanse Expander, you can filter page results, manage columns and rows, and save or share the filters.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"}]},{"id":"qVRW5YfWbIgc8adDJ9Yr","title":"Search Page Results","pathname":"/cortex-xpanse/reference/list-view-options/search-page-results","siteSpaceId":"sitesp_dX5hl","description":"You can search the content in the Alerts and Incidents tables.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"List View Options"}]},{"id":"cOscUdH8nsllWGHw1Vv1","title":"Filter Page Results","pathname":"/cortex-xpanse/reference/list-view-options/filter-page-results","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"List View Options"}]},{"id":"lQobZbSNZgsSRSS4Oz7i","title":"Save and Share Filters","pathname":"/cortex-xpanse/reference/list-view-options/save-and-share-filters","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"List View Options"}]},{"id":"LSQWrojOxZZowmUL2Oan","title":"Manage Columns and Rows","pathname":"/cortex-xpanse/reference/list-view-options/manage-columns-and-rows","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"List View Options"}]},{"id":"mMHq0tyeLootbVgpEduX","title":"Show or Hide Results","pathname":"/cortex-xpanse/reference/list-view-options/show-or-hide-results","siteSpaceId":"sitesp_dX5hl","description":"Temporarily show or hide table results by pivoting on field values or empty values.","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"List View Options"}]},{"id":"QtfRmkeHkAwADUVqon4j","title":"Export Results to File","pathname":"/cortex-xpanse/reference/list-view-options/export-results-to-file","siteSpaceId":"sitesp_dX5hl","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse Expander Documentation","icon":"solar-system"},{"label":"Reference"},{"label":"List View Options"}]},{"id":"kZlvobjlgo6Prn8MFcoi","title":"Cortex XSIAM Release Information","pathname":"/cortex-xsiam-rn","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"}]},{"id":"YRWpC3OcrP5CNVd2jaXy","title":"Features introduced in 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"AEkQNt15sARAxlE9zEFQ","title":"September 6, 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/september-6-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"gSZNO9QtQW0UWCofuatC","title":"July 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/july-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"95dLITMBieMwQ17yJFcR","title":"Release Highlights","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/july-2026/release-highlights","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"mEWiLnncESJOsnh1SKHz","title":"Feature Enhancements","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/july-2026/feature-enhancements","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"OcY14csQmwlXHx74W1if","title":"Changed Features","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/july-2026/changed-features","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"QrQKI3V16J8yuNlgGZMv","title":"Cortex Cloud Posture Management and Cortex Cloud Runtime Security","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/july-2026/cortex-cloud-posture-management-and-cortex-cloud-runtime-security","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"P8iZH9FKrsiiI9q0aSlV","title":"July 20, 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/july-20-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"3gyru9NKEnSF3ldRoaIm","title":"May 17, 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/may-17-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"RzRSrUbMNo4Ji07o3tsO","title":"May 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/may-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"J6OVPss4Mi9467H1c2ZH","title":"Release Highlights","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/may-2026/release-highlights","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"NHhdqKEXolOgPgPVXvuR","title":"Feature Enhancements","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/may-2026/feature-enhancements","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"s45Ex8N7vNrH4hKhoavu","title":"Changed Features","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/may-2026/changed-features","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"LmO0HKifmORMUWe84MFH","title":"Marketplace content changes","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/may-2026/marketplace-content-changes","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"Ej9OtRjTAlOPcKqJ0hYx","title":"Cortex Cloud Posture Management and Cortex Cloud Runtime Security","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/may-2026/cortex-cloud-posture-management-and-cortex-cloud-runtime-security","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"OPq0J38NII2eVEwLyaTe","title":"February 22, 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/february-22-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"wOiIXWVnQtJyJgnIH3lU","title":"February 8, 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/february-08-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"iJ5H6NTI5UeBiLycPzjL","title":"February 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/february-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"}]},{"id":"WqhuLijwlYqFbtgTtFy4","title":"Release Highlights","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/february-2026/release-highlights","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"svsWK6Hk81h9TJpKeOxJ","title":"Feature Enhancements","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/february-2026/feature-enhancements","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"la8P5TaUHW3HXEc7QGpa","title":"Changed Features","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/february-2026/changed-features","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"k7WfRRcxABDSHbMN8s3q","title":"Cortex Cloud Posture Management and Cortex Cloud Runtime Security","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2026-xsiam/february-2026/cortex-cloud-posture-management-and-cortex-cloud-runtime-security","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"33Tf51sunRseCeuLaesf","title":"Features Introduced in 2025","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"cuW4Zjw6ipx6ASKIRojj","title":"December 22, 2025","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/december-22-2025","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"wbpMajikE4tZh3DPBGs3","title":"November 23, 2025","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/november-23-2025","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"ywEyll7SLJDbeHPJyVpI","title":"November 2025","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/november-2025","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"K7KWZCdGpcgwKTWWhqAR","title":"Release Highlights","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/november-2025/release-highlights","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"T8joKPgGhBUF6E1LNRK5","title":"Feature Enhancements","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/november-2025/feature-enhancements","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"rRXWKUF6Wifb8CyvNmDH","title":"Changed Features","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/november-2025/changed-features","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"KjGFPtsR5ha8sZTSLB1X","title":"Marketplace content changes","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/november-2025/marketplace-content-changes","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"vYtTpHjHyafckjSke4BQ","title":"July 2025","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/july-2025","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"p3kiLEdV6f6rVaAJFYdV","title":"Release Highlights","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/july-2025/release-highlights","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"rkLfh4YN5Fivq6JprGsu","title":"Feature Enhancements","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/july-2025/feature-enhancements","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"lWRauxXE4XEQUkDPkLwH","title":"Changed features","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/july-2025/changed-features","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"7hm9idvcaDwc6jAXoa6D","title":"April 2025","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/april-2025","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"G5iMmod8usSCxdVenXDT","title":"Release highlights","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/april-2025/release-highlights","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"3Scl8MPYryKN0dR3vtpt","title":"Feature enhancements","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/april-2025/feature-enhancements","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"yIU9CfMtbodB3dPIy0AK","title":"Changed Features","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/features-introduced-in-2025-xsiam/april-2025/changed-features","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"a6tv1GFMGK7knLtBNksF","title":"Known Issues","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/known-issues-xsiam","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"MM3rXcc6icRM5jeVFEff","title":"Maintenance releases","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"c5FVdflgYWde2ZC4Yc86","title":"Broker VM 32.0.52 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases/broker-vm-32052-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Maintenance releases"}]},{"id":"zIBHlNE0lPjh5sFFiipU","title":"Broker VM 31.100.2","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases/broker-vm-311002","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Maintenance releases"}]},{"id":"OLag79GMPWzULEuhHE7g","title":"Broker VM 32.0.51 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases/broker-vm-32051-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Maintenance releases"}]},{"id":"aJvtbRpYgfEfjDnnCinD","title":"XDR Collectors 1.5.3 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases/xdr-collectors-153-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Maintenance releases"}]},{"id":"fly4MSrfEAKiQIPFGRIu","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases/xdr-collectors-143-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Maintenance releases"}]},{"id":"Gd6lEScrpiurh7r7qN26","title":"Cortex XDR Agent Release Information","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/cortex-xdr-agent-release-information","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"SaHTwwfcwrFpC01mze54","title":"Previous maintenance releases","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"Hp0zu4zwCq42cdl4sGKP","title":"Broker VM","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"}]},{"id":"psBZj6KV95fpJNQTvWQi","title":"Broker VM 31.0.58 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-31058-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"e1tR1Nu4ys35zyoO3Y4k","title":"Broker VM 31.0.57 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-31057-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"yPHRbT1h9fgkobZYsdsV","title":"Broker VM 30.0.63 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-30063-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"bXQWAfVNiz6E6wHTamJw","title":"Broker VM 30.0.61 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-30061-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"sM55GuP9zKFj7vxCrckK","title":"Broker VM 30.0.52 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-30052-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"ExhfDFi5AKV7KQkUrmgc","title":"Broker VM 29.0.77 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-29077-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"lmBsAuPNDrda6AX259qU","title":"Broker VM 29.0.71 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-29071-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"oDLxHP5bESWHAvnTSmhv","title":"Broker VM 28.0.99 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-28099-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"DPNHfLWfABVGn6lPCCxH","title":"Broker VM 28.0.96","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-28096-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"nctM5I6KF4gTIayyU3KY","title":"Broker VM 27.100.18","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-2710018","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"5xMdpg5VHeMpZ0JbPOtI","title":"Broker VM 27.100.17","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-2710017","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"MrjgBO1NvQaJ3Fi6MYWd","title":"Broker VM 27.0.47","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-27047-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"ySvs75sstWDazbyvfvA5","title":"Broker VM 26.100.10","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-2610010","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"d3nB7hG0fNhzI5lU4i4F","title":"Broker VM 26.100.3","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-261003","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"fWMQOLkZQNODUbdoedvg","title":"Broker VM 26.0.119","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/broker-vm/broker-vm-260119-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"2EfmimZAxmkfYI57nRhx","title":"XDR Collectors","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"}]},{"id":"HwS8nZe95ItgUWBkc6Bf","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-35","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"ERLnYLWCcEMAzfOhXAQR","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-35","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"EsgYCA5Ee97C2BisiPz9","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-34","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"00vtVfjAHJOErLZi9qXP","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-34","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"252fkP4kTquS4I0wmeFg","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-34","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"aIofH09XI1BhUm02LIRV","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-33","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"fqMQzVGN5BSOIrfgpoYf","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-33","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"fBCsYa1YqFRbsdYSF7pT","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"EhAfNAOhcSoA4YiII8M7","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"CqzL6txbT336b3voAr9t","title":"XDR Collectors 1.5.0 (Major)","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-150-major","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"HxhGyalcFHQUOYCHNwmN","title":"Compliance standards updates","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"SGjapthJN7Ic7lr8xazF","title":"October 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates/october-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Compliance standards updates"}]},{"id":"rBGZRB9NxmSueWc9R7mN","title":"July 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates/july-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Compliance standards updates"}]},{"id":"Rt90Bdv6iGPHFdtpOwFu","title":"June 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates/june-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Compliance standards updates"}]},{"id":"FMCfdCB3Disfj2tHLPqF","title":"April 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates/april-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Compliance standards updates"}]},{"id":"mjTeeNPkYGPdyQNXdiKc","title":"February 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates/february-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"Compliance standards updates"}]},{"id":"a2pEhOC666jzYvKwNutY","title":"API Ingestions","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/api-ingestions","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"}]},{"id":"dxbdh9FdamEiTeaYrx9I","title":"September 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/api-ingestions/september-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"API Ingestions"}]},{"id":"HqCyxH3NLQtwneNgn27g","title":"August 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/api-ingestions/august-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"API Ingestions"}]},{"id":"mvLYqfvxy3Z0NryDOhkD","title":"July 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/api-ingestions/july-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"API Ingestions"}]},{"id":"yIsDkPNKTKOdaRKyXsfu","title":"May 2026","pathname":"/cortex-xsiam-rn/cortex-xsiam-release-information/api-ingestions/may-2026","siteSpaceId":"sitesp_r5hXd","description":"","breadcrumbs":[{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM"},{"label":"Cortex XSIAM Release Information"},{"label":"API Ingestions"}]},{"id":"qBN4kerbRD3wEbZEAgYP","title":"Release Information","pathname":"/cortex-xdr-5.x-rn","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"}]},{"id":"OFKrg2IuFRAbujJuWGXW","title":"Features introduced in 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"vlNa6IRLvcUEuPl2FoXX","title":"September 6, 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/september-6-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"tIZtJH2GtD8lDw0XCHrz","title":"July 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/july-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"KLgsQFffgzw6SlvlzXPs","title":"Release Highlights","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/july-2026/release-highlights","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"ow5ltUdsZfjwpOxYUpFW","title":"Feature Enhancements","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/july-2026/feature-enhancements","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"tv10pvR6U9d1axBFll6m","title":"Changed Features","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/july-2026/changed-features","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"9AuBKMB6pS3zj6lYHVek","title":"Cortex Cloud Posture Management and Cortex Cloud Runtime Security","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/july-2026/cortex-cloud-posture-management-and-cortex-cloud-runtime-security","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"wgpK1Xy2O4ahf1FvLPHV","title":"July 20, 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/july-20-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"TjsViih7lGVUTgKnD6Si","title":"May 17, 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/may-17-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"gXh6VD8Fk3qcpTtm4f3z","title":"May 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/may-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"U1yT0kwjUbjqoYQk3SrB","title":"Release Highlights","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/may-2026/release-highlights","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"JQeFvlwpVlmMY3dLWgPP","title":"Feature Enhancements","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/may-2026/feature-enhancements","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"u1ozpw8uymHbtXHbFiyO","title":"Changed Features","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/may-2026/changed-features","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"2pJEERhKBeKDjUbJYoI5","title":"Cortex Cloud Posture Management and Cortex Cloud Runtime Security","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/may-2026/cortex-cloud-posture-management-and-cortex-cloud-runtime-security","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"idpZYVss9whptsKNYQsx","title":"February 22, 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-22-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"26V4HyDBbYkMpDq6iIP6","title":"February 8, 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-08-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"0ydsqO1G0cbAIGiolYJv","title":"February 2026","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"E57Br9O2l5ZCgjalNYrq","title":"Release Highlights","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-2026/release-highlights","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"AKmf98BbXVAQpNsUtGVQ","title":"Feature Enhancements","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-2026/feature-enhancements","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"3mSIeNbRRlw9f0ku7c8y","title":"Changed Features","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-2026/changed-features","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"qGz7AIzWe9t4p0qAMlGY","title":"Cortex Cloud Posture Management and Cortex Cloud Runtime Security","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-2026/cortex-cloud-posture-management-and-cortex-cloud-runtime-security","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"9S5pKMw9GFakYO62qX2w","title":"Features Introduced in 2025","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"8Bxw2Hjj1X5GUHFXtgZf","title":"December 22, 2025","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/december-22-2025","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"osiyzt8j32coArRHHA3U","title":"November 23, 2025","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/november-23-2025","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"7g0fBzP9XUHsgRbEaHIX","title":"November 2025","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/november-2025","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"jl1fnfEtQBAPGPWk6fam","title":"Release Highlights","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/november-2025/release-highlights","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"1d9DiOcwlW2ABDnpQj1Y","title":"Feature Enhancements","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/november-2025/feature-enhancements","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"qdzf7Qegf9ElJ8cFux1Y","title":"Changed Features","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/november-2025/changed-features","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"V5HMRbHcAYT9zCxsgG3i","title":"July 2025","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/july-2025","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"GOGMJSYFtnniVw1fqbs4","title":"Release Highlights","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/july-2025/release-highlights","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"nG0siVt64A1ULl63EegE","title":"Feature Enhancements","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/july-2025/feature-enhancements","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"4fYfS5pyUROusaKHGsIf","title":"Changed Features","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/july-2025/changed-features","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"ZBBR2yeoaueOHXx2Rm0R","title":"April 2025","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/april-2025","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"EiiocgU2k7N8Rov5J9A2","title":"Release Highlights","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/april-2025/release-highlights","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"JqPpWjUO9Nl1npTwEqLC","title":"Feature Enhancements","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/april-2025/feature-enhancements","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"YjufkwFo3oupON9oFj0e","title":"Changed Features","pathname":"/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/april-2025/changed-features","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"KFqUyVrWdvlkyWvS2lnm","title":"Known Issues","pathname":"/cortex-xdr-5.x-rn/release-information/known-issues-xdr","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"7ItgvMKWV1T0x74kEmLI","title":"Maintenance releases","pathname":"/cortex-xdr-5.x-rn/release-information/maintenance-releases","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"bUMCW6zAGAIxcEn3bW6S","title":"Broker VM 32.0.52 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/maintenance-releases/broker-vm-32052-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Maintenance releases"}]},{"id":"3N6QMcdzU2B1P67m6Odb","title":"Broker VM 31.100.2","pathname":"/cortex-xdr-5.x-rn/release-information/maintenance-releases/broker-vm-311002","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Maintenance releases"}]},{"id":"XIapXdZ0XvcHoSyQ4V6n","title":"Broker VM 32.0.51 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/maintenance-releases/broker-vm-32051-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Maintenance releases"}]},{"id":"pcZZmVQieuikY7RyvQKg","title":"XDR Collectors 1.5.3 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/maintenance-releases/xdr-collectors-153-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Maintenance releases"}]},{"id":"TzC52bnXEXBLkNybpSdu","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/maintenance-releases/xdr-collectors-143-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Maintenance releases"}]},{"id":"6a7xuETZD0CLCJqwBbbL","title":"Associated Software and Content Versions","pathname":"/cortex-xdr-5.x-rn/release-information/associated-software-and-content-versions","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"NrVA3UqJ6eDntlWMwO2Q","title":"Cortex XDR Agent Release Information","pathname":"/cortex-xdr-5.x-rn/release-information/cortex-xdr-agent-release-information","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"22Le4Z87McXB8KuJdWtg","title":"Previous maintenance releases","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"hwDvi83SIelgZ2tGxBlJ","title":"Broker VM","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"}]},{"id":"xiN3yt15njHy2EGKuOJq","title":"Broker VM 31.0.58 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-31058-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"ZSo8Gv9pIvCHrVcPyJ41","title":"Broker VM 31.0.57 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-31057-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"S0TmvjDvUeePr3abYJYN","title":"Broker VM 30.0.63 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-30063-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"CEJohAVNFsVVi8K9HeVI","title":"Broker VM 30.0.61 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-30061-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"mJQnIn5ZqMnnezydiXYV","title":"Broker VM 30.0.52 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-30052-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"mOGqzbcOcmLd4afe7MF0","title":"Broker VM 29.0.77 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-29077-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"PxpKTDqNOoRc3Ul6rDCr","title":"Broker VM 29.0.71 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-29071-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"26d4HJ3LgiKn0VrwPebf","title":"Broker VM 28.0.99 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-28099-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"tURgEdhXIlQ3rLA6Wvb0","title":"Broker VM 28.0.96","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-28096-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"1KCgWvr3le0mxo3irT3m","title":"Broker VM 27.100.18","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-2710018","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"LP4FNnojqObEVkCknhlt","title":"Broker VM 27.100.17","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-2710017","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"GlQNULHxu1qHVik3LN1x","title":"Broker VM 27.0.47","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-27047-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"zcmrcJLfkJLIKXsSNg3K","title":"Broker VM 26.100.10","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-2610010","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"bLUWmQmFiqRkuqelbBUO","title":"Broker VM 26.100.3","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-261003","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"ZKlMZw32WXuvA9VOpBNn","title":"Broker VM 26.0.119","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/broker-vm/broker-vm-260119-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"6sIpvOo6QdMLZzBYad3f","title":"XDR Collectors","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"}]},{"id":"DCNo6hbyWQhzc1XOoCLn","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-51","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"OjMpJFWlwgYpNxTXnING","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-51","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"JJPodnZgBuwuvYVThSQa","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-50","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"Yovdc2CmTSavKSAibgWo","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-50","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"TNz6DEZ7CXvhAygurw7u","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-50","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"pRLQ8ZkbILJeNilWHFIo","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-43","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"7MYnzJxAlxCe3DPvqtd1","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-43","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"kE8WWL6bJCfi94VtYztB","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"DA0OAryGQ6zw21Dy3NW5","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"SSS2MUtYcrG5chYhk7kd","title":"XDR Collectors 1.5.0 (Major)","pathname":"/cortex-xdr-5.x-rn/release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-150-major","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"a0A4vlNoPbu4lL6j7H85","title":"Compliance standards updates","pathname":"/cortex-xdr-5.x-rn/release-information/compliance-standards-updates","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"}]},{"id":"BxtmsmNfxelFjuvyS6TI","title":"October 2026","pathname":"/cortex-xdr-5.x-rn/release-information/compliance-standards-updates/october-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Compliance standards updates"}]},{"id":"I73kYOksvgA1ojOTl9up","title":"July 2026","pathname":"/cortex-xdr-5.x-rn/release-information/compliance-standards-updates/july-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Compliance standards updates"}]},{"id":"5ABhoqGLkHEKcbHYi2xF","title":"June 2026","pathname":"/cortex-xdr-5.x-rn/release-information/compliance-standards-updates/june-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Compliance standards updates"}]},{"id":"MRk12WxwmxV2I4PXg1ks","title":"April 2026","pathname":"/cortex-xdr-5.x-rn/release-information/compliance-standards-updates/april-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Compliance standards updates"}]},{"id":"tefDNCH6hUlAGD6lGTuX","title":"February 2026","pathname":"/cortex-xdr-5.x-rn/release-information/compliance-standards-updates/february-2026","siteSpaceId":"sitesp_gfPzc","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 5.x"},{"label":"Release Information"},{"label":"Compliance standards updates"}]},{"id":"yvayNlID8qP5gktxtEJw","title":"Release Information","pathname":"/cortex-xdr-3.x-rn","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"}]},{"id":"l19o6vA8dQyMN2IBQVVZ","title":"Features introduced in 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"PMGf8uK07E224e93uycn","title":"July 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/july-2026","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"pggzrb6G5gSB0Gpv05xQ","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/july-2026/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"TJK7Q8XinSiU45KIqDFx","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/july-2026/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"xOSIB03lPPFOGdogOwsb","title":"July 20, 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/july-20-2026","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"3tvUTNAhmYvZpFVSM9so","title":"May 17, 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/may-17-2026","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"bujpjxOdTvYuQRjMGa4u","title":"May 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/may-2026","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"CD0djGEmZR33cRAmw4xH","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/may-2026/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"3IMr7OPhyI2Z0r1acbOm","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/may-2026/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"saKeS4efKxnwNLMnniSv","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/may-2026/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"nEbVWb51CZCU13IsgKj1","title":"February 22, 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/february-22-2026","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"ws3pewliCJ2UoxHMNZyt","title":"February 8, 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/february-08-2026","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"JGJZ8hDIGe9bOubvRW9D","title":"February 2026","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/february-2026","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"CimWYLqkj3vTv3NA2Ats","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/february-2026/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"6W8rWY8WxAo1BEb9OJla","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/february-2026/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"eavgDC31VGM4jzH2n9pr","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2026-xdr/february-2026/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"uuwEJ4zHHhXwv2lKTki1","title":"Features Introduced in 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"xzucDBJXP6dJdcw93Ynp","title":"December 22, 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/december-22-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"9Ed1l8ZJjxaQTL51RZDv","title":"November 23, 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/november-23-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"Uvc3JhxmuexxTdqx6oL4","title":"November 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/november-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"mx5jNkmzAGwtQuHwKE9Q","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/november-2025/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"ObgW02Gn7kT5IAyHm4fJ","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/november-2025/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"FBGk8Fw5sI0yA5A3dBzI","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/november-2025/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"November 2025"}]},{"id":"qeWKCPMhAD9KGeUS3qXu","title":"July 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/july-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"dIh6IOhY6ZQnTgPIlcmH","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/july-2025/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"KTuP4UlrZ7hhacKOjAvB","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/july-2025/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"xE6tmAy6LrXWElQu66pA","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/july-2025/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"July 2025"}]},{"id":"6BTG0c5NXTwSJT8qDVQy","title":"April 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/april-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"Fx95A8gYNz45vUVYsne6","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/april-2025/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"5ROBlp6zgr8WeKOMuPJx","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/april-2025/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"SqJZtAPhn4s9DBPl6P58","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/april-2025/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"April 2025"}]},{"id":"sheheeVA8o7zc5wHglur","title":"March 16, 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/march-16-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"FsAIYNiwrcUOeeZFiKmz","title":"March 9, 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/march-9-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"0k5BPMrNjd3AZZTVEyEy","title":"February 16, 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-16-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"Wb0YrVwF3gKjdaBV1KX5","title":"February 2025","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-2025","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"}]},{"id":"FZye8EfjQhrvUQSUtwPc","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-2025/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"February 2025"}]},{"id":"MTj17RI2xTRl9QgWSHyl","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-2025/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2025"},{"label":"February 2025"}]},{"id":"DTowqEzoHXNyBZdrs0fK","title":"Features Introduced in 2024","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"QK5Mpw6aOXBjFN2eaubm","title":"September 2024","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/september-2024","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"}]},{"id":"Nr4ZaD2ZmAwf0HtJqb3a","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/september-2024/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"September 2024"}]},{"id":"MY9ft9eXuxRZGiqsVw8q","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/september-2024/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"September 2024"}]},{"id":"onnTkJIvR3E7zf4D9KB7","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/september-2024/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"September 2024"}]},{"id":"Hanns0US39axOHIxGm52","title":"July 2024","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/july-2024","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"}]},{"id":"P98mZGnXdBnPMRqG9V3E","title":"June 2024","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/june-2024","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"}]},{"id":"o6cW0fyMfTr9eYxN29yY","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/june-2024/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"June 2024"}]},{"id":"Q5hdYzEepIHsrpdm2cAP","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/june-2024/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"June 2024"}]},{"id":"KOMfTMGeUs7znfYZ4sDH","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/june-2024/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"June 2024"}]},{"id":"Oj52BQf1NbbQC6YKjIyD","title":"May 2024","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/may-2024","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"}]},{"id":"bqfeySomzTHYY51tpAxG","title":"April 2024","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/april-2024","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"}]},{"id":"ODnQPbDFgfueXDejjpnx","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/april-2024/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"April 2024"}]},{"id":"YpcgyPmg7266Ar3KhUOD","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/april-2024/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"April 2024"}]},{"id":"i7isUM3Te7SQEHc2A2ls","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/april-2024/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"April 2024"}]},{"id":"Yg7EDEci9JtvkN7Vguqn","title":"February 2024","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/february-2024","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"}]},{"id":"vD1xd9uI2nSu3mOWEmru","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/february-2024/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"February 2024"}]},{"id":"FJLxt6FTD0D3CKARXSTm","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/february-2024/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"February 2024"}]},{"id":"4LByHZUCs7MwuFCTllkS","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2024-xdr/february-2024/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2024"},{"label":"February 2024"}]},{"id":"ff5kedvqai6vhT8ob3JF","title":"Features Introduced in 2023","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"Y0MVS5d81zUMUHkaOLPB","title":"October 2023","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2023"}]},{"id":"O2cGQmlRXexNY8pE6qDj","title":"Release Highlights","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023/release-highlights","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2023"},{"label":"October 2023"}]},{"id":"AgfIgQiHQ0BtodScQWFf","title":"Feature Enhancements","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023/feature-enhancements","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2023"},{"label":"October 2023"}]},{"id":"V2rGrDOtA2hPTlJBIPet","title":"Changed Features","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023/changed-features","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Features Introduced in 2023"},{"label":"October 2023"}]},{"id":"DJLhqcs5JGAkvfVlyBHa","title":"Maintenance Releases","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/maintenance-releases","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"vLZGo0khIvvuVsBNGszZ","title":"Broker VM 32.0.52 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/maintenance-releases/broker-vm-32052-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Maintenance Releases"}]},{"id":"VJLY7Ucsw8GFpnXCP9ki","title":"Broker VM 31.100.2","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/maintenance-releases/broker-vm-311002","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Maintenance Releases"}]},{"id":"FYU9orkvoWDWvl8muvzn","title":"Broker VM 32.0.51 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/maintenance-releases/broker-vm-32051-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Maintenance Releases"}]},{"id":"Jmle3iNZ8c5pxiPMnoK4","title":"XDR Collectors 1.5.3 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/maintenance-releases/xdr-collectors-153-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Maintenance Releases"}]},{"id":"ednApGabdlDeuZi4Lvzc","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/maintenance-releases/xdr-collectors-143-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Maintenance Releases"}]},{"id":"pbECWP9SS6utPpVyHb9u","title":"Hotfix Releases","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/hot-fix-releases","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"DmvRfL6LTwFVyKOQ3lum","title":"Associated Software and Content Versions","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/associated-software-and-content-versions","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"zIV5oNBDTaXSnt1kCKvc","title":"Cortex XDR Agent Release Information","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/cortex-xdr-agent-release-information","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"i8V9sMesSLv3mqBz5twH","title":"Known Issues","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/known-issues-xdr","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"i0nMHpLc0i2Xp4YV7rfs","title":"Previous Maintenance Releases","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"}]},{"id":"8r0hoNvDDflH87CsO65T","title":"Broker VM","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"}]},{"id":"KPM636eMKWC5FPDGwGYB","title":"Broker VM 31.0.58 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-31058-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"E6k4kGYdEs6LPLs8WTs4","title":"Broker VM 31.0.57 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-31057-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"kVbgBC1qhL8Ytd75dBxF","title":"Broker VM 30.0.63 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-30063-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"5LuugQqoqhBp8VGzrTZp","title":"Broker VM 30.0.61 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-30061-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"rVkhMFhkofvC7LVnwcU8","title":"Broker VM 30.0.52 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-30052-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"xNVA7DfTUEhiM6s3egHF","title":"Broker VM 29.0.77 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-29077-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"J6YjwgjC6NV1r105wZg8","title":"Broker VM 29.0.71 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-29071-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"91iv8yQ8Ul5mrTfL8y0x","title":"Broker VM 28.0.99 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-28099-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"COjtSLt0c6cKlrr3e9ly","title":"Broker VM 28.0.96 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-28096-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"Eulq3Bkvf4svkDrGSoTX","title":"Broker VM 27.100.18","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-2710018","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"H1kwbZlBhU6lZonkrkv6","title":"Broker VM 27.100.17","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-2710017","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"qkzBtMYY6n6G39h1icHy","title":"Broker VM 27.0.47 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-27047-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"60do8SK9Ci3UtQfiOA0Z","title":"Broker VM 26.100.10","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-2610010","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"izN5mUkO0CpPvJTA5uXR","title":"Broker VM 26.100.3","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-261003","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"8EnYfShKelDhUIRswvmM","title":"Broker VM 26.0.119","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-260119","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"bJZaX4vRPEPQEBlxbJ6M","title":"Broker VM 26.0.116 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-260116-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"6q7YtNhIqVbmfiMcSeFC","title":"Broker VM 25.100.4","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/broker-vm/broker-vm-251004","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"Broker VM"}]},{"id":"mwQUiSQcPR5aKJIrCNYh","title":"XDR Collectors","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"}]},{"id":"4udIaSigZ1gvveZwCdkE","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-318","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"0RrKx5kxgcv8fhmkP4OF","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-318","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"aaBCyZf2MSTzpFbtgv8i","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-317","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"jefBDwZ2aGpWOs9ONwX9","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-317","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"xECDCl4FtxFuiNTWkri1","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-317","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"qJSA9mZfT5nzjvbcRW9m","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-316","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"drTSuNEypBPlPxp8VQvT","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-316","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"TSzJtmRhjT3jJ6iviO3O","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"U0PBgo9lgUqrvQh8aTfC","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"f1IVPy1E8vAtVSwkWCyj","title":"XDR Collectors 1.5.0 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-150-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"N9L9m01lw9SbmjHluNXP","title":"XDR Collectors 1.4.2 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-142-major","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"Z8LRUYHbSDQkVWa4FFfQ","title":"XDR Collectors 1.4.1 (Major)","pathname":"/cortex-xdr-3.x-rn/cortex-xdr-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-141","siteSpaceId":"sitesp_6P8up","description":"","breadcrumbs":[{"label":"Cortex XDR"},{"label":"Cortex XDR 3.x"},{"label":"Release Information"},{"label":"Previous Maintenance Releases"},{"label":"XDR Collectors"}]},{"id":"G1oOaedpqKSGfgg5sjZj","title":"Cortex XDR Agent Releases","pathname":"/agent-release-notes","siteSpaceId":"sitesp_6PGEn","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent Release Notes"},{"label":"Cortex XDR agent releases"}]},{"id":"fYTmDxUaJArxlYj6l4Ji","title":"Cortex XDR Hotfix Releases","pathname":"/agent-release-notes/cortex-xdr-agent-releases/cortex-xdr-hotfix-releases","siteSpaceId":"sitesp_6PGEn","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent Release Notes"},{"label":"Cortex XDR agent releases"}]},{"id":"HLOOWaj6Xwr2vBXpF5EW","title":"Cortex XDR Mobile Patch Releases","pathname":"/agent-release-notes/cortex-xdr-agent-releases/cortex-xdr-mobile-patch-releases","siteSpaceId":"sitesp_6PGEn","description":"View the list of Cortex XDR agent releases for iOS and Android devices.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent Release Notes"},{"label":"Cortex XDR agent releases"}]},{"id":"9W4VAZe3SkhaASejvPd2","title":"Cortex XDR Agent Past Releases Archive","pathname":"/agent-release-notes/cortex-xdr-agent-releases/cortex-xdr-agent-past-releases-archive","siteSpaceId":"sitesp_6PGEn","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent Release Notes"},{"label":"Cortex XDR agent releases"}]},{"id":"p9AxSLikLOVkI5hKkRpZ","title":"Cortex XDR Agent 9.3 Release Information","pathname":"/xdr-agent-release-notes","siteSpaceId":"sitesp_zUfha","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"}]},{"id":"sqhNTUYyDcyn8lCYvSRQ","title":"Feature Enhancements","pathname":"/xdr-agent-release-notes/release-information/feature-enhancements","siteSpaceId":"sitesp_zUfha","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.3 Release Information"}]},{"id":"txvacSCCrniTgTFCEiJ4","title":"Addressed Issues","pathname":"/xdr-agent-release-notes/release-information/addressed-issues","siteSpaceId":"sitesp_zUfha","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.3 Release Information"}]},{"id":"yLyiJeuV7H9widmCx5eb","title":"Known Limitations","pathname":"/xdr-agent-release-notes/release-information/known-issues","siteSpaceId":"sitesp_zUfha","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.3 Release Information"}]},{"id":"VtMWvY90oAWw0Ujut4Ql","title":"Cortex XDR Agent 9.2 Release Information","pathname":"/xdr-agent-release-notes/9.2","siteSpaceId":"sitesp_6PpP7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"}]},{"id":"Iajba2P2FHWPRDtfQiBL","title":"Feature Enhancements","pathname":"/xdr-agent-release-notes/9.2/release-information/feature-enhancements","siteSpaceId":"sitesp_6PpP7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.2 Release Information"}]},{"id":"g9EwM2T267SGuhfUgYvH","title":"Addressed Issues","pathname":"/xdr-agent-release-notes/9.2/release-information/addressed-issues","siteSpaceId":"sitesp_6PpP7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.2 Release Information"}]},{"id":"rfHWsCSmYzg8d6woItJl","title":"Addressed issues in Cortex XDR agent 9.2.1","pathname":"/xdr-agent-release-notes/9.2/release-information/addressed-issues/addressed-issues-in-cortex-xdr-agent-9.2.1","siteSpaceId":"sitesp_6PpP7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.2 Release Information"},{"label":"Addressed Issues"}]},{"id":"7O5SLPacKaKjwsKoiHg1","title":"Cortex XDR agent 9.2 HF (9.2.0.134)","pathname":"/xdr-agent-release-notes/9.2/release-information/addressed-issues/cortex-xdr-agent-9.2-hf-9.2.0.134","siteSpaceId":"sitesp_6PpP7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.2 Release Information"},{"label":"Addressed Issues"}]},{"id":"UDufIfY0HyfifJVJNQYK","title":"Addressed issues in Cortex XDR agent 9.2","pathname":"/xdr-agent-release-notes/9.2/release-information/addressed-issues/addressed-issues-in-cortex-xdr-agent-9.2","siteSpaceId":"sitesp_6PpP7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.2 Release Information"},{"label":"Addressed Issues"}]},{"id":"2QXjqAPEmtuZVkLp5XBf","title":"Cortex XDR agent known limitations","pathname":"/xdr-agent-release-notes/9.2/release-information/known-issues","siteSpaceId":"sitesp_6PpP7","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.2 Release Information"}]},{"id":"2IHAyHr6L9RHmaLoiDJY","title":"Cortex XDR Agent 9.1-CE Release Information","pathname":"/xdr-agent-release-notes/9.1-ce","siteSpaceId":"sitesp_FWRfB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"}]},{"id":"6hYzS0az6dlZWEwUNC7L","title":"Feature Enhancements","pathname":"/xdr-agent-release-notes/9.1-ce/cortex-xdr-agent-release-information/feature-enhancements","siteSpaceId":"sitesp_FWRfB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1-CE Release Information"}]},{"id":"rcC1XfQoo5pzM2FaYPj6","title":"Addressed issues in Cortex XDR agent 9.1-CE","pathname":"/xdr-agent-release-notes/9.1-ce/cortex-xdr-agent-release-information/addressed-issues-title-in-cortex-xdr-agent","siteSpaceId":"sitesp_FWRfB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1-CE Release Information"}]},{"id":"i9jdkzPOwHoUVfoUd1jO","title":"Cortex XDR agent known limitations","pathname":"/xdr-agent-release-notes/9.1-ce/cortex-xdr-agent-release-information/cortex-xdr-agent-known-issues-91","siteSpaceId":"sitesp_FWRfB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1-CE Release Information"}]},{"id":"3I4Hea7ZPW0KA3j5sBEf","title":"Cortex XDR Agent 9.1 Release Information","pathname":"/xdr-agent-release-notes/9.1","siteSpaceId":"sitesp_UMDMB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"}]},{"id":"rrx4afxRWztBzzhrPpFF","title":"Feature Enhancements","pathname":"/xdr-agent-release-notes/9.1/cortex-xdr-agent-release-information/feature-enhancements","siteSpaceId":"sitesp_UMDMB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1 Release Information"}]},{"id":"jrEozjrZm4gQzhY9Dhuz","title":"Addressed Issues","pathname":"/xdr-agent-release-notes/9.1/cortex-xdr-agent-release-information/addressed-issues","siteSpaceId":"sitesp_UMDMB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1 Release Information"}]},{"id":"LxRDwC3OJ0n3khn7lrwR","title":"Addressed issues in Cortex XDR agent 9.1.1","pathname":"/xdr-agent-release-notes/9.1/cortex-xdr-agent-release-information/addressed-issues/addressed-issues-911","siteSpaceId":"sitesp_UMDMB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1 Release Information"},{"label":"Addressed Issues"}]},{"id":"9QK1XwYF033qGIpd0x3L","title":"Addressed issues in Cortex XDR agent 9.1","pathname":"/xdr-agent-release-notes/9.1/cortex-xdr-agent-release-information/addressed-issues/addressed-issues-91","siteSpaceId":"sitesp_UMDMB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1 Release Information"},{"label":"Addressed Issues"}]},{"id":"smw9aBEleOH8wWA6vbEi","title":"Cortex XDR agent known limitations","pathname":"/xdr-agent-release-notes/9.1/cortex-xdr-agent-release-information/cortex-xdr-agent-known-issues-91","siteSpaceId":"sitesp_UMDMB","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.1 Release Information"}]},{"id":"d24a0SF3MEvOWffxVRTk","title":"Cortex XDR Agent 9.0 Release Information","pathname":"/xdr-agent-release-notes/9.0","siteSpaceId":"sitesp_p1yw5","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"}]},{"id":"2Er4xK9BcYZZTlqBQVh7","title":"Feature Enhancements","pathname":"/xdr-agent-release-notes/9.0/cortex-xdr-agent-release-information/feature-enhancements","siteSpaceId":"sitesp_p1yw5","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.0 Release Information"}]},{"id":"0qKZcmSm3sza6ams5UWd","title":"Addressed issues in Cortex XDR agent 9.0","pathname":"/xdr-agent-release-notes/9.0/cortex-xdr-agent-release-information/addressed-issues-title-in-cortex-xdr-agent","siteSpaceId":"sitesp_p1yw5","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.0 Release Information"}]},{"id":"xLB7BPuP8zG18bpVoErb","title":"Addressed issues in Cortex XDR agent 9.0","pathname":"/xdr-agent-release-notes/9.0/cortex-xdr-agent-release-information/addressed-issues-title-in-cortex-xdr-agent/cortex-xdr-agent-90-addressed-issues","siteSpaceId":"sitesp_p1yw5","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.0 Release Information"},{"label":"Addressed issues in Cortex XDR agent 9.0"}]},{"id":"hif56IrBkZqp2hkob4gu","title":"Cortex XDR agent known limitations","pathname":"/xdr-agent-release-notes/9.0/cortex-xdr-agent-release-information/cortex-xdr-agent-known-issues-90","siteSpaceId":"sitesp_p1yw5","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 9.x"},{"label":"Cortex XDR Agent 9.0 Release Information"}]},{"id":"m7OWAqKbZfUqaX4Jimv8","title":"Cortex XDR Agent 8.9 Release Information","pathname":"/8.x","siteSpaceId":"sitesp_EyS66","description":"New features, default behavior changes, and known issues in Cortex XDR agent 8.9 release","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"}]},{"id":"6LefMQcJsqVjg9SCvY3k","title":"Features introduced in Cortex XDR agent 8.9","pathname":"/8.x/cortex-xdr-agent-8.9-release-information/features-introduced-in-cortex-xdr-agent-8.9","siteSpaceId":"sitesp_EyS66","description":"Describes the new features introduced in Cortex XDR agent 8.9 releases","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR Agent 8.9 Release Information"}]},{"id":"rSEXra3b8WuUtiKOnup7","title":"Addressed issues in Cortex XDR agent 8.9","pathname":"/8.x/cortex-xdr-agent-8.9-release-information/addressed-issues-in-cortex-xdr-agent-8.9","siteSpaceId":"sitesp_EyS66","description":"Addressed issues in Cortex XDR agent 8.9 release for Windows, macOS, and Linux.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR Agent 8.9 Release Information"}]},{"id":"ypMJsDB6SQuOsppeDZX6","title":"Addressed issues in Cortex XDR agent 8.9.1","pathname":"/8.x/cortex-xdr-agent-8.9-release-information/addressed-issues-in-cortex-xdr-agent-8.9/addressed-issues-in-cortex-xdr-agent-8.9.1","siteSpaceId":"sitesp_EyS66","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR Agent 8.9 Release Information"},{"label":"Addressed issues in Cortex XDR agent 8.9"}]},{"id":"6wk7FnSrhkngI1LxOPhl","title":"Addressed issues in Cortex XDR agent 8.9.0","pathname":"/8.x/cortex-xdr-agent-8.9-release-information/addressed-issues-in-cortex-xdr-agent-8.9/addressed-issues-in-cortex-xdr-agent-8.9.0","siteSpaceId":"sitesp_EyS66","description":"Addressed issues in Cortex XDR agent 8.9.0","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR Agent 8.9 Release Information"},{"label":"Addressed issues in Cortex XDR agent 8.9"}]},{"id":"sn4YjmbVivjOVoTHA73k","title":"Cortex XDR agent known limitations","pathname":"/8.x/cortex-xdr-agent-8.9-release-information/cortex-xdr-agent-known-limitations","siteSpaceId":"sitesp_EyS66","description":"See the list of the known limitations in Cortex XDR agent 8.9.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR Agent 8.9 Release Information"}]},{"id":"WbFk5c2a2l4cRoXAwveU","title":"Cortex XDR agent 8.7-CE release information","pathname":"/8.x/8.7ce","siteSpaceId":"sitesp_wCHkP","description":"New features, default behavior changes, and known issues in Cortex XDR agent 8.7-CE release","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"}]},{"id":"zQy9QbhidH5ZRiMeAvBO","title":"Features introduced in Cortex XDR agent 8.7","pathname":"/8.x/8.7ce/cortex-xdr-agent-8.7-ce-release-information/features-introduced-in-cortex-xdr-agent-8.7","siteSpaceId":"sitesp_wCHkP","description":"Describes the new features introduced in Cortex XDR agent 8.7 release.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR agent 8.7-CE release information"}]},{"id":"vTv2695y9GcAqeRaZqjY","title":"Windows Features","pathname":"/8.x/8.7ce/cortex-xdr-agent-8.7-ce-release-information/features-introduced-in-cortex-xdr-agent-8.7/windows-features","siteSpaceId":"sitesp_wCHkP","description":"Describes the new features introduced in Cortex XDR agent 8.7 release.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR agent 8.7-CE release information"},{"label":"Features introduced in Cortex XDR agent 8.7"}]},{"id":"cFOzBIdosyXhwMnoYH3a","title":"Addressed issues in Cortex XDR agent 8.7-CE","pathname":"/8.x/8.7ce/cortex-xdr-agent-8.7-ce-release-information/addressed-issues-in-cortex-xdr-agent-8.7-ce","siteSpaceId":"sitesp_wCHkP","description":"Addressed issues in Cortex XDR agent 8.7-CE release for Windows, macOS, and Linux.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR agent 8.7-CE release information"}]},{"id":"ONH9Yj7CfmROyKbqMq20","title":"Addressed issues in Cortex XDR agent 8.7.101-CE","pathname":"/8.x/8.7ce/cortex-xdr-agent-8.7-ce-release-information/addressed-issues-in-cortex-xdr-agent-8.7-ce/addressed-issues-in-cortex-xdr-agent-8.7.101-ce","siteSpaceId":"sitesp_wCHkP","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR agent 8.7-CE release information"},{"label":"Addressed issues in Cortex XDR agent 8.7-CE"}]},{"id":"sB58s3XkVIMZOIop26ri","title":"Addressed issues in Cortex XDR agent 8.7.100-CE","pathname":"/8.x/8.7ce/cortex-xdr-agent-8.7-ce-release-information/addressed-issues-in-cortex-xdr-agent-8.7-ce/addressed-issues-in-cortex-xdr-agent-8.7.100-ce","siteSpaceId":"sitesp_wCHkP","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR agent 8.7-CE release information"},{"label":"Addressed issues in Cortex XDR agent 8.7-CE"}]},{"id":"C84mOHbnnfBYWfLbgUGg","title":"Cortex XDR agent known issues","pathname":"/8.x/8.7ce/cortex-xdr-agent-8.7-ce-release-information/cortex-xdr-agent-known-issues","siteSpaceId":"sitesp_wCHkP","description":"See the list of the known issues in Cortex XDR agent 8.7-CE.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 8.x"},{"label":"Cortex XDR agent 8.7-CE release information"}]},{"id":"Qemt8ZgNrG8HxYpAE6o0","title":"Cortex XDR Agent 7.9-CE Release Information","pathname":"/7.x","siteSpaceId":"sitesp_VaGpM","description":"New features, default behavior changes, and known issues in Cortex XDR Agent 7.9-CE release.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"}]},{"id":"OXeDNeicokmZpaSr4l3B","title":"Features Introduced in Cortex XDR Agent 7.9","pathname":"/7.x/cortex-xdr-agent-7.9-ce-release-information/features-introduced-in-cortex-xdr-agent-7.9","siteSpaceId":"sitesp_VaGpM","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.9-CE Release Information"}]},{"id":"HCcbgEPAaSlsQo9spRnH","title":"Addressed Issues in Cortex XDR Agent 7.9-CE","pathname":"/7.x/cortex-xdr-agent-7.9-ce-release-information/addressed-issues-in-cortex-xdr-agent-7.9-ce","siteSpaceId":"sitesp_VaGpM","description":"Addressed issues in Cortex XDR agent 7.9-CE release for Windows, macOS, iOS, and Linux.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.9-CE Release Information"}]},{"id":"zGXIvrdygDdYY91PapBO","title":"Changes to Default Behavior in Cortex XDR Agent 7.9-CE","pathname":"/7.x/cortex-xdr-agent-7.9-ce-release-information/changes-to-default-behavior-in-cortex-xdr-agent-7.9-ce","siteSpaceId":"sitesp_VaGpM","description":"Changes to default behavior in Cortex XDR agent 7.9-CE for Windows, macOS, and Linux endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.9-CE Release Information"}]},{"id":"jbcOL9emaxf8qb82RzgX","title":"Changes to Default Behavior in Cortex XDR Agent 7.9-CE","pathname":"/7.x/cortex-xdr-agent-7.9-ce-release-information/changes-to-default-behavior-in-cortex-xdr-agent-7.9-ce/changes-to-default-behavior-in-cortex-xdr-agent-7.9-ce","siteSpaceId":"sitesp_VaGpM","description":"Changes to default behavior in Cortex XDR agent 7.9-CE for Windows, macOS, and Linux endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.9-CE Release Information"},{"label":"Changes to Default Behavior in Cortex XDR Agent 7.9-CE"}]},{"id":"xPPc6jMJIFh1qK0Q8hZj","title":"Known Issues in Cortex XDR Agent 7.9-CE","pathname":"/7.x/cortex-xdr-agent-7.9-ce-release-information/known-issues-in-cortex-xdr-agent-7.9-ce","siteSpaceId":"sitesp_VaGpM","description":"","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.9-CE Release Information"}]},{"id":"cJ0w8LmolSysMUX6vWFg","title":"Cortex XDR Agent 7.5 CE Release Information","pathname":"/7.x/7.5ce-eol","siteSpaceId":"sitesp_Tdu4X","description":"New features, default behavior changes, and known issues in Cortex XDR agent 7.5 CE release","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"}]},{"id":"R7638Yy88Nx8lXsFnyCy","title":"Features Introduced in Cortex XDR Agent 7.5 CE","pathname":"/7.x/7.5ce-eol/cortex-xdr-agent-7.5-ce-release-information/features-introduced-in-cortex-xdr-agent-7.5-ce","siteSpaceId":"sitesp_Tdu4X","description":"Describes the new features introduced in Cortex XDR agent 7.5 CE releases.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.5 CE Release Information"}]},{"id":"G7Rofbr41mCTtHCzm5MO","title":"Features Introduced in Cortex XDR Agent 7.5.102","pathname":"/7.x/7.5ce-eol/cortex-xdr-agent-7.5-ce-release-information/features-introduced-in-cortex-xdr-agent-7.5-ce/features-introduced-in-cortex-xdr-agent-7.5.102","siteSpaceId":"sitesp_Tdu4X","description":"Describes the new features introduced in Cortex XDR agent 7.5 CE releases.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.5 CE Release Information"},{"label":"Features Introduced in Cortex XDR Agent 7.5 CE"}]},{"id":"lIeVPUTRQFSTsV10B5fa","title":"Changes to Default Behavior in Cortex XDR Agent 7.5 CE","pathname":"/7.x/7.5ce-eol/cortex-xdr-agent-7.5-ce-release-information/changes-to-default-behavior-in-cortex-xdr-agent-7.5-ce","siteSpaceId":"sitesp_Tdu4X","description":"Changes to default behavior in Cortex XDR agent 7.5 CE for Windows, macOS, and Linux endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.5 CE Release Information"}]},{"id":"qN8YEsjgD2JyIDBXCGgx","title":"Changes to Default Behavior in Cortex XDR Agent 7.5.100","pathname":"/7.x/7.5ce-eol/cortex-xdr-agent-7.5-ce-release-information/changes-to-default-behavior-in-cortex-xdr-agent-7.5-ce/changes-to-default-behavior-in-cortex-xdr-agent-7.5.100","siteSpaceId":"sitesp_Tdu4X","description":"Changes to default behavior in Cortex XDR agent 7.5 CE for Windows, macOS, and Linux endpoints.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.5 CE Release Information"},{"label":"Changes to Default Behavior in Cortex XDR Agent 7.5 CE"}]},{"id":"psh8EuAHlVXBnDZmIKo9","title":"Cortex XDR Agent Known Issues","pathname":"/7.x/7.5ce-eol/cortex-xdr-agent-7.5-ce-release-information/cortex-xdr-agent-known-issues","siteSpaceId":"sitesp_Tdu4X","description":"See the list of the known issues in Cortex XDR agent 7.5 CE.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.5 CE Release Information"}]},{"id":"5cRiNqR1m5fZdTNOO6qv","title":"Addressed Issues in Cortex XDR Agent 7.5 CE","pathname":"/7.x/7.5ce-eol/cortex-xdr-agent-7.5-ce-release-information/addressed-issues-in-cortex-xdr-agent-7.5-ce","siteSpaceId":"sitesp_Tdu4X","description":"Addressed issues in Cortex XDR agent 7.5 CE release for Windows, macOS, and Linux.","breadcrumbs":[{"label":"Cortex XDR Agent"},{"label":"Cortex XDR Agent 7.x"},{"label":"Cortex XDR Agent 7.5 CE Release Information"}]},{"id":"etzQKn6OFyKRsn3Psg7A","title":"Cortex Cloud Runtime Security Release Information","pathname":"/cortex-cloud-runtime-security-rn","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"}]},{"id":"EZ3uNe1zWcKESGbGhkcB","title":"Features introduced in 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"}]},{"id":"FkYfqJj3V1I1pvlPt8v9","title":"September 6, 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/september-6-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"aPA0UThcIuwCxnkWHib3","title":"July 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/july-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"bpGgbOSGetBGkYNKiAqT","title":"Release Highlights","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/july-2026/release-highlights","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"aFNjGEZ97t5DUgf907b3","title":"Feature Enhancements","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/july-2026/feature-enhancements","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"3oX7NT5eM4oJjK74DIlD","title":"Changed Features","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/july-2026/changed-features","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"rQLSVT44lSMDODtJBkSe","title":"July 20, 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/july-20-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"Muyg1lLfTOEG5d3jSxK2","title":"May 17, 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/may-17-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"CwUQKW3YraBDFOplpR5l","title":"May 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/may-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"NDXoL7sPXush1kgHntNS","title":"Release Highlights","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/may-2026/release-highlights","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"jcoak5Vi0AAIYhR75QBq","title":"Feature Enhancements","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/may-2026/feature-enhancements","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"n8ieG3EqCkYoEmhortan","title":"Changed Features","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/may-2026/changed-features","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"4uaAaAk9pi9s3yZY58Na","title":"February 22, 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-22-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"jyZe2cCQSbbTtcAMbixP","title":"February 8, 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-08-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"S3S2rR1N6IdYUxp6PNlo","title":"February 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"}]},{"id":"rpTT6gF5mJMvCpjmLuRY","title":"Release Highlights","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/release-highlights","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"SfJvaKajrTaHYkb5MCiu","title":"Feature Enhancements","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"56oKxuzuL0keHR6Cgepq","title":"AI Security","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/ai-security","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"p6bzixStXYuO6pHTxXDj","title":"Application Security","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/application-security","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"JwfB1nCYFuccuPIJWleW","title":"ASPM","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/aspm","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"c3Spm7CGT10LRt9KfZG8","title":"Broker VM","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/broker-vm","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"41QKK0jte0ixsTdY5Ipn","title":"Cloud ASM","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cloud-asm","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"vzE0iuZ4eqg7EaJnTXc8","title":"Cloud Workload Rules","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cloud-workload-rules","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"CWP","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"bad8nkTCfcPrGDjxFEis","title":"Compliance","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/compliance","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"0sSplKmlNPlM1wXBWJIS","title":"Cortex Agentix Assistant","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cortex-agentix-assistant","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"ZogB50jpBQAuahVoEpY0","title":"Cortex Query Language (XQL)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cortex-query-language-xql","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"UVNklQVZGdE7qRt8bYV8","title":"CSPM","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cspm","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"PEPbt8V9hSzMfFGCIdkI","title":"Data Security","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/data-security","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"qqxpdQa52gweycG0jcrt","title":"Endpoint","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/endpoint","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"3RjNawa7FQ6Zws1KcTP1","title":"External Data Management","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/external-data-management","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"JdKmljczbxCqkU0QwejQ","title":"KSPM","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/kspm","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"EnN6AdTaW5EdHgnNTUO4","title":"Licensing","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/licensing","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"6m0nGZ3Es04wxEkTTuQI","title":"Playbooks","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/playbooks","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"dp0TJyyjO3boFHcV8vC8","title":"Playbooks and Scripts","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/playbooks-and-scripts","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"RkPHxKHk6B1gtnQXVSTF","title":"RBAC and SBAC permissions","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/rbac-and-sbac-permissions","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"vGOExMT0yrrflWiAIOgU","title":"Vulnerablity Management","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/vulnerablity-management","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"iPj22OsmOUIfyr4rsDC7","title":"XDR Collectors","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/xdr-collectors","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"HZPIZlBYf056Cvb7So45","title":"Changed Features","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/changed-features","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"e2r38kXvZed1laBg4YYG","title":"Features introduced in 2025","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"}]},{"id":"j8QboygMsQGhyKPOtDPr","title":"December 22, 2025","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/december-22-2025","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"}]},{"id":"BLoSNrbTDjtv6FTaLR2s","title":"November 23, 2025","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/november-23-2025","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"}]},{"id":"smsKprixhUhEktgYdFp6","title":"November 2025","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/november-2025","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"}]},{"id":"z6x8Okgo7YAR8P8XhBo5","title":"Release Highlights","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/november-2025/release-highlights","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"November 2025"}]},{"id":"kDarZM3JU56NQg0zzULp","title":"Feature Enhancements","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/november-2025/feature-enhancements","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"November 2025"}]},{"id":"s0dnuLRyHO2Hm63gELUj","title":"Changed Features","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/november-2025/changed-features","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"November 2025"}]},{"id":"MR0wYsIDfn5JrLoJpCur","title":"July 2025","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/july-2025","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"}]},{"id":"9SwYYvUAnrkjtTdvhrvV","title":"Release Highlights","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/july-2025/release-highlights","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"July 2025"}]},{"id":"nTBHOMVzsGqRoNu9z2Fy","title":"Feature Enhancements","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/july-2025/feature-enhancements","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"July 2025"}]},{"id":"ILYOujcWQGUVUD9gH938","title":"Changed Features","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/july-2025/changed-features","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"July 2025"}]},{"id":"uooASe4flhhtEtvG0b7Z","title":"April 2025","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/april-2025","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"}]},{"id":"Z7Vhf7gWT2ndTGRaRpPx","title":"Release Highlights","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/april-2025/release-highlights","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"April 2025"}]},{"id":"Ss1jqUxiv2OonIsoU0QC","title":"Feature Enhancements","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2025-cloud/april-2025/feature-enhancements","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Features introduced in 2025"},{"label":"April 2025"}]},{"id":"RN928rpuzWfPTFJ2g5DR","title":"Maintenance releases","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/maintenance-releases","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"}]},{"id":"DySdTnDQalDJt6C96s5n","title":"Broker VM 32.0.52 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/maintenance-releases/broker-vm-32052-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Maintenance releases"}]},{"id":"z0waYg1dthXtE2JNBBIz","title":"Broker VM 31.100.2","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/maintenance-releases/broker-vm-311002","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Maintenance releases"}]},{"id":"zgcBEiZv3DXiseT7Dkzf","title":"Broker VM 32.0.51 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/maintenance-releases/broker-vm-32051-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Maintenance releases"}]},{"id":"XB8c8yOIliYYV8dtAjXr","title":"XDR Collectors 1.5.3 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/maintenance-releases/xdr-collectors-153-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Maintenance releases"}]},{"id":"8BodhxEFOXTPRfLbvr3Q","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/maintenance-releases/xdr-collectors-143-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Maintenance releases"}]},{"id":"Nsd0rPPO7GG0dV6nmxrU","title":"Previous maintenance releases","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"}]},{"id":"ORV3YUAj3FMvgn7Owq9f","title":"Broker VM","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"}]},{"id":"Gvj2kz48AA1sxnhIW6r0","title":"Broker VM 31.0.58 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-31058-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"V1smxam8TMR8x9zIpyJM","title":"Broker VM 31.0.57 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-31057-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"di9wl9n1AZR4rpMdZwEQ","title":"Broker VM 30.0.63 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-30063-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"ByQG1z6curtKGI3MGAzk","title":"Broker VM 30.0.61 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-30061-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"96PKP0BKeOoD0tAASWdp","title":"Broker VM 30.0.52 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-30052-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"4QceJn1BZzQWYzgtcvVx","title":"Broker VM 29.0.77 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-29077-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"RtYI6AECNOEuk4W6YXn2","title":"Broker VM 29.0.71 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-29071-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"o3AwERA79MZv7gBHheAO","title":"Broker VM 28.0.99 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-28099-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"nm1RhtVwfjvaS2ANfQFc","title":"Broker VM 28.0.96","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-28096-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"1z0sjIpNBaL4Yz69i38I","title":"Broker VM 27.100.18","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-2710018","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"u2GF6ZlsrvI86AWM6MT6","title":"Broker VM 27.100.17","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-2710017","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"GzsRJJn5qAJILQd1lnXk","title":"Broker VM 27.0.47","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-27047-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"HVmm8VgzrFQghs0m5QA9","title":"Broker VM 26.100.10","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-2610010","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"1row2CtOEcZp58iAbgb8","title":"Broker VM 26.100.3","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-261003","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"gTztrlpFOrIcBgoxIRZZ","title":"Broker VM 26.0.119","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/broker-vm/broker-vm-260119-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"N4IYb8jNn4KW1pdOYtrw","title":"XDR Collectors","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"}]},{"id":"mNgfiwnW1kSF7haiwpie","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-21","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"z1JDzkXYSeEeYpokvq9O","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-21","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"9uMVk0xuEFNIS8NTJxY5","title":"XDR Collectors 1.5.2 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-152-major-20","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"hAQ8QQ9oOZwYMwBDqmeG","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-20","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"LypUrgnCxKIxYisbdyD4","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-20","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"ExMt2fivmqOTqmvmZuXY","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major-13","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"7BIQ0hIb7f1nr62kMnis","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major-13","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"A4LxBs9LEbf3Qn3jnkxe","title":"XDR Collectors 1.5.1 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-151-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"dlLIZlvplK9lHEI460bY","title":"XDR Collectors 1.4.3 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-143-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"RbyWxEFVBhlRCTowmrul","title":"XDR Collectors 1.5.0 (Major)","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/previous-maintenance-releases/xdr-collectors/xdr-collectors-150-major","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Previous maintenance releases"},{"label":"XDR Collectors"}]},{"id":"Gt2f7dtebl85bhSbUfmo","title":"Compliance standards updates","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"}]},{"id":"t1KTdKfkgPmPtFHSFEcg","title":"October 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates/october-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Compliance standards updates"}]},{"id":"59TxgZxiao7QLhBghy2a","title":"July 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates/july-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Compliance standards updates"}]},{"id":"KQ6SPhijAkWpmRINk6W8","title":"June 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates/june-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Compliance standards updates"}]},{"id":"2eXsPfuTVe857nnf9c2A","title":"April 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates/april-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Compliance standards updates"}]},{"id":"Bk7qRVlQ9iorHoUZGDAX","title":"February 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates/february-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"Compliance standards updates"}]},{"id":"vbgu5vQ48PY0wDoQDyCA","title":"API Ingestions","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/api-ingestions","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"}]},{"id":"XbJIXRUzcfXRXwcieGgQ","title":"September 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/api-ingestions/september-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"API Ingestions"}]},{"id":"f3AwgkoI9QR7UPaY2I6Y","title":"August 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/api-ingestions/august-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"API Ingestions"}]},{"id":"ZvAurGwdMh0p90YCYNqa","title":"July 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/api-ingestions/july-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"API Ingestions"}]},{"id":"bp3y3DWaPSPrMlxb65yl","title":"May 2026","pathname":"/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/api-ingestions/may-2026","siteSpaceId":"sitesp_DnwiR","lang":"en","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Runtime Security"},{"label":"Cortex Cloud Runtime Security Release Information"},{"label":"API Ingestions"}]},{"id":"HJysdACuU1eZWal9wplR","title":"Cortex Cloud Posture Management Release Information","pathname":"/cloud-posture-management-rn","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"}]},{"id":"xQpT0tz9uCkMgPHT8vKF","title":"Features introduced in 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"}]},{"id":"LxI3rCK74YMgsC0rO7Mz","title":"September 6, 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/september-6-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"}]},{"id":"8Gum3XpQs9Oq4m6bt2mT","title":"July 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/july-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"}]},{"id":"QTD8RdsUUvWjUfU36GBY","title":"Release Highlights","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/july-2026/release-highlights","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"GJdYRF779M2DgpmskZqc","title":"Feature Enhancements","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/july-2026/feature-enhancements","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"EGRdsw03oRh1jFBK7fce","title":"Changed Features","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/july-2026/changed-features","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"J5Gwkgvdt0D9qrw9o6wH","title":"May 17, 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/may-17-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"}]},{"id":"RPh5Bypc8U6Bw27q3zh5","title":"May 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/may-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"}]},{"id":"NTkYIIvOQg6QSr3B7lyO","title":"Release Highlights","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/may-2026/release-highlights","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"Jc6gm63Etb4TFFWL6cvN","title":"Feature Enhancements","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/may-2026/feature-enhancements","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"PRGP9oYkixJc2HVefD0t","title":"Changed Features","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/may-2026/changed-features","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"May 2026"}]},{"id":"rLiIy3dpFBSdBNHkRt9P","title":"February 22, 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-22-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"}]},{"id":"T8SRPBDlHG2WU1HLS9gh","title":"February 8, 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-08-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"}]},{"id":"cnXE1HR4xd49HW9GEZx7","title":"February 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"}]},{"id":"8IkmsvFEf6w9fLmQNDJL","title":"Release Highlights","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/release-highlights","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"htkGkXu7djpopKXsftSB","title":"Feature Enhancements","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"g8mtwPuMCTtwPKgFvvE3","title":"AI Security","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/ai-security","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"OsgrGuAdtw27Xf5qd4px","title":"Application Security","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/application-security","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"xiU5XllPjBOYuEU4TH9o","title":"ASPM","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/aspm","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"n9vGkUN4YZr51oG3EljE","title":"Broker VM","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/broker-vm","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"e6WsetPITxKFe9l8RhE2","title":"Cloud ASM","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cloud-asm","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"iYsR1ol7AhuDjLBdKleA","title":"Cloud Workspace Rules (CWP)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cloud-workspace-rules-cwp","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"UH8mkhIf28z3vbAOZ7d9","title":"Compliance","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/compliance","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"cMtHX1Qc8mZkKPVlM33p","title":"Cortex Agentic Assistant","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cortex-agentic-assistant","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"0nOTmYGRvyc4jafAYx32","title":"Cortex Query Language (XQL)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cortex-query-language-xql","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"tMhBBhBIPDmepkO8MULK","title":"CSPM","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/cspm","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"KpsNDfCEYcqMxzC74Cpq","title":"Data Security","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/data-security","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"ROCiT8wHCSp6Ds3J8cgs","title":"External Data Ingestion and Management","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/external-data-ingestion-and-management","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"xeq3Q9MAe6AQ8Tv7lDFX","title":"KSPM","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/kspm","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"bUw1XvfqUPDSrBvShYQC","title":"Licensing","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/licensing","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"7AUMLba0Ggm7ZY5AmacL","title":"Playbooks","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/playbooks","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"Xt0TRJFJzkoJiT398JkB","title":"Playbooks and Scripts","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/playbooks-and-scripts","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"Dhtm3ZmFNxVbvd5JK9eG","title":"RBAC and SBAC permissions","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/rbac-and-sbac-permissions","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"t7SS0ZzF3v0mYilB8BhH","title":"Vulnerability Management","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/vulnerability-management","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"},{"label":"Feature Enhancements"}]},{"id":"htUxItfpqw7HGM7AUHhv","title":"Changed Features","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2026-cloud/february-2026/changed-features","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2026"},{"label":"February 2026"}]},{"id":"DbPICOcSJyUmEvfh78pH","title":"Features introduced in 2025","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"}]},{"id":"SSWc1UNvlRGawSiASEnm","title":"November 23, 2025","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/november-23-2025","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"}]},{"id":"hBUIEdzd5p7OBi24etVt","title":"November 2025","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/november-2025","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"}]},{"id":"BxAvnHvILXMWqJIF3KYf","title":"Release Highlights","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/november-2025/release-highlights","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"},{"label":"November 2025"}]},{"id":"lX0A8MR1qKN4L8TaLo9p","title":"Feature Enhancements","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/november-2025/feature-enhancements","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"},{"label":"November 2025"}]},{"id":"71oIURXyRxJMA3vbFznO","title":"Changed Features","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/november-2025/changed-features","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"},{"label":"November 2025"}]},{"id":"ixWVFPkkPPvCJXJ4c7Ii","title":"July 2025","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/july-2025","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"}]},{"id":"AidPwQbIN5YOi7il2Hck","title":"Release Highlights","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/july-2025/release-highlights","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"},{"label":"July 2025"}]},{"id":"54b4mrioN7YBpFokz7fZ","title":"Feature Enhancements","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/july-2025/feature-enhancements","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"},{"label":"July 2025"}]},{"id":"hkJmG7kV8IhXZSVYzKZ5","title":"April 2025","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/april-2025","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"}]},{"id":"EvTJhVz7LhuxtjFF8E2l","title":"Release Highlights","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/april-2025/release-highlights","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"},{"label":"April 2025"}]},{"id":"WsY8b7kC6Tzoj1CxX1VK","title":"Feature Enhancements","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/features-introduced-in-2025-cloud/april-2025/feature-enhancements","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Features introduced in 2025"},{"label":"April 2025"}]},{"id":"cNVMkKSFfLqfi2MoMCi7","title":"Known Issues","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/known-issues","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"}]},{"id":"f1hdn90UCuDKv7a6042I","title":"Maintenance releases","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/maintenance-releases","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"}]},{"id":"jSpqGUb6gLLnLeQrAwsi","title":"Broker VM 32.0.52 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/maintenance-releases/broker-vm-32052-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Maintenance releases"}]},{"id":"qMzutf3FuKVSfIvk28vH","title":"Broker VM 31.100.2","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/maintenance-releases/broker-vm-311002","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Maintenance releases"}]},{"id":"fTrr6x5XcJr2TFAKhDMQ","title":"Broker VM 32.0.51 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/maintenance-releases/broker-vm-32051-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Maintenance releases"}]},{"id":"sIMPmXSo2HE6cXty00jK","title":"Previous maintenance releases","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"}]},{"id":"Pv93N82BECLL78YDO1FK","title":"Broker VM","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"}]},{"id":"LGmR85FK2apanLzdBeqV","title":"Broker VM 31.0.58 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-31058-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"Qb90JW6sGVJtRmyfyxkG","title":"Broker VM 31.0.57 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-31057-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"zTf71qpuTr2QL4Rc0lEO","title":"Broker VM 30.0.63 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-30063-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"wCHLdd9tjNLamGH9jRQa","title":"Broker VM 30.0.61 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-30061-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"U59BiUwL966ubku2Za1l","title":"Broker VM 30.0.52 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-30052-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"eRmNBpiWRiHPMVDeofbX","title":"Broker VM 29.0.77 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-29077-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"EDOHADIKPvC2RyvdWIGe","title":"Broker VM 29.0.71 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-29071-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"fW97esqWczJQmaAXESfq","title":"Broker VM 28.0.99 (Major)","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-28099-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"4LOmW4o1vcnH4dqObkMx","title":"Broker VM 28.0.96","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/previous-maintenance-releases/broker-vm/broker-vm-28096-major","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Previous maintenance releases"},{"label":"Broker VM"}]},{"id":"crDolsSO0dbVinnh6R84","title":"Compliance standards updates","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/compliance-standards-updates","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"}]},{"id":"4rYrbbpN60fm6ob06QRq","title":"October 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/compliance-standards-updates/october-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Compliance standards updates"}]},{"id":"8fj653ap2l05bkSGQPeh","title":"July 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/compliance-standards-updates/july-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Compliance standards updates"}]},{"id":"ULIlJFaeiOjjLw9OLOQh","title":"June 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/compliance-standards-updates/june-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Compliance standards updates"}]},{"id":"R343a9HrF0cqdGjx8Ue3","title":"April 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/compliance-standards-updates/april-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Compliance standards updates"}]},{"id":"hZrVdlh0wkMQLa4CanHi","title":"February 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/compliance-standards-updates/february-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"Compliance standards updates"}]},{"id":"53C0URewD80DFPDXEG2s","title":"API Ingestions","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/api-ingestions","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"}]},{"id":"wC321tdTScZ08HexjpDp","title":"September 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/api-ingestions/september-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"API Ingestions"}]},{"id":"56EqM6JE9wZ8O7LlzE0p","title":"August 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/api-ingestions/august-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"API Ingestions"}]},{"id":"NaJsdfzClZNILlWrgISE","title":"July 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/api-ingestions/july-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"API Ingestions"}]},{"id":"xyVXYKv36mkl87h856k4","title":"May 2026","pathname":"/cloud-posture-management-rn/cortex-cloud-posture-management-release-information/api-ingestions/may-2026","siteSpaceId":"sitesp_p1Ib6","description":"","breadcrumbs":[{"label":"Cortex CLOUD"},{"label":"Cortex Cloud Posture Management"},{"label":"Cortex Cloud Posture Management Release Information"},{"label":"API Ingestions"}]},{"id":"grhYuPnavnH6O1liTp7I","title":"Cortex AgentiX Release Information","pathname":"/cortex-agentix-rn","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"}]},{"id":"eVk2JvNVGCjmumCXIqYd","title":"Features Introduced in This Release","pathname":"/cortex-agentix-rn/features-introduced-in-this-release","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"}]},{"id":"hpeZTKe5z1LA0Izlo3pS","title":"September 6, 2026","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/september-6-2026","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"}]},{"id":"Qp71AzgDuQMvGdKAGulA","title":"July 2026","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/july-2026","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"}]},{"id":"H57b0onmEg7PzqfA5FDk","title":"Release Highlights","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/july-2026/release-highlights","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"July 2026"}]},{"id":"hcHBxoIDvp7SB5j392Uh","title":"Feature Enhancements","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/july-2026/feature-enhancements","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"July 2026"}]},{"id":"SsOjPfaVYx4SyCnBHYAS","title":"Changed Features","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/july-2026/changed-features","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"July 2026"}]},{"id":"ekEp5IrFbC42fDIaiqvW","title":"May 2026","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/may-2026","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"}]},{"id":"IOPuLiyD62zBT52RktiX","title":"Release Highlights","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/may-2026/release-highlights","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"May 2026"}]},{"id":"IhqWL2SCu1IIz89BAj9X","title":"Feature Enhancements","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/may-2026/feature-enhancements","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"May 2026"}]},{"id":"gkmkDlO6iBHCE6QPcfGp","title":"Changed Features","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/may-2026/changed-features","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"May 2026"}]},{"id":"ASxuDomjvSF958pSYc4v","title":"February 2026","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/february-2026","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"}]},{"id":"dfiyiolQzOh23XHXRGFY","title":"Release Highlights","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/february-2026/release-highlights","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"February 2026"}]},{"id":"iPoiFCi9Yg0FiLpqaDb4","title":"November 2025","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/november-2025","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"}]},{"id":"9kKCqGrrILcQadMQnVeh","title":"Feature Enhancements","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/november-2025/feature-enhancements","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"November 2025"}]},{"id":"MxC0fRsBLjmMZLPqelI4","title":"Marketplace content changes","pathname":"/cortex-agentix-rn/features-introduced-in-this-release/november-2025/marketplace-content-changes","siteSpaceId":"sitesp_FW1QU","description":"","breadcrumbs":[{"label":"Cortex AgentiX"},{"label":"Cortex AgentiX"},{"label":"Features Introduced in This Release"},{"label":"November 2025"}]},{"id":"EofVkBitAPNj2y7FQ2d5","title":"Cortex XSOAR Release Information","pathname":"/cortex-xsoar-8-saas-release-notes","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"}]},{"id":"jpsOULYjOGy198xiqaYc","title":"Features Introduced in This Release","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-this-release","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"}]},{"id":"2eOiNY10LYhsnNnmZkgj","title":"July 2026","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-this-release/july-2026","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features Introduced in This Release"}]},{"id":"QIzPBzL8d6mxiV7GYxOw","title":"Features introduced in previous releases","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"}]},{"id":"LzNj94uupmIgVxhaEou8","title":"Features Introduced in 2026","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2026","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"}]},{"id":"nTy7vRx33cihtOhMAtgv","title":"May 2026","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2026/may-2026","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2026"}]},{"id":"SMn9PhjRnjBgRaHJPsvn","title":"February 2026","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2026/february-2026","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2026"}]},{"id":"f2U5P69WVClKkFSNozmw","title":"Features Introduced in 2025","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2025","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"}]},{"id":"5VVvuxmSV00RE1NJ727T","title":"November 2025","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2025/november-2025","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2025"}]},{"id":"aDEzUYsU59EAb4exFy9Q","title":"July 2025","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2025/july-2025","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2025"}]},{"id":"dAuQ1rHXuTGtuaYHWDev","title":"April 2025","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2025/april-2025","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2025"}]},{"id":"7xLgTMFJnZ07zqRSnChg","title":"February 2025","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2025/february-2025","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2025"}]},{"id":"wQzaFKu5qCIzkcAAI88l","title":"Features Introduced in 2024","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2024","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"}]},{"id":"eejedmYTpTZhoBSqKs3n","title":"September 2024","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2024/september-2024","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2024"}]},{"id":"UhhCUKjldYEe2gt2FiYU","title":"June 2024","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2024/june-2024","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2024"}]},{"id":"kRlgbG5xd9EBNDen1sBF","title":"April 2024","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2024/april-2024","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2024"}]},{"id":"XZ0tBJEmlzQQRxXLWQz1","title":"February 2024","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2024/february-2024","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2024"}]},{"id":"PlA1dQX8Zz1Dh57Zud5P","title":"Features Introduced in 2023","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2023","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"}]},{"id":"atYuTBsLZkjJZFhW7bzC","title":"October 2023","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2023/october-2023","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2023"}]},{"id":"bnl5N4jKWW5EsDX0Nlsq","title":"July 2023","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2023/july-2023","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2023"}]},{"id":"OLbWQifsqad10g1RkdDD","title":"April 2023","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2023/april-2023","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2023"}]},{"id":"nMtEXeBSmrjG6Oi4ArJ4","title":"January 2023","pathname":"/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2023/january-2023","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"},{"label":"Features introduced in previous releases"},{"label":"Features Introduced in 2023"}]},{"id":"yWkQWPeLqWLDxHFjcJYr","title":"Known Issues","pathname":"/cortex-xsoar-8-saas-release-notes/known-issues","siteSpaceId":"sitesp_iGGwC","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 SaaS Release Notes"}]},{"id":"xDOLGBANbPXOR0PcnRiw","title":"Cortex XSOAR 8 On-prem Releases","pathname":"/xsoar-8-opp-release-notes","siteSpaceId":"sitesp_IooPm","description":"Major general availability and maintenance releases for Cortex XSOAR 8 On-prem","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"Sr3ujSEUthGrFqgX7pek","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/xsoar-opp-release-notes-8.14","siteSpaceId":"sitesp_ChEyb","description":"New features, addressed issues, and breaking changes in Cortex XSOAR 8.14 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"Re2FtIS1KaQFi84PyAQZ","title":"Features Introduced in this Release","pathname":"/xsoar-8-opp-release-notes/xsoar-opp-release-notes-8.14/features-introduced-in-this-release","siteSpaceId":"sitesp_ChEyb","description":"New features are available in Cortex XSOAR 8.14 On-prem, including release highlights and feature enhancements.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"l6BvXZ1IDRo4NF0dnCRm","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/xsoar-opp-release-notes-8.14/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_ChEyb","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features Introduced in this Release"}]},{"id":"xBDHx8bG748aWFsnGikS","title":"Feature Enhancements","pathname":"/xsoar-8-opp-release-notes/xsoar-opp-release-notes-8.14/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_ChEyb","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features Introduced in this Release"}]},{"id":"5qGOYkQlnZd0LLJ6ZbCB","title":"Marketplace Changes","pathname":"/xsoar-8-opp-release-notes/xsoar-opp-release-notes-8.14/features-introduced-in-this-release/marketplace-changes","siteSpaceId":"sitesp_ChEyb","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features Introduced in this Release"}]},{"id":"83PVUB2QBwcxgLCrBmU6","title":"Maintenance releases in Cortex XSOAR 8.14","pathname":"/xsoar-8-opp-release-notes/xsoar-opp-release-notes-8.14/maintenance-releases-in-cortex-xsoar-8.14","siteSpaceId":"sitesp_ChEyb","description":"Maintenance releases for Cortex XSOAR On-prem 8.14.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"B6F2i0B85K4fHC41mpCZ","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/xsoar-opp-release-notes-8.14/known-issues","siteSpaceId":"sitesp_ChEyb","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"NAydp4LAgB4bISwqMPoJ","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.13","siteSpaceId":"sitesp_uRRHm","description":"New features, addressed issues, and breaking changes in Cortex XSOAR 8.13 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"7fbc8cc688408cc5fafb383f11bcb1e29bf6716b","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.13/features-introduced-in-this-release","siteSpaceId":"sitesp_uRRHm","description":"New features are available in Cortex XSOAR 8.13.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"vHx7tJ0X1Tovll6FyNg8","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.13/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_uRRHm","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"WyUYNdxTkmJIzqVDQsQD","title":"Feature enhancements","pathname":"/xsoar-8-opp-release-notes/8.13/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_uRRHm","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"zRWMHxVRaQfEdzDNd9Wj","title":"Marketplace Changes","pathname":"/xsoar-8-opp-release-notes/8.13/features-introduced-in-this-release/marketplace-changes","siteSpaceId":"sitesp_uRRHm","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"DgKkFylD01xnU89YtdyE","title":"Changed features","pathname":"/xsoar-8-opp-release-notes/8.13/features-introduced-in-this-release/changed-features","siteSpaceId":"sitesp_uRRHm","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"0Gm5M1fIqCWN1TGj05Dv","title":"Maintenance releases in Cortex XSOAR 8.13","pathname":"/xsoar-8-opp-release-notes/8.13/maintenance-releases-in-cortex-xsoar-8.13","siteSpaceId":"sitesp_uRRHm","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"1b8116d3e4e5b241352575ed8f7d0af16fd5b8bd","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.13/known-issues","siteSpaceId":"sitesp_uRRHm","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"819c3dbf13e436531ec3fb51797f25f26bc582cf","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.12","siteSpaceId":"sitesp_YTTcN","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"458686b33e972308912efbf6b9ab14c474bd38f3","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.12/features-introduced-in-this-release","siteSpaceId":"sitesp_YTTcN","description":"New features are available in Cortex XSOAR 8.12.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"euiUKDxVDepNOQ2kWQUl","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.12/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_YTTcN","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"2V5LVDc4d5SKXUKRL4Z9","title":"Feature enhancements","pathname":"/xsoar-8-opp-release-notes/8.12/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_YTTcN","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"rSTZcB3V6JbOEbXFIOlK","title":"Changed features","pathname":"/xsoar-8-opp-release-notes/8.12/features-introduced-in-this-release/changed-features","siteSpaceId":"sitesp_YTTcN","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"SIAAR7xdyN6C6sr5b11h","title":"Marketplace Changes","pathname":"/xsoar-8-opp-release-notes/8.12/features-introduced-in-this-release/marketplace-changes","siteSpaceId":"sitesp_YTTcN","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"sw1Xg7mvdEHo7gUdXUff","title":"Maintenance Releases in Cortex XSOAR 8.12","pathname":"/xsoar-8-opp-release-notes/8.12/maintenance-releases-in-cortex-xsoar-8.12","siteSpaceId":"sitesp_YTTcN","description":"Maintenance Releases for Cortex XSOAR 8.12 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"211da44da040905763702a428410ba5778c5b769","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.12/known-issues","siteSpaceId":"sitesp_YTTcN","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"97e6c10151fb350f7d9f707e69c7e655caf7f7d8","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.11","siteSpaceId":"sitesp_6PPGq","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"ada19550fd28a4d62a4d44ee4af1307e22c20f5d","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.11/features-introduced-in-this-release","siteSpaceId":"sitesp_6PPGq","description":"New features are available in Cortex XSOAR On-prem 8.11.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"EGq1K5LMLm5in8o1eicD","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.11/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_6PPGq","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"u7dPFMBlziaLm4BAJzp9","title":"Feature enhancements","pathname":"/xsoar-8-opp-release-notes/8.11/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_6PPGq","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"lG0TIphfIIBjQiXws00r","title":"Changed features","pathname":"/xsoar-8-opp-release-notes/8.11/features-introduced-in-this-release/changed-features","siteSpaceId":"sitesp_6PPGq","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"3LB4vr3ius9OhUERGxTe","title":"Marketplace Changes","pathname":"/xsoar-8-opp-release-notes/8.11/features-introduced-in-this-release/marketplace-changes","siteSpaceId":"sitesp_6PPGq","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"LXHQU38BHCtt4kjv42WO","title":"Maintenance Releases in Cortex XSOAR 8.11","pathname":"/xsoar-8-opp-release-notes/8.11/maintenance-releases-in-cortex-xsoar-8.11","siteSpaceId":"sitesp_6PPGq","description":"Maintenance Releases for Cortex XSOAR 8.11 On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"I67R5UexRc9taEI5KSA5","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.11/known-issues","siteSpaceId":"sitesp_6PPGq","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"Q4idXmWqyyn0lqiu90vC","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.10","siteSpaceId":"sitesp_kFFuk","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"gdRUosUqHn3ccjH5Lach","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.10/features-introduced-in-this-release","siteSpaceId":"sitesp_kFFuk","description":"New features are available in Cortex XSOAR 8.10.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"djAY6gMk2US4sFr2JbcX","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.10/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_kFFuk","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"cnJb7EU62Cwq6tkDlICx","title":"Marketplace Changes","pathname":"/xsoar-8-opp-release-notes/8.10/features-introduced-in-this-release/marketplace-changes","siteSpaceId":"sitesp_kFFuk","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"qXnGmC7F8ZQ0TDqUsyZj","title":"Addressed Issues","pathname":"/xsoar-8-opp-release-notes/8.10/features-introduced-in-this-release/addressed-issues","siteSpaceId":"sitesp_kFFuk","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"t0tBnwrqvbUmroN7C25Z","title":"Maintenance Releases in Cortex XSOAR 8.10","pathname":"/xsoar-8-opp-release-notes/8.10/maintenance-releases-in-cortex-xsoar-8.10","siteSpaceId":"sitesp_kFFuk","description":"Maintenance Releases for Cortex XSOAR 8x On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"Kmtfa19aFHutqMYEnwrj","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.10/known-issues","siteSpaceId":"sitesp_kFFuk","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"59jvaOIRx4YHdbMVzAuU","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.9","siteSpaceId":"sitesp_8JJXt","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"9RTRf5w3TF3CFhqvqtpo","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.9/features-introduced-in-this-release","siteSpaceId":"sitesp_8JJXt","description":"New features are available in Cortex XSOAR 8.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"zUCGueGslnC0LaGSKNSx","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.9/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_8JJXt","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"pxOeGMtKWLoPYCBVXKTC","title":"Feature Enhancements","pathname":"/xsoar-8-opp-release-notes/8.9/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_8JJXt","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"5ijslvDx2zQrQsSlY2DG","title":"Marketplace Content Changes","pathname":"/xsoar-8-opp-release-notes/8.9/features-introduced-in-this-release/marketplace-content-changes","siteSpaceId":"sitesp_8JJXt","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"PyxG04FE146kuNleCIOm","title":"Maintenance Releases in Cortex XSOAR 8.9","pathname":"/xsoar-8-opp-release-notes/8.9/maintenance-releases-in-cortex-xsoar-8.9","siteSpaceId":"sitesp_8JJXt","description":"Maintenance Releases for Cortex XSOAR 8x On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"tw8yydjmCD5875jAiM03","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.9/known-issues","siteSpaceId":"sitesp_8JJXt","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"zxaG7N8Dvcp2PnrFbhL6","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.8","siteSpaceId":"sitesp_yiic6","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"I8fkFPBfexpam5EJxwAb","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.8/features-introduced-in-this-release","siteSpaceId":"sitesp_yiic6","description":"New features are available in Cortex XSOAR 8.8","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"Qz4Wb8mhUAPVpiDgRTKs","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.8/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_yiic6","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"Kz8XQ7Kb6Wu6KM2hw9rC","title":"Feature Enhancements","pathname":"/xsoar-8-opp-release-notes/8.8/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_yiic6","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"WVNLPl1OPII7lVWeVMfC","title":"Marketplace Content Changes","pathname":"/xsoar-8-opp-release-notes/8.8/features-introduced-in-this-release/marketplace-content-changes","siteSpaceId":"sitesp_yiic6","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"voOfzq6yIXqlqAqYH4Us","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.8/known-issues","siteSpaceId":"sitesp_yiic6","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"8K2b6kR8gswYs79GOx0N","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.7","siteSpaceId":"sitesp_ZNNkj","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"niEgZx2NaipZLvO5tSXM","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.7/features-introduced-in-this-release","siteSpaceId":"sitesp_ZNNkj","description":"New features are available in Cortex XSOAR 8.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"5PkLSMpOqzGJ2Jqop5S3","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.7/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_ZNNkj","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"0UpaYgRZlmeuiHTtEtwk","title":"Feature Enhancements","pathname":"/xsoar-8-opp-release-notes/8.7/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_ZNNkj","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"fzQnxEUdWziKYNOsCwAe","title":"Marketplace content changes","pathname":"/xsoar-8-opp-release-notes/8.7/features-introduced-in-this-release/marketplace-content-changes","siteSpaceId":"sitesp_ZNNkj","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"jnmx77lR2xk7c3Igd4Vf","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.7/known-issues","siteSpaceId":"sitesp_ZNNkj","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"FmbOsze01hSlpPsP8fje","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.6","siteSpaceId":"sitesp_q88GV","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"8QhQi4SyPQgC0lCaDje3","title":"Features introduced in this release","pathname":"/xsoar-8-opp-release-notes/8.6/features-introduced-in-this-release","siteSpaceId":"sitesp_q88GV","description":"New features are available in Cortex XSOAR 8.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"zHP3KsNINIJtwkniiU8v","title":"Release Highlights","pathname":"/xsoar-8-opp-release-notes/8.6/features-introduced-in-this-release/release-highlights","siteSpaceId":"sitesp_q88GV","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"RZbMvkxxFu41Zvs34dkE","title":"Feature Enhancements","pathname":"/xsoar-8-opp-release-notes/8.6/features-introduced-in-this-release/feature-enhancements","siteSpaceId":"sitesp_q88GV","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"6KEFGDByG26Y9tHN3pcr","title":"Marketplace Content Changes","pathname":"/xsoar-8-opp-release-notes/8.6/features-introduced-in-this-release/marketplace-content-changes","siteSpaceId":"sitesp_q88GV","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features introduced in this release"}]},{"id":"EZKIfBsV0aYbZF627AYF","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.6/known-issues","siteSpaceId":"sitesp_q88GV","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"tsvvBYEcGLxZWAQQk1Kb","title":"Cortex XSOAR Release Information","pathname":"/xsoar-8-opp-release-notes/8.5","siteSpaceId":"sitesp_QDD1f","description":"New features, addressed issues, and breaking changes in Cortex XSOAR On-prem.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"xV7K48kyUCuNssHQdSLQ","title":"Features Introduced in This Release","pathname":"/xsoar-8-opp-release-notes/8.5/features-introduced-in-this-release","siteSpaceId":"sitesp_QDD1f","description":"New features introduced in Cortex XSOAR 8 SaaS per year.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"jNjSwl0fZ5OSMOY895jg","title":"Cortex XSOAR 8 On-prem","pathname":"/xsoar-8-opp-release-notes/8.5/features-introduced-in-this-release/cortex-xsoar-8-on-prem","siteSpaceId":"sitesp_QDD1f","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features Introduced in This Release"}]},{"id":"TqZlaZEnu7WA8iJCZIyi","title":"Cortex XSOAR On-prem features","pathname":"/xsoar-8-opp-release-notes/8.5/features-introduced-in-this-release/cortex-xsoar-on-prem-features","siteSpaceId":"sitesp_QDD1f","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features Introduced in This Release"}]},{"id":"XrdBaLMApORZxr7kn1q5","title":"Cortex XSOAR 8.5 features","pathname":"/xsoar-8-opp-release-notes/8.5/features-introduced-in-this-release/cortex-xsoar-8.5-features","siteSpaceId":"sitesp_QDD1f","description":"","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"},{"label":"Features Introduced in This Release"}]},{"id":"kKSHSfaVkQucxUY6Mtzg","title":"Known Issues","pathname":"/xsoar-8-opp-release-notes/8.5/known-issues","siteSpaceId":"sitesp_QDD1f","description":"Cortex XSOAR 8 known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 8 On-prem Release Notes"}]},{"id":"QEkF1NkDPbzSwoVKbxnI","title":"Cortex XSOAR 6 Release Notes","pathname":"/xsoar-6-release-notes","siteSpaceId":"sitesp_N3Q4d","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"MU0e1njqt8e5gbBtBFPm","title":"Release Information","pathname":"/xsoar-6-release-notes/6.15","siteSpaceId":"sitesp_2popc","description":"Cortex XSOAR 6.15 release information.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"z2qiep4iIMdbwrvVkF91","title":"New Features","pathname":"/xsoar-6-release-notes/6.15/new-features","siteSpaceId":"sitesp_2popc","description":"Learn about new features in the Cortex XSOAR 6.15 release.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"SLDFkA2osnlw2Dj7wsIk","title":"Addressed Issues","pathname":"/xsoar-6-release-notes/6.15/addressed-issues","siteSpaceId":"sitesp_2popc","description":"Cortex XSOAR 6.15 addressed issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"sjqHnXDm5QrnrCWeia3Q","title":"Known Issues","pathname":"/xsoar-6-release-notes/6.15/known-issues","siteSpaceId":"sitesp_2popc","description":"Cortex XSOAR known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"MU0e1njqt8e5gbBtBFPm","title":"Release Information","pathname":"/xsoar-6-release-notes/6.14","siteSpaceId":"sitesp_BQQDv","description":"Cortex XSOAR 6.14 release information.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"z2qiep4iIMdbwrvVkF91","title":"New Features","pathname":"/xsoar-6-release-notes/6.14/new-features","siteSpaceId":"sitesp_BQQDv","description":"New features are available in Cortex XSOAR 6.14.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"sjqHnXDm5QrnrCWeia3Q","title":"Known Issues","pathname":"/xsoar-6-release-notes/6.14/known-issues","siteSpaceId":"sitesp_BQQDv","description":"Cortex XSOAR known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"a20NpgOP92bjbTC77yJn","title":"Minor Releases","pathname":"/xsoar-6-release-notes/6.14/minor-releases","siteSpaceId":"sitesp_BQQDv","description":"Cortex XSOAR 6.14 minor release, maintenance release.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"LgPHdlIYROwt6O9oOaAG","title":"Release Information","pathname":"/xsoar-6-release-notes/6.13","siteSpaceId":"sitesp_JBBQ2","description":"Cortex XSOAR 6.13 release information.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"ZZmNcYW3S8XqFvKBL2KN","title":"New Features","pathname":"/xsoar-6-release-notes/6.13/new-features","siteSpaceId":"sitesp_JBBQ2","description":"New features are available in Cortex XSOAR 6.13.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"u0R2T8P7vKARd4GX1HX6","title":"Addressed Issues","pathname":"/xsoar-6-release-notes/6.13/addressed-issues","siteSpaceId":"sitesp_JBBQ2","description":"Cortex XSOAR 6.13 addressed issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"MVdllXlC7a4UvFcvix3j","title":"Known Issues","pathname":"/xsoar-6-release-notes/6.13/known-issues","siteSpaceId":"sitesp_JBBQ2","description":"Cortex XSOAR known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"YmPBdAMfevf71We65JE3","title":"Release Information","pathname":"/xsoar-6-release-notes/6.12","siteSpaceId":"sitesp_VaajK","description":"Cortex XSOAR v6.12 release information.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"}]},{"id":"7Jcshifmb3ngRWcRxKuE","title":"New Features","pathname":"/xsoar-6-release-notes/6.12/release-information/new-features","siteSpaceId":"sitesp_VaajK","description":"New features are available in Cortex XSOAR 6.12.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"},{"label":"Release Information"}]},{"id":"45dvkETsrVWo5relcvxQ","title":"Addressed Issues","pathname":"/xsoar-6-release-notes/6.12/release-information/addressed-issues","siteSpaceId":"sitesp_VaajK","description":"Cortex XSOAR 6.12 addressed issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"},{"label":"Release Information"}]},{"id":"2WpeXrU7GKshpT1ADpL9","title":"Known Issues","pathname":"/xsoar-6-release-notes/6.12/release-information/known-issues","siteSpaceId":"sitesp_VaajK","description":"Cortex XSOAR known issues.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"},{"label":"Release Information"}]},{"id":"4HOrIxgBj5lBKfiP8k3Y","title":"Minor Releases","pathname":"/xsoar-6-release-notes/6.12/release-information/minor-releases","siteSpaceId":"sitesp_VaajK","description":"Cortex XSOAR 6.12 minor release, maintenance release.","breadcrumbs":[{"label":"Cortex XSOAR"},{"label":"Cortex XSOAR 6 Release Notes"},{"label":"Release Information"}]},{"id":"HCumZqbQIX47ZQ2Yr3ml","title":"Cortex Xpanse Expander Release Information","pathname":"/cortex-xpanse-expander-rn","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"}]},{"id":"fGtue9yhnxqc1PmsAADB","title":"Features introduced in 2026","pathname":"/cortex-xpanse-expander-rn/2026-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"}]},{"id":"LoXwPOXfRuPhxIcrRHVB","title":"Release 2.14 (July 2026)","pathname":"/cortex-xpanse-expander-rn/2026-releases/july-2026","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced in 2026"}]},{"id":"WuLi9NkdLS086Obi7WoT","title":"Release 2.13 (May 2026)","pathname":"/cortex-xpanse-expander-rn/2026-releases/may-2026","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced in 2026"}]},{"id":"qG59tIckLwzrDTP6EDU4","title":"Release 2.12 (February 2026)","pathname":"/cortex-xpanse-expander-rn/2026-releases/february-2026","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced in 2026"}]},{"id":"daczC4QElV8r377xsre6","title":"Features introduced before 2026","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"}]},{"id":"dXKYvpo2FAHUXxR9Xype","title":"Features introduced in 2025","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2025-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"}]},{"id":"qu1FEvn1haLSjhGOtjpC","title":"Release 2.11 (November 2025)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2025-releases/release-211-november-2025","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2025"}]},{"id":"vrkySGxmHLLbJrtgZWSf","title":"Release 2.10 (July 2025)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2025-releases/release-210-july-2025","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2025"}]},{"id":"bnHAHEc2BT7dcjiA3M7a","title":"Release 2.9 (April 2025)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2025-releases/release-29-april-2025","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2025"}]},{"id":"NUtVdslIkrpcDBRYTIgh","title":"Release 2.8 (February 2025)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2025-releases/release-28-february-2025","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2025"}]},{"id":"T1USdGrjMkYwuRYNjtUS","title":"Features introduced in 2024","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"}]},{"id":"01APi6F3zGFm7MqvqYY6","title":"Expander Release 2.7 (Minor Releases)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases/expander-release-27-minor-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2024"}]},{"id":"TukpcI9nX1RUVj4YbV1H","title":"Expander Release 2.7 (September 2024)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases/expander-release-27-september-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2024"}]},{"id":"yUdBtmpcRlsvbGGHBIfz","title":"Expander Release 2.6 (June 2024)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases/expander-release-26-june-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2024"}]},{"id":"53K17pPdYqx4wDo83TXI","title":"Expander Release 2.5 (Minor Releases)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases/expander-release-25-minor-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2024"}]},{"id":"190hQxYPmAlpmwdEmJDl","title":"Expander Release 2.5 (April 2024)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases/expander-release-25-april-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2024"}]},{"id":"Yh7upCB4crfmOFJdEmYS","title":"Expander Release 2.4 (Minor Releases)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases/expander-release-24-minor-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2024"}]},{"id":"cwwZWItfe25nDftYDDc5","title":"Expander Release 2.4 (February 2024)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2024-releases/expander-release-24-february-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2024"}]},{"id":"eo9zvF6SVasooLvUqtD6","title":"Features introduced in 2023","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"}]},{"id":"HewnxKA1oKFCwcjKHYmk","title":"Expander Release 2.3 (Minor Releases)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases/expander-release-23-minor-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2023"}]},{"id":"SYhCnJzx0R3GVouiDsXY","title":"Expander Release 2.3 (October 2023)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases/expander-release-23-october","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2023"}]},{"id":"EBzK5QnogdGI00DBn4Ns","title":"Expander Release 2.2 (Minor Releases)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases/expander-release-22-minor-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2023"}]},{"id":"cpUkJvIyN6PVlp94wLCx","title":"Expander Release 2.2 (June 2023)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases/expander-release-22-june","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2023"}]},{"id":"SYAWSt32evqJf1ousIwd","title":"Expander Release 2.1 (March 2023)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases/expander-release-21-march","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2023"}]},{"id":"x4fPai6kz6jvm8GVbzuF","title":"Features introduced in 2022","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2022-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"}]},{"id":"SfEwqypth03wkAdH9kcT","title":"Expander Release 2.0 (December 2022)","pathname":"/cortex-xpanse-expander-rn/features-introduced-before-2026/2022-releases/expander-release-20-december-2022","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Features introduced before 2026"},{"label":"Features introduced in 2022"}]},{"id":"JB6ILYcLyjKxCvfP7NcG","title":"Hotfix Releases","pathname":"/cortex-xpanse-expander-rn/hotfix-releases","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"}]},{"id":"xzeYhMuXqMVC8z7o69Y8","title":"January 2025","pathname":"/cortex-xpanse-expander-rn/hotfix-releases/january-2025","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Hotfix Releases"}]},{"id":"YGFQLExd00uKy0tl3SQb","title":"November 2024","pathname":"/cortex-xpanse-expander-rn/hotfix-releases/november-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Hotfix Releases"}]},{"id":"B80Yct6Yum3j3k9NIV2O","title":"October 2024","pathname":"/cortex-xpanse-expander-rn/hotfix-releases/october-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Hotfix Releases"}]},{"id":"UN7hXVV0B9Wfex2CzUjH","title":"August 2024","pathname":"/cortex-xpanse-expander-rn/hotfix-releases/august-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Hotfix Releases"}]},{"id":"qXatgXNgN2Z2reimtSJ3","title":"July 2024","pathname":"/cortex-xpanse-expander-rn/hotfix-releases/july-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Hotfix Releases"}]},{"id":"PRxkZdoJZHsCuniFk8r7","title":"June 2024","pathname":"/cortex-xpanse-expander-rn/hotfix-releases/june-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Hotfix Releases"}]},{"id":"25AXOleDXISZmvLHa997","title":"May 2024","pathname":"/cortex-xpanse-expander-rn/hotfix-releases/may-2024","siteSpaceId":"sitesp_huLsV","description":"","breadcrumbs":[{"label":"Cortex Xpanse"},{"label":"Cortex Xpanse Expander"},{"label":"Hotfix Releases"}]},{"id":"WvRVfO4MVZg4i7f5LG22","title":"Cortex Analytics Content Release Notes","pathname":"/cortex-analytics-content-releases","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"}]},{"id":"1g9qUjZpWyp9c1mqSIYM","title":"2026.09.30","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-09-30","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"8c61zRJC0iuIqzbyYwhr","title":"2026.09.23","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-09-23","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"B592DTREZvyzA5R6Nz8q","title":"2026.08.26","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-08-26","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"S21bP5bYFfSGOPAbdEjK","title":"2026.08.12","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-08-12","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"horKEfP43yU0Gw0qnKPw","title":"2026.08.05","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-08-05","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"RyVUaoXyLC1v5iGuSODx","title":"2026.07.29","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-07-29","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"QXoXNK5ITDdh8kXbsGrH","title":"2026.07.22","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-07-22","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"ENoeZI8u1vu6igOrtLV3","title":"2026.07.15","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-07-15","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"z5JOoJMS5WIWeikfBQiM","title":"2026.07.08","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-07-08","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"ODu9UkrxnGyKNhBBIoyW","title":"2026.07.01","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-07-01","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"vm2qqwgatdkKNyTKbIxk","title":"2026.06.10","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-06-10","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"k43HfZAnXsorKW3IoKEC","title":"2026.05.28","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-05-28","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"pcnVZMxNNPjJ30uTvQFi","title":"2026.05.06","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-05-06","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"x6ADFzHC4RWHYd2tU07p","title":"2026.04.29","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-04-29","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"UNcgmFyAjSP48KD67RIO","title":"2026.04.22","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-04-22","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"wrJHeqAyaREyo1EsXHgy","title":"2026.04.15","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-04-15","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"wsf6gUvlUBnm3BIXws9r","title":"2026.03.18","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-03-18","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"LbYKn1bry382LAhPlLn4","title":"2026.03.04","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-03-04","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"PHOXKMqtLMM97Dy1CWQC","title":"2026.02.25","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-02-25","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"9xYlSrnHwL38X60L8qoF","title":"2026.02.18","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-02-18","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"OxwhhQu2y3lM0sAE8T1O","title":"2026.02.11","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-02-11","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"4t5XsKYMLkJ6XixBGC6C","title":"2026.02.04","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-02-04","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"GQ5rD3AUTBoZPKxeQUJ9","title":"2026.01.28","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-01-28","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"MK5EzQMV1G7YEGWZkaLI","title":"2026.01.21","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-01-21","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"id9EJX0kJHKnQi0vbxWx","title":"2026.01.07","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2026-01-07","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"Xmz6wHOAgS63yZ7hwnNl","title":"2025.12.31","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-12-31","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"H22Wfx84rJnwtU3kQL9D","title":"2025.12.03","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-12-03","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"qssn6Kd1X8vUoJNA6t3j","title":"2025.11.26","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-11-26","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"5fuhmDCl5vM2NBgnP7Db","title":"2025.11.19","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-11-19","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"gxLHAAmBf1upmcj7Q8I9","title":"2025.11.12","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-11-12","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"z3fhVtQiACIxkdtvflx4","title":"2025.11.05","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-11-05","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"QvveQRbbvyVrYFI1Lzg6","title":"2025.10.22","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-10-22","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"n1hAgaNqV1v7oyHpGg6y","title":"2025.10.08","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-10-08","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"UImxDa5NWyM4DeAfc9kZ","title":"2025.09.03","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-09-03","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"demrj4R2CQVXQtdXr6QQ","title":"2025.08.20","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-08-20","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"vhLr2uqIEFOoRhd1H44h","title":"2025.08.13","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-08-13","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"2ygul9YfavvCRFfdceqI","title":"2025.07.23","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-07-23","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"bcXfjs6qgjGT1m5XCICK","title":"2025.07.16","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-07-16","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"wxeJzXSKWIPkph1BX45U","title":"2025.07.09","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-07-09","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"6YK9Yvtp9vFmzprC6DpF","title":"2025.06.11","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-06-11","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"so3lkNAXHSx5k0A9eEG6","title":"2025.06.04","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-06-04","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"GTBK9UYGnElAmPtftXpC","title":"2025.05.28","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-05-28","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"H6L0BUBwTmMKgNmoZ3Qr","title":"2025.05.21","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-05-21","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"SZmqc4xZjicBod785JeC","title":"2025.04.23","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-04-23","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"Y7qd6dzX6fDyB4Q1TkG6","title":"2025.04.16","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-04-16","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"Z4eiAqh8Uzf5aVbxLF5b","title":"2025.03.26","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-03-26","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"Rg9EmMG1epBgrYEbhNmm","title":"2025.03.12","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-03-12","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"Wun8It07b21n6u0qIV87","title":"2025.03.05","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-03-05","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"thSPv6ryFh7iC9ZgajDW","title":"2025.02.26","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-02-26","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"hBVH309SPphGRUaUAOou","title":"2025.02.19","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-02-19","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"qD4SwrCKuET31BHh0CvE","title":"2025.02.05","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-02-05","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"eR6o689mie8FVMRqyUCU","title":"2025.01.29","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-01-29","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"kaoNEL03WTbZHfx5K5DB","title":"2025.01.15","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-01-15","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"vN9urkhbD3Nu7VcJEsN4","title":"2024.12.25","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-12-25","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"6pquKF4YFi7uc2yLo3kR","title":"2024.11.20","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-11-20","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"4pdR3UyhSosw3332cm63","title":"2024.11.06","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-11-06","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"n0HhMnLiy1YQMWsiX6EW","title":"2024.10.09","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-10-09","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"YFDAwnorMT7rpuUc3Lgv","title":"2024.09.25","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-09-25","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"k4Upo1YA9grKlFNlmgHn","title":"2024.09.18","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-09-18","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"wm3JqbBCstV8T31PgLll","title":"2024.09.04","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-09-04","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"cS0PXtHqGAVygcXkhCTI","title":"2024.08.28","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-08-28","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"tCGrF3cKSsGcn8jWWQWs","title":"2024.08.14","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-08-14","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"RUous8xuKri8gvPA4KAX","title":"2024.07.31","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-07-31","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"ibJDwgF0yRghSmsm7rwl","title":"2024.07.24","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-07-24","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"Nj1kajeOlZ8KnGzdDTjI","title":"2024.07.17","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-07-17","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"1bPOrC3Aompd4M5zz9Xu","title":"2024.07.10","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-07-10","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"Mxl5NADI4joKmax4SMvw","title":"2024.06.05","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-06-05","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"7g8d2sbRLORrRQAuFuDa","title":"2024.05.22","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-05-22","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"8I1295dot7QBY7z4vTo7","title":"2024.05.15","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-05-15","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"XtRBR2jp41VrcWwdhvyL","title":"2024.05.08","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-05-08","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"6iRCjBZ7G3Z8VAP8ML5z","title":"2024.05.01","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-05-01","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"m7ndwxHkZ5dZixgK6Mxk","title":"2024.04.03","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-04-03","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"YFzclKo9I25agET3pn2a","title":"2024.03.27","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-03-27","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"4rXvGBuoCnIP6gwkhC1M","title":"2024.03.20","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-03-20","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"bcDchSOUlbO1IZi365wE","title":"2024.03.06","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-03-06","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"7ml3lRei0vznIEiBENFo","title":"2024.02.28","pathname":"/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2024-02-28","siteSpaceId":"sitesp_5zu2b","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex Analytics Content Releases"},{"label":"Cortex Analytics Content Release Notes"}]},{"id":"POBG9K5Fn0b0iBt8cOHh","title":"Cortex XDR Content Releases","pathname":"/cortex-xdr-content-update-releases","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"}]},{"id":"415d54c1d1819e205c91a9b5bc12592e39526771","title":"2470","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2470","siteSpaceId":"sitesp_A07PM","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"5e6ff0c2990c4da734c9dcad1226c6b0101fee35","title":"2460","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2460","siteSpaceId":"sitesp_A07PM","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"8edd752ee78431aa4933e7f466b42a66d82b5e92","title":"2450","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2450","siteSpaceId":"sitesp_A07PM","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"ada0900fa6469ca3089564a6b8db663d4adb41a0","title":"2440","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2440","siteSpaceId":"sitesp_A07PM","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"958721ea3d5b3618fb61ed17ddb4d3cc045d1f3b","title":"2430","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2430","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"e8d80d10b4b53f9e5d745e08a579f34a8c5c0975","title":"2420","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2420","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"7c00970e1548fd47833da9e8e80ce10d135154e4","title":"2410","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2410","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"9cd3302bcd93aec116d5ebca73e5a37c9af01d40","title":"2400","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2400","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"abaf5d67a03e496327c66b5714b88dac09433e91","title":"2390","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2390","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"418de8b8deb1d3509bd98736b6c33879f0972a77","title":"2380","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2380","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"IVA6IqRHISzp22xa5pQi","title":"2370","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2370","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"0b94e761695480b220c63cf8ea4d5b5865a07f16","title":"2360","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2360","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"tLm9jy50b2uIE5JWajtO","title":"2350","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2350","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"UAXw8SluIA7G8JoVkeHq","title":"2340","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2340","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"UDIAfmJINOlAYFvTnY5r","title":"2330","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2330","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"wau3mHpQeQDqwS1AtVZo","title":"2320","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2320","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"UWxnTuKIHSdQWomyioxr","title":"2310","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2310","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"XVU47ridzlMIhZoM3EoF","title":"2300","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2300","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"5ngD05wdW1iCWsHampbj","title":"2290","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2290","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"Y1COilW1CR7mGeQj7GHe","title":"2280","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2280","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"c3s4uxcLMxkiLFKSgDO5","title":"2270","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2270","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"mroOt2ywUBxNbGoBx3FY","title":"2260","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2260","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"qEfhxj6CqWP1IQZbD0q8","title":"2250","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2250","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"RkptDWdhdju7hnlQm3Uq","title":"2240","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2240","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"hAaF37H1dWElN5gRFblF","title":"2230","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2230","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"C6yTuE1OZ9osa4glQ5SQ","title":"2220","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2220","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"2OZceTDqHYn6hq4mGAF0","title":"2210","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2210","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"e2wBLheF02LrDfTmCbFL","title":"2200","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2200","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"JQWtm5oHJFbzE56wHQmE","title":"2190","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2190","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"xpehrta7J0FOQl9SA2xO","title":"2180","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2180","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"YLdnKKj1CUHpv4Ksg1S5","title":"2170","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2170","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"sCWfNoMEhf3sS0XZMi52","title":"2160","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2160","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"IBJ3qlM7C5cwTtrRuyXW","title":"2150","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2150","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"25LOD0MQmHdu42SN62HL","title":"2140","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2140","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"Lzsv5jDEYngZEiBCkx1D","title":"2130","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2130","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"Mk3nGIKJ0OlMm7qH8oZN","title":"2120","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2120","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"U9dIJtgzYic2uYvpsx0O","title":"2110","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2110","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"mjaW9XinRDwUxXhVmurb","title":"2100","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2100","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"0RAUfg0vEygV0h1su3GK","title":"2090","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2090","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"ZB3Isea9uhIFldWPjuOA","title":"2080","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2080","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"TyYm6RAT5DFNc5z5wAsU","title":"2070","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2070","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"DuPxcDlgo72346xk0HjP","title":"2060","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2060","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"sc4jcTqaiIzRBR3rCR9u","title":"2050","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2050","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"pa3KpIdsiv0kz3Ziucaj","title":"2040","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2040","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"vlYJBB0MdyTnKkpBmNPM","title":"2030","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2030","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"MyWcw2DGsEVewMQgo0Uz","title":"2020","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2020","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"tqcPJs02AvFEVrDtDbgW","title":"2010","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2010","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"wqq1aztbtljNyVqJvWm4","title":"2000","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/2000","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"bnGVoWBRe8Jd7c5cY7T2","title":"1990","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1990","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"BKPbXesBRt3K7S5tkJBj","title":"1980","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1980","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"KwcDTAajJaGI5xDU6z8d","title":"1970","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1970","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"u9McFKnNF6YKE5voqLbh","title":"1960","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1960","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"ySSMGLqzLv7Lwav6uI8v","title":"1950","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1950","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"kM7wjor9FIDL7m8UOLIU","title":"1940","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1940","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"Tuo00Objy0FTqkb0MH6l","title":"1930","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1930","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"vR59hReJW55Jq3cblXtr","title":"1920","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1920","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"xGw9f7AlyJ3JMrqPfTfu","title":"1910","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1910","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"xgbcTNA4VlGdguEdcIi8","title":"1900","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1900","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"BCwYR5eSW2OD3wRC66mh","title":"1890","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1890","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"y2vjL22XlCHDxXSP1h7z","title":"1880","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1880","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"69o3yjQspHwtySGrfOvU","title":"1870","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1870","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"II33QqlCGkvCIS5TGMxf","title":"1860","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1860","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"B70nq2W9yXpI2NWFoLuM","title":"1850","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1850","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"v9xzNHJhwunvI3hDDKzK","title":"1840","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1840","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"AbHHUqftA7JUM8s7Q78K","title":"1830","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1830","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"QmDFUUYekhAFThzaRneO","title":"1820","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1820","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"kLbwrrHCzrwxSDeYlqxS","title":"1810","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1810","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"zvMZ91bEEwNW5gcL8SPn","title":"1800","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1800","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"Mf1yGB5mjO3nUNmF3EVN","title":"1790","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1790","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"DZdbqsoQjjRTkHPolo1Z","title":"1780","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1780","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"jPhoZiAkLeuVXEDED6UV","title":"1770","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1770","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"1y9WE21tug3XMNw3dSYd","title":"1760","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1760","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"M9Iij6E5Gc0IyJ3ZMl7x","title":"1750","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1750","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"KlTdRxbtdj7h75Pml6Z1","title":"1740","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1740","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"e0ScQDyDStf9pEsOZI1E","title":"1730","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1730","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"bHPeNa5mUOlQ4b3aH0uq","title":"1720","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1720","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"foCQ8Rl274sd6smqfKPQ","title":"1710","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1710","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"HjniTTGcxbho6Nt6lQXO","title":"1700","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1700","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"o1EmOu8JuDM7bEHFCgGn","title":"1690","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1690","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"Dp733eAh1A4zjn2ylxkx","title":"1680","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1680","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"zYdeBtQ96s3q6XPOj6Nx","title":"1670","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1670","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"FLFAajD9IGfCJJoaLfnD","title":"1660","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1660","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"6dnBlOyUmv5I3vtxQeES","title":"1650","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1650","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"WlNHaNYvyZUWhKswLvyW","title":"1640","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1640","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"xwMxUaRaXwhyfkKybKld","title":"1630","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1630","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"km6Hz1lXRujpymKZpNSx","title":"1620","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1620","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"73Ti3DRxuCfhM4jGmjTM","title":"1610","pathname":"/cortex-xdr-content-update-releases/cortex-xdr-content-releases/1610","siteSpaceId":"sitesp_A07PM","description":"","breadcrumbs":[{"label":"Content Releases"},{"label":"Cortex XDR Content Update Releases"},{"label":"Cortex XDR Content Releases"}]},{"id":"6DUiMLWUD8OUvuJRTJui","title":"Release Information","pathname":"/cortex-data-security","siteSpaceId":"sitesp_GX3en","description":"","breadcrumbs":[{"label":"Cortex Data Security"},{"label":"Cortex Data Security"}]},{"id":"r6sg8VcHEUO7qcvn8YqW","title":"Features introduced in 2026","pathname":"/cortex-data-security/release-information/features-2026","siteSpaceId":"sitesp_GX3en","description":"","breadcrumbs":[{"label":"Cortex Data Security"},{"label":"Cortex Data Security"},{"label":"Release Information"}]},{"id":"F3xjBaFxXHdDdFHDId3Y","title":"July 2026","pathname":"/cortex-data-security/release-information/features-2026/july-2026","siteSpaceId":"sitesp_GX3en","description":"","breadcrumbs":[{"label":"Cortex Data Security"},{"label":"Cortex Data Security"},{"label":"Release Information"},{"label":"Features introduced in 2026"}]},{"id":"2epHJL4ftbGwiBdC24qe","title":"Release Highlights","pathname":"/cortex-data-security/release-information/features-2026/july-2026/release-highlights","siteSpaceId":"sitesp_GX3en","description":"","breadcrumbs":[{"label":"Cortex Data Security"},{"label":"Cortex Data Security"},{"label":"Release Information"},{"label":"Features introduced in 2026"},{"label":"July 2026"}]},{"id":"JsKd452Nu8XTrHz68zaF","title":"Cortex API Documentation","pathname":"/cortex-api-overview","siteSpaceId":"sitesp_p1zQR","icon":"house","description":"Explore and integrate with the Cortex platform APIs.","breadcrumbs":[{"label":"Cortex API Documentation","icon":"plug"},{"label":"Overview","icon":"plug"}]},{"id":"yjbSbU03SLLwtGJToy5p","title":"Get started with Cortex Cloud APIs","pathname":"/cortex-cloud-api","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"}]},{"id":"PX7xvQPQVz9wlZetqWMJ","title":"What's new in this release","pathname":"/cortex-cloud-api/api-release-notes","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"}]},{"id":"F3TFZ3U1OsA1hPQXHS1D","title":"Create a new API key","pathname":"/cortex-cloud-api/create-a-new-api-key","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"}]},{"id":"YK4GNqzhljufd8IujYMP","title":"Get your Cortex Cloud API key ID","pathname":"/cortex-cloud-api/get-your-cortex-api-key-id","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"}]},{"id":"POqE7HzIQt6DYVNceHOg","title":"Get your FQDN","pathname":"/cortex-cloud-api/get-your-fqdn","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"}]},{"id":"X0jnYYw7qHmwYxE4v7SA","title":"Make your first API call","pathname":"/cortex-cloud-api/make-your-first-api-call","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"}]},{"id":"UGtKP40lroErll2QmVVA","title":"Understand Cortex Cloud licenses","pathname":"/cortex-cloud-api/understand-cortex-cloud-licenses","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"}]},{"id":"E2cKKv9QFom3If0lQEMd","title":"Cortex Cloud Platform Overview","pathname":"/cortex-cloud-api/cortex-platform/cortex-cloud-platform-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"b8052af2290a685117710ad31a2116fc51acefc6","title":"API Keys","pathname":"/cortex-cloud-api/cortex-platform/api-keys","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"7316fbb40a5420b62d60d1639f531ca14af55688","title":"Asset Groups","pathname":"/cortex-cloud-api/cortex-platform/asset-groups","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"21c23897e0c8b5c4b4a05343e4883f7eca375fdf","title":"Asset Inventory","pathname":"/cortex-cloud-api/cortex-platform/asset-inventory","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"7945ce142cf4233f548490e7330225f17a5c57e4","title":"Attack Surface Management","pathname":"/cortex-cloud-api/cortex-platform/attack-surface-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"30848fec5ac13cbc0e1f63f60b28c53a8fa71cb2","title":"Audit Log","pathname":"/cortex-cloud-api/cortex-platform/audit-log","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"3433ed0667f4daea7ae730142e3b93a28850bd42","title":"Authentication Settings","pathname":"/cortex-cloud-api/cortex-platform/authentication-settings","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"a0b8990f639974a7eeac6062afaa63e4d400618b","title":"BIOCs","pathname":"/cortex-cloud-api/cortex-platform/biocs","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"2f04b263c669a55b77bc69d671a56dc4d337abab","title":"Correlation Rules","pathname":"/cortex-cloud-api/cortex-platform/correlation-rules","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"a95bf1d5cae7af19aa1e8cbea82245eb833cc42f","title":"Cortex CLI","pathname":"/cortex-cloud-api/cortex-platform/cortex-cli","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"362627355f0a9e5c9814bab0cf0049e336d3c567","title":"Dashboards","pathname":"/cortex-cloud-api/cortex-platform/dashboards","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"f06712216b425f7ce3bacf058796231ca9364662","title":"Dataset Management","pathname":"/cortex-cloud-api/cortex-platform/dataset-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"195cdc761256dccce47f84f3e9b3fdefde95a668","title":"Endpoint Management","pathname":"/cortex-cloud-api/cortex-platform/endpoint-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"a6e0126923f577ea17c3188ac38fedcdc92d19a4","title":"IOCs","pathname":"/cortex-cloud-api/cortex-platform/iocs","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"1a48816f8e31c2140072e83ab9fd440543f46c19","title":"Lookup Datasets","pathname":"/cortex-cloud-api/cortex-platform/lookup-datasets","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"247deec5ac51e1775a548495801bce85fc31d598","title":"Playbooks","pathname":"/cortex-cloud-api/cortex-platform/playbooks","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"ea00b93a5177bcc93c17a9822929f1e7950392b3","title":"Query Library","pathname":"/cortex-cloud-api/cortex-platform/query-library","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"d3182daa364b4565e880481a438e568e55c1c9de","title":"Response Action","pathname":"/cortex-cloud-api/cortex-platform/response-action","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"5e44e73232be701767b679dd15fac55fc5678f46","title":"Scheduled Queries","pathname":"/cortex-cloud-api/cortex-platform/scheduled-queries","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"5a2bd0e2375c34d2cd5044f1279fb486d032b83f","title":"Script Execution","pathname":"/cortex-cloud-api/cortex-platform/script-execution","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"c3ded098294dae702f70110dc9f36c13bffa1cbe","title":"Scripts","pathname":"/cortex-cloud-api/cortex-platform/scripts","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"498646cfee5e5dbb6cfe37ab87b1b3b5dc23eb81","title":"Syslog Servers","pathname":"/cortex-cloud-api/cortex-platform/syslog-servers","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"3a18089938cce13cf0e2edf693871f3cfe1ffbd3","title":"System Management","pathname":"/cortex-cloud-api/cortex-platform/system-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"f818162c35323764647eae20c0345382fc627e76","title":"Widgets","pathname":"/cortex-cloud-api/cortex-platform/widgets","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"68cf47759b25c8eb7f88b6798768f438f1557738","title":"XQL Query","pathname":"/cortex-cloud-api/cortex-platform/xql-query","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"b7b65fc8e45e2a829f4837bd6de792b70eeafd97","title":"XQL User Datasets","pathname":"/cortex-cloud-api/cortex-platform/xql-user-datasets","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"40db4230a4f628ec6dc98498f2a89f319009c1c7","title":"Models","pathname":"/cortex-cloud-api/cortex-platform/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"JXAVHGaYVdVlBvhGsXRE","title":"Run XQL query APIs","pathname":"/cortex-cloud-api/cortex-platform/run-xql-query-apis","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"vu1XxD7PQ6dqQrOsdnvc","title":"Additional References","pathname":"/cortex-cloud-api/cortex-platform/cortex-cloud-platform-papi-tables","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform"}]},{"id":"JxlWfS8ZQ0y4mEWnCI1B","title":"Agent Configuration Settings overview","pathname":"/cortex-cloud-api/agent-configuration-settings/agent-configuration-settings-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Agent Configuration Settings"}]},{"id":"4c27ca30ba494b527be04f64c48bdc7ffd2ff0a1","title":"Agent Configurations","pathname":"/cortex-cloud-api/agent-configuration-settings/agent-configurations","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Agent Configuration Settings"}]},{"id":"52b551e3dccef24583b2db608ba0ea2516da6f9f","title":"Models","pathname":"/cortex-cloud-api/agent-configuration-settings/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Agent Configuration Settings"}]},{"id":"VnTOdZvhC6viGMul5ZAc","title":"ASPM, CI/CD, and Application Security Overview","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/application-security-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"13c94c8d291fb9e4ddf0757b588d74d2a5618e03","title":"Billing","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/billing","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"08472cf1c931611b87b7e163b02a85d36d0a1de3","title":"Applications","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/applications","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"88ad5385473d18ec4c34115b36e62faa4d519ee2","title":"Criteria","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/criteria","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"d8bb84fe144ca95c4085e5740301a7ce49d21a3c","title":"Data Sources","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/data-sources","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"59f3fb371a6362eff6dae6040658ebfd3e5a513e","title":"Policies","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/policies","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"b13f287db0efa70f1cbe1555d95061280f2c783e","title":"Package Explorer","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/package-explorer","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"61cbf1f181d52539297ffa864e3148e31ae17d67","title":"Repositories","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/repositories","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"f491709999deafa5ffaf968dd24d6ba14cd56c4c","title":"Remediations","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/remediations","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"b98a93ea86593d038125df4d8fe104c54c4cc7fc","title":"Rules","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/rules","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"c58097882c0d95462bf8883f2e19e35ed6ceb596","title":"SBOM Management","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/sbom-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"b8228498f50c0113bf9871c5978ecb994b4f774a","title":"Scan Management","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/scan-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"94702d181c9a970389c40b1e1b3eefb1739b3e72","title":"Cloud Coverage","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/cloud-coverage","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"5d092df4d7a17a1a4e2d13f2b8336ca57cb6b77b","title":"Models","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"m6iesm8YGdSbjBy4IU71","title":"Additional References","pathname":"/cortex-cloud-api/aspm-cicd-and-application-security/appsec-papi-tables","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"ASPM, CICD and Application Security"}]},{"id":"XQ4GYCwl7UTPszvRHJup","title":"Asset Compliance overview","pathname":"/cortex-cloud-api/asset-compliance/asset-compliance-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Asset Compliance"}]},{"id":"06d4b76a79a6124cddfc96d20ce6b19fe2533a27","title":"Control Findings","pathname":"/cortex-cloud-api/asset-compliance/control-findings","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Asset Compliance"}]},{"id":"d2724317d5d81d03773281589824426719bd8acf","title":"Models","pathname":"/cortex-cloud-api/asset-compliance/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Asset Compliance"}]},{"id":"0wCB6wkZeaH3tzIPGaNi","title":"Additional References","pathname":"/cortex-cloud-api/asset-compliance/asset-compliance-papi-tables","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Asset Compliance"}]},{"id":"2XsM91LgvNV5ujuJjEFm","title":"Broker VM (On-Appliance) overview","pathname":"/cortex-cloud-api/broker-vm-on-appliance/broker-vm-appliance-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (On-Appliance)"}]},{"id":"2a73c45570863f800163e423cfcc39599f4ec289","title":"Auth (bootstrap)","pathname":"/cortex-cloud-api/broker-vm-on-appliance/auth-bootstrap","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (On-Appliance)"}]},{"id":"249e4a8e713bc9b3665e4eb7ad9796c96a6a1a0f","title":"Registration","pathname":"/cortex-cloud-api/broker-vm-on-appliance/registration","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (On-Appliance)"}]},{"id":"6047039dd053d22c7f0760c8035446c2f732fcbc","title":"Network configuration","pathname":"/cortex-cloud-api/broker-vm-on-appliance/network-configuration","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (On-Appliance)"}]},{"id":"a39b680b19e35a5a7b19b6ed7f1558c7edeb7d58","title":"Local log bundle","pathname":"/cortex-cloud-api/broker-vm-on-appliance/local-log-bundle","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (On-Appliance)"}]},{"id":"28b561b5c05e1d3fa36d54e76be2944944b96c04","title":"Models","pathname":"/cortex-cloud-api/broker-vm-on-appliance/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (On-Appliance)"}]},{"id":"n6EFht96gbU4odPmcmzz","title":"Broker VM (Tenant-Side) overview","pathname":"/cortex-cloud-api/broker-vm-tenant-side/broker-vm-tenant-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"552b2d1858484ebe7306b53ba5e044441b7c922c","title":"Brokers","pathname":"/cortex-cloud-api/broker-vm-tenant-side/brokers","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"5b0482c3b6ac7d76b78a8c66e9455fe1ded53321","title":"Actions","pathname":"/cortex-cloud-api/broker-vm-tenant-side/actions","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"04284709068c546dff66d8d7e0abcab18ff53a6a","title":"Install images","pathname":"/cortex-cloud-api/broker-vm-tenant-side/install-images","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"81d9e2255bf2d6ed2d2c4c0fb44e3807478c381f","title":"Applets","pathname":"/cortex-cloud-api/broker-vm-tenant-side/applets","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"58a18b279d936fcae8b74621d12a5579abd15731","title":"Remote log bundle","pathname":"/cortex-cloud-api/broker-vm-tenant-side/remote-log-bundle","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"e47967e7492e86c3959cca4d314afe476fed2533","title":"Models","pathname":"/cortex-cloud-api/broker-vm-tenant-side/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"8MYPZVHPFJEMc4ErM0HS","title":"Additional References","pathname":"/cortex-cloud-api/broker-vm-tenant-side/broker-papi-tables","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"qb139pB2RH4HRY9gYmYf","title":"Cases APIs overview","pathname":"/cortex-cloud-api/cases-apis/cases-apis-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cases APIs"}]},{"id":"c39f6b9a4efe4df1c9b16a492f08bceed9e9eb0b","title":"Cases","pathname":"/cortex-cloud-api/cases-apis/cases","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cases APIs"}]},{"id":"eee8564afd36433fe2febddf25371d49bb794cc8","title":"Models","pathname":"/cortex-cloud-api/cases-apis/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cases APIs"}]},{"id":"TjFRNqRZEqhIHU5gsQqS","title":"Additional References","pathname":"/cortex-cloud-api/cases-apis/cases-papi-tables","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cases APIs"}]},{"id":"59NnXmnGRdKieoLb91pC","title":"Cloud Infrastructure Entitlement Management (CIEM) overview","pathname":"/cortex-cloud-api/cloud-infrastructure-entitlement-management-ciem/cloud-infrastructure-entitlement-management-ciem-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"e8c1beb0a083ad557b100aff8d1e0693af80957d","title":"CIEM","pathname":"/cortex-cloud-api/cloud-infrastructure-entitlement-management-ciem/ciem","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"391661aed169a2727f181db71032d4bf69df15e8","title":"Models","pathname":"/cortex-cloud-api/cloud-infrastructure-entitlement-management-ciem/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"INbdCRwpIEgOBHDBnR7y","title":"Cloud Onboarding API overview","pathname":"/cortex-cloud-api/cloud-onboarding/cloud-onboarding-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Onboarding"}]},{"id":"31b252dc7aff48a4a13e6793a35a0aa0df13ab64","title":"Cloud Instance Management","pathname":"/cortex-cloud-api/cloud-onboarding/cloud-instance-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Onboarding"}]},{"id":"31176a637c862b20838b26b0d11e9d7ded9f270d","title":"Manual Onboarding","pathname":"/cortex-cloud-api/cloud-onboarding/manual-onboarding","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Onboarding"}]},{"id":"c62bf4f0f9633d024c81f6c531b1055e2ec2b802","title":"Cloud Account Management","pathname":"/cortex-cloud-api/cloud-onboarding/cloud-account-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Onboarding"}]},{"id":"02b797eee005107718679429aaafc273415cb338","title":"Outpost Management","pathname":"/cortex-cloud-api/cloud-onboarding/outpost-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Onboarding"}]},{"id":"4fb4bd6e386cbc96692e086b38e6fc9be5dc9c17","title":"General","pathname":"/cortex-cloud-api/cloud-onboarding/general","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Onboarding"}]},{"id":"6cbe8480cb954d67e78890147a88c23752d77a80","title":"Models","pathname":"/cortex-cloud-api/cloud-onboarding/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Onboarding"}]},{"id":"qXAY1T8kzSE7W4Lac4Eh","title":"Cloud Workload Protection Overview","pathname":"/cortex-cloud-api/cloud-workload-protection/cloud-workload-protection-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Workload Protection"}]},{"id":"521dc5d3f7db5647528081ef157a460dfc7d5d23","title":"Policies","pathname":"/cortex-cloud-api/cloud-workload-protection/policies","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Workload Protection"}]},{"id":"0939458e6b29808aadf170a1ec3e83379a73f5ea","title":"SBOM","pathname":"/cortex-cloud-api/cloud-workload-protection/sbom","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Workload Protection"}]},{"id":"853b93c39c760b3396751e7b3228f01a277df4b0","title":"Registry Onboarding","pathname":"/cortex-cloud-api/cloud-workload-protection/registry-onboarding","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Workload Protection"}]},{"id":"74f774b67ce67ec267505dbe99ccb6903dc3187e","title":"Models","pathname":"/cortex-cloud-api/cloud-workload-protection/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Workload Protection"}]},{"id":"FmworErKO5guOZxB0Rni","title":"Compliance Controls Overview","pathname":"/cortex-cloud-api/compliance-controls/compliance-controls-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"deeacfcc9af83f0707bc6406ad5066755848f2b6","title":"Pagination","pathname":"/cortex-cloud-api/compliance-controls/pagination","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"ad452850e3e28042cf087d64dc0e5dfdc9cc18f4","title":"Rule Association","pathname":"/cortex-cloud-api/compliance-controls/rule-association","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"db66fa66aaf16c60a4951851abf4f9950184c3af","title":"Assessment Profiles","pathname":"/cortex-cloud-api/compliance-controls/assessment-profiles","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"21f3a751a98ed9f786d79a4f9aae7770daa38dca","title":"Assessment Results","pathname":"/cortex-cloud-api/compliance-controls/assessment-results","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"c8e02ee90fc2d7752bca1b8ee989a6775091fbd2","title":"Categories","pathname":"/cortex-cloud-api/compliance-controls/categories","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"219b4250b3bb0c77974b553788b4115fd52ce0c8","title":"Compliance Assets","pathname":"/cortex-cloud-api/compliance-controls/compliance-assets","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"1d9d4fb67cdd2f4902f166cd40102e41a296a836","title":"Controls","pathname":"/cortex-cloud-api/compliance-controls/controls","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"04e4efecfd7f55532926c4f7913b87c6f8014d7d","title":"Reports","pathname":"/cortex-cloud-api/compliance-controls/reports","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"48259a0afe584649d00d8cd60492638a9a986f8e","title":"Results","pathname":"/cortex-cloud-api/compliance-controls/results","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"2614a0bda7d409a03aec2c08903eef7ef07d7fb6","title":"Rules","pathname":"/cortex-cloud-api/compliance-controls/rules","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"541be2a7e041077a517dffe58e7a1f5c88bd2f09","title":"Standards","pathname":"/cortex-cloud-api/compliance-controls/standards","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"a897453a39c5514d53637c12ba8a736cbfc803af","title":"Models","pathname":"/cortex-cloud-api/compliance-controls/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Compliance Controls"}]},{"id":"56yPncT6U9NcH7Bv2GZq","title":"Cortex Cloud Alert Notification Rules overview","pathname":"/cortex-cloud-api/cortex-cloud-alert-notification-rules/cortex-cloud-alert-notification-rules-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud Alert Notification Rules"}]},{"id":"edc324c71353c6e9a1b51ebf4ba03fd270457108","title":"Alert Notification Rules","pathname":"/cortex-cloud-api/cortex-cloud-alert-notification-rules/alert-notification-rules","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud Alert Notification Rules"}]},{"id":"a92ee29a3a22cb6fa8929e83a57dfad179aa871c","title":"Models","pathname":"/cortex-cloud-api/cortex-cloud-alert-notification-rules/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud Alert Notification Rules"}]},{"id":"VjoEl3Bpvy6QpSSqmYns","title":"Cortex Cloud External Application Management overview","pathname":"/cortex-cloud-api/cortex-cloud-external-application-management/cortex-cloud-external-application-management-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud External Application Management"}]},{"id":"294a4f2002f9a842c5bce7b54ef0716e6db85780","title":"External Applications","pathname":"/cortex-cloud-api/cortex-cloud-external-application-management/external-applications","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud External Application Management"}]},{"id":"588dd4921b4eb590d966e2be9785cea218384dd2","title":"Models","pathname":"/cortex-cloud-api/cortex-cloud-external-application-management/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud External Application Management"}]},{"id":"cede7LzsPEMOa4U1IT4g","title":"Cortex Cloud Logging and Collection Service Management overview","pathname":"/cortex-cloud-api/cortex-cloud-logging-and-collection-service-management/cortex-cloud-logging-and-collection-service-management-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud Logging and Collection Service Management"}]},{"id":"b6140c1d6408492b5703f9421952bf68094e11a3","title":"CLCS Management","pathname":"/cortex-cloud-api/cortex-cloud-logging-and-collection-service-management/clcs-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud Logging and Collection Service Management"}]},{"id":"6903e39ee96604ad431ed481e7145cd611fab963","title":"Models","pathname":"/cortex-cloud-api/cortex-cloud-logging-and-collection-service-management/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Cloud Logging and Collection Service Management"}]},{"id":"xy0qhUU7868ASHEUZJCT","title":"Cortex Platform IAM Overview","pathname":"/cortex-cloud-api/cortex-platform-identity-and-access-management-iam/iam-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform Identity and Access Management (IAM)"}]},{"id":"ad2159a51595f6357e3ab63ab7908ccde3378739","title":"API Keys","pathname":"/cortex-cloud-api/cortex-platform-identity-and-access-management-iam/api-keys","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform Identity and Access Management (IAM)"}]},{"id":"3360bb35aac7548f57be31a84584c164afea2069","title":"Roles","pathname":"/cortex-cloud-api/cortex-platform-identity-and-access-management-iam/roles","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform Identity and Access Management (IAM)"}]},{"id":"2d144ce0cc6d63b646b00cf5532c2c107380e3d2","title":"Scopes","pathname":"/cortex-cloud-api/cortex-platform-identity-and-access-management-iam/scopes","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform Identity and Access Management (IAM)"}]},{"id":"544e5bda171645a50e871cd359715b98e2ecdfca","title":"User","pathname":"/cortex-cloud-api/cortex-platform-identity-and-access-management-iam/user","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform Identity and Access Management (IAM)"}]},{"id":"c1d349e413cb806db234f59efd95ccb1c3b0cf43","title":"User Groups","pathname":"/cortex-cloud-api/cortex-platform-identity-and-access-management-iam/user-groups","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform Identity and Access Management (IAM)"}]},{"id":"26401e59b42716d7bfa5f519a6fc791d287a56c1","title":"Models","pathname":"/cortex-cloud-api/cortex-platform-identity-and-access-management-iam/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cortex Platform Identity and Access Management (IAM)"}]},{"id":"wNLmScgAmu0fqfxArGEw","title":"Restore Distributions overview","pathname":"/cortex-cloud-api/restore-distributions/restore-distributions-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Restore Distributions"}]},{"id":"a2f222b909cdfa171b378cefb193494308e223ec","title":"Restore Distributions","pathname":"/cortex-cloud-api/restore-distributions/restore-distributions","siteSpaceId":"sitesp_YT3js","icon":"arrow-counterclockwise","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Restore Distributions"}]},{"id":"9326993512824d38f475e000e0a95838e5317859","title":"Models","pathname":"/cortex-cloud-api/restore-distributions/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Restore Distributions"}]},{"id":"74k8hzltv3ZjUsuMrLpf","title":"Data Security Posture Management overview","pathname":"/cortex-cloud-api/data-security-posture-management/data-security-posture-management-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Data Security Posture Management"}]},{"id":"04bfda5b4ae19cf8169d6064ea5a01c2c526c733","title":"Inventory","pathname":"/cortex-cloud-api/data-security-posture-management/inventory","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Data Security Posture Management"}]},{"id":"800b04f4107e3e9443351ccb1db7eea5524aeacb","title":"Models","pathname":"/cortex-cloud-api/data-security-posture-management/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Data Security Posture Management"}]},{"id":"7q01gJmgSrxPMTNvJwbM","title":"Detection Rules Management overview","pathname":"/cortex-cloud-api/detection-rules-management/detection-rules-management-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Detection Rules Management"}]},{"id":"2e0eb8bc7b856a88ece3f3c39513201567b40de4","title":"Detection Rules","pathname":"/cortex-cloud-api/detection-rules-management/detection-rules","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Detection Rules Management"}]},{"id":"ec1af6c103e81c78c79f9818aa1f36ab85296bc4","title":"Models","pathname":"/cortex-cloud-api/detection-rules-management/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Detection Rules Management"}]},{"id":"tvUsyUpxBbGj4e1Wrm9o","title":"Disable Injection and Prevention Rules overview","pathname":"/cortex-cloud-api/disable-injection-and-prevention-rules/disable-injection-and-prevention-rules-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"cf234df682a28237d2da8d2f0c478dc6b4fb97e5","title":"Disable Injection and Prevention Rules Public API","pathname":"/cortex-cloud-api/disable-injection-and-prevention-rules/disable-injection-and-prevention-rules-public-api","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"2bed006e68a3262e73153ce671c951f84baaa912","title":"Models","pathname":"/cortex-cloud-api/disable-injection-and-prevention-rules/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"ZJGSKgSbk25RZuSoY3kf","title":"Disable Prevention Rule overview","pathname":"/cortex-cloud-api/disable-prevention-rule/disable-prevention-rule-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Disable Prevention Rule"}]},{"id":"9dfe0adb4469b1db718dbc6fcb9f890df428e000","title":"Disable Prevention Rule Public APIs","pathname":"/cortex-cloud-api/disable-prevention-rule/disable-prevention-rule-public-apis","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Disable Prevention Rule"}]},{"id":"1c12dcdff15229ab0a0aca28032bac7b14a290dc","title":"Models","pathname":"/cortex-cloud-api/disable-prevention-rule/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Disable Prevention Rule"}]},{"id":"mGLufArx2jH1bm2mazut","title":"Forensics overview","pathname":"/cortex-cloud-api/forensics/forensics-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Forensics"}]},{"id":"387de289844b87a937f712ff0f413300e5f0ed64","title":"Forensics","pathname":"/cortex-cloud-api/forensics/forensics","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Forensics"}]},{"id":"87bfbe8907ba8bf4d28b51a43b809b72107fcbbb","title":"Models","pathname":"/cortex-cloud-api/forensics/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Forensics"}]},{"id":"G9IHnuytekoMZ3dPVYSw","title":"Issues APIs overview","pathname":"/cortex-cloud-api/issues-apis/issues-apis-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Issues APIs"}]},{"id":"e4e036bd00afba307bac9ee3d8c9fb48a1cd01df","title":"Issues","pathname":"/cortex-cloud-api/issues-apis/issues","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Issues APIs"}]},{"id":"6e988473207e0942b979fdec3be40e982d5a31e0","title":"Models","pathname":"/cortex-cloud-api/issues-apis/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Issues APIs"}]},{"id":"nHJ8ZXA3Pnrmtnf0wlyh","title":"Additional References","pathname":"/cortex-cloud-api/issues-apis/issues-papi-tables","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Issues APIs"}]},{"id":"MSO4ylAHaS5LmuWiAItl","title":"Managed Services Overview","pathname":"/cortex-cloud-api/managed-services/managed-services-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Managed Services"}]},{"id":"1eb41cf44ce4c14435f6e0e4c4cb224a8022957d","title":"Assignment","pathname":"/cortex-cloud-api/managed-services/assignment","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Managed Services"}]},{"id":"d2e5f75966b22f7da6aee131d513319075ef0746","title":"Comments","pathname":"/cortex-cloud-api/managed-services/comments","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Managed Services"}]},{"id":"ad3f0adaa78ba762eac225d2f65e4fcbf987a055","title":"Reports","pathname":"/cortex-cloud-api/managed-services/reports","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Managed Services"}]},{"id":"3612ae7fff19a5105fd13c9845bcd0068fec568d","title":"Status","pathname":"/cortex-cloud-api/managed-services/status","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Managed Services"}]},{"id":"f37e6f50e80ec145da6b5c35aa6537d633255c23","title":"Models","pathname":"/cortex-cloud-api/managed-services/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Managed Services"}]},{"id":"YYNBGElcTfKnOVk7yNMS","title":"Netscan overview","pathname":"/cortex-cloud-api/netscan/netscan-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Netscan"}]},{"id":"24967be30eaf9063cb61c2fc6f2dad50472aa480","title":"Vulnerability Network Scan Management","pathname":"/cortex-cloud-api/netscan/vulnerability-network-scan-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Netscan"}]},{"id":"f8a65e12039dfa4b6a6871390862e4deaa05362b","title":"Models","pathname":"/cortex-cloud-api/netscan/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Netscan"}]},{"id":"EMa6Tv2pfrYswopJfBTo","title":"Policies overview","pathname":"/cortex-cloud-api/policies/policies-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Policies"}]},{"id":"52b0a2d066e99e2d4d5742c6608aead9ce7b5f32","title":"Cloud Security Policies","pathname":"/cortex-cloud-api/policies/cloud-security-policies","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Policies"}]},{"id":"f8c01276dedfdbfa795ba789ac4e9a0791a30d67","title":"Models","pathname":"/cortex-cloud-api/policies/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Policies"}]},{"id":"yEbrdFnU5WEZAPFs3vM1","title":"Unified Rules overview","pathname":"/cortex-cloud-api/unified-rules/unified-rules-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Unified Rules"}]},{"id":"21fb714e6d8351f7273c4621f16f84728f791c70","title":"Unified Rules","pathname":"/cortex-cloud-api/unified-rules/unified-rules","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Unified Rules"}]},{"id":"25630cfd7f0872b88d5896641bb84feee08fe56a","title":"Models","pathname":"/cortex-cloud-api/unified-rules/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Unified Rules"}]},{"id":"dZyKeWsWHdl9tS0CTAfT","title":"Vulnerability Intelligence Overview","pathname":"/cortex-cloud-api/vulnerability-intelligence/vulnerability-intelligence-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Intelligence"}]},{"id":"8789c87a11d7b61698683af9fac369691e995c41","title":"Affected Software","pathname":"/cortex-cloud-api/vulnerability-intelligence/affected-software","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Intelligence"}]},{"id":"80a5c69a2c853d80557157292ca04363690c7ace","title":"Vulnerabilities","pathname":"/cortex-cloud-api/vulnerability-intelligence/vulnerabilities","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Intelligence"}]},{"id":"9d114891bf5defd7a6fd35343c39099c3d29720d","title":"Models","pathname":"/cortex-cloud-api/vulnerability-intelligence/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Intelligence"}]},{"id":"g207IlbwoyPwm4xvCC4H","title":"Additional References","pathname":"/cortex-cloud-api/vulnerability-intelligence/vulnerability-intelligence-papi-tables","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Intelligence"}]},{"id":"7PfrfISLnPSjm3XRIMX8","title":"Vulnerability Management Overview","pathname":"/cortex-cloud-api/vulnerability-management/vulnerability-management-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Management"}]},{"id":"0d569724232c4e0691194a0e39e8f9e7c4de910d","title":"Vulnerability Management","pathname":"/cortex-cloud-api/vulnerability-management/vulnerability-management","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Management"}]},{"id":"a6e763bdc149b106578f9e02fd2c529ec9e96fcd","title":"Vulnerability Findings","pathname":"/cortex-cloud-api/vulnerability-management/vulnerability-findings","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Management"}]},{"id":"3940ca97b9ab327c9405fc280edd1f5c33178f8c","title":"Vulnerability Findings Snapshot","pathname":"/cortex-cloud-api/vulnerability-management/vulnerability-findings-snapshot","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Management"}]},{"id":"f81838b3edf6524a9bb53c0e3ece79abc839730c","title":"Bring Your Own Scanner","pathname":"/cortex-cloud-api/vulnerability-management/bring-your-own-scanner","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Management"}]},{"id":"1aa0fc4d2c8704c13b25d80f7b55285530798aba","title":"Models","pathname":"/cortex-cloud-api/vulnerability-management/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Vulnerability Management"}]},{"id":"80d64d93384d55f3ab16d6cfdc2e3a83bebc4b53","title":"Forensics","pathname":"/cortex-cloud-api/forensics-1/forensics","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Forensics"}]},{"id":"310ce4f19f1ba17dd55ee47abb8fdadb8cc3c56a","title":"Models","pathname":"/cortex-cloud-api/forensics-1/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Forensics"}]},{"id":"97IKUJ0UqasR1CyukSHN","title":"Cloud Consumption Dashboard API overview","pathname":"/cortex-cloud-api/cloud-consumption-dashboard/cloud-consumption-overview","siteSpaceId":"sitesp_YT3js","description":"","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Consumption Dashboard"}]},{"id":"80a9c2e0fe4f1de38e68afbe99d9577c47d70197","title":"Cloud Consumption Dashboard","pathname":"/cortex-cloud-api/cloud-consumption-dashboard/cloud-consumption-dashboard","siteSpaceId":"sitesp_YT3js","icon":"chart-bar","description":"Retrieve workload consumption data per asset type, over time, and in a paginated details grid.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Consumption Dashboard"}]},{"id":"7a0991d9242addaf8940f2076143696eff1ac257","title":"Licensing","pathname":"/cortex-cloud-api/cloud-consumption-dashboard/licensing","siteSpaceId":"sitesp_YT3js","icon":"badge-check","description":"Retrieve tenant license entitlements and add-on information.","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Consumption Dashboard"}]},{"id":"c38c21f4ec17014ddeca8b8da152d6432c02f9cf","title":"Models","pathname":"/cortex-cloud-api/cloud-consumption-dashboard/models","siteSpaceId":"sitesp_YT3js","breadcrumbs":[{"label":"Cortex Cloud","icon":"cloud"},{"label":"Cortex Cloud APIs","icon":"cloud"},{"label":"Cloud Consumption Dashboard"}]},{"id":"klpJekFF64PhCYW0EJTg","title":"Get started with Cortex XDR 5.x APIs","pathname":"/xdr-5-api","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"}]},{"id":"QQAU1Gil9kjLRPkuIXkG","title":"What's new in this release","pathname":"/xdr-5-api/api-release-notes","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"}]},{"id":"fTWapH2G3obQ8yHuSWfc","title":"Create a new API key","pathname":"/xdr-5-api/create-a-new-api-key","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"}]},{"id":"ssiIOKbQ7GmWvvZQSY0r","title":"Get your Cortex XDR API key ID","pathname":"/xdr-5-api/get-your-cortex-api-key-id","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"}]},{"id":"JGFuev2sh7lXRswcDXP0","title":"Get your FQDN","pathname":"/xdr-5-api/get-your-fqdn","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"}]},{"id":"zw82zVetIT8YmEoTvGNe","title":"Make your first API call","pathname":"/xdr-5-api/make-your-first-api-call","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"}]},{"id":"uxpSeClw5ImIDKvxyWZ6","title":"Understand Cortex XDR licenses","pathname":"/xdr-5-api/understand-cortex-xdr-licenses","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"}]},{"id":"gYnGrFg7C72w7N4NldJW","title":"Cortex XDR Platform Overview","pathname":"/xdr-5-api/cortex-platform/cortex-xdr-platform-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"daf02b2b032901e16b050b19d68b72fd38cf95cf","title":"API Keys","pathname":"/xdr-5-api/cortex-platform/api-keys","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"89c80365b804b2d8d813a4d1eac09fe9920789d2","title":"Asset Groups","pathname":"/xdr-5-api/cortex-platform/asset-groups","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"99de660a7d05ae670329f4e922570a6a595c1eb7","title":"Asset Inventory","pathname":"/xdr-5-api/cortex-platform/asset-inventory","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"b9c8acc3bfc0a3dc1db04f702eda72242133e27a","title":"Attack Surface Management","pathname":"/xdr-5-api/cortex-platform/attack-surface-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"eff0e172e7fd397f2036a05b7f151b3120ac269b","title":"Audit Log","pathname":"/xdr-5-api/cortex-platform/audit-log","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"881d943899d31678312761d5dd988f4a3bbf5033","title":"Authentication Settings","pathname":"/xdr-5-api/cortex-platform/authentication-settings","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"02d62c472b78b368c05e251bdd81c7c9c53a15f1","title":"BIOCs","pathname":"/xdr-5-api/cortex-platform/biocs","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"34db62c6ec02fd4ed4b705162e273a96f29e7d2c","title":"Correlation Rules","pathname":"/xdr-5-api/cortex-platform/correlation-rules","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"0b4950f33d7313f9936acc3f3779cbd02abc1697","title":"Cortex CLI","pathname":"/xdr-5-api/cortex-platform/cortex-cli","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"4987f018c3a8bcacf1236a37c4dd8cf085cea4ab","title":"Dashboards","pathname":"/xdr-5-api/cortex-platform/dashboards","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"50806634d2d5153d0e0d4c91ddf23a9f43a20f82","title":"Dataset Management","pathname":"/xdr-5-api/cortex-platform/dataset-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"2f80feb9d1c4bb2c1576ea37668f764d6b98b1c6","title":"Endpoint Management","pathname":"/xdr-5-api/cortex-platform/endpoint-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"2ec678876770545e8b48c01b21f3d5b6a29d13a6","title":"Indicator Rules","pathname":"/xdr-5-api/cortex-platform/indicator-rules","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"3bb72f5e640e8ee832473679934eca3306f20eaa","title":"IOCs","pathname":"/xdr-5-api/cortex-platform/iocs","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"3de6a6d78e575e7b16015a8b15e6bf7e08ed77da","title":"Lookup Datasets","pathname":"/xdr-5-api/cortex-platform/lookup-datasets","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"f790fa8b6fb9d15fe29908ff652b88f3ae0b576f","title":"Playbooks","pathname":"/xdr-5-api/cortex-platform/playbooks","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"2c3be7d42d0bb5c3726ba7769c03330f2e5fadc0","title":"Query Library","pathname":"/xdr-5-api/cortex-platform/query-library","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"56d68e2e778f7fbf0862eb316c9721591cd1b714","title":"Response Action","pathname":"/xdr-5-api/cortex-platform/response-action","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"84c7f55868a4c5bc94dced5e7ffa5831d470e2c1","title":"Scheduled Queries","pathname":"/xdr-5-api/cortex-platform/scheduled-queries","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"d22790b78ca7b84a17a1e9ee9e349ec12d2811be","title":"Script Execution","pathname":"/xdr-5-api/cortex-platform/script-execution","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"3d2d617f3f2ba2e3a115399ed1f4f606e20c286f","title":"Scripts","pathname":"/xdr-5-api/cortex-platform/scripts","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"4d45db5a9ab682d1be7ac87f6771fa72da122a91","title":"Syslog Servers","pathname":"/xdr-5-api/cortex-platform/syslog-servers","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"01a5e47200aff6ebb6338f314ee14c19a6e94489","title":"System Management","pathname":"/xdr-5-api/cortex-platform/system-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"b1327454a88941b1902c45ecc686fc6b36fbc854","title":"Widgets","pathname":"/xdr-5-api/cortex-platform/widgets","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"8c546347f6d221f909c4bdc475049d7bbb53d512","title":"XQL Query","pathname":"/xdr-5-api/cortex-platform/xql-query","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"0ffae08d761f9c1dca9b2c7888c69d1abd7a3e21","title":"Models","pathname":"/xdr-5-api/cortex-platform/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"f6VGXmuPz3GWgs63JbRs","title":"Run XQL query APIs","pathname":"/xdr-5-api/cortex-platform/run-xql-query-apis","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"Sa222SXsvXAIGyMd2NdF","title":"Additional References","pathname":"/xdr-5-api/cortex-platform/cortex-platform-papi-tables","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cortex Platform"}]},{"id":"63bDa0xu9eYsO5qosaB8","title":"Agent Configuration Settings overview","pathname":"/xdr-5-api/agent-configuration-settings/agent-configuration-settings-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Agent Configuration Settings"}]},{"id":"e18765b27517b79bfd2e10fc659a258ecc865d57","title":"Agent Configurations","pathname":"/xdr-5-api/agent-configuration-settings/agent-configurations","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Agent Configuration Settings"}]},{"id":"9ec31e867b1cc03263f2b958e773999d0bc912d3","title":"Models","pathname":"/xdr-5-api/agent-configuration-settings/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Agent Configuration Settings"}]},{"id":"Or1mPpJ0yErXhiH5WFA5","title":"Alert Notification Rules overview","pathname":"/xdr-5-api/alert-notification-rules/alert-notification-rules-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Alert Notification Rules"}]},{"id":"1aef54764cc94a6520e45c30cecf2fdb56260baf","title":"Alert Notification Rules","pathname":"/xdr-5-api/alert-notification-rules/alert-notification-rules","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Alert Notification Rules"}]},{"id":"98c47dbaa61d0e557cfa3e5ecef5b34610ee9976","title":"Models","pathname":"/xdr-5-api/alert-notification-rules/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Alert Notification Rules"}]},{"id":"pv4r94WuXK9fmTIA3n56","title":"ASPM, CI/CD, and Application Security Overview","pathname":"/xdr-5-api/aspm-cicd-and-application-security/aspm-cicd-and-application-security-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"O8fw75xTvIjbNLd8KHCs","title":"Additional References","pathname":"/xdr-5-api/aspm-cicd-and-application-security/appsec-papi-tables","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"328e3d4d02d9caa220bb2d1ac046cc652242711d","title":"Billing","pathname":"/xdr-5-api/aspm-cicd-and-application-security/billing","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"5c0866186432ac6f590fd9d9fd7538ac9d73ec8c","title":"Applications","pathname":"/xdr-5-api/aspm-cicd-and-application-security/applications","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"45f1e6e3e9afe399f735e13684da7e81fcc4e617","title":"Criteria","pathname":"/xdr-5-api/aspm-cicd-and-application-security/criteria","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"8125b326bf5ee714258dae8a898e0ce7b8821754","title":"Data Sources","pathname":"/xdr-5-api/aspm-cicd-and-application-security/data-sources","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"54afab44024c9297916daddac39d09fd04994e8f","title":"Policies","pathname":"/xdr-5-api/aspm-cicd-and-application-security/policies","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"c3314571bfb35fac01c08d126033d98b57a2fd32","title":"Package Explorer","pathname":"/xdr-5-api/aspm-cicd-and-application-security/package-explorer","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"3d211098b137242dcd3a6171717a041bc5017c3e","title":"Repositories","pathname":"/xdr-5-api/aspm-cicd-and-application-security/repositories","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"fedb130f1516d81f792d6eb06a958f3cd3c59ef8","title":"Remediations","pathname":"/xdr-5-api/aspm-cicd-and-application-security/remediations","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"eb033b1cdbdea6e2b5eaf2e8290b893e4260ad9b","title":"Rules","pathname":"/xdr-5-api/aspm-cicd-and-application-security/rules","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"25002c6fee79ac0188d90a30c0bba87aef9bf457","title":"SBOM Management","pathname":"/xdr-5-api/aspm-cicd-and-application-security/sbom-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"f60a6c8ad73a865bb922acdacd1ba9bd57dfc513","title":"Scan Management","pathname":"/xdr-5-api/aspm-cicd-and-application-security/scan-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"70b65964e01432d246271e3a59448ceba3f69181","title":"Cloud Coverage","pathname":"/xdr-5-api/aspm-cicd-and-application-security/cloud-coverage","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"18e75e94543b33cee91a320b81276891a8b8f575","title":"Models","pathname":"/xdr-5-api/aspm-cicd-and-application-security/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"ASPM, CICD and Application Security"}]},{"id":"wvZys9cU4uR9kkBz3CWD","title":"Asset Compliance overview","pathname":"/xdr-5-api/asset-compliance/asset-compliance-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Asset Compliance"}]},{"id":"c1403bed4c35594aba229f5563849de6abee7a33","title":"Control Findings","pathname":"/xdr-5-api/asset-compliance/control-findings","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Asset Compliance"}]},{"id":"7f835b8009afa4cc5b4d04419ff2b1ba98e69367","title":"Models","pathname":"/xdr-5-api/asset-compliance/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Asset Compliance"}]},{"id":"63tcmhsIb1xzNiob5CDT","title":"Additional References","pathname":"/xdr-5-api/asset-compliance/asset-compliance-papi-tables","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Asset Compliance"}]},{"id":"Jf5zLLkNMAaOzJR4MPyu","title":"Broker VM (On-Appliance) overview","pathname":"/xdr-5-api/broker-vm-on-appliance/broker-vm-appliance-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (On-Appliance)"}]},{"id":"eb572c503b833fb6efde7a4bcced6406fdbbde9c","title":"Auth (bootstrap)","pathname":"/xdr-5-api/broker-vm-on-appliance/auth-bootstrap","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (On-Appliance)"}]},{"id":"fe0994a275d433cd1ee266814ab8200de397dfb5","title":"Registration","pathname":"/xdr-5-api/broker-vm-on-appliance/registration","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (On-Appliance)"}]},{"id":"298528a402134145ccccc3d14ce44a9998d7bdce","title":"Network configuration","pathname":"/xdr-5-api/broker-vm-on-appliance/network-configuration","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (On-Appliance)"}]},{"id":"11b4e0d3df97e5ed04dc0b06333efd3c42b8a03e","title":"Local log bundle","pathname":"/xdr-5-api/broker-vm-on-appliance/local-log-bundle","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (On-Appliance)"}]},{"id":"c5a7a11933227300fdfe646ece0d2e05c8bebbb1","title":"Models","pathname":"/xdr-5-api/broker-vm-on-appliance/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (On-Appliance)"}]},{"id":"izLi90Ii0djLGSTZJAZZ","title":"Broker VM (Tenant-Side) overview","pathname":"/xdr-5-api/broker-vm-tenant-side/broker-vm-tenant-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"1832834df48bf6734e575404f486fbb092961dcb","title":"Brokers","pathname":"/xdr-5-api/broker-vm-tenant-side/brokers","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"aa9ed4087af3eaee9e1389e6e2882ead77478f59","title":"Actions","pathname":"/xdr-5-api/broker-vm-tenant-side/actions","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"2ead89ea6878c5e2ebd55238361a890792e4dc17","title":"Install images","pathname":"/xdr-5-api/broker-vm-tenant-side/install-images","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"c3c83242a1a3239570ea54918d6c62a481d2a7e8","title":"Applets","pathname":"/xdr-5-api/broker-vm-tenant-side/applets","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"5655afc546401b160e7796247ae90a84ef859f26","title":"Remote log bundle","pathname":"/xdr-5-api/broker-vm-tenant-side/remote-log-bundle","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"e3074f6664120c03e5cf9b8faaad30cdd848b706","title":"Models","pathname":"/xdr-5-api/broker-vm-tenant-side/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"im4x8JzcGukHOmP8PRKU","title":"Additional References","pathname":"/xdr-5-api/broker-vm-tenant-side/broker-papi-tables","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"rnaq2rZxJo2Va4V3ASEC","title":"Cases APIs overview","pathname":"/xdr-5-api/cases-apis/cases-apis-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cases APIs"}]},{"id":"c9d4ccc3e1eb0ff47142b5ea4b873a851f235f31","title":"Cases","pathname":"/xdr-5-api/cases-apis/cases","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cases APIs"}]},{"id":"398034ce35f0581cab1cd390c842bfcca1cb068c","title":"Models","pathname":"/xdr-5-api/cases-apis/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cases APIs"}]},{"id":"YqikQWjpKGgXYSwg56b7","title":"Additional References","pathname":"/xdr-5-api/cases-apis/cases-papi-tables","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cases APIs"}]},{"id":"7L2TOQtJ3l4R1caGdGAz","title":"Cloud Infrastructure Entitlement Management (CIEM) overview","pathname":"/xdr-5-api/cloud-infrastructure-entitlement-management-ciem/cloud-infrastructure-entitlement-management-ciem-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"368944357063d75489d5996bd0f0e817319235a3","title":"CIEM","pathname":"/xdr-5-api/cloud-infrastructure-entitlement-management-ciem/ciem","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"5b82d5168a0ebe2ebb0b8abd1c125d1cfddc7cde","title":"Models","pathname":"/xdr-5-api/cloud-infrastructure-entitlement-management-ciem/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"raxPGFjN36oCFrT8wLQe","title":"Cloud Onboarding API overview","pathname":"/xdr-5-api/cloud-onboarding/cloud-onboarding-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Onboarding"}]},{"id":"50448423ae7cacde336372254f1b77d78e344fb6","title":"Cloud Instance Management","pathname":"/xdr-5-api/cloud-onboarding/cloud-instance-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Onboarding"}]},{"id":"f34632800f49e44b3c6ca39841c183883770dc4c","title":"Manual Onboarding","pathname":"/xdr-5-api/cloud-onboarding/manual-onboarding","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Onboarding"}]},{"id":"af7838f1a7298b5895d8f3d4cb2a42d17edc9371","title":"Cloud Account Management","pathname":"/xdr-5-api/cloud-onboarding/cloud-account-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Onboarding"}]},{"id":"ddfffd5c52049f24fd1f11f046ecd2fdb1f7e22e","title":"Outpost Management","pathname":"/xdr-5-api/cloud-onboarding/outpost-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Onboarding"}]},{"id":"ca65dd23fea3fad1b88dd7fb531af01de2912228","title":"General","pathname":"/xdr-5-api/cloud-onboarding/general","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Onboarding"}]},{"id":"52d1dbe587b08e1a30a33590b4bddf32d123d8eb","title":"Models","pathname":"/xdr-5-api/cloud-onboarding/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Onboarding"}]},{"id":"cAozeAxIrFqQt5Y0oONp","title":"Cloud Workload Protection Overview","pathname":"/xdr-5-api/cloud-workload-protection/cloud-workload-protection-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Workload Protection"}]},{"id":"d8a6dfb2842491a74fb8227c001fd3fce19a40e4","title":"Policies","pathname":"/xdr-5-api/cloud-workload-protection/policies","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Workload Protection"}]},{"id":"802779c6651881ba11eefcd580da75ad69b741b1","title":"SBOM","pathname":"/xdr-5-api/cloud-workload-protection/sbom","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Workload Protection"}]},{"id":"52bcb68996ca12692cf96be7ae918ad88c0ebc34","title":"Registry Onboarding","pathname":"/xdr-5-api/cloud-workload-protection/registry-onboarding","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Workload Protection"}]},{"id":"95a14e50b88e35a2c1432cc1d2974a5e4c7c7322","title":"Models","pathname":"/xdr-5-api/cloud-workload-protection/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Cloud Workload Protection"}]},{"id":"3iPAEDFMB4N3Rbur7F1F","title":"Compliance Controls Overview","pathname":"/xdr-5-api/compliance-controls/compliance-controls-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"71d2dfa4cd830176016df64efa2d18ea360f623b","title":"Assessment Profiles","pathname":"/xdr-5-api/compliance-controls/assessment-profiles","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"c3b0ebc283a199fbaa0bb8ebaf732fe1b565ab8a","title":"Assessment Results","pathname":"/xdr-5-api/compliance-controls/assessment-results","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"d6e4f3da4b923a4b24bdcfc5011f691d5b43dfa9","title":"Categories","pathname":"/xdr-5-api/compliance-controls/categories","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"dc23476ba7a201d2b6abb58c08c429ea4e9813c1","title":"Compliance Assets","pathname":"/xdr-5-api/compliance-controls/compliance-assets","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"8ec3caa0f59461c8a71273944f1d8293731c64fd","title":"Controls","pathname":"/xdr-5-api/compliance-controls/controls","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"284ebc879747e21855042830b91818f08dbc6b05","title":"Reports","pathname":"/xdr-5-api/compliance-controls/reports","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"f5fb7ef6faac3be855d37ad0880d8c0887f4e0b9","title":"Results","pathname":"/xdr-5-api/compliance-controls/results","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"3d3cc01f9a48b21c140f2b95b8a00093d231ed3d","title":"Rules","pathname":"/xdr-5-api/compliance-controls/rules","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"397f1f2bd1d0cdacd0007dec7484282e387f7b51","title":"Standards","pathname":"/xdr-5-api/compliance-controls/standards","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"f1e6aaa4391e707e36c62f1eb2eb3452f269f37e","title":"Models","pathname":"/xdr-5-api/compliance-controls/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Compliance Controls"}]},{"id":"d4zLQ1zEHsdu5ocqaCXD","title":"Data Security Posture Management overview","pathname":"/xdr-5-api/data-security-posture-management/data-security-posture-management-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Data Security Posture Management"}]},{"id":"948f187fe5e5d47f0c8373a36a67ee23845240d4","title":"Inventory","pathname":"/xdr-5-api/data-security-posture-management/inventory","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Data Security Posture Management"}]},{"id":"086e2afdef52a2d331dbedb3868d36135a85648d","title":"Models","pathname":"/xdr-5-api/data-security-posture-management/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Data Security Posture Management"}]},{"id":"7PBeRWcNh3Tr3ZkuWNBl","title":"Detection Rules Management overview","pathname":"/xdr-5-api/detection-rules-management/detection-rules-management-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Detection Rules Management"}]},{"id":"999725f9db29c7c6384ae24098aaaa872552ea76","title":"Detection Rules","pathname":"/xdr-5-api/detection-rules-management/detection-rules","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Detection Rules Management"}]},{"id":"4560ec686fe990f23d4039ab3e65152007f51857","title":"Models","pathname":"/xdr-5-api/detection-rules-management/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Detection Rules Management"}]},{"id":"p0o0ZGShknnDNIXEenkc","title":"Disable Injection and Prevention Rules overview","pathname":"/xdr-5-api/disable-injection-and-prevention-rules/disable-injection-and-prevention-rules-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"6f6af51cf2e5edd5bb1d150169f60b372657626b","title":"Disable Injection and Prevention Rules Public API","pathname":"/xdr-5-api/disable-injection-and-prevention-rules/disable-injection-and-prevention-rules-public-api","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"61bc6399df757724e003aad0c3617273886331c5","title":"Models","pathname":"/xdr-5-api/disable-injection-and-prevention-rules/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"aLlWK5beHcbC2YRyvMDg","title":"Disable Prevention Rule overview","pathname":"/xdr-5-api/disable-prevention-rule/disable-prevention-rule-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Disable Prevention Rule"}]},{"id":"faeaaf596dec7fda67e420bcb4b5e0bdce00bd0b","title":"Disable Prevention Rule Public APIs","pathname":"/xdr-5-api/disable-prevention-rule/disable-prevention-rule-public-apis","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Disable Prevention Rule"}]},{"id":"47042d7124b732eb5fcb4f4a62047a8a066ecf40","title":"Models","pathname":"/xdr-5-api/disable-prevention-rule/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Disable Prevention Rule"}]},{"id":"uk9BGy0RXLqYBZ4ckkS8","title":"External Application Management overview","pathname":"/xdr-5-api/external-application-management/external-application-management-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"External Application Management"}]},{"id":"98bf37212ba1a758c8241aa11ece0ea6048f096b","title":"External Applications","pathname":"/xdr-5-api/external-application-management/external-applications","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"External Application Management"}]},{"id":"c9d68c2216d5d8a4418c9ca48c8d999020ebf42a","title":"Models","pathname":"/xdr-5-api/external-application-management/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"External Application Management"}]},{"id":"ihWGcsdox55DoWQ90qhl","title":"Forensics overview","pathname":"/xdr-5-api/forensics/forensics-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Forensics"}]},{"id":"75d87a17dd786b399eb98c7ee174da2585f7e5aa","title":"Forensics","pathname":"/xdr-5-api/forensics/forensics","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Forensics"}]},{"id":"efe6ad7e205922dd5b2f77bbf14b9f872b6aabbf","title":"Models","pathname":"/xdr-5-api/forensics/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Forensics"}]},{"id":"177eDOgMjKbxG8q6Ijo8","title":"Cortex Platform IAM Overview","pathname":"/xdr-5-api/identity-and-access-management-iam/cortex-platform-iam-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Identity and Access Management (IAM)"}]},{"id":"8da46f672e471049bb3dd6dc69b1323398a582fc","title":"API Keys","pathname":"/xdr-5-api/identity-and-access-management-iam/api-keys","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Identity and Access Management (IAM)"}]},{"id":"3003b83a41b6860e6957c9792fb52ca8f5e64643","title":"Roles","pathname":"/xdr-5-api/identity-and-access-management-iam/roles","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Identity and Access Management (IAM)"}]},{"id":"9ed15329542913a6985791012006f7cbb533200d","title":"Scopes","pathname":"/xdr-5-api/identity-and-access-management-iam/scopes","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Identity and Access Management (IAM)"}]},{"id":"a52c52c933e409f91e31608a975ba160922d0abb","title":"User","pathname":"/xdr-5-api/identity-and-access-management-iam/user","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Identity and Access Management (IAM)"}]},{"id":"be632e8bf9b92065fb0fed30e30acb78576ce92c","title":"User Groups","pathname":"/xdr-5-api/identity-and-access-management-iam/user-groups","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Identity and Access Management (IAM)"}]},{"id":"60cd99a05edf774a02568cd601d0ef5455baae81","title":"Models","pathname":"/xdr-5-api/identity-and-access-management-iam/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Identity and Access Management (IAM)"}]},{"id":"66wYjC92ZGg3LkkVJrYg","title":"Issues APIs overview","pathname":"/xdr-5-api/issues-apis/issues-apis-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Issues APIs"}]},{"id":"c2878de2c40d981463b35d69d2393a9749f8af11","title":"Issues","pathname":"/xdr-5-api/issues-apis/issues","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Issues APIs"}]},{"id":"d0a480ab1b0c5b0c4b1819934c130d373ed87921","title":"Models","pathname":"/xdr-5-api/issues-apis/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Issues APIs"}]},{"id":"pweTkE43OxWMFGMw60TO","title":"Additional References","pathname":"/xdr-5-api/issues-apis/issues-papi-tables","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Issues APIs"}]},{"id":"2LG9ZZeN9Xzs9AZkqeGO","title":"Logging and Collection Service Management overview","pathname":"/xdr-5-api/logging-and-collection-service-management/logging-and-collection-service-management-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Logging and Collection Service Management"}]},{"id":"b326998abab1a23362661ee8a463309be2ab0538","title":"CLCS Management","pathname":"/xdr-5-api/logging-and-collection-service-management/clcs-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Logging and Collection Service Management"}]},{"id":"f34d3653954820af1074931d9a1d7f8083c9b1ee","title":"Models","pathname":"/xdr-5-api/logging-and-collection-service-management/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Logging and Collection Service Management"}]},{"id":"kANrH6VLW2ruGdUZODTj","title":"Managed Services Overview","pathname":"/xdr-5-api/managed-services/managed-services-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Managed Services"}]},{"id":"951df17a0ee468d226a4219f4978546f40130d42","title":"Assignment","pathname":"/xdr-5-api/managed-services/assignment","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Managed Services"}]},{"id":"9f2fca46d110c5288ae0c11849d1b5cb7dd00a3a","title":"Comments","pathname":"/xdr-5-api/managed-services/comments","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Managed Services"}]},{"id":"b0b9268a797bf0cbe93484891c20df4ca4df8b29","title":"Reports","pathname":"/xdr-5-api/managed-services/reports","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Managed Services"}]},{"id":"c6901c6175f28a65204bb05c3fff5398ffa63e9e","title":"Status","pathname":"/xdr-5-api/managed-services/status","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Managed Services"}]},{"id":"b1c5ef90a99fb39ff27beccff8cfa5fc4a4504e0","title":"Models","pathname":"/xdr-5-api/managed-services/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Managed Services"}]},{"id":"DEsqtrPPPK9vRha6CkCH","title":"Netscan overview","pathname":"/xdr-5-api/netscan/netscan-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Netscan"}]},{"id":"ab297819fc3b2ef8005f31da09403ef98b65a3d4","title":"Vulnerability Network Scan Management","pathname":"/xdr-5-api/netscan/vulnerability-network-scan-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Netscan"}]},{"id":"702bbaaa91f5061b2546254081af947dc0826105","title":"Models","pathname":"/xdr-5-api/netscan/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Netscan"}]},{"id":"UtkKskjQOqo3PpzKfx4p","title":"Policies overview","pathname":"/xdr-5-api/policies/policies-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Policies"}]},{"id":"e7f4aed6f342fa4c3117f92b75459e79aa167de1","title":"Cloud Security Policies","pathname":"/xdr-5-api/policies/cloud-security-policies","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Policies"}]},{"id":"049089eb022dc38f6117d972c25cb46eceb65371","title":"Models","pathname":"/xdr-5-api/policies/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Policies"}]},{"id":"GIehTMi7ftSLMhoEwIeQ","title":"Restore Distributions overview","pathname":"/xdr-5-api/restore-distributions/restore-distributions-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Restore Distributions"}]},{"id":"110bc37e0def9e357c0e1996f4e0d684075a3951","title":"Restore Distributions","pathname":"/xdr-5-api/restore-distributions/restore-distributions","siteSpaceId":"sitesp_cw1i0","icon":"arrow-counterclockwise","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Restore Distributions"}]},{"id":"7a056fdfc91e003f7c61775117721b6236b904c8","title":"Models","pathname":"/xdr-5-api/restore-distributions/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Restore Distributions"}]},{"id":"ChjphJ6GzVfisqsbpR9K","title":"Unified Rules overview","pathname":"/xdr-5-api/unified-rules/unified-rules-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Unified Rules"}]},{"id":"810773642fbd02370f4c39d79533a696d9f9ba2c","title":"Unified Rules","pathname":"/xdr-5-api/unified-rules/unified-rules","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Unified Rules"}]},{"id":"9ca6e51f30875ce89bdd643921638736a1c03da8","title":"Models","pathname":"/xdr-5-api/unified-rules/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Unified Rules"}]},{"id":"PVLZapKduCI4rfpAZtdS","title":"Vulnerability Intelligence Overview","pathname":"/xdr-5-api/vulnerability-intelligence/vulnerability-intelligence-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Intelligence"}]},{"id":"31bc4a91d7f90aa1438349c76911a5c5ab40b08e","title":"Affected Software","pathname":"/xdr-5-api/vulnerability-intelligence/affected-software","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Intelligence"}]},{"id":"c756f08e8db72b929607ccb03d865906547a4c68","title":"Vulnerabilities","pathname":"/xdr-5-api/vulnerability-intelligence/vulnerabilities","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Intelligence"}]},{"id":"42483e06598cdb6b8045523516b3d54284034a15","title":"Models","pathname":"/xdr-5-api/vulnerability-intelligence/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Intelligence"}]},{"id":"1NIpIwMBRhyfTcUXdr6B","title":"Additional References","pathname":"/xdr-5-api/vulnerability-intelligence/vulnerability-intelligence-papi-tables","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Intelligence"}]},{"id":"eem654BJAaknBSJMtljD","title":"Vulnerability Management Overview","pathname":"/xdr-5-api/vulnerability-management/vulnerability-management-overview","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Management"}]},{"id":"c505a22cbf3f8d977f70bff5cc91ddd1e6b80d72","title":"Vulnerability Management","pathname":"/xdr-5-api/vulnerability-management/vulnerability-management","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Management"}]},{"id":"88e8dc4a50312618e39156adc03ffd762424552a","title":"Vulnerability Findings","pathname":"/xdr-5-api/vulnerability-management/vulnerability-findings","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Management"}]},{"id":"4a4f517af973e3c85f41507c4e26324371dce172","title":"Vulnerability Findings Snapshot","pathname":"/xdr-5-api/vulnerability-management/vulnerability-findings-snapshot","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Management"}]},{"id":"c2f8c10334c977eafed7e610f12694b34fc27457","title":"Bring Your Own Scanner","pathname":"/xdr-5-api/vulnerability-management/bring-your-own-scanner","siteSpaceId":"sitesp_cw1i0","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Management"}]},{"id":"8e9c71b89dde10c2396e8012fff38ba04bd12513","title":"Models","pathname":"/xdr-5-api/vulnerability-management/models","siteSpaceId":"sitesp_cw1i0","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 5.x APIs","icon":"shield-halved"},{"label":"Vulnerability Management"}]},{"id":"0Yvafm4cZsxBf4k4CvPm","title":"Get started with Cortex XDR 3.x APIs","pathname":"/xdr-3-api","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"}]},{"id":"y1QHxHlAmERqXUl7pH6a","title":"Run XQL Query APIs","pathname":"/xdr-3-api/run-xql-query-apis","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"}]},{"id":"F9YehcmEHtUXtf43ibNT","title":"Cortex XDR APIs Overview","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/cortex-xdr-apis-overview","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"605b3b6ca84e459de8d257b6c92c5f6e8b06d5e4","title":"Authentication Settings","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/authentication-settings","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"649fa3315822b0cb7e6f12f49039786e5e27fc31","title":"Audit Log","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/audit-log","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"ed1b4c409ab373efe9e99f5d293195f55caf45b8","title":"Dataset Management","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/dataset-management","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"75cdc24787263dd97cd1fb25af07ba6b8bd66ced","title":"Endpoint Management","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/endpoint-management","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"10d8e06645859fbd090801113972f3eda30c2ce3","title":"Incident Management","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/incident-management","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"b2e3abe398b60fcca9f44e7409255090ff475fc8","title":"Lookup Datasets","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/lookup-datasets","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"4daffe2b91f78c2d6cf52a7b404ba28a6ffd9204","title":"Response Action","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/response-action","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"09e7b7ea35b4087be3a71a5f6b43465519af142f","title":"Rule Management","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/rule-management","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"3058ce3573c48db8f027d3ff07ff428e59c74b27","title":"Script Execution","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/script-execution","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"60d1e39c3b3d705750b98da5e9daa70b51b5d290","title":"Syslog Servers","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/syslog-servers","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"bac7b771318a6739ea26761acc05e0a59601234b","title":"System Management","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/system-management","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"75502bf827cf01c5f9185e97984e37a73a1da58c","title":"XQL Query","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/xql-query","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"da905609ba58a97254b4fb3c22690a8fae866193","title":"Models","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/models","siteSpaceId":"sitesp_RtP1v","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"15JUXLkJhdIFdF289ihg","title":"Additional References","pathname":"/xdr-3-api/cortex-xdr-3.x-apis/cortex-xdr-tables","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Cortex XDR 3.x APIs"}]},{"id":"E8wB9TQnlEqD0h6Ux5el","title":"Broker VM (Tenant-Side) overview","pathname":"/xdr-3-api/broker-vm-tenant-side/broker-vm-tenant-overview","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"f96ac54246c8ee3dadee45db449e2fed660e92f4","title":"Brokers","pathname":"/xdr-3-api/broker-vm-tenant-side/brokers","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"38b6c405235cb0d2b437442031f43506425b7f80","title":"Actions","pathname":"/xdr-3-api/broker-vm-tenant-side/actions","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"d5323925904b0a6b24a9784abc8b8ba620862f2a","title":"Install images","pathname":"/xdr-3-api/broker-vm-tenant-side/install-images","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"faead051eff24ab746fc1e0164d06c81a98e74d8","title":"Applets","pathname":"/xdr-3-api/broker-vm-tenant-side/applets","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"2e39cb99f5e77efec4bb2555a257e71e637af7f4","title":"Remote log bundle","pathname":"/xdr-3-api/broker-vm-tenant-side/remote-log-bundle","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"b65b252d84037d8c62092af358fff22cbf499263","title":"Models","pathname":"/xdr-3-api/broker-vm-tenant-side/models","siteSpaceId":"sitesp_RtP1v","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"dgqRIl318XxPvWVlbnBz","title":"Additional References","pathname":"/xdr-3-api/broker-vm-tenant-side/broker-papi-tables","siteSpaceId":"sitesp_RtP1v","description":"","breadcrumbs":[{"label":"Cortex XDR","icon":"shield-halved"},{"label":"XDR 3.x APIs","icon":"shield-halved"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"mQiKpd0ac6xuAKUEKDch","title":"Get started with Cortex XSIAM APIs","pathname":"/xsiam-api","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"}]},{"id":"bXg6dHiLyImyAhf4NzjJ","title":"What's new in this release","pathname":"/xsiam-api/api-release-notes","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"}]},{"id":"2MHBA2vVTujNTnok1LzJ","title":"Create a new API key","pathname":"/xsiam-api/create-a-new-api-key","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"}]},{"id":"s43if1fwyFgorO6wwCro","title":"Get your Cortex XSIAM API key ID","pathname":"/xsiam-api/get-your-cortex-api-key-id","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"}]},{"id":"ZAlJJRDDqU4UXUTwAaUV","title":"Get your FQDN","pathname":"/xsiam-api/get-your-fqdn","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"}]},{"id":"N8TVUepSA6hyVu2pZTaI","title":"Make your first API call","pathname":"/xsiam-api/make-your-first-api-call","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"}]},{"id":"YI7AverCTx1KvaQXjBn8","title":"Understand Cortex XSIAM licenses","pathname":"/xsiam-api/understand-cortex-xsiam-licenses","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"}]},{"id":"RCKSJZIx1lBTh29wXTIw","title":"Cortex XSIAM Platform Overview","pathname":"/xsiam-api/cortex-platform/cortex-xsiam-platform-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"a56edb6dec93e772b9dc0fca06e64a1e786df879","title":"API Keys","pathname":"/xsiam-api/cortex-platform/api-keys","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"d8151ec51c723d7eaabe6795b4d916a6fdea03fa","title":"Asset Groups","pathname":"/xsiam-api/cortex-platform/asset-groups","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"f1e5446afa88435e85daaaf072e70fdfcbf96926","title":"Asset Inventory","pathname":"/xsiam-api/cortex-platform/asset-inventory","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"d24615d65a79fc9924392da2c665dd972f3e6048","title":"Attack Surface Management","pathname":"/xsiam-api/cortex-platform/attack-surface-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"75284fbe7fb2e281e270e06d369513f93e41163a","title":"Audit Log","pathname":"/xsiam-api/cortex-platform/audit-log","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"51e726e2e7c597f61fb75557b8125f84534648e2","title":"Authentication Settings","pathname":"/xsiam-api/cortex-platform/authentication-settings","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"a8f75caff79a8d03f467afc21d9f762c959e671d","title":"BIOCs","pathname":"/xsiam-api/cortex-platform/biocs","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"03285f045f1f612375251bc67bc262aa5dec597d","title":"Correlation Rules","pathname":"/xsiam-api/cortex-platform/correlation-rules","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"2abca1348812ca242ae8c923fb8648539a8d763d","title":"Cortex CLI","pathname":"/xsiam-api/cortex-platform/cortex-cli","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"a19af59beb428193734c1243cbb889eca9b970a5","title":"Dashboards","pathname":"/xsiam-api/cortex-platform/dashboards","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"36ddbd7920c35fffdafe3f1712a5368ab6827fb7","title":"Dataset Management","pathname":"/xsiam-api/cortex-platform/dataset-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"93a85a28444bafb98486c94646148f4b83ca6341","title":"Endpoint Management","pathname":"/xsiam-api/cortex-platform/endpoint-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"acb77f96a20f2cbab69d3234768b4c8f18799be7","title":"IOCs","pathname":"/xsiam-api/cortex-platform/iocs","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"949bb58b05172b570efb652b170dd079d54fc17f","title":"Lookup Datasets","pathname":"/xsiam-api/cortex-platform/lookup-datasets","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"15e2b47fce30b640b9c1b835571d7fcd1176398a","title":"Playbooks","pathname":"/xsiam-api/cortex-platform/playbooks","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"e448b387c2362f2a04b62610c0384fff95dac17c","title":"Query Library","pathname":"/xsiam-api/cortex-platform/query-library","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"424da84dd66cff33313c01cbabee4b1d1aee0a2d","title":"Response Action","pathname":"/xsiam-api/cortex-platform/response-action","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"5096f57f1c25566ec146547b7f23826b3b3cdfc7","title":"Scheduled Queries","pathname":"/xsiam-api/cortex-platform/scheduled-queries","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"79d8998f418cf1100cd2b13224eaa2f857947070","title":"Script Execution","pathname":"/xsiam-api/cortex-platform/script-execution","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"25ebc824a8ae06ba81002c955b5b6e223327d3ca","title":"Scripts","pathname":"/xsiam-api/cortex-platform/scripts","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"f3e6aeb5a3edc94b0979c2d4cd840e1b6bfbbf44","title":"Syslog Servers","pathname":"/xsiam-api/cortex-platform/syslog-servers","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"fd610071a27b14c2dde00a89e347c7b8376040d3","title":"System Management","pathname":"/xsiam-api/cortex-platform/system-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"5c1ed351ea1e3eee303be9c1c7fe4175b2bf40d8","title":"Widgets","pathname":"/xsiam-api/cortex-platform/widgets","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"bfc548552178c4782eeff88f7b00409f86c858bf","title":"XQL Query","pathname":"/xsiam-api/cortex-platform/xql-query","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"5c0051ec2dbb2f3703129a952deedb9a6da5d362","title":"XQL User Datasets","pathname":"/xsiam-api/cortex-platform/xql-user-datasets","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"db144d0484a4834798c928e1930e9514c5990191","title":"Models","pathname":"/xsiam-api/cortex-platform/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"xqhVQhFjlZtP5GT4nJIX","title":"Run XQL query APIs","pathname":"/xsiam-api/cortex-platform/run-xql-query-apis","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"wXC0WqL2UJGCstn1lvUS","title":"Additional References","pathname":"/xsiam-api/cortex-platform/cortex-platform-papi-tables","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cortex Platform"}]},{"id":"CFUVKRX69tscWxfGr0Vv","title":"Agent Configuration Settings overview","pathname":"/xsiam-api/agent-configuration-settings/agent-configuration-settings-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Agent Configuration Settings"}]},{"id":"cae768ae83ca09af68c2ba549e491446034fd025","title":"Agent Configurations","pathname":"/xsiam-api/agent-configuration-settings/agent-configurations","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Agent Configuration Settings"}]},{"id":"0224b97dd257b8628cfc02cd00fdbbf98f66c77e","title":"Models","pathname":"/xsiam-api/agent-configuration-settings/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Agent Configuration Settings"}]},{"id":"qGSc9NikuBk7zfBSn7I7","title":"Alert Notification Rules overview","pathname":"/xsiam-api/alert-notification-rules/alert-notification-rules-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Alert Notification Rules"}]},{"id":"e519b8c626884bd75a03148dcb199a8afdb67a20","title":"Alert Notification Rules","pathname":"/xsiam-api/alert-notification-rules/alert-notification-rules","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Alert Notification Rules"}]},{"id":"4c5fc3e2e99e40d6494d76566bcbee4228ac2835","title":"Models","pathname":"/xsiam-api/alert-notification-rules/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Alert Notification Rules"}]},{"id":"3drZLBmuOyWt1YXgX9QJ","title":"ASPM, CI/CD, and Application Security Overview","pathname":"/xsiam-api/aspm-cicd-and-application-security/aspm-cicd-and-application-security-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"0Jv9Wp6VOsGrifm6U6yi","title":"Additional References","pathname":"/xsiam-api/aspm-cicd-and-application-security/appsec-papi-tables","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"05c58c1091b4b1cf0ffde1acd3c3db58e86fb933","title":"Billing","pathname":"/xsiam-api/aspm-cicd-and-application-security/billing","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"3c4f2d7beadf68a3040554c5b65ef611ae6dbe4e","title":"Applications","pathname":"/xsiam-api/aspm-cicd-and-application-security/applications","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"0da0eacb43384b19d4a25beaa645dfcb78b934e5","title":"Criteria","pathname":"/xsiam-api/aspm-cicd-and-application-security/criteria","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"6f4d2299fc1b995988d25621290f441973ecb930","title":"Data Sources","pathname":"/xsiam-api/aspm-cicd-and-application-security/data-sources","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"3c68334a043be3dfe78f387c3aef743e78bf1c49","title":"Policies","pathname":"/xsiam-api/aspm-cicd-and-application-security/policies","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"1bd9bc7ec86b916cc05c66f48a63a445aaaadb61","title":"Package Explorer","pathname":"/xsiam-api/aspm-cicd-and-application-security/package-explorer","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"48a13416cc5a576953ce6cbbd96fdc8c1d40e72f","title":"Repositories","pathname":"/xsiam-api/aspm-cicd-and-application-security/repositories","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"97e5cc60a1d354576b62d58aadfe9e6683b65c4d","title":"Remediations","pathname":"/xsiam-api/aspm-cicd-and-application-security/remediations","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"c6c27a8bf89f82d74181d212bb9e33b6e720d3b9","title":"Rules","pathname":"/xsiam-api/aspm-cicd-and-application-security/rules","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"817fe3499c90b6c14f4f5435e7b5b6bc5d42d7a4","title":"SBOM Management","pathname":"/xsiam-api/aspm-cicd-and-application-security/sbom-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"ce98ffb1c4c442327693483cda903814259a0aa8","title":"Scan Management","pathname":"/xsiam-api/aspm-cicd-and-application-security/scan-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"d5a3d36396bf7827729459ab228002a76fcb75d1","title":"Cloud Coverage","pathname":"/xsiam-api/aspm-cicd-and-application-security/cloud-coverage","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"8a75dd8af7e8556a0d57e316d002eb268780123c","title":"Models","pathname":"/xsiam-api/aspm-cicd-and-application-security/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"ASPM, CICD and Application Security"}]},{"id":"9DXvPgvU7SDyDqbttvJn","title":"Asset Compliance overview","pathname":"/xsiam-api/asset-compliance/asset-compliance-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Asset Compliance"}]},{"id":"ea290f2cefb7fcf44ccf94e6cfe642d55ac46ffe","title":"Control Findings","pathname":"/xsiam-api/asset-compliance/control-findings","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Asset Compliance"}]},{"id":"bb4ccd4b866bbb497b0ae33ceb1489833ef6e928","title":"Models","pathname":"/xsiam-api/asset-compliance/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Asset Compliance"}]},{"id":"926Mn4MAPTCQUZkjWCzR","title":"Additional References","pathname":"/xsiam-api/asset-compliance/asset-compliance-papi-tables","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Asset Compliance"}]},{"id":"EnpIOLn26hUb9uSJBTi5","title":"Broker VM (On-Appliance) overview","pathname":"/xsiam-api/broker-vm-on-appliance/broker-vm-appliance-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (On-Appliance)"}]},{"id":"21cc554489ce5e03fd51e2ba6f73de7322042015","title":"Auth (bootstrap)","pathname":"/xsiam-api/broker-vm-on-appliance/auth-bootstrap","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (On-Appliance)"}]},{"id":"2efed444351f33a29c11db1ed2f2e29eb0322f57","title":"Registration","pathname":"/xsiam-api/broker-vm-on-appliance/registration","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (On-Appliance)"}]},{"id":"d9ffa6b7fa6b8d8ece471f0369bb88456b08f97f","title":"Network configuration","pathname":"/xsiam-api/broker-vm-on-appliance/network-configuration","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (On-Appliance)"}]},{"id":"b0a9803d15434e0aa8b419fcec0b1bef2f8531de","title":"Local log bundle","pathname":"/xsiam-api/broker-vm-on-appliance/local-log-bundle","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (On-Appliance)"}]},{"id":"8cd2f65b712564a7b61481c68adb5d74b33aabd9","title":"Models","pathname":"/xsiam-api/broker-vm-on-appliance/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (On-Appliance)"}]},{"id":"C6UIp3k0i4GdtVb0xwQe","title":"Broker VM (Tenant-Side) overview","pathname":"/xsiam-api/broker-vm-tenant-side/broker-vm-tenant-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"d33248337499e541695a01c79bcd9a4b1af424fb","title":"Brokers","pathname":"/xsiam-api/broker-vm-tenant-side/brokers","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"96ce2a145168f08466834fa7567320b55aab8e89","title":"Actions","pathname":"/xsiam-api/broker-vm-tenant-side/actions","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"d6fab2739503214a49bad0e3158f3ffa84579e34","title":"Install images","pathname":"/xsiam-api/broker-vm-tenant-side/install-images","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"f9bc59855d7481fc8eccaaf2cfbf582ea9db111d","title":"Applets","pathname":"/xsiam-api/broker-vm-tenant-side/applets","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"d4ce9d2a4025792023edb06198a9d45b61277775","title":"Remote log bundle","pathname":"/xsiam-api/broker-vm-tenant-side/remote-log-bundle","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"cc9120b6f32fe8fc5751d22282935bc7c393b2f8","title":"Models","pathname":"/xsiam-api/broker-vm-tenant-side/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"vEF1HcCe4LhNNdPyeLOQ","title":"Additional References","pathname":"/xsiam-api/broker-vm-tenant-side/broker-papi-tables","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Broker VM (Tenant-Side)"}]},{"id":"2Np8UqiQV29ko3S4fDyL","title":"Cases APIs overview","pathname":"/xsiam-api/cases-apis/cases-apis-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cases APIs"}]},{"id":"fb89234e6a3c72a2b3524f12d4f8ba03bd709a7b","title":"Cases","pathname":"/xsiam-api/cases-apis/cases","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cases APIs"}]},{"id":"a001728dbf047ef559ed7f282e52a0041d41a84a","title":"Models","pathname":"/xsiam-api/cases-apis/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cases APIs"}]},{"id":"wwc8JWy2Feb1hXXP1q9k","title":"Additional References","pathname":"/xsiam-api/cases-apis/cases-papi-tables","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cases APIs"}]},{"id":"wKfs1hvx80wn4alRP9PI","title":"Cloud Infrastructure Entitlement Management (CIEM) overview","pathname":"/xsiam-api/cloud-infrastructure-entitlement-management-ciem/cloud-infrastructure-entitlement-management-ciem-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"ef2621b3d59f7fe5166e939c450bc67eb2617c79","title":"CIEM","pathname":"/xsiam-api/cloud-infrastructure-entitlement-management-ciem/ciem","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"63f2fe921477830c1911a889923ff56c75f1803b","title":"Models","pathname":"/xsiam-api/cloud-infrastructure-entitlement-management-ciem/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Infrastructure Entitlement Management (CIEM)"}]},{"id":"THI7e4tdXHiBIq9du6gq","title":"Cloud Onboarding API overview","pathname":"/xsiam-api/cloud-onboarding/cloud-onboarding-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Onboarding"}]},{"id":"faa7f879826f2c61c4e04d419f7828e67a1aba44","title":"Cloud Instance Management","pathname":"/xsiam-api/cloud-onboarding/cloud-instance-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Onboarding"}]},{"id":"f4e7a69af39dc958a7fac428d614278572ef0cf7","title":"Manual Onboarding","pathname":"/xsiam-api/cloud-onboarding/manual-onboarding","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Onboarding"}]},{"id":"84bb510bbb065a6589b0f5dc9aef2e7f51f624d4","title":"Cloud Account Management","pathname":"/xsiam-api/cloud-onboarding/cloud-account-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Onboarding"}]},{"id":"dc7502ced0a250ab67311439734c91bf600ebad9","title":"Outpost Management","pathname":"/xsiam-api/cloud-onboarding/outpost-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Onboarding"}]},{"id":"ff6dbffee44a9215d5d19b1ec20088e9b1ed1621","title":"General","pathname":"/xsiam-api/cloud-onboarding/general","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Onboarding"}]},{"id":"4a005c83eda9ffc07c0eb49a737dab8d1015e722","title":"Models","pathname":"/xsiam-api/cloud-onboarding/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Onboarding"}]},{"id":"ubd0XNNvwuNZLZULUuFK","title":"Cloud Workload Protection Overview","pathname":"/xsiam-api/cloud-workload-protection/cloud-workload-protection-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Workload Protection"}]},{"id":"ee59a1199b598cad841e31e27bec4c39f159eb77","title":"Policies","pathname":"/xsiam-api/cloud-workload-protection/policies","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Workload Protection"}]},{"id":"215b3e8e081f224df02f07ad81a4e37380cf813a","title":"SBOM","pathname":"/xsiam-api/cloud-workload-protection/sbom","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Workload Protection"}]},{"id":"6182e162d1c701b9a029b1a010959bd11f098e0b","title":"Registry Onboarding","pathname":"/xsiam-api/cloud-workload-protection/registry-onboarding","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Workload Protection"}]},{"id":"68300ee7aede3a6ec4485da9eec53495cdfa443a","title":"Models","pathname":"/xsiam-api/cloud-workload-protection/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Workload Protection"}]},{"id":"LHo7LvQvcQLc3tfJgwtL","title":"Compliance Controls Overview","pathname":"/xsiam-api/compliance-controls/compliance-controls-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"f43ffeedc32d679cc7a985c1091c26f53175fcaf","title":"Assessment Profiles","pathname":"/xsiam-api/compliance-controls/assessment-profiles","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"c7266264efa688b2187027810844866e8930d714","title":"Assessment Results","pathname":"/xsiam-api/compliance-controls/assessment-results","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"b3e174e8473797115c4ab4ec2cd907c7485cd6e7","title":"Categories","pathname":"/xsiam-api/compliance-controls/categories","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"8ba04e5a32f4115a2e2f1970fb13d139a196e9f1","title":"Compliance Assets","pathname":"/xsiam-api/compliance-controls/compliance-assets","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"d90dfcfb1b5c6c5cb257aa4b055c61accfae1055","title":"Controls","pathname":"/xsiam-api/compliance-controls/controls","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"446dcae76617d95db4ea6c7458dbe4e0863df20e","title":"Reports","pathname":"/xsiam-api/compliance-controls/reports","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"3c48a2bf68e93d8cb84248554fac1bee83d2d222","title":"Results","pathname":"/xsiam-api/compliance-controls/results","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"5c5f201c2d79adef5dd5e26debfdd3915111e407","title":"Rules","pathname":"/xsiam-api/compliance-controls/rules","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"7e8132f12ee7f04d22505f66bf35b11b3e5877e7","title":"Standards","pathname":"/xsiam-api/compliance-controls/standards","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"1c961355b765b05bb864e3951a32771495fdeffa","title":"Models","pathname":"/xsiam-api/compliance-controls/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Compliance Controls"}]},{"id":"0Zyv2ZUJsajBj1YjJnrO","title":"Data Security Posture Management overview","pathname":"/xsiam-api/data-security-posture-management/data-security-posture-management-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Data Security Posture Management"}]},{"id":"f75e9034bf4a57a7503b31d436c2edf5cd24b2cf","title":"Data Security Posture Management APIs","pathname":"/xsiam-api/data-security-posture-management/data-security-posture-management-apis","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Data Security Posture Management"}]},{"id":"f6d48c4e10c959875fa67d1aa1dc08fd2497b3d8","title":"Models","pathname":"/xsiam-api/data-security-posture-management/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Data Security Posture Management"}]},{"id":"yRfBZNp0RzOhbfL62LaL","title":"Disable Injection and Prevention Rules overview","pathname":"/xsiam-api/disable-injection-and-prevention-rules/disable-injection-and-prevention-rules-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"96c3e1796245dbb716a4ce2d1c4860a557c64a04","title":"Disable Injection and Prevention Rules Public API","pathname":"/xsiam-api/disable-injection-and-prevention-rules/disable-injection-and-prevention-rules-public-api","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"b997558f5c8304a409f8daaa707625313cc04f17","title":"Models","pathname":"/xsiam-api/disable-injection-and-prevention-rules/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Disable Injection and Prevention Rules"}]},{"id":"BxbhbmwhTzGgq2lSwVJz","title":"Disable Prevention Rule overview","pathname":"/xsiam-api/disable-prevention-rule/disable-prevention-rule-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Disable Prevention Rule"}]},{"id":"84553774504550cc94fb4abbf3c0c89d0388b1f7","title":"Disable Prevention Rule Public APIs","pathname":"/xsiam-api/disable-prevention-rule/disable-prevention-rule-public-apis","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Disable Prevention Rule"}]},{"id":"c42004a39188eee0f850d9c3d088f111b2b32a60","title":"Models","pathname":"/xsiam-api/disable-prevention-rule/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Disable Prevention Rule"}]},{"id":"q9LprMsYMYO8EiAGhZjX","title":"External Application Management overview","pathname":"/xsiam-api/external-application-management/external-application-management-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"External Application Management"}]},{"id":"194c0b35a9ee7af88ab27508ad41a9d18a869888","title":"External Applications","pathname":"/xsiam-api/external-application-management/external-applications","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"External Application Management"}]},{"id":"69898bed193479b1cb75439967e88162c75f059e","title":"Models","pathname":"/xsiam-api/external-application-management/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"External Application Management"}]},{"id":"iO1Lajahur2BZylzmQx2","title":"Forensics overview","pathname":"/xsiam-api/forensics/forensics-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Forensics"}]},{"id":"8c591a1bb0b9fd346f0a2cd853818b0db5eb615a","title":"Forensics","pathname":"/xsiam-api/forensics/forensics","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Forensics"}]},{"id":"3a4fa308659d21496c1e391c50c7a621149c9fca","title":"Models","pathname":"/xsiam-api/forensics/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Forensics"}]},{"id":"1lGEmP0aT2obBhBUbFfY","title":"Cortex Platform IAM Overview","pathname":"/xsiam-api/identity-and-access-management-iam/cortex-platform-iam-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Identity and Access Management (IAM)"}]},{"id":"047c19c7156d4f2ed255ef3223e01ae6ac0ddcbe","title":"API Keys","pathname":"/xsiam-api/identity-and-access-management-iam/api-keys","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Identity and Access Management (IAM)"}]},{"id":"1b1daeb01fb074c4f287fb7f01b37f2ff85ee706","title":"Roles","pathname":"/xsiam-api/identity-and-access-management-iam/roles","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Identity and Access Management (IAM)"}]},{"id":"b6237d3d2236b705ed4b919284443842ac3b9345","title":"Scopes","pathname":"/xsiam-api/identity-and-access-management-iam/scopes","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Identity and Access Management (IAM)"}]},{"id":"1d21df44c93c8c8673df9a6f020474ce257bc2dd","title":"User","pathname":"/xsiam-api/identity-and-access-management-iam/user","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Identity and Access Management (IAM)"}]},{"id":"69ef46da0c8fb8470ffe7b347cc4590de27b1375","title":"User Groups","pathname":"/xsiam-api/identity-and-access-management-iam/user-groups","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Identity and Access Management (IAM)"}]},{"id":"b31986c327e252467c1f76305bcf27ccaf1246d4","title":"Models","pathname":"/xsiam-api/identity-and-access-management-iam/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Identity and Access Management (IAM)"}]},{"id":"bQJSvOn6gSMQXwgpIq6P","title":"Integrations overview","pathname":"/xsiam-api/integrations/integrations-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Integrations"}]},{"id":"50c4168fb2172a1396f19c72b377a1b886914b17","title":"Integrations","pathname":"/xsiam-api/integrations/integrations","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Integrations"}]},{"id":"5d68a89ff96c647e5bb422dcb6d988cde6af68c7","title":"Models","pathname":"/xsiam-api/integrations/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Integrations"}]},{"id":"3t03L5wtJYWs8xL2Vqfm","title":"Issues APIs overview","pathname":"/xsiam-api/issues-apis/issues-apis-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Issues APIs"}]},{"id":"95f8c7eaa8b11988b9001fe7f7d99e3d508b2e05","title":"Issues","pathname":"/xsiam-api/issues-apis/issues","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Issues APIs"}]},{"id":"ddd79141311ed6286374f4ad77a5258702c4b2a4","title":"Models","pathname":"/xsiam-api/issues-apis/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Issues APIs"}]},{"id":"M2vkEuxneMWdgtrfrkoB","title":"Logging and Collection Service Management overview","pathname":"/xsiam-api/logging-and-collection-service-management/logging-and-collection-service-management-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Logging and Collection Service Management"}]},{"id":"7450b278aa995b823195e180f29a17d917e0642e","title":"CLCS Management","pathname":"/xsiam-api/logging-and-collection-service-management/clcs-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Logging and Collection Service Management"}]},{"id":"a3478e9afe9412298bae1d60fb1524c401f0be8f","title":"Models","pathname":"/xsiam-api/logging-and-collection-service-management/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Logging and Collection Service Management"}]},{"id":"FjhmTx5A4chP7ZpGw8FP","title":"Managed Services Overview","pathname":"/xsiam-api/managed-services/managed-services-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Managed Services"}]},{"id":"4925f04bf82c8063479b7f67d34ab62ec1fe3822","title":"Assignment","pathname":"/xsiam-api/managed-services/assignment","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Managed Services"}]},{"id":"c6df0d992e18e640752674298c1d49c496eb0f56","title":"Comments","pathname":"/xsiam-api/managed-services/comments","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Managed Services"}]},{"id":"c57e8c106a95ce9fb9f27532627fbb5c19beae69","title":"Reports","pathname":"/xsiam-api/managed-services/reports","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Managed Services"}]},{"id":"50f9dd522fb1dc21ddf3df54227ef44776967957","title":"Status","pathname":"/xsiam-api/managed-services/status","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Managed Services"}]},{"id":"bba6f37beb6a8d3d730f449b3b9781613d7df426","title":"Models","pathname":"/xsiam-api/managed-services/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Managed Services"}]},{"id":"OI8ZHILq2CH7EGTyht9v","title":"Netscan overview","pathname":"/xsiam-api/netscan/netscan-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Netscan"}]},{"id":"c9650acd5f3262c2fd628ff2cc5413a378563dc3","title":"Vulnerability Network Scan Management","pathname":"/xsiam-api/netscan/vulnerability-network-scan-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Netscan"}]},{"id":"4f8416a18ca102660eef8805cc5437a0c09da9d6","title":"Models","pathname":"/xsiam-api/netscan/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Netscan"}]},{"id":"08bkPiMHnA8eWqBensax","title":"Policies overview","pathname":"/xsiam-api/policies/policies-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Policies"}]},{"id":"e18caec4f405a168b7237631a3252f8071c357d4","title":"Cloud Security Policies","pathname":"/xsiam-api/policies/cloud-security-policies","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Policies"}]},{"id":"7023c5b130e2b3768d8f6583016bd176dfd00a8b","title":"Models","pathname":"/xsiam-api/policies/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Policies"}]},{"id":"8SrCmSuDksTAbEfYDOHA","title":"Restore Distributions overview","pathname":"/xsiam-api/restore-distributions/restore-distributions-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Restore Distributions"}]},{"id":"a56b8ecbb91f0edc4f456a14fc1ea087601fe96d","title":"Restore Distributions","pathname":"/xsiam-api/restore-distributions/restore-distributions","siteSpaceId":"sitesp_6PHzQ","icon":"arrow-counterclockwise","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Restore Distributions"}]},{"id":"72bbdc27128d5e1483814c1f9c0cd09966f1cc02","title":"Models","pathname":"/xsiam-api/restore-distributions/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Restore Distributions"}]},{"id":"hUvnjjaV4mgRrzQVcLMI","title":"Unified Rules overview","pathname":"/xsiam-api/unified-rules/unified-rules-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Unified Rules"}]},{"id":"0ef6d9a2ba64d5d7406aeff85d1f3aaea2a0888e","title":"Unified Rules","pathname":"/xsiam-api/unified-rules/unified-rules","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Unified Rules"}]},{"id":"694812c4f4d0bb945efca58d4186b54e6f826ec1","title":"Models","pathname":"/xsiam-api/unified-rules/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Unified Rules"}]},{"id":"m416ab3HMaPICM71zUDw","title":"Vulnerability Intelligence Overview","pathname":"/xsiam-api/vulnerability-intelligence/vulnerability-intelligence-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Intelligence"}]},{"id":"27494408dd4625b28e8a0df7096054b57d065b55","title":"Affected Software","pathname":"/xsiam-api/vulnerability-intelligence/affected-software","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Intelligence"}]},{"id":"81baa3559e655a86f07261abbb8d53ea16b24c3b","title":"Vulnerabilities","pathname":"/xsiam-api/vulnerability-intelligence/vulnerabilities","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Intelligence"}]},{"id":"bf17196c1778088b9c8b7320ab60d4768e9cb39e","title":"Models","pathname":"/xsiam-api/vulnerability-intelligence/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Intelligence"}]},{"id":"dqyk5xECwAsJ1naaWiWF","title":"Additional References","pathname":"/xsiam-api/vulnerability-intelligence/vulnerability-intelligence-papi-tables","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Intelligence"}]},{"id":"Vg0c0LNgHwsnOCP7dzLD","title":"Vulnerability Management Overview","pathname":"/xsiam-api/vulnerability-management/vulnerability-management-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Management"}]},{"id":"5aaca332dfe06402b4e3e07a213c51f1f72f1403","title":"Vulnerability Management","pathname":"/xsiam-api/vulnerability-management/vulnerability-management","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Management"}]},{"id":"be8343814540127a936f8343d293ca0f091c62e6","title":"Vulnerability Findings","pathname":"/xsiam-api/vulnerability-management/vulnerability-findings","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Management"}]},{"id":"ad2b04b1834c7fab5106b68168452ac99b369616","title":"Vulnerability Findings Snapshot","pathname":"/xsiam-api/vulnerability-management/vulnerability-findings-snapshot","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Management"}]},{"id":"309a6bd261a57d1b53208f1a4265ea1378490430","title":"Bring Your Own Scanner","pathname":"/xsiam-api/vulnerability-management/bring-your-own-scanner","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Management"}]},{"id":"578c4e2c91afb41dd56de9ebd62fb063fea10604","title":"Models","pathname":"/xsiam-api/vulnerability-management/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Vulnerability Management"}]},{"id":"83acd78b257b7a02983190e8b5eb5b577f666886","title":"Forensics","pathname":"/xsiam-api/forensics-1/forensics","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Forensics"}]},{"id":"9f6517645e3d607eb0ec0d9e7a58c2d7bf800987","title":"Models","pathname":"/xsiam-api/forensics-1/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Forensics"}]},{"id":"SBntcCEVB6WDynsB6Paw","title":"Cloud Consumption Dashboard API overview","pathname":"/xsiam-api/cloud-consumption-dashboard/cloud-consumption-overview","siteSpaceId":"sitesp_6PHzQ","description":"","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Consumption Dashboard"}]},{"id":"cb9e474458d955c12372a66ebe60733b251e9588","title":"Cloud Consumption Dashboard","pathname":"/xsiam-api/cloud-consumption-dashboard/cloud-consumption-dashboard","siteSpaceId":"sitesp_6PHzQ","icon":"chart-bar","description":"Retrieve workload consumption data per asset type, over time, and in a paginated details grid.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Consumption Dashboard"}]},{"id":"47f268778afd488ca665e32f0deaa0ee76c650e8","title":"Licensing","pathname":"/xsiam-api/cloud-consumption-dashboard/licensing","siteSpaceId":"sitesp_6PHzQ","icon":"badge-check","description":"Retrieve tenant license entitlements and add-on information.","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Consumption Dashboard"}]},{"id":"ac3acdbfde262103ce15606b1184bcb7ee82cca6","title":"Models","pathname":"/xsiam-api/cloud-consumption-dashboard/models","siteSpaceId":"sitesp_6PHzQ","breadcrumbs":[{"label":"Cortex XSIAM","icon":"chart-line"},{"label":"XSIAM APIs","icon":"chart-line"},{"label":"Cloud Consumption Dashboard"}]},{"id":"pnQMYB7ijRMTYAkAd1yK","title":"Get started with Cortex XSOAR 8.x APIs","pathname":"/xsoar-8-api","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"}]},{"id":"YstYe3yQGM4nPmG2yFDO","title":"Changes in this release","pathname":"/xsoar-8-api/changes-in-this-release","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"}]},{"id":"eOYrv64Fzn23T7Hmez2K","title":"Create a new API key","pathname":"/xsoar-8-api/create-a-new-api-key","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"}]},{"id":"APy1WYlhcHALm0BaYa4C","title":"Get your Cortex XSOAR API key ID","pathname":"/xsoar-8-api/get-your-cortex-xsoar-api-key-id","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"}]},{"id":"JLgkjJartMaIYMpOnI3L","title":"Get your FQDN","pathname":"/xsoar-8-api/get-your-fqdn","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"}]},{"id":"V4RCknVfyRq4TwX8F2lC","title":"Make your first API call","pathname":"/xsoar-8-api/make-your-first-api-call","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"}]},{"id":"fXl8H8b8EJaGqEALcX2J","title":"Optimistic locking and versioning","pathname":"/xsoar-8-api/optimistic-locking-and-versioning","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"}]},{"id":"W7Bi4C997QzMwJDqJOnA","title":"Cortex XSOAR 8 APIs Overview","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/cortex-xsoar-8-apis-overview","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"a5f14c14b5ef04ebeb5e36169c4ab4090f4b561b","title":"API Keys","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/api-keys","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"67f4b0f4e787f707b5b4ceca5673c59de4f12f8b","title":"Audit Log","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/audit-log","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"c246fbace5fffbeb220abe8ea0eca1ab1dd3783a","title":"Authentication Settings","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/authentication-settings","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"2b5ff13a931b46a17277995277746e5fc396a4a8","title":"Content Packs","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/content-packs","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"2e5b5b910df01a164a5bc6b6b55ccc43ee42a9e1","title":"Dashboards","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/dashboards","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"44664750f783bfcafe7d851e0999f818bdda3f20","title":"Engines","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/engines","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"93f6b30bd455470a6bee30f572daa646b09a54cb","title":"Entry","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/entry","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"2651adca76c47c4088ba7ee0fb2eb247bc76abc0","title":"Evidence","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/evidence","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"2419262278061b5f3de1f6317eda6e235267943c","title":"Incident Fields","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/incident-fields","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"5ab11f1fa004b50d71519af2d80d5dd7b5e65327","title":"Incidents","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/incidents","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"53033d3f56305eee7236df4aa3f560f45b034da8","title":"Indicators","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/indicators","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"95b315d50a3c1fc3b526b9c401f3e5b3937bff8d","title":"Integrations","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/integrations","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"a0cc77a6a4af869ff8a26dd6490c732b07b76beb","title":"Investigations","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/investigations","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"2453406909ccbc36730d206f0cbf700fd213bee6","title":"Jobs","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/jobs","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"233f2cef3595e5fff5f65b2dcc30e66a26dd5c49","title":"Lists","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/lists","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"ded803e0626cd90e92b30385ac96353e79578f9c","title":"Multi Tenant","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/multi-tenant","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"ec42800a6a21f45ad24171ef04ababaeb0982609","title":"Playbooks","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/playbooks","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"ef41a88dd34c2f022e8623a55ec55a54a9c04f90","title":"Remote Repository","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/remote-repository","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"8533679322df8dc110aa67091d5e24b44b2c427f","title":"Reports","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/reports","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"3e4536be8eefc352de7c842c61ecea9c19f97ccf","title":"Scripts","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/scripts","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"bcf803e21d41a9f63ec50b9445e4b07117a78ca6","title":"Syslog Servers","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/syslog-servers","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"059508baeeb93850da4630dfc496f5d0c877cdcf","title":"System Management","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/system-management","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"0f44d93e3f5c28d78cf4ffd7187e8deacca6e96a","title":"Widgets","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/widgets","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"0469124ed047eda915a6c77875bbac27e31e7749","title":"Models","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/models","siteSpaceId":"sitesp_kFvNl","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"UnPd4DFHbbvvT7tR18uE","title":"Additional References","pathname":"/xsoar-8-api/cortex-xsoar-8.x-apis/xsoar-8-tables","siteSpaceId":"sitesp_kFvNl","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 8.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 8.x APIs"}]},{"id":"XHHgqNUiAdKwkeUP1Au4","title":"Get started with Cortex XSOAR 6.x APIs","pathname":"/xsoar-6-api","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"}]},{"id":"iCGSPgCgXWwu4fsP3Qp6","title":"Create a new API key","pathname":"/xsoar-6-api/create-a-new-api-key","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"}]},{"id":"doyrFSgegb57AbLAiefv","title":"Make your first API call","pathname":"/xsoar-6-api/make-your-first-api-call","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"}]},{"id":"ZnvGxikQBSCasKckj2e9","title":"Optimistic locking and versioning","pathname":"/xsoar-6-api/optimistic-locking-and-versioning","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"}]},{"id":"RVMXJuQ30TfaJwy0c3Gl","title":"Cortex XSOAR 6 APIs Overview","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/cortex-xsoar-6-apis-overview","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"903e174b3acb799795ffbe4fec53fec159aa3ef5","title":"API Keys","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/api-keys","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"42b25956946bad4a222775f7ab6150bf3c5633c4","title":"Audit Log","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/audit-log","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"335393e48a2f599808f58239aa7d888dcd91b3ec","title":"Authentication","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/authentication","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"0219629ff032f35e5250a8edc9064086cf39a51a","title":"Content Packs","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/content-packs","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"e43cba3ba88727022eb95d2afe7e8cb5fb62ec3b","title":"Dashboards","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/dashboards","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"28b328cbac7b0a129f89997d28c8652e19ca9055","title":"Entry","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/entry","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"5671907dc41da31f949fda9bf64ca87089f7b39f","title":"Evidence","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/evidence","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"7aff19e5cbf707ff8399ec636a761304751d522a","title":"Incident Fields","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/incident-fields","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"da8ef57d2c393afcc248f073db2a8be19ea3aec0","title":"Incidents","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/incidents","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"3961c21a4f75da2fa4af48d2215c6f532e7d6f90","title":"Indicators","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/indicators","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"479c5b3a12913e8b8e9ec6e377e6aad868586865","title":"Integrations","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/integrations","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"6b771f6d33cc781f98267b53f843ec79b4f0a08e","title":"Investigations","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/investigations","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"7ff6ae7efff940ecaf61c6e1a4941d6e0f347fc1","title":"Playbooks","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/playbooks","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"12d0073b8e9581861cea7527118132bb2a051ce3","title":"Reports","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/reports","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"99460935fd77589194a47fc6bd544b7907cd11a5","title":"Scripts","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/scripts","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"3288d23ce32751331868881946b3767f6f9f8e37","title":"System Management","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/system-management","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"498ae3d6390edfd99564a270542f4fba0b61f23c","title":"Widgets","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/widgets","siteSpaceId":"sitesp_ChaXM","description":"","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"6f407f5b6a6e9de68a7019cebf5ef89137f24855","title":"Models","pathname":"/xsoar-6-api/cortex-xsoar-6.x-apis/models","siteSpaceId":"sitesp_ChaXM","breadcrumbs":[{"label":"Cortex XSOAR","icon":"diagram-project"},{"label":"XSOAR 6.x APIs","icon":"diagram-project"},{"label":"Cortex XSOAR 6.x APIs"}]},{"id":"6CRecG6lk09YwdQxIy2m","title":"Get started with Cortex AgentiX APIs","pathname":"/agentix-api","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"}]},{"id":"wZ3404Zi1MLNOfHugUud","title":"Create a new API key","pathname":"/agentix-api/readme","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"}]},{"id":"jD2QvwTgDVGPJH93h6QF","title":"Get your Cortex AgentiX API key ID","pathname":"/agentix-api/get-your-cortex-api-key-id","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"}]},{"id":"J0CSERGQKc0M2IVsnWco","title":"Get your FQDN","pathname":"/agentix-api/get-your-fqdn","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"}]},{"id":"IBw85kYuWeqtZ50PCAbW","title":"Make your first API call","pathname":"/agentix-api/make-your-first-api-call","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"}]},{"id":"IVgQNhC6xty4CPHnFFAR","title":"Run XQL query APIs","pathname":"/agentix-api/run-xql-query-apis","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"}]},{"id":"hcThAsHayhSRdOZY02VI","title":"Understand Cortex AgentiX licenses","pathname":"/agentix-api/understand-cortex-agentix-licenses","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"}]},{"id":"ECZkBafQ08sdDkYiHP72","title":"Cortex AgentiX Platform Overview","pathname":"/agentix-api/cortex-agentix/cortex-agentix-platform-overview","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"9a539a97ee712ff440a7a24a62f5591b1d0b8078","title":"API Keys","pathname":"/agentix-api/cortex-agentix/api-keys","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"0524ae9ce321c5911d8a011ff1293ae837315177","title":"Audit Log","pathname":"/agentix-api/cortex-agentix/audit-log","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"7923dc98264425a7ee79722d0271bed6616a4ae7","title":"Authentication Settings","pathname":"/agentix-api/cortex-agentix/authentication-settings","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"cdff98deb7d3a4c58e5871895a3e1d092416a661","title":"Cases","pathname":"/agentix-api/cortex-agentix/cases","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"8c08d33c2064a62a37f6d35acd9200b309390c3b","title":"Correlation Rules","pathname":"/agentix-api/cortex-agentix/correlation-rules","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"6be2c6ebbeb1fd54cb9552a4208d3c29fb85f12a","title":"Dashboards","pathname":"/agentix-api/cortex-agentix/dashboards","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"cd6e38983c8891ec765872a01c9913de6bf8c4d6","title":"Dataset Management","pathname":"/agentix-api/cortex-agentix/dataset-management","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"e65ee06f55788ea93d3f81c1e0eb2a8feaa76d97","title":"Issues","pathname":"/agentix-api/cortex-agentix/issues","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"382bdf55e8ea6417664cf54ff880013f52ed1a28","title":"Lookup Datasets","pathname":"/agentix-api/cortex-agentix/lookup-datasets","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"6fe97b2619cb187746f5207e6d354360fa7595c2","title":"Playbooks","pathname":"/agentix-api/cortex-agentix/playbooks","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"1a41db075a779fe9b095ea5e452e7e5abc02d2c8","title":"Query Library","pathname":"/agentix-api/cortex-agentix/query-library","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"d46433a69436150f5784893b78e99187d8ebeb69","title":"Scheduled Queries","pathname":"/agentix-api/cortex-agentix/scheduled-queries","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"64a58667f242e64cabce5f1b66000f9f95a36991","title":"Script Execution","pathname":"/agentix-api/cortex-agentix/script-execution","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"b2126a0de0f6cd134ef7310af0b9a4029ae4318b","title":"Scripts","pathname":"/agentix-api/cortex-agentix/scripts","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"a99edec2ef2feb4f435fa8c75f173fcd472c0ecb","title":"Syslog Servers","pathname":"/agentix-api/cortex-agentix/syslog-servers","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"d863b228d2a53234a3e77ad16a2ae1f3e7d6e6fe","title":"System Management","pathname":"/agentix-api/cortex-agentix/system-management","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"6131d248d7a6f78dacd41f58c17a18ee106845c2","title":"Widgets","pathname":"/agentix-api/cortex-agentix/widgets","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"7ce8fa1a7879793ce82754358f87c1403c1efa62","title":"XQL Query","pathname":"/agentix-api/cortex-agentix/xql-query","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"6f022819beb5f0a26afbf2de2bf72980c7caae0a","title":"Models","pathname":"/agentix-api/cortex-agentix/models","siteSpaceId":"sitesp_HAGgu","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Agentix"}]},{"id":"NXkT990xQznci596tiZk","title":"Cortex Platform IAM Overview","pathname":"/agentix-api/cortex-platform-iam/cortex-platform-iam-overview","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Platform IAM"}]},{"id":"90d6ceab9cac1c79eed278ff0ea18e7f942d9278","title":"API Keys","pathname":"/agentix-api/cortex-platform-iam/api-keys","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Platform IAM"}]},{"id":"a296dbf678073c7dfa42d0d5e2bec3db15e7d46d","title":"Roles","pathname":"/agentix-api/cortex-platform-iam/roles","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Platform IAM"}]},{"id":"a2be3b057dfc40bad841bc330fec89849faa17db","title":"Scopes","pathname":"/agentix-api/cortex-platform-iam/scopes","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Platform IAM"}]},{"id":"732975f56079969e560a63faa2cbe70a3259726e","title":"User","pathname":"/agentix-api/cortex-platform-iam/user","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Platform IAM"}]},{"id":"145e55c36c9fd7e06f10e670ddc364a69b1cfdab","title":"User Groups","pathname":"/agentix-api/cortex-platform-iam/user-groups","siteSpaceId":"sitesp_HAGgu","description":"","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Platform IAM"}]},{"id":"2d1e39d4653f392db1d56be80559146297d8733a","title":"Models","pathname":"/agentix-api/cortex-platform-iam/models","siteSpaceId":"sitesp_HAGgu","breadcrumbs":[{"label":"Cortex AgentiX","icon":"head-side-circuit"},{"label":"AgentiX APIs","icon":"head-side-circuit"},{"label":"Cortex Platform IAM"}]},{"id":"LSZjMWKbAY5X6bnultLc","title":"Get Started with Xpanse APIs","pathname":"/xpanse-api","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"}]},{"id":"ZUw3CGsXh0bqivWUX3OZ","title":"What's new in this release","pathname":"/xpanse-api/changes-to-the-api-in-this-release","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"}]},{"id":"IyG1l4mkpRkmGssrUwKv","title":"Cortex Xpanse API Overview","pathname":"/xpanse-api/xpanse-public-api/cortex-xpanse-api-overview","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"46f656867427fda6a1f0dd5ec4bde201c4033ea0","title":"Asset Management","pathname":"/xpanse-api/xpanse-public-api/asset-management","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"3457b20a61173ac2a1cf42a624252e0218e9a78e","title":"Attack Surface Rules","pathname":"/xpanse-api/xpanse-public-api/attack-surface-rules","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"19a811b07237c3dfefc0a2d025b25775cf355840","title":"Audit Log","pathname":"/xpanse-api/xpanse-public-api/audit-log","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"bc4560258ad26e44c32057f85e8192e98ae9e5fb","title":"Incident Management","pathname":"/xpanse-api/xpanse-public-api/incident-management","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"3ce0e7ce985f9633441dd88e6a8a0af6be1ab1a0","title":"Remediation Path Rules","pathname":"/xpanse-api/xpanse-public-api/remediation-path-rules","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"67d23288ffb33b0372b99712073ad2412b7e17bc","title":"Remediation Scanning","pathname":"/xpanse-api/xpanse-public-api/remediation-scanning","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"cda4cee847ef76bdda224cfa68f9544e80592894","title":"System Management","pathname":"/xpanse-api/xpanse-public-api/system-management","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"a914cc95279c20a7979118e8d2c4dd59fbce732d","title":"Tag Management","pathname":"/xpanse-api/xpanse-public-api/tag-management","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"f2002b341368a50e02de446e8b17caa872d574e8","title":"Vulnerability Testing","pathname":"/xpanse-api/xpanse-public-api/vulnerability-testing","siteSpaceId":"sitesp_YTcfm","description":"","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"a08e80e7319532a2fff94896db95a2d6ac0c4051","title":"Models","pathname":"/xpanse-api/xpanse-public-api/models","siteSpaceId":"sitesp_YTcfm","breadcrumbs":[{"label":"Cortex Xpanse","icon":"manhole"},{"label":"Xpanse APIs","icon":"bullseye"},{"label":"Xpanse Public API"}]},{"id":"0tbMO07opuvWRaO0m8ev","title":"Cortex XQL Schema Reference Guide","pathname":"/xql-schema-reference","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"}]},{"id":"KqeKHP8XFbU8X2lmTyEP","title":"XDR_DATA Fields by Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"}]},{"id":"L8nwspkBRhQmNcscVfrv","title":"Action Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor/action-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"},{"label":"XDR_DATA Fields by Actor"}]},{"id":"Inb9zSJaup187eL4v1BZ","title":"Actor Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor/actor-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"},{"label":"XDR_DATA Fields by Actor"}]},{"id":"NkV5sdwLfqhXUJ1pCmj1","title":"Causality Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor/causality-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"},{"label":"XDR_DATA Fields by Actor"}]},{"id":"d6QSOZotaOyQlE4XYYR9","title":"DST Action Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor/dst-action-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"},{"label":"XDR_DATA Fields by Actor"}]},{"id":"z1wDyRKPa0suPVby62Rx","title":"DST Causality Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor/dst-causality-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"},{"label":"XDR_DATA Fields by Actor"}]},{"id":"xeMmRlcGT8e7Yw64IebL","title":"DST OS Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor/dst-os-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"},{"label":"XDR_DATA Fields by Actor"}]},{"id":"QQjybgEf2beUBFRyGhJf","title":"OS Actor","pathname":"/xql-schema-reference/xdr-data-fields-by-actor/os-actor","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"},{"label":"XDR_DATA Fields by Actor"}]},{"id":"qmBg9MuBuOzAU6HZibdu","title":"XDR_DATA Fields","pathname":"/xql-schema-reference/xdr-data-fields","siteSpaceId":"sitesp_Va9w7","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XQL Schema Reference","icon":"qrcode-read"}]},{"id":"DWUx8rpV4tut9Z7vjrqm","title":"XSIAM Data Model Schema","pathname":"/xsiam-data-model-schema","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"}]},{"id":"yaAtpbB7ZyTG1mPyiXYt","title":"XDM Aliases","pathname":"/xsiam-data-model-schema/aliases","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"}]},{"id":"BT1Ff3gM99gtPceWmyeD","title":"XDM_ALIAS.ipv4","pathname":"/xsiam-data-model-schema/aliases/ipv4","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"V5J2xT6w7jpXY5syjjTu","title":"XDM_ALIAS.ipv6","pathname":"/xsiam-data-model-schema/aliases/ipv6","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"xZu5rMOEFhESODkScC5W","title":"XDM_ALIAS.ip","pathname":"/xsiam-data-model-schema/aliases/ip","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"7PteuUdyTG3AMLpIJaEG","title":"XDM_ALIAS.user","pathname":"/xsiam-data-model-schema/aliases/user","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"vcvs2C1uupYm11JRnXyL","title":"XDM_ALIAS.identity_type","pathname":"/xsiam-data-model-schema/aliases/identity-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"3C8WHYBvQcSH9x0c5BGX","title":"XDM_ALIAS.file","pathname":"/xsiam-data-model-schema/aliases/file","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"4VeGmGDYWdBUKddwOPre","title":"XDM_ALIAS.file_hash","pathname":"/xsiam-data-model-schema/aliases/file-hash","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"I0XqHHNJnd6OrumSlX5g","title":"XDM_ALIAS.domain","pathname":"/xsiam-data-model-schema/aliases/domain","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"JwBmE4ipDtGMLKDX36a3","title":"XDM_ALIAS.hostname","pathname":"/xsiam-data-model-schema/aliases/hostname","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"O7VigeJAP8NUVpfQO1Mg","title":"XDM_ALIAS.country","pathname":"/xsiam-data-model-schema/aliases/country","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"EUiljkvB97w7GAMWqJp1","title":"XDM_ALIAS.resource","pathname":"/xsiam-data-model-schema/aliases/resource","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"zrTkJ6L37l1R5harRjl4","title":"XDM_ALIAS.cloud_project","pathname":"/xsiam-data-model-schema/aliases/cloud-project","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"tRdGpCsspHUBtGD9fkvV","title":"XDM_ALIAS.cloud_provider","pathname":"/xsiam-data-model-schema/aliases/cloud-provider","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"ld4WNzfGYWCtnbhMss71","title":"XDM_ALIAS.cloud_zone","pathname":"/xsiam-data-model-schema/aliases/cloud-zone","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Aliases"}]},{"id":"R8sQz0jiR1f3KnFnYgwi","title":"XDM Consts","pathname":"/xsiam-data-model-schema/consts","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"}]},{"id":"Zfz7BNoMR3JCMoGy2Tnj","title":"XDM_CONST.DEPLOYMENT_STATUS","pathname":"/xsiam-data-model-schema/consts/deployment-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"QKH7KmLCr88dnQMhmklb","title":"XDM_CONST.DEPLOYMENT_PROVISIONING_STATUS","pathname":"/xsiam-data-model-schema/consts/deployment-provisioning-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"AkWr3O2a0foASwGQT08H","title":"XDM_CONST.DEPLOYMENT_LAUNCH_TYPE","pathname":"/xsiam-data-model-schema/consts/deployment-launch-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"fKi8y852qHv1qtz3wT3q","title":"XDM_CONST.EVENT_TAG","pathname":"/xsiam-data-model-schema/consts/event-tag","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"GEE8mcFUgJc9sZuh1kZs","title":"XDM_CONST.OUTCOME","pathname":"/xsiam-data-model-schema/consts/outcome","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"ggNpcFAK9tJjG7xK2gzH","title":"XDM_CONST.PRIVILEGE_LEVEL","pathname":"/xsiam-data-model-schema/consts/privilege-level","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"GxWxOx5noJRHjIlgysGI","title":"XDM_CONST.USER_TYPE","pathname":"/xsiam-data-model-schema/consts/user-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"wut9xzgmaeojstPLmrdh","title":"XDM_CONST.FORMAT_TYPE","pathname":"/xsiam-data-model-schema/consts/format-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"ojO626bWPrz3OietABux","title":"XDM_CONST.KUBERNETES_RESOURCE_CATEGORY","pathname":"/xsiam-data-model-schema/consts/kubernetes-resource-category","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"faoTZKk1sdCHwvY7JIHo","title":"XDM_CONST.KUBERNETES_CONNECTOR_STATUS","pathname":"/xsiam-data-model-schema/consts/kubernetes-connector-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"b8BrNSt9JfOOD04DNBIE","title":"XDM_CONST.KUBERNETES_PROFILE_CAPABILITY_STATUS","pathname":"/xsiam-data-model-schema/consts/kubernetes-profile-capability-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"GPyUrGjiN8VUafkOBmBZ","title":"XDM_CONST.KUBERNETES_POD_CONTAINER_TYPE","pathname":"/xsiam-data-model-schema/consts/kubernetes-pod-container-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"mM73uApkEBR3nq9PGH8P","title":"XDM_CONST.KUBERNETES_DISTRIBUTION","pathname":"/xsiam-data-model-schema/consts/kubernetes-distribution","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"jX1Ar22BfFZiHmW8pkZw","title":"XDM_CONST.KUBERNETES_SETTINGS_AUTO_UPGRADE_POLICY","pathname":"/xsiam-data-model-schema/consts/kubernetes-settings-auto-upgrade-policy","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"anp9Py60Wo0e6IXZ9bZT","title":"XDM_CONST.IP_PROTOCOL","pathname":"/xsiam-data-model-schema/consts/ip-protocol","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"0zM1K54SluXnwb3vrAEH","title":"XDM_CONST.PROVIDER","pathname":"/xsiam-data-model-schema/consts/provider","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"0NeiMAnd69BADqPQB9lo","title":"XDM_CONST.CLOUD_PROVIDER","pathname":"/xsiam-data-model-schema/consts/cloud-provider","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"sRfcx3dcnMhCAlDE2sUz","title":"XDM_CONST.DEVELOPMENT_CYCLE_STAGE","pathname":"/xsiam-data-model-schema/consts/development-cycle-stage","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"xDFlYJXELtZWpxpRRxEr","title":"XDM_CONST.OS_FAMILY","pathname":"/xsiam-data-model-schema/consts/os-family","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"BkejijzaNelXUgwiRjVr","title":"XDM_CONST.AGENT_TYPE","pathname":"/xsiam-data-model-schema/consts/agent-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"rdBDqKw5gv3lvd32xMgr","title":"XDM_CONST.SIGNATURE_STATUS","pathname":"/xsiam-data-model-schema/consts/signature-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"2wTwXliZm07YsXf8PlqB","title":"XDM_CONST.SECRET_VALIDATION","pathname":"/xsiam-data-model-schema/consts/secret-validation","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"oxkNInhQjYJE81GSB6kO","title":"XDM_CONST.APPSEC_IMPACT","pathname":"/xsiam-data-model-schema/consts/appsec-impact","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"0cPdVSyJP0fNGIFB8DUN","title":"XDM_CONST.IMAGE_SPECIFICATION_TYPE","pathname":"/xsiam-data-model-schema/consts/image-specification-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"bAKTSqqhIuIH3teGGMSg","title":"XDM_CONST.HOST_STATE_TYPE","pathname":"/xsiam-data-model-schema/consts/host-state-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"ZENihXTXsPVsbofthBVO","title":"XDM_CONST.REGISTRY_VALUE_TYPE","pathname":"/xsiam-data-model-schema/consts/registry-value-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"88vGoVh6bs3sOR8kIq2K","title":"XDM_CONST.IMAGE_VISIBILITY","pathname":"/xsiam-data-model-schema/consts/image-visibility","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Xpusm98f1qov1yrQfzC3","title":"XDM_CONST.HTTP_METHOD","pathname":"/xsiam-data-model-schema/consts/http-method","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"XMVzcEdVR9C5J4FrmkfR","title":"XDM_CONST.HTTP_RSP_CODE","pathname":"/xsiam-data-model-schema/consts/http-rsp-code","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"14bkCrSncV4iNQtxXw1o","title":"XDM_CONST.DHCP_MESSAGE_TYPE","pathname":"/xsiam-data-model-schema/consts/dhcp-message-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"f6aFG3eAhazp5FyVrEsu","title":"XDM_CONST.DCERPC_OPERATION","pathname":"/xsiam-data-model-schema/consts/dcerpc-operation","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Uv3ICyymV6ZCQ9cNngx1","title":"XDM_CONST.KERBEROS_MSG_TYPE","pathname":"/xsiam-data-model-schema/consts/kerberos-msg-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"q17Y13XlYV2BXw8fGbrE","title":"XDM_CONST.KERBEROS_PRINCIPAL_TYPE","pathname":"/xsiam-data-model-schema/consts/kerberos-principal-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"2UY7obkfmnNZPrbhANMk","title":"XDM_CONST.KERBEROS_KDC_OPTION","pathname":"/xsiam-data-model-schema/consts/kerberos-kdc-option","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"88m8c2VokqPykuOIsXv2","title":"XDM_CONST.KERBEROS_ENCRYPTION_TYPE","pathname":"/xsiam-data-model-schema/consts/kerberos-encryption-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"rg3iqaImAxwrmsAd3WX0","title":"XDM_CONST.KERBEROS_PA_TYPE","pathname":"/xsiam-data-model-schema/consts/kerberos-pa-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"9KbqtK7kwxnDzoEg50ky","title":"XDM_CONST.KERBEROS_ERROR_CODE","pathname":"/xsiam-data-model-schema/consts/kerberos-error-code","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"VnJ13UwVeOqEwMtMFQHH","title":"XDM_CONST.LDAP_OPERATION","pathname":"/xsiam-data-model-schema/consts/ldap-operation","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"8Xx7yMJqpNKB8SajJfDi","title":"XDM_CONST.LDAP_SCOPE","pathname":"/xsiam-data-model-schema/consts/ldap-scope","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Lg43XRFYxaGr0bpR9Jc9","title":"XDM_CONST.LDAP_BIND_AUTH_TYPE","pathname":"/xsiam-data-model-schema/consts/ldap-bind-auth-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"X63KieVZLZFL3096UyoL","title":"XDM_CONST.LOGON_TYPE","pathname":"/xsiam-data-model-schema/consts/logon-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"mdp50SUCdw8H0S1OT73J","title":"XDM_CONST.LOGON_IMPERSONATION_LEVEL","pathname":"/xsiam-data-model-schema/consts/logon-impersonation-level","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"7vF8xwNGZLzOXmJsmVXI","title":"XDM_CONST.LOGON_ASSIGNED_RIGHT","pathname":"/xsiam-data-model-schema/consts/logon-assigned-right","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"evwFYzSdL1hbHPhpwXkS","title":"XDM_CONST.DB_OPERATION","pathname":"/xsiam-data-model-schema/consts/db-operation","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"53gRhxGDGTqimGoXV3rI","title":"XDM_CONST.MITRE_TACTIC","pathname":"/xsiam-data-model-schema/consts/mitre-tactic","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"38Bywy7Z9VKsVkvCl5pY","title":"XDM_CONST.MITRE_TECHNIQUE","pathname":"/xsiam-data-model-schema/consts/mitre-technique","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"VK6QUsnfCCwrkmDSArSx","title":"XDM_CONST.THREAT_CATEGORY","pathname":"/xsiam-data-model-schema/consts/threat-category","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"zk87ohbHfeFgLwz1Y6wU","title":"XDM_CONST.URL_CATEGORY","pathname":"/xsiam-data-model-schema/consts/url-category","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"KGSlFhP8jGH8tmn1tpnw","title":"XDM_CONST.DNS_RESPONSE_CODE","pathname":"/xsiam-data-model-schema/consts/dns-response-code","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"wtau5ApYEebo3A7ENAyK","title":"XDM_CONST.DNS_RECORD_TYPE","pathname":"/xsiam-data-model-schema/consts/dns-record-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"oDtds9JWkH7LLCmced0q","title":"XDM_CONST.OPERATION_TYPE","pathname":"/xsiam-data-model-schema/consts/operation-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"P1WUweQqfGU9ldsHMukI","title":"XDM_CONST.IDENTITY_TYPE","pathname":"/xsiam-data-model-schema/consts/identity-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"hBwrHGUp9dFcicSZVUlz","title":"XDM_CONST.SCOPE_TYPE","pathname":"/xsiam-data-model-schema/consts/scope-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"763N4zTqG4kgfW8hjap6","title":"XDM_CONST.LOG_LEVEL","pathname":"/xsiam-data-model-schema/consts/log-level","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"jyl9bYVvHIVoqJJCavlN","title":"XDM_CONST.BACKUP_ASSET_TYPE","pathname":"/xsiam-data-model-schema/consts/backup-asset-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Uu3t8PZR0xxJp2NnebPi","title":"XDM_CONST.PACKAGE_INSTALLATION_TYPE","pathname":"/xsiam-data-model-schema/consts/package-installation-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Mg3Ploq6EmNhq3gsaUJV","title":"XDM_CONST.IDENTITY_PROVIDER","pathname":"/xsiam-data-model-schema/consts/identity-provider","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"lAtKERVAtaq9ZnvEDtUE","title":"XDM_CONST.IDENTITY_SECRET_STATUS","pathname":"/xsiam-data-model-schema/consts/identity-secret-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"caHhm1FBJ5PqjGvxnqHf","title":"XDM_CONST.IDENTITY_ACCOUNT_ACCESS","pathname":"/xsiam-data-model-schema/consts/identity-account-access","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"h3E0VjGSabDr1erI4Yab","title":"XDM_CONST.IDENTITY_SECRET_SERVICE_SCOPE","pathname":"/xsiam-data-model-schema/consts/identity-secret-service-scope","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"szLsEYmS0wZI1wkIEmS6","title":"XDM_CONST.IDENTITY_ACCESS_LEVEL","pathname":"/xsiam-data-model-schema/consts/identity-access-level","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"OK28BT49veSoIRC8VA7t","title":"XDM_CONST.LICENSE_CATEGORY","pathname":"/xsiam-data-model-schema/consts/license-category","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"3eewkkCwEcfV3Aj6WJyY","title":"XDM_CONST.ASSET_GROUP_TYPE","pathname":"/xsiam-data-model-schema/consts/asset-group-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"UTgS9uryKfupsixDFaX1","title":"XDM_CONST.OPERATIONAL_RISK","pathname":"/xsiam-data-model-schema/consts/operational-risk","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"2wtAhUzdUaQgwNRKgJrr","title":"XDM_CONST.MODEL_ENDPOINT_TYPE","pathname":"/xsiam-data-model-schema/consts/model-endpoint-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"D5JHHbuKlxTwdwY9d8Cp","title":"XDM_CONST.MODEL_KIND","pathname":"/xsiam-data-model-schema/consts/model-kind","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Un137x6QC4mbwCzSiE66","title":"XDM_CONST.MODEL_FAMILY","pathname":"/xsiam-data-model-schema/consts/model-family","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"9mO4FJs28A13paE1Uh2J","title":"XDM_CONST.SCAN_SOURCE","pathname":"/xsiam-data-model-schema/consts/scan-source","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"hzLnPfdvnS2Tlnq9Q2tF","title":"XDM_CONST.ARCH","pathname":"/xsiam-data-model-schema/consts/arch","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Oh1cwA119PaCZ0yeu2PV","title":"XDM_CONST.DATABASE_TYPE","pathname":"/xsiam-data-model-schema/consts/database-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"IbAbwgNQ5ZGevOn0xguu","title":"XDM_CONST.BACKLOG_STATUS","pathname":"/xsiam-data-model-schema/consts/backlog-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"TEqtsp8wHQj3S8B30dRb","title":"XDM_CONST.FINDING_SOURCE","pathname":"/xsiam-data-model-schema/consts/finding-source","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"VnZKgxNVHNekywA1fiaL","title":"XDM_CONST.PARTITION_ID_TYPE","pathname":"/xsiam-data-model-schema/consts/partition-id-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"2QPpBLJje0OrUlqaWhOQ","title":"XDM_CONST.ALERT_STATUS","pathname":"/xsiam-data-model-schema/consts/alert-status","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"6LBMb3e69wErsHdDBIK2","title":"XDM_CONST.SECURITY_CONTROL_EFFECTIVENESS","pathname":"/xsiam-data-model-schema/consts/security-control-effectiveness","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"PqzuRCPmsiwAFooyT5sn","title":"XDM_CONST.DOMAIN_MODES","pathname":"/xsiam-data-model-schema/consts/domain-modes","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"y6GbpNAYmJ1GtSTpoGqQ","title":"XDM_CONST.TRUST_DIRECTION","pathname":"/xsiam-data-model-schema/consts/trust-direction","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"Tsci5CbnpgWtTHWtXnYI","title":"XDM_CONST.ENCRYPTION_TYPE","pathname":"/xsiam-data-model-schema/consts/encryption-type","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Consts"}]},{"id":"OwhaFXvxwIJosITXWW6C","title":"XDM Fieldsets","pathname":"/xsiam-data-model-schema/fieldsets","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"}]},{"id":"SxfdtsCqFIx914T4rxKN","title":"fieldset.xdm_core","pathname":"/xsiam-data-model-schema/fieldsets/xdm-core","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fieldsets"}]},{"id":"vzVQ8tNy0XjeJPTQ7kDl","title":"fieldset.xdm_cloud","pathname":"/xsiam-data-model-schema/fieldsets/xdm-cloud","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fieldsets"}]},{"id":"L1UBPr29xlObHrPQYg1q","title":"fieldset.xdm_endpoint","pathname":"/xsiam-data-model-schema/fieldsets/xdm-endpoint","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fieldsets"}]},{"id":"yo9GbD0qWdhvWijwoPHX","title":"fieldset.xdm_identity","pathname":"/xsiam-data-model-schema/fieldsets/xdm-identity","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fieldsets"}]},{"id":"MtbCfpoT9fMAcB6iJmlw","title":"fieldset.xdm_network","pathname":"/xsiam-data-model-schema/fieldsets/xdm-network","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fieldsets"}]},{"id":"3YhzwrqEG0CjrOCpo0Dz","title":"XDM Fields","pathname":"/xsiam-data-model-schema/fields","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"}]},{"id":"Jb99EJLhi4lIsY6JqiNw","title":"xdm.session_context_id","pathname":"/xsiam-data-model-schema/fields/session-context-id","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"18rWYOBumobD4df4PJ5E","title":"xdm.event","pathname":"/xsiam-data-model-schema/fields/event","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"iftU0AVvB9VZFzRlpixJ","title":"xdm.source","pathname":"/xsiam-data-model-schema/fields/source","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"kkZKtOflrvbTgddcpYXN","title":"xdm.source.host","pathname":"/xsiam-data-model-schema/fields/source/host","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"3wFo88HTDtmHQMFMtyNT","title":"xdm.source.agent","pathname":"/xsiam-data-model-schema/fields/source/agent","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"hAUi4qu2J5eijKZRqs7T","title":"xdm.source.identity","pathname":"/xsiam-data-model-schema/fields/source/identity","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"d8HnYAtYUxVXH3Z8Ha7b","title":"xdm.source.identity.idp","pathname":"/xsiam-data-model-schema/fields/source/identity/idp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"oaMVxvcDwjJQ4LgJqiJY","title":"xdm.source.identity.app_registration","pathname":"/xsiam-data-model-schema/fields/source/identity/app-registration","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"9OUsAixiHMqGrhODJrfI","title":"xdm.source.identity.app_registration.owners","pathname":"/xsiam-data-model-schema/fields/source/identity/app-registration/owners","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"},{"label":"xdm.source.identity.app_registration"}]},{"id":"m2dnGjI78nPdCrn5fsvZ","title":"xdm.source.identity.group","pathname":"/xsiam-data-model-schema/fields/source/identity/group","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"rEQkm6WkLKHxBfCjJubb","title":"xdm.source.identity.policy","pathname":"/xsiam-data-model-schema/fields/source/identity/policy","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"U0AHt0xZCNuOLQjfzwyL","title":"xdm.source.identity.policy.security_properties","pathname":"/xsiam-data-model-schema/fields/source/identity/policy/security-properties","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"},{"label":"xdm.source.identity.policy"}]},{"id":"n9RMZdq1Gg4LA4bTRVHT","title":"xdm.source.identity.secret","pathname":"/xsiam-data-model-schema/fields/source/identity/secret","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"GYw8bW1gflDVm1JG572P","title":"xdm.source.identity.access_keys","pathname":"/xsiam-data-model-schema/fields/source/identity/access-keys","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"U6pfq6nsPowHEFPGWKiW","title":"xdm.source.identity.access_statistics","pathname":"/xsiam-data-model-schema/fields/source/identity/access-statistics","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"odIN5sD29QVS5phSDAy2","title":"xdm.source.identity.key_management","pathname":"/xsiam-data-model-schema/fields/source/identity/key-management","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.identity"}]},{"id":"EaUAx6zSdBO84UE1tR5F","title":"xdm.source.user","pathname":"/xsiam-data-model-schema/fields/source/user","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"JuZb8QXccj4KpyHQN9oa","title":"xdm.source.user.idp","pathname":"/xsiam-data-model-schema/fields/source/user/idp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"NZCiembz8Jvyz2HRKqyc","title":"xdm.source.user.app_registration","pathname":"/xsiam-data-model-schema/fields/source/user/app-registration","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"iNnqHFQCdGIscpVe2Qc7","title":"xdm.source.user.app_registration.owners","pathname":"/xsiam-data-model-schema/fields/source/user/app-registration/owners","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"},{"label":"xdm.source.user.app_registration"}]},{"id":"nzFsTrant1nU7QWCzzmV","title":"xdm.source.user.group","pathname":"/xsiam-data-model-schema/fields/source/user/group","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"pteFwY6TyApFYq7mJzjD","title":"xdm.source.user.policy","pathname":"/xsiam-data-model-schema/fields/source/user/policy","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"HpDCdA36RxVd9D7HczOE","title":"xdm.source.user.policy.security_properties","pathname":"/xsiam-data-model-schema/fields/source/user/policy/security-properties","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"},{"label":"xdm.source.user.policy"}]},{"id":"zXdx5WEbzXs4loXs00uJ","title":"xdm.source.user.secret","pathname":"/xsiam-data-model-schema/fields/source/user/secret","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"JAMZYdSLmRJAfGSIfYS7","title":"xdm.source.user.access_keys","pathname":"/xsiam-data-model-schema/fields/source/user/access-keys","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"tjAxZnAE3LlYULeOLRhL","title":"xdm.source.user.access_statistics","pathname":"/xsiam-data-model-schema/fields/source/user/access-statistics","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"nk6kbzqpQ3xeyHAH2TQD","title":"xdm.source.user.key_management","pathname":"/xsiam-data-model-schema/fields/source/user/key-management","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.user"}]},{"id":"RfA7XGc5niZOTtVSe3k2","title":"xdm.source.location","pathname":"/xsiam-data-model-schema/fields/source/location","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"6jIfwp0bAM8LdDuGELIQ","title":"xdm.source.process","pathname":"/xsiam-data-model-schema/fields/source/process","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"WUjbyh1ybjtuoOSsMGFJ","title":"xdm.source.process.executable","pathname":"/xsiam-data-model-schema/fields/source/process/executable","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.process"}]},{"id":"kOM4ulJ5LCotVzKwArFW","title":"xdm.source.process.executable.permissions","pathname":"/xsiam-data-model-schema/fields/source/process/executable/permissions","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.process"},{"label":"xdm.source.process.executable"}]},{"id":"0ogqlIcPSFEjKoYcmbsL","title":"xdm.source.process.executable.position","pathname":"/xsiam-data-model-schema/fields/source/process/executable/position","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.process"},{"label":"xdm.source.process.executable"}]},{"id":"MJM0gt0jJ9c8MFugTpF9","title":"xdm.source.process.executable.position.start","pathname":"/xsiam-data-model-schema/fields/source/process/executable/position/start","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.process"},{"label":"xdm.source.process.executable"},{"label":"xdm.source.process.executable.position"}]},{"id":"8eFUNFKKBGN2U9P3TJyY","title":"xdm.source.process.executable.position.end","pathname":"/xsiam-data-model-schema/fields/source/process/executable/position/end","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.process"},{"label":"xdm.source.process.executable"},{"label":"xdm.source.process.executable.position"}]},{"id":"DOyd2Cii8BNg5dPCmFF0","title":"xdm.source.application","pathname":"/xsiam-data-model-schema/fields/source/application","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"8LrGeMLINW62ju7yg7ZC","title":"xdm.source.asn","pathname":"/xsiam-data-model-schema/fields/source/asn","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"lPxUHCpvScWOVVD571Kc","title":"xdm.source.cloud","pathname":"/xsiam-data-model-schema/fields/source/cloud","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"W4UFRyeRBxPEOd7o0Jjl","title":"xdm.source.cloud.function","pathname":"/xsiam-data-model-schema/fields/source/cloud/function","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.cloud"}]},{"id":"TNvduUvcAxk4YLZ5bBea","title":"xdm.source.virtualization","pathname":"/xsiam-data-model-schema/fields/source/virtualization","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"}]},{"id":"Pn0ASdDEgPf8sfaLHo68","title":"xdm.source.virtualization.data_center","pathname":"/xsiam-data-model-schema/fields/source/virtualization/data-center","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.virtualization"}]},{"id":"tiDEVeDGIysbzgeMg26T","title":"xdm.source.virtualization.data_store","pathname":"/xsiam-data-model-schema/fields/source/virtualization/data-store","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.virtualization"}]},{"id":"2GUwEAgFwmFN5KmqoGMQ","title":"xdm.source.virtualization.task","pathname":"/xsiam-data-model-schema/fields/source/virtualization/task","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.virtualization"}]},{"id":"kre99FXGBlC6EWLLOX98","title":"xdm.source.virtualization.vm","pathname":"/xsiam-data-model-schema/fields/source/virtualization/vm","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.source"},{"label":"xdm.source.virtualization"}]},{"id":"ue1BqhiNKxS7WYNd2iiw","title":"xdm.intermediate","pathname":"/xsiam-data-model-schema/fields/intermediate","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"ETZcU20GIghdWiMJ2dMK","title":"xdm.intermediate.host","pathname":"/xsiam-data-model-schema/fields/intermediate/host","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"5RJordWAsOQuef5g577v","title":"xdm.intermediate.location","pathname":"/xsiam-data-model-schema/fields/intermediate/location","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"HNYM0RZFy8XpYEa9UkSM","title":"xdm.intermediate.agent","pathname":"/xsiam-data-model-schema/fields/intermediate/agent","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"ZZ0XpfRE9C8V5z6W6X5N","title":"xdm.intermediate.identity","pathname":"/xsiam-data-model-schema/fields/intermediate/identity","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"Z6vjsWwvrBNfIwvY4xeQ","title":"xdm.intermediate.identity.idp","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/idp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"hOh51uyISAMsdYhGMreQ","title":"xdm.intermediate.identity.app_registration","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/app-registration","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"3OrUOilOJXZyiw8Vs52I","title":"xdm.intermediate.identity.app_registration.owners","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/app-registration/owners","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"},{"label":"xdm.intermediate.identity.app_registration"}]},{"id":"JVszZwvLY5TgS4MB689x","title":"xdm.intermediate.identity.group","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/group","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"txdI4XdVpfeiYVHsVBtn","title":"xdm.intermediate.identity.policy","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/policy","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"yWRe4umUI3OKgwSi7Gvh","title":"xdm.intermediate.identity.policy.security_properties","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/policy/security-properties","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"},{"label":"xdm.intermediate.identity.policy"}]},{"id":"jLIDCCUsCFIft8YByEP6","title":"xdm.intermediate.identity.secret","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/secret","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"p1YlCW88TeZxdOcCwBxg","title":"xdm.intermediate.identity.access_keys","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/access-keys","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"el3CZpG1B7tigQnU3ZHf","title":"xdm.intermediate.identity.access_statistics","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/access-statistics","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"qms9gaFxkWH3BX3NZHUp","title":"xdm.intermediate.identity.key_management","pathname":"/xsiam-data-model-schema/fields/intermediate/identity/key-management","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.identity"}]},{"id":"G0xzJye0zftckAu6rsRA","title":"xdm.intermediate.user","pathname":"/xsiam-data-model-schema/fields/intermediate/user","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"ivLyfWc7gqgQfDKMizjx","title":"xdm.intermediate.user.idp","pathname":"/xsiam-data-model-schema/fields/intermediate/user/idp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"4Ul3NDK0XFwSGD3QROQj","title":"xdm.intermediate.user.app_registration","pathname":"/xsiam-data-model-schema/fields/intermediate/user/app-registration","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"xis0VY0dCSsMNnEQBbnc","title":"xdm.intermediate.user.app_registration.owners","pathname":"/xsiam-data-model-schema/fields/intermediate/user/app-registration/owners","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"},{"label":"xdm.intermediate.user.app_registration"}]},{"id":"NP9lV4Tyn8yEKkrVPn9c","title":"xdm.intermediate.user.group","pathname":"/xsiam-data-model-schema/fields/intermediate/user/group","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"j4ihA7tOdtiYdRQxbKku","title":"xdm.intermediate.user.policy","pathname":"/xsiam-data-model-schema/fields/intermediate/user/policy","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"9m56SYyimrYOi1yjrpHH","title":"xdm.intermediate.user.policy.security_properties","pathname":"/xsiam-data-model-schema/fields/intermediate/user/policy/security-properties","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"},{"label":"xdm.intermediate.user.policy"}]},{"id":"wEZOxLJz5Ubk7jVlUrLJ","title":"xdm.intermediate.user.secret","pathname":"/xsiam-data-model-schema/fields/intermediate/user/secret","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"cCKFINsNFzQgQJQXKMzp","title":"xdm.intermediate.user.access_keys","pathname":"/xsiam-data-model-schema/fields/intermediate/user/access-keys","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"KyqlHtn5yyVFOXsFsz7D","title":"xdm.intermediate.user.access_statistics","pathname":"/xsiam-data-model-schema/fields/intermediate/user/access-statistics","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"lVjXJp9k9AIKk8NKsn8c","title":"xdm.intermediate.user.key_management","pathname":"/xsiam-data-model-schema/fields/intermediate/user/key-management","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.user"}]},{"id":"JOMXXBndLoAS1ikU0FDd","title":"xdm.intermediate.process","pathname":"/xsiam-data-model-schema/fields/intermediate/process","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"gFmIR9otKp4DKLakXBjX","title":"xdm.intermediate.process.executable","pathname":"/xsiam-data-model-schema/fields/intermediate/process/executable","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.process"}]},{"id":"K0LSrHlXkWbJDc5qBeWW","title":"xdm.intermediate.process.executable.permissions","pathname":"/xsiam-data-model-schema/fields/intermediate/process/executable/permissions","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.process"},{"label":"xdm.intermediate.process.executable"}]},{"id":"gWOFTBhs7yH03QSuRwvb","title":"xdm.intermediate.process.executable.position","pathname":"/xsiam-data-model-schema/fields/intermediate/process/executable/position","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.process"},{"label":"xdm.intermediate.process.executable"}]},{"id":"4BOBNLdJbu8v9vc2nlft","title":"xdm.intermediate.process.executable.position.start","pathname":"/xsiam-data-model-schema/fields/intermediate/process/executable/position/start","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.process"},{"label":"xdm.intermediate.process.executable"},{"label":"xdm.intermediate.process.executable.position"}]},{"id":"3yjhCUreFDKymBdPi7ip","title":"xdm.intermediate.process.executable.position.end","pathname":"/xsiam-data-model-schema/fields/intermediate/process/executable/position/end","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.process"},{"label":"xdm.intermediate.process.executable"},{"label":"xdm.intermediate.process.executable.position"}]},{"id":"Uc2tQyxJz40rhqnT1ori","title":"xdm.intermediate.application","pathname":"/xsiam-data-model-schema/fields/intermediate/application","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"ii9kp6WAdVCNqUea2TgH","title":"xdm.intermediate.asn","pathname":"/xsiam-data-model-schema/fields/intermediate/asn","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"GHBDdQ4mRdet7w9AsnVF","title":"xdm.intermediate.cloud","pathname":"/xsiam-data-model-schema/fields/intermediate/cloud","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"}]},{"id":"aTet5Mc0ASXxqqzmtNXr","title":"xdm.intermediate.cloud.function","pathname":"/xsiam-data-model-schema/fields/intermediate/cloud/function","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.intermediate"},{"label":"xdm.intermediate.cloud"}]},{"id":"FWX1zfOZyY3YzaOocj8a","title":"xdm.target","pathname":"/xsiam-data-model-schema/fields/target","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"IPnVNHZJAAuFIsONqQSz","title":"xdm.target.host","pathname":"/xsiam-data-model-schema/fields/target/host","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"Ew0CbqNQsQWIvKlnl3pS","title":"xdm.target.agent","pathname":"/xsiam-data-model-schema/fields/target/agent","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"o4SK8vkWYuFoOlZYcZc5","title":"xdm.target.identity","pathname":"/xsiam-data-model-schema/fields/target/identity","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"iinndbfSMiH8Gh8pCQGn","title":"xdm.target.identity.idp","pathname":"/xsiam-data-model-schema/fields/target/identity/idp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"aqiOO7VoHinqf13BneTd","title":"xdm.target.identity.app_registration","pathname":"/xsiam-data-model-schema/fields/target/identity/app-registration","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"t8lgj0cW90qtn0yJwj6U","title":"xdm.target.identity.app_registration.owners","pathname":"/xsiam-data-model-schema/fields/target/identity/app-registration/owners","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"},{"label":"xdm.target.identity.app_registration"}]},{"id":"YU0xkzY3pYGvchPLjGLM","title":"xdm.target.identity.group","pathname":"/xsiam-data-model-schema/fields/target/identity/group","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"R257S4OYwsAoRYiJpbLd","title":"xdm.target.identity.policy","pathname":"/xsiam-data-model-schema/fields/target/identity/policy","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"nVmDVi2tolIBpCpIgrLx","title":"xdm.target.identity.policy.security_properties","pathname":"/xsiam-data-model-schema/fields/target/identity/policy/security-properties","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"},{"label":"xdm.target.identity.policy"}]},{"id":"cNOmqdqWTNPqhQV63U3c","title":"xdm.target.identity.secret","pathname":"/xsiam-data-model-schema/fields/target/identity/secret","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"PC6kq7y4zTx26fjGkCZY","title":"xdm.target.identity.access_keys","pathname":"/xsiam-data-model-schema/fields/target/identity/access-keys","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"FeKI8kBy7ecQyb7SFYPV","title":"xdm.target.identity.access_statistics","pathname":"/xsiam-data-model-schema/fields/target/identity/access-statistics","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"db5QgcU4reNOPo64ls7T","title":"xdm.target.identity.key_management","pathname":"/xsiam-data-model-schema/fields/target/identity/key-management","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.identity"}]},{"id":"N3SYCgXuRd86knFQJM0H","title":"xdm.target.user","pathname":"/xsiam-data-model-schema/fields/target/user","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"SpR8p5INaIukR5zoadZl","title":"xdm.target.user.idp","pathname":"/xsiam-data-model-schema/fields/target/user/idp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"KcOMIxrI0bOgqKzQ5mli","title":"xdm.target.user.app_registration","pathname":"/xsiam-data-model-schema/fields/target/user/app-registration","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"EiqEaktQr4EwTBm4VTob","title":"xdm.target.user.app_registration.owners","pathname":"/xsiam-data-model-schema/fields/target/user/app-registration/owners","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"},{"label":"xdm.target.user.app_registration"}]},{"id":"kQeEXI4VoeAMWLNskq83","title":"xdm.target.user.group","pathname":"/xsiam-data-model-schema/fields/target/user/group","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"W27i2aRsaH4MpGzP0edA","title":"xdm.target.user.policy","pathname":"/xsiam-data-model-schema/fields/target/user/policy","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"Iyyz5Oung1UkchuZP44F","title":"xdm.target.user.policy.security_properties","pathname":"/xsiam-data-model-schema/fields/target/user/policy/security-properties","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"},{"label":"xdm.target.user.policy"}]},{"id":"RoPw5uRSqcrCCpSAXX1t","title":"xdm.target.user.secret","pathname":"/xsiam-data-model-schema/fields/target/user/secret","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"kLJo8ajpwPi6Igpi87JI","title":"xdm.target.user.access_keys","pathname":"/xsiam-data-model-schema/fields/target/user/access-keys","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"neQPH651S8TOiy1EnTiN","title":"xdm.target.user.access_statistics","pathname":"/xsiam-data-model-schema/fields/target/user/access-statistics","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"DZJoVYS9inirkQzK3VBx","title":"xdm.target.user.key_management","pathname":"/xsiam-data-model-schema/fields/target/user/key-management","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.user"}]},{"id":"OUxgLm7L7ZEKZdiFEMxo","title":"xdm.target.location","pathname":"/xsiam-data-model-schema/fields/target/location","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"Qzcun5iILq0Umv2l5ALr","title":"xdm.target.process","pathname":"/xsiam-data-model-schema/fields/target/process","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"Yv1djyIspWx6bSUB3IN5","title":"xdm.target.process.executable","pathname":"/xsiam-data-model-schema/fields/target/process/executable","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.process"}]},{"id":"pyoJQNfgCK5UKLckgDzY","title":"xdm.target.process.executable.permissions","pathname":"/xsiam-data-model-schema/fields/target/process/executable/permissions","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.process"},{"label":"xdm.target.process.executable"}]},{"id":"aVBotkJzBtth10Hztf0b","title":"xdm.target.process.executable.position","pathname":"/xsiam-data-model-schema/fields/target/process/executable/position","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.process"},{"label":"xdm.target.process.executable"}]},{"id":"y2CjRQQdD1obm8Ea6g4i","title":"xdm.target.process.executable.position.start","pathname":"/xsiam-data-model-schema/fields/target/process/executable/position/start","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.process"},{"label":"xdm.target.process.executable"},{"label":"xdm.target.process.executable.position"}]},{"id":"kS7VZ7tKGcvOZbYLRR1m","title":"xdm.target.process.executable.position.end","pathname":"/xsiam-data-model-schema/fields/target/process/executable/position/end","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.process"},{"label":"xdm.target.process.executable"},{"label":"xdm.target.process.executable.position"}]},{"id":"FXehuymHLoq6Qn0fh1ia","title":"xdm.target.application","pathname":"/xsiam-data-model-schema/fields/target/application","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"PI80XT6pZgyWm8JXYoj7","title":"xdm.target.asn","pathname":"/xsiam-data-model-schema/fields/target/asn","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"0sp0w8Axwu8xc1AnBzFq","title":"xdm.target.cloud","pathname":"/xsiam-data-model-schema/fields/target/cloud","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"cNPmAWzK40dyr136SoI8","title":"xdm.target.cloud.function","pathname":"/xsiam-data-model-schema/fields/target/cloud/function","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.cloud"}]},{"id":"zLyojSQHU2QjIfJXEmad","title":"xdm.target.module","pathname":"/xsiam-data-model-schema/fields/target/module","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"vdEMLftmqNLLRO5URWAF","title":"xdm.target.module.permissions","pathname":"/xsiam-data-model-schema/fields/target/module/permissions","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.module"}]},{"id":"8vGotEpyaRr5BA38Wqdr","title":"xdm.target.module.position","pathname":"/xsiam-data-model-schema/fields/target/module/position","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.module"}]},{"id":"4tMKs6T9zNVJbtRXvr4K","title":"xdm.target.module.position.start","pathname":"/xsiam-data-model-schema/fields/target/module/position/start","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.module"},{"label":"xdm.target.module.position"}]},{"id":"A2NEWHwr6mMyQlu4Q7iu","title":"xdm.target.module.position.end","pathname":"/xsiam-data-model-schema/fields/target/module/position/end","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.module"},{"label":"xdm.target.module.position"}]},{"id":"FXYeA2CilFv1XlVF17J7","title":"xdm.target.registry","pathname":"/xsiam-data-model-schema/fields/target/registry","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"IsRGs3USDDEcCUQkcFVJ","title":"xdm.target.registry_before","pathname":"/xsiam-data-model-schema/fields/target/registry-before","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"rM9ceiQoMrQWlOywbw1d","title":"xdm.target.file","pathname":"/xsiam-data-model-schema/fields/target/file","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"wMpx52deX7jLed0rS3A8","title":"xdm.target.file.permissions","pathname":"/xsiam-data-model-schema/fields/target/file/permissions","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file"}]},{"id":"x5414QAMjeO2ugLKUWk6","title":"xdm.target.file.position","pathname":"/xsiam-data-model-schema/fields/target/file/position","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file"}]},{"id":"MmJRKEeViF6A4GZyeO1J","title":"xdm.target.file.position.start","pathname":"/xsiam-data-model-schema/fields/target/file/position/start","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file"},{"label":"xdm.target.file.position"}]},{"id":"E8xyIllQB0BQHpqitkXH","title":"xdm.target.file.position.end","pathname":"/xsiam-data-model-schema/fields/target/file/position/end","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file"},{"label":"xdm.target.file.position"}]},{"id":"jwvV6JEhK6VTvGozmtEx","title":"xdm.target.file_before","pathname":"/xsiam-data-model-schema/fields/target/file-before","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"wGMQXTECQqlNwTo5KHkh","title":"xdm.target.file_before.permissions","pathname":"/xsiam-data-model-schema/fields/target/file-before/permissions","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file_before"}]},{"id":"cYGI9ngWwmr6mj7JOEE2","title":"xdm.target.file_before.position","pathname":"/xsiam-data-model-schema/fields/target/file-before/position","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file_before"}]},{"id":"RlkYVUQ1RCx1hGZ0fFJ1","title":"xdm.target.file_before.position.start","pathname":"/xsiam-data-model-schema/fields/target/file-before/position/start","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file_before"},{"label":"xdm.target.file_before.position"}]},{"id":"WEmY0TAWZUGILgqxJCTs","title":"xdm.target.file_before.position.end","pathname":"/xsiam-data-model-schema/fields/target/file-before/position/end","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.file_before"},{"label":"xdm.target.file_before.position"}]},{"id":"JZU3dvcfhIGDqD2emQ6s","title":"xdm.target.resource","pathname":"/xsiam-data-model-schema/fields/target/resource","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"5k72fsSPFttpdcsAIvQU","title":"xdm.target.resource_before","pathname":"/xsiam-data-model-schema/fields/target/resource-before","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"NzHfkQleGuLqLW5JidMh","title":"xdm.target.virtualization","pathname":"/xsiam-data-model-schema/fields/target/virtualization","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"}]},{"id":"R9yVhDkUupEFrR0eHBgS","title":"xdm.target.virtualization.data_center","pathname":"/xsiam-data-model-schema/fields/target/virtualization/data-center","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.virtualization"}]},{"id":"6tOppMN09XAzGt4QGPqH","title":"xdm.target.virtualization.data_store","pathname":"/xsiam-data-model-schema/fields/target/virtualization/data-store","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.virtualization"}]},{"id":"PK8AMCcbyX36H0dKEnmx","title":"xdm.target.virtualization.task","pathname":"/xsiam-data-model-schema/fields/target/virtualization/task","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.virtualization"}]},{"id":"1RdzgDjuvkXRwyn4QeEn","title":"xdm.target.virtualization.vm","pathname":"/xsiam-data-model-schema/fields/target/virtualization/vm","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.target"},{"label":"xdm.target.virtualization"}]},{"id":"qAimj9FgiYk1xGkyxHMp","title":"xdm.observer","pathname":"/xsiam-data-model-schema/fields/observer","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"AyqDxNnolLuwNgUEZU1l","title":"xdm.alert","pathname":"/xsiam-data-model-schema/fields/alert","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"cjHli4XcUw0aDcQOu8Mg","title":"xdm.network","pathname":"/xsiam-data-model-schema/fields/network","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"VMZSOtlDE6NNKtp0d0Nu","title":"xdm.network.icmp","pathname":"/xsiam-data-model-schema/fields/network/icmp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"LBkzyLJkQq6CEypHKxuY","title":"xdm.network.dhcp","pathname":"/xsiam-data-model-schema/fields/network/dhcp","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"e5sLekss1mZOZgd9HcuX","title":"xdm.network.dns","pathname":"/xsiam-data-model-schema/fields/network/dns","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"0jhQbc2pF4GeVWnlnvbf","title":"xdm.network.dns.dns_question","pathname":"/xsiam-data-model-schema/fields/network/dns/dns-question","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.dns"}]},{"id":"J6D403Xq5DLm7d9CYpSX","title":"xdm.network.dns.dns_resource_record","pathname":"/xsiam-data-model-schema/fields/network/dns/dns-resource-record","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.dns"}]},{"id":"A4BzFtVsG3doxjZlEbOu","title":"xdm.network.http","pathname":"/xsiam-data-model-schema/fields/network/http","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"bBovJiClrhvF4WnBUjKU","title":"xdm.network.http.request","pathname":"/xsiam-data-model-schema/fields/network/http/request","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.http"}]},{"id":"27EnNXmhtaQXBZiLHxCq","title":"xdm.network.http.request.headers","pathname":"/xsiam-data-model-schema/fields/network/http/request/headers","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.http"},{"label":"xdm.network.http.request"}]},{"id":"JleDdFed0iiSdsxjJcdc","title":"xdm.network.http.request.query_params","pathname":"/xsiam-data-model-schema/fields/network/http/request/query-params","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.http"},{"label":"xdm.network.http.request"}]},{"id":"cQac55bhdV4S5FiDRXdm","title":"xdm.network.http.response","pathname":"/xsiam-data-model-schema/fields/network/http/response","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.http"}]},{"id":"aso63uIkfSGzhMH1IHJC","title":"xdm.network.http.response.headers","pathname":"/xsiam-data-model-schema/fields/network/http/response/headers","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.http"},{"label":"xdm.network.http.response"}]},{"id":"INtiTzkZA11PpzoNzEXl","title":"xdm.network.http.http_header","pathname":"/xsiam-data-model-schema/fields/network/http/http-header","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.http"}]},{"id":"6j7o7hjUqObkyrmUG8RX","title":"xdm.network.tls","pathname":"/xsiam-data-model-schema/fields/network/tls","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"rziPN05brM5cuSyrMZYx","title":"xdm.network.tls.client_certificate","pathname":"/xsiam-data-model-schema/fields/network/tls/client-certificate","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.tls"}]},{"id":"B0kzscCWJDB4aeAO2LLb","title":"xdm.network.tls.client_certificate.subject_details","pathname":"/xsiam-data-model-schema/fields/network/tls/client-certificate/subject-details","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.tls"},{"label":"xdm.network.tls.client_certificate"}]},{"id":"v3nKBSvewEQ4R24D3xud","title":"xdm.network.tls.client_certificate.issuer_details","pathname":"/xsiam-data-model-schema/fields/network/tls/client-certificate/issuer-details","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.tls"},{"label":"xdm.network.tls.client_certificate"}]},{"id":"7hPkGl7LYhqnksfcRCqU","title":"xdm.network.tls.server_certificate","pathname":"/xsiam-data-model-schema/fields/network/tls/server-certificate","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.tls"}]},{"id":"uBTES9uVVDvyZTI9VInw","title":"xdm.network.tls.server_certificate.subject_details","pathname":"/xsiam-data-model-schema/fields/network/tls/server-certificate/subject-details","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.tls"},{"label":"xdm.network.tls.server_certificate"}]},{"id":"OKSLXHl0b6hYifD0G1Do","title":"xdm.network.tls.server_certificate.issuer_details","pathname":"/xsiam-data-model-schema/fields/network/tls/server-certificate/issuer-details","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"},{"label":"xdm.network.tls"},{"label":"xdm.network.tls.server_certificate"}]},{"id":"033FUj7KgEs4jzSXLFik","title":"xdm.network.dcerpc","pathname":"/xsiam-data-model-schema/fields/network/dcerpc","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"51iY348cblfugnKT3g5y","title":"xdm.network.ldap","pathname":"/xsiam-data-model-schema/fields/network/ldap","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"POBbI5ewSV4m4orEPSHy","title":"xdm.network.vpn","pathname":"/xsiam-data-model-schema/fields/network/vpn","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.network"}]},{"id":"DSfagc6ybhMjIQea8ruz","title":"xdm.auth","pathname":"/xsiam-data-model-schema/fields/auth","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"37YXlcSMVsgmzHQfYXaw","title":"xdm.auth.kerberos_tgt","pathname":"/xsiam-data-model-schema/fields/auth/kerberos-tgt","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.auth"}]},{"id":"nPJOj2TB58eYbmFE8MF4","title":"xdm.auth.kerberos_tgs","pathname":"/xsiam-data-model-schema/fields/auth/kerberos-tgs","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.auth"}]},{"id":"TI1DpVxNJbpV0y36kVAT","title":"xdm.auth.ntlm","pathname":"/xsiam-data-model-schema/fields/auth/ntlm","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.auth"}]},{"id":"jbYhwDqmsTAopPNi6dTw","title":"xdm.auth.mfa","pathname":"/xsiam-data-model-schema/fields/auth/mfa","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.auth"}]},{"id":"TiiDPPhJhR5Y025UlAZl","title":"xdm.logon","pathname":"/xsiam-data-model-schema/fields/logon","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"WI9nI4xx5BT49d7P5Ucq","title":"xdm.database","pathname":"/xsiam-data-model-schema/fields/database","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"L8Rr1QZWCYeMwB2Y2vVL","title":"xdm.email","pathname":"/xsiam-data-model-schema/fields/email","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"}]},{"id":"rPwspJXjiZ9B3qcWBKnO","title":"xdm.email.attachment","pathname":"/xsiam-data-model-schema/fields/email/attachment","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.email"}]},{"id":"g4zOzBDhImddJUTBcSr2","title":"xdm.email.attachment.permissions","pathname":"/xsiam-data-model-schema/fields/email/attachment/permissions","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.email"},{"label":"xdm.email.attachment"}]},{"id":"j55sbRY6fLwtxR6zKyGb","title":"xdm.email.attachment.position","pathname":"/xsiam-data-model-schema/fields/email/attachment/position","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.email"},{"label":"xdm.email.attachment"}]},{"id":"WadUrRxvJdBh9Oq3MQ1I","title":"xdm.email.attachment.position.start","pathname":"/xsiam-data-model-schema/fields/email/attachment/position/start","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.email"},{"label":"xdm.email.attachment"},{"label":"xdm.email.attachment.position"}]},{"id":"XDUVzXkiTh5TjFtfU2li","title":"xdm.email.attachment.position.end","pathname":"/xsiam-data-model-schema/fields/email/attachment/position/end","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM Fields"},{"label":"xdm.email"},{"label":"xdm.email.attachment"},{"label":"xdm.email.attachment.position"}]},{"id":"ekOjeaoFKum9Ob508vKJ","title":"XDM System Fields","pathname":"/xsiam-data-model-schema/system-fields","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"}]},{"id":"W0ImcvvcbBYFOUjenbtb","title":"_insert_time","pathname":"/xsiam-data-model-schema/system-fields/insert-time","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM System Fields"}]},{"id":"me1iwzIY0NMbr1Cma1T7","title":"_time","pathname":"/xsiam-data-model-schema/system-fields/time","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM System Fields"}]},{"id":"aWiztjUyfBmjKuAapBci","title":"_vendor","pathname":"/xsiam-data-model-schema/system-fields/vendor","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM System Fields"}]},{"id":"Ry7B5dpS543pTeRbfSoG","title":"_product","pathname":"/xsiam-data-model-schema/system-fields/product","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM System Fields"}]},{"id":"Wxso6i8CB7fyMtLwAxWy","title":"_reception_time","pathname":"/xsiam-data-model-schema/system-fields/reception-time","siteSpaceId":"sitesp_yi3mz","description":"","breadcrumbs":[{"label":"Schemas","icon":"qrcode-read"},{"label":"XSIAM Data Model Schema","icon":"qrcode-read"},{"label":"XDM System Fields"}]},{"id":"5owoDAWGuwzAovtOflFJ","title":"Linux Kernel Versions","pathname":"/linux-kernel-versions","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"J8zEv5glENsEcaJJawmP","title":"AlmaLinux","pathname":"/linux-kernel-versions/almalinux","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"MbnG81nJkU3XX3L6rIQU","title":"AlmaLinux [x86_64]","pathname":"/linux-kernel-versions/almalinux/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"AlmaLinux"}]},{"id":"gS9USpVVcFJSfyKqmk3W","title":"AlmaLinux 8 [x86_64]","pathname":"/linux-kernel-versions/almalinux/x86_64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"AlmaLinux"},{"label":"AlmaLinux [x86_64]"}]},{"id":"eAFbFKdNZ8f1JhGUYyqH","title":"AlmaLinux 9 [x86_64]","pathname":"/linux-kernel-versions/almalinux/x86_64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"AlmaLinux"},{"label":"AlmaLinux [x86_64]"}]},{"id":"yODnBsk6VWRswfyNH09k","title":"AlmaLinux 10 [x86_64]","pathname":"/linux-kernel-versions/almalinux/x86_64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"AlmaLinux"},{"label":"AlmaLinux [x86_64]"}]},{"id":"xSFRgOpISPkD1W88zCDR","title":"Amazon Linux","pathname":"/linux-kernel-versions/amazon-linux","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"KYjyz3RtMoZIWoQVSMAg","title":"Amazon Linux [x86_64]","pathname":"/linux-kernel-versions/amazon-linux/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux"}]},{"id":"a5owYN68NtQfWctuGtY7","title":"Amazon Linux 2018 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux/x86_64/2018","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux"},{"label":"Amazon Linux [x86_64]"}]},{"id":"K0BePaMDS2ixhY5CT4nr","title":"Amazon Linux 2","pathname":"/linux-kernel-versions/amazon-linux-2","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"xkn4HzX5iI0ZLLoffj7M","title":"Amazon Linux 2 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux-2/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"}]},{"id":"YUNizHPW2KkNh3GQoEUh","title":"Amazon Linux 2 2017 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux-2/x86_64/2017","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [x86_64]"}]},{"id":"lAyMOILMNY2ACIjHksSS","title":"Amazon Linux 2 2018 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux-2/x86_64/2018","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [x86_64]"}]},{"id":"UasHz2ipHwz7vyL8TaRg","title":"Amazon Linux 2 2019 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux-2/x86_64/2019","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [x86_64]"}]},{"id":"bCfTLt86Xjim65yciMSx","title":"Amazon Linux 2 2020 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux-2/x86_64/2020","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [x86_64]"}]},{"id":"bO4h0y18WjTt2OqwJ70K","title":"Amazon Linux 2 [aarch64]","pathname":"/linux-kernel-versions/amazon-linux-2/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"}]},{"id":"3lbkLpJF9gfSpTViYRLM","title":"Amazon Linux 2 2017 [aarch64]","pathname":"/linux-kernel-versions/amazon-linux-2/aarch64/2017","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [aarch64]"}]},{"id":"S5dmmpAUlsC5hU8w0AH3","title":"Amazon Linux 2 2018 [aarch64]","pathname":"/linux-kernel-versions/amazon-linux-2/aarch64/2018","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [aarch64]"}]},{"id":"UOFMBU0cLvyd5xSfTZSj","title":"Amazon Linux 2 2019 [aarch64]","pathname":"/linux-kernel-versions/amazon-linux-2/aarch64/2019","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [aarch64]"}]},{"id":"H1imk1BpBnbTwN32ysrJ","title":"Amazon Linux 2 2020 [aarch64]","pathname":"/linux-kernel-versions/amazon-linux-2/aarch64/2020","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2"},{"label":"Amazon Linux 2 [aarch64]"}]},{"id":"geSoJpApvJxj8DWPSquM","title":"Amazon Linux 2023","pathname":"/linux-kernel-versions/amazon-linux-2023","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"MU9Yq3YQJp4U7INwnicG","title":"Amazon Linux 2023 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux-2023/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2023"}]},{"id":"2e9BeCU5F6d1GfPrkVPp","title":"Amazon Linux 2023 2023 [x86_64]","pathname":"/linux-kernel-versions/amazon-linux-2023/x86_64/2023","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2023"},{"label":"Amazon Linux 2023 [x86_64]"}]},{"id":"2cfba4KQEmOvqQm02hR1","title":"Amazon Linux 2023 [aarch64]","pathname":"/linux-kernel-versions/amazon-linux-2023/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2023"}]},{"id":"mURz5X4lJZ12H2AWYJXQ","title":"Amazon Linux 2023 2023 [aarch64]","pathname":"/linux-kernel-versions/amazon-linux-2023/aarch64/2023","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Amazon Linux 2023"},{"label":"Amazon Linux 2023 [aarch64]"}]},{"id":"SjY3O6ypFvZJTWKRPDb1","title":"CentOS","pathname":"/linux-kernel-versions/centos","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"hfNqSk9uwFBAJAFHOdXP","title":"CentOS [x86_64]","pathname":"/linux-kernel-versions/centos/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS"}]},{"id":"ZbB4R4pN9liaF74ra4eh","title":"CentOS 6 [x86_64]","pathname":"/linux-kernel-versions/centos/x86_64/6","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS"},{"label":"CentOS [x86_64]"}]},{"id":"kuWR1dHMkUVtPPkR8U7M","title":"CentOS 7 [x86_64]","pathname":"/linux-kernel-versions/centos/x86_64/7","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS"},{"label":"CentOS [x86_64]"}]},{"id":"g7q5Kl8GLmjFXhXorsaB","title":"CentOS 8 [x86_64]","pathname":"/linux-kernel-versions/centos/x86_64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS"},{"label":"CentOS [x86_64]"}]},{"id":"7oWcBlWhjyGBFm974MnB","title":"CentOS [aarch64]","pathname":"/linux-kernel-versions/centos/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS"}]},{"id":"vSckf2Oy7HSljKQdMeB8","title":"CentOS 7 [aarch64]","pathname":"/linux-kernel-versions/centos/aarch64/7","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS"},{"label":"CentOS [aarch64]"}]},{"id":"blvZsTbVvZPYnReyKpBl","title":"CentOS 8 [aarch64]","pathname":"/linux-kernel-versions/centos/aarch64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS"},{"label":"CentOS [aarch64]"}]},{"id":"N9qFZPIjulCQnbIh9vIn","title":"CentOS Stream","pathname":"/linux-kernel-versions/centos-stream","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"A9HkoBoxcqQXBmaoobrk","title":"CentOS Stream [x86_64]","pathname":"/linux-kernel-versions/centos-stream/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS Stream"}]},{"id":"4G89Y1EhWfAqq1PMwr4l","title":"CentOS Stream 8 [x86_64]","pathname":"/linux-kernel-versions/centos-stream/x86_64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS Stream"},{"label":"CentOS Stream [x86_64]"}]},{"id":"1KKiQ5IPO5Dl42jhDI6t","title":"CentOS Stream 9 [x86_64]","pathname":"/linux-kernel-versions/centos-stream/x86_64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS Stream"},{"label":"CentOS Stream [x86_64]"}]},{"id":"fbScEjmCHUMNhCZwX91b","title":"CentOS Stream [aarch64]","pathname":"/linux-kernel-versions/centos-stream/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS Stream"}]},{"id":"ereTCjQGV28S5eW1P1zF","title":"CentOS Stream 8 [aarch64]","pathname":"/linux-kernel-versions/centos-stream/aarch64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"CentOS Stream"},{"label":"CentOS Stream [aarch64]"}]},{"id":"7n6Dlll2p6HxpeiORRil","title":"Debian","pathname":"/linux-kernel-versions/debian","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"da6nxyBKK0dZboBSZdyg","title":"Debian [x86_64]","pathname":"/linux-kernel-versions/debian/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"}]},{"id":"5Lr76vgzOPj8iHGYFJ7D","title":"Debian 9 [x86_64]","pathname":"/linux-kernel-versions/debian/x86_64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"},{"label":"Debian [x86_64]"}]},{"id":"mKeDVub2tBNfSKqH39KW","title":"Debian 10 [x86_64]","pathname":"/linux-kernel-versions/debian/x86_64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"},{"label":"Debian [x86_64]"}]},{"id":"LGEJ4pgbMJwzflw3N583","title":"Debian 11 [x86_64]","pathname":"/linux-kernel-versions/debian/x86_64/11","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"},{"label":"Debian [x86_64]"}]},{"id":"sXAk5wgo5GIUuwgognLL","title":"Debian 12 [x86_64]","pathname":"/linux-kernel-versions/debian/x86_64/12","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"},{"label":"Debian [x86_64]"}]},{"id":"HpJmNgVm0KBzeA22Q3Bo","title":"Debian 13 [x86_64]","pathname":"/linux-kernel-versions/debian/x86_64/13","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"},{"label":"Debian [x86_64]"}]},{"id":"LBJKEmnbWOKd7Goh3sGZ","title":"Debian [aarch64]","pathname":"/linux-kernel-versions/debian/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"}]},{"id":"1f41dDBD0OYa7cTvrDS4","title":"Debian 10 [aarch64]","pathname":"/linux-kernel-versions/debian/aarch64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Debian"},{"label":"Debian [aarch64]"}]},{"id":"wv8WK326v1rfFGtwPHNz","title":"OpenSUSE","pathname":"/linux-kernel-versions/opensuse","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"ojcn9qkVp335dn4duBNt","title":"OpenSUSE [x86_64]","pathname":"/linux-kernel-versions/opensuse/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"OpenSUSE"}]},{"id":"dhx3dbMwm8zCfOzawaxy","title":"OpenSUSE 15 [x86_64]","pathname":"/linux-kernel-versions/opensuse/x86_64/15","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"OpenSUSE"},{"label":"OpenSUSE [x86_64]"}]},{"id":"az8WmtIZTzFX5BE7as2t","title":"Oracle Linux","pathname":"/linux-kernel-versions/oracle-linux","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"BZYfgrcrsurLPiWnul18","title":"Oracle Linux [x86_64]","pathname":"/linux-kernel-versions/oracle-linux/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"}]},{"id":"KC5iHsahSZsxOkTiy9hS","title":"Oracle Linux 6 [x86_64]","pathname":"/linux-kernel-versions/oracle-linux/x86_64/6","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [x86_64]"}]},{"id":"jVb998vIxDE5RwAqYJ60","title":"Oracle Linux 7 [x86_64]","pathname":"/linux-kernel-versions/oracle-linux/x86_64/7","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [x86_64]"}]},{"id":"Md5DcCQpqBZrHhb3cd5h","title":"Oracle Linux 8 [x86_64]","pathname":"/linux-kernel-versions/oracle-linux/x86_64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [x86_64]"}]},{"id":"8YBKRWIXKFLfPmOHDurl","title":"Oracle Linux 9 [x86_64]","pathname":"/linux-kernel-versions/oracle-linux/x86_64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [x86_64]"}]},{"id":"gshrx56q75ZbewZxYtzr","title":"Oracle Linux 10 [x86_64]","pathname":"/linux-kernel-versions/oracle-linux/x86_64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [x86_64]"}]},{"id":"mCe0fRr5LtP4b9Zm5xLu","title":"Oracle Linux [aarch64]","pathname":"/linux-kernel-versions/oracle-linux/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"}]},{"id":"xhhi2uDU9ipIeZ25PtmQ","title":"Oracle Linux 8 [aarch64]","pathname":"/linux-kernel-versions/oracle-linux/aarch64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [aarch64]"}]},{"id":"FLbDZ6W6pq0pILvweFWK","title":"Oracle Linux 9 [aarch64]","pathname":"/linux-kernel-versions/oracle-linux/aarch64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [aarch64]"}]},{"id":"8dTcDwLq3EqaGXgDlS3K","title":"Oracle Linux 10 [aarch64]","pathname":"/linux-kernel-versions/oracle-linux/aarch64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Oracle Linux"},{"label":"Oracle Linux [aarch64]"}]},{"id":"nlzxW5MHo1M1J4a4TZoV","title":"Red Hat Enterprise Linux (RHEL)","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"9k0Udi8Bfumn7tCFYhFd","title":"Red Hat Enterprise Linux (RHEL) [x86_64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"}]},{"id":"kg0aEnO2aYlqQorY6Exx","title":"Red Hat Enterprise Linux (RHEL) 6 [x86_64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/x86_64/6","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [x86_64]"}]},{"id":"eGsJe8tPQbNz7RyHHfhm","title":"Red Hat Enterprise Linux (RHEL) 7 [x86_64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/x86_64/7","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [x86_64]"}]},{"id":"gzuR0Yj2CHmKawPipkwm","title":"Red Hat Enterprise Linux (RHEL) 8 [x86_64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/x86_64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [x86_64]"}]},{"id":"pFiO9A8eyefbVmdGlKNL","title":"Red Hat Enterprise Linux (RHEL) 9 [x86_64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/x86_64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [x86_64]"}]},{"id":"sSKdWIGxmiyonum3LnsP","title":"Red Hat Enterprise Linux (RHEL) 10 [x86_64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/x86_64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [x86_64]"}]},{"id":"iTNlWhKgGaZKEpoVkflj","title":"Red Hat Enterprise Linux (RHEL) [aarch64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"}]},{"id":"IiKKtomJbeQDuR3qD8xf","title":"Red Hat Enterprise Linux (RHEL) 8 [aarch64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/aarch64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [aarch64]"}]},{"id":"sjfWnET508dLZVZHzBTb","title":"Red Hat Enterprise Linux (RHEL) 9 [aarch64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/aarch64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [aarch64]"}]},{"id":"JytlktTjLaPb3nyklDLk","title":"Red Hat Enterprise Linux (RHEL) 10 [aarch64]","pathname":"/linux-kernel-versions/red-hat-enterprise-linux-rhel/aarch64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Red Hat Enterprise Linux (RHEL)"},{"label":"Red Hat Enterprise Linux (RHEL) [aarch64]"}]},{"id":"cTVpFqO6CYBANeUHlGfc","title":"Rocky Linux","pathname":"/linux-kernel-versions/rocky-linux","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"PC1iKb72EJWs8dAjskes","title":"Rocky Linux [x86_64]","pathname":"/linux-kernel-versions/rocky-linux/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Rocky Linux"}]},{"id":"eDYc7AqyNIi4pHOTh7NH","title":"Rocky Linux 8 [x86_64]","pathname":"/linux-kernel-versions/rocky-linux/x86_64/8","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Rocky Linux"},{"label":"Rocky Linux [x86_64]"}]},{"id":"LwDrUrGvLtieJCS9ltUb","title":"Rocky Linux 9 [x86_64]","pathname":"/linux-kernel-versions/rocky-linux/x86_64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Rocky Linux"},{"label":"Rocky Linux [x86_64]"}]},{"id":"WbDQ1TykQ2l3ho0WT0n9","title":"Rocky Linux 10 [x86_64]","pathname":"/linux-kernel-versions/rocky-linux/x86_64/10","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Rocky Linux"},{"label":"Rocky Linux [x86_64]"}]},{"id":"tFB1ebsH5qzuZe1e6kpN","title":"Rocky Linux [aarch64]","pathname":"/linux-kernel-versions/rocky-linux/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Rocky Linux"}]},{"id":"5fxsvF8kgyMaHMlJfU0W","title":"Rocky Linux 9 [aarch64]","pathname":"/linux-kernel-versions/rocky-linux/aarch64/9","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Rocky Linux"},{"label":"Rocky Linux [aarch64]"}]},{"id":"CZfxXnYuDI37oOcHv2YP","title":"SUSE Linux Enterprise Server","pathname":"/linux-kernel-versions/suse-linux-enterprise-server","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"klTltUIDXPLwPw17kr7A","title":"SUSE Linux Enterprise Server [x86_64]","pathname":"/linux-kernel-versions/suse-linux-enterprise-server/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"SUSE Linux Enterprise Server"}]},{"id":"CvNkjoT4nwl1EHRwXFAN","title":"SUSE Linux Enterprise Server 11 [x86_64]","pathname":"/linux-kernel-versions/suse-linux-enterprise-server/x86_64/11","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"SUSE Linux Enterprise Server"},{"label":"SUSE Linux Enterprise Server [x86_64]"}]},{"id":"roXXb8egZLQU9ttmJzQ5","title":"SUSE Linux Enterprise Server 12 [x86_64]","pathname":"/linux-kernel-versions/suse-linux-enterprise-server/x86_64/12","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"SUSE Linux Enterprise Server"},{"label":"SUSE Linux Enterprise Server [x86_64]"}]},{"id":"fSaeZFSVM1wkenLpZnWI","title":"SUSE Linux Enterprise Server 15 [x86_64]","pathname":"/linux-kernel-versions/suse-linux-enterprise-server/x86_64/15","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"SUSE Linux Enterprise Server"},{"label":"SUSE Linux Enterprise Server [x86_64]"}]},{"id":"DfudTyayv204yitAoIkX","title":"SUSE Linux Enterprise Server 16 [x86_64]","pathname":"/linux-kernel-versions/suse-linux-enterprise-server/x86_64/16","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"SUSE Linux Enterprise Server"},{"label":"SUSE Linux Enterprise Server [x86_64]"}]},{"id":"GpCy2eDV0wCXVmhTX0Ue","title":"Ubuntu","pathname":"/linux-kernel-versions/ubuntu","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"}]},{"id":"wrx7ewoIA28QW1FYeVjN","title":"Ubuntu [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"}]},{"id":"1kOWF1tY42WNWzSZOfFQ","title":"Ubuntu 12 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/12","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"jv9jNCTwfnNmr8933Nn4","title":"Ubuntu 14 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/14","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"aWyesnFyLP2C5f4i68Nw","title":"Ubuntu 16 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/16","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"IRllTEXN0GQof5eNI0XY","title":"Ubuntu 18 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/18","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"PgDhGoHkvPsE9FeHiV9o","title":"Ubuntu 20 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/20","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"eRrxC4iWkTz2A7mep8qv","title":"Ubuntu 22 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/22","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"fgaxlsxtXeNfQjypuyDe","title":"Ubuntu 24 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/24","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"g9MdOdbZIuU5L1mIQqj3","title":"Ubuntu 26 [x86_64]","pathname":"/linux-kernel-versions/ubuntu/x86_64/26","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [x86_64]"}]},{"id":"yRUcYQ8AqdEAVJuyl0fc","title":"Ubuntu [aarch64]","pathname":"/linux-kernel-versions/ubuntu/aarch64","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"}]},{"id":"7wBrxLMYKqXTxdZRKsQr","title":"Ubuntu 18 [aarch64]","pathname":"/linux-kernel-versions/ubuntu/aarch64/18","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [aarch64]"}]},{"id":"cp3JTYZPWQacgPWxfbf8","title":"Ubuntu 20 [aarch64]","pathname":"/linux-kernel-versions/ubuntu/aarch64/20","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [aarch64]"}]},{"id":"HWwqgp1e9mtjcQAE2Uiy","title":"Ubuntu 22 [aarch64]","pathname":"/linux-kernel-versions/ubuntu/aarch64/22","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [aarch64]"}]},{"id":"QOvrCOZrrl2LbHGvYFCf","title":"Ubuntu 24 [aarch64]","pathname":"/linux-kernel-versions/ubuntu/aarch64/24","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [aarch64]"}]},{"id":"lW5YxaiowDOw8moiICrB","title":"Ubuntu 26 [aarch64]","pathname":"/linux-kernel-versions/ubuntu/aarch64/26","siteSpaceId":"sitesp_vIzkH","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Linux Kernel Versions","icon":"grid"},{"label":"Ubuntu"},{"label":"Ubuntu [aarch64]"}]},{"id":"3efdc5ba88af9029f120242a51e879a655b6e31b","title":"Where can I install the Cortex XDR agent?","pathname":"/compatibility-matrix","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"}]},{"id":"dca3e59deeffddd47aa713e6d383a5df3f1c7976","title":"Endpoint operating systems supported","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/endpoint-operating-systems-supported","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"}]},{"id":"b6b7e6ad3a344278ed0cacdd041802bb6c4f6d74","title":"Mac","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/endpoint-operating-systems-supported/mac","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"},{"label":"Endpoint operating systems supported"}]},{"id":"0e8faa040895c9021eff8c35375fb6bef519d101","title":"Windows","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/endpoint-operating-systems-supported/windows","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"},{"label":"Endpoint operating systems supported"}]},{"id":"72479cd74455d6c86eabac8558ed14256d63af0e","title":"Linux","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/endpoint-operating-systems-supported/linux","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"},{"label":"Endpoint operating systems supported"}]},{"id":"eac4363a8d275500a14f92174486e2af1fad6330","title":"Cloud platforms supported with Cortex XDR agent","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/cloud-platforms-supported-with-cortex-xdr-agent","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"}]},{"id":"f6c9bb590052db0d6f000e4b7e5f1aa1ba1e5819","title":"Kubernetes platforms supported","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/kubernetes-platforms-supported","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"}]},{"id":"b15ad73730002cb6563f8d8242a0ca587e6518fb","title":"Virtual applications supported","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/virtual-applications-supported","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"}]},{"id":"525f155f8fdd918d3cee224fcc69cd5d98815e2e","title":"Mobile operating systems supported with Cortex XDR","pathname":"/compatibility-matrix/where-can-i-install-the-cortex-xdr-agent/mobile-operating-systems-supported-with-cortex-xdr","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Where can I install the Cortex XDR agent?"}]},{"id":"e3012204c745d058421bafad1d03b0292b8121a9","title":"Cortex XDR agent compatibility with third-party security products","pathname":"/compatibility-matrix/cortex-xdr-agent-compatibility-with-third-party-security-products","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"}]},{"id":"bXwsc9Ol5I9Q4xvFIHjk","title":"Third-party Windows security applications","pathname":"/compatibility-matrix/cortex-xdr-agent-compatibility-with-third-party-security-products/third-party-windows-security-applications","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Cortex XDR agent compatibility with third-party security products"}]},{"id":"GUy7b1G1Rdq3ThDof6NH","title":"Third-party Mac security applications","pathname":"/compatibility-matrix/cortex-xdr-agent-compatibility-with-third-party-security-products/third-party-mac-security-applications","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Cortex XDR agent compatibility with third-party security products"}]},{"id":"gulNCTCO92SB38dYD9FS","title":"Third-party Linux security applications","pathname":"/compatibility-matrix/cortex-xdr-agent-compatibility-with-third-party-security-products/third-party-linux-security-applications","siteSpaceId":"sitesp_o9MWB","description":"","breadcrumbs":[{"label":"Kernels & Matrices","icon":"grid"},{"label":"Compatibility Matrix ","icon":"grid"},{"label":"Cortex XDR agent compatibility with third-party security products"}]},{"id":"pPrs5x74DaSCziIBFlZd","title":"Getting Started","pathname":"/cortex-xsiam-developer-guide","siteSpaceId":"sitesp_p1Ikq","description":"Get started developing content for Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"XEuVDaQSkIAg4QQeWiY1","title":"Design","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/design","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM design guidance for content and Marketplace packs.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"}]},{"id":"Qpp3Xxr29Dq7dmQSEWBV","title":"Use Case Design for Cortex XSIAM","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/design/use-case-design-for-cortex-xsiam","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for designing efficient incident investigation workflows.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Design"}]},{"id":"mXzg0y3ZsToiYAsY1oHr","title":"Development scope","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/design/development-scope","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for defining your content development scope.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Design"}]},{"id":"PNFTrflLVLuwBtXzDKwK","title":"Integration design","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/design/integration-design","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for designing reliable, documented integrations.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Design"}]},{"id":"UyzzSh8NiOyc1GQM1XaU","title":"Design best practices","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/design/design-best-practices","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM best practices for designing integrations.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Design"}]},{"id":"faIqNyhWy39NJY9cJfCD","title":"Content development environments","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/content-development-environments","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM development environments and tools for content authors.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"}]},{"id":"acxbP6myjsCVQ6VoG1hm","title":"IDE for script development","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/content-development-environments/ide-for-script-development","siteSpaceId":"sitesp_p1Ikq","description":"Use the Cortex XSIAM built-in IDE to create and edit automation scripts, access Script Helper functions, configure script settings, and use editor keyboard shortcuts.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Content development environments"}]},{"id":"kyNIE5UAxlLVUUriStW0","title":"Set up a local development environment","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/content-development-environments/set-up-a-local-development-environment","siteSpaceId":"sitesp_p1Ikq","description":"Steps for setting up a local integration development environment in Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Content development environments"}]},{"id":"kUOcM2xhgLYflNdBvYbQ","title":"Set up a GitHub Codespace environment","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/content-development-environments/set-up-a-github-codespace-environment","siteSpaceId":"sitesp_p1Ikq","description":"Steps for setting up a GitHub Codespaces development environment in Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Content development environments"}]},{"id":"Jd352nW375pGQxsyn28C","title":"Set up a containerized development environment","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/content-development-environments/set-up-a-containerized-development-environment","siteSpaceId":"sitesp_p1Ikq","description":"Set up a Docker-based Cortex XSIAM content development environment with Visual Studio Code and Dev Containers.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Content development environments"}]},{"id":"hmQczScCJZY1MKHg1Xci","title":"Demisto SDK","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/content-development-environments/demisto-sdk","siteSpaceId":"sitesp_p1Ikq","description":"Use the Demisto SDK Python library to facilitate the Cortex XSIAM content development process.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Content development environments"}]},{"id":"2oTb8QeNN3l4fD6cNERQ","title":"Visual Studio Code extension","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/content-development-environments/visual-studio-code-extension","siteSpaceId":"sitesp_p1Ikq","description":"Use Visual Studio Code extension to design and author scripts and integrations for Cortex XSIAM directly from VS Code.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"},{"label":"Content development environments"}]},{"id":"YWVyGg87pBrj0HEY1Wfy","title":"Frequently asked questions","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/readme/frequently-asked-questions","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM development FAQs covering IDEs, tools, languages, operating systems, licensing, and CLA troubleshooting.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Getting Started"}]},{"id":"0DI1TeWEHTK8GpcF91Nq","title":"Integrations and scripts","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for developing and testing integrations and scripts.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"O243b1RGvIdk7caTPafW","title":"Components","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/components","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM integration and script components, metadata, and file requirements.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"}]},{"id":"UPJeLuSmZnttEYytSqAb","title":"Integration directory structure","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/components/integration-directory-structure","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM integration directory structure and required files.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Components"}]},{"id":"fWnyaI1VHLEBsOdFwXNC","title":"Integration metadata YAML file","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/components/integration-metadata-yaml-file","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM integration and script metadata YAML file reference.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Components"}]},{"id":"6pZeA7biRgh7KM3u2ebb","title":"Integration and script parameter types","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/components/integration-and-script-parameter-types","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM parameter types for integration instances and scripts.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Components"}]},{"id":"XjBDstWrzetUDx5dENHZ","title":"Integration description file","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/components/integration-description-file","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM integration description files and instance configuration.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Components"}]},{"id":"YtIRhlVYitNOsUObnhzY","title":"Integration Logo Requirements","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/components/integration-logo-requirements","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM integration logo requirements for size and background.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Components"}]},{"id":"4Q9Esr15Tqao5YJLkfx6","title":"Developing","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing","siteSpaceId":"sitesp_p1Ikq","description":"Code conventions for Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"}]},{"id":"h2Cm7ZBgjXEm9JLxbC0z","title":"Python code conventions","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/python-code-conventions","siteSpaceId":"sitesp_p1Ikq","description":"Python code conventions for Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"x9Wn40L1oeW61M5RqoOO","title":"PowerShell","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/powershell","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM PowerShell development guidance.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"HUNpbgOAyAAPsp2qNTLj","title":"General naming conventions","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/general-naming-conventions","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM naming conventions for integrations, commands, and outputs.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"GN2y3yR9mDeAlXx4v7Ys","title":"Integration Parameters","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/integration-parameters","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM configurable integration parameter types.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"C9BIAiwWrFQ1iH3UQ1pH","title":"Context and outputs","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/context-and-outputs","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM context maps and outputs for integrations and playbooks.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"FIyMzVPfKEP7h0ePd301","title":"Context standards","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/context-standards","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM standards for structuring incident context data.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"ZKQ03brXKv5RRoT0v6jp","title":"Generic commands","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/generic-commands","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM generic commands for consistent integration workflows.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"Un3vSz9xCecYKVthf6EU","title":"Reputation and DBot score","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/reputation-and-dbot-score","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for indicator reputation and DBot scores.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"X5dSPgRBRzuqXSe2Nukf","title":"Integration commands","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/integration-commands","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM integration command design, arguments, and outputs.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"SlxGxPvC6LFmkpmYbKHt","title":"Using Docker","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/developing/using-docker","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for running integrations and scripts with Docker.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Developing"}]},{"id":"T4HrDW2CmchGhjhsx69P","title":"Advanced topics","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics","siteSpaceId":"sitesp_p1Ikq","description":"Advanced information for content development in Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"}]},{"id":"zTAzlkI77WS85akMQfw8","title":"Fetching credentials","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/fetching-credentials","siteSpaceId":"sitesp_p1Ikq","description":"Integrate with third-party credential vaults for Cortex XSIAM to authenticate with integrations.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"DoK0PTRCtXHDjiCKMlis","title":"Event collector integrations","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/event-collector-integrations","siteSpaceId":"sitesp_p1Ikq","description":"Develop event collector integrations to fetch events and logs from external products to Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"st5WdNecfbcxHgtXheoC","title":"Feed Integrations","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/feed-integrations","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for developing feed integrations.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"u1s4yhm3Tc96qnefDN4A","title":"Long Running Containers","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/long-running-containers","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for long-running integration containers.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"mbwn4JDJfdkgZZt9CV4D","title":"Transform Language (DT)","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/transform-language-dt","siteSpaceId":"sitesp_p1Ikq","description":"Use DT for various context related functions in Cortex XSIAM. DT is a query language for JSON objects, similar to JSONQuery.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"iAkTEoaFbN2YkkQoVP5q","title":"Integration cache","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/integration-cache","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM integration cache storage between command runs.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"jnMoQOcV0Luqcwqq7BZn","title":"OpenAPI (Swagger) Codegen","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/openapi-swagger-codegen","siteSpaceId":"sitesp_p1Ikq","description":"Use the openapi-codegen command in the Demisto SDK to generate a Cortex XSIAM integration package (YAML and Python files).","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"PY4hxPtZkHGGPn2hY8yi","title":"Postman code generator","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/postman-code-generator","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for generating integrations from Postman collections.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"FsLr3rNgGwEh9UaOneM3","title":"Generate Integration Python Code from JSON","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/generate-integration-python-code-from-json","siteSpaceId":"sitesp_p1Ikq","description":"use the demisto-sdk generate-integration  command to generate a Cortex XSIAM integration from an integration config JSON file.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"OIqk89BDyMBrFjb7l9Ss","title":"Generate YAML from Python","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/generate-yaml-from-python","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for generating integration YAML from Python.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"YWqM2cbTXbPuWynfebv7","title":"Scheduled Commands","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/scheduled-commands","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for scheduling commands in playbook tasks.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"hdeDJ4DyLa1JZNHUSfK5","title":"Fetch missing incidents with generic lookback methods","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/advanced-topics/fetch-missing-incidents-with-generic-lookback-methods","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for retrieving missing incidents with generic lookback.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Advanced topics"}]},{"id":"nFa1IahokZUiLHsxXdwi","title":"Create a sample integration","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/create-a-sample-integration","siteSpaceId":"sitesp_p1Ikq","description":"Create a sample integration for Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"}]},{"id":"2E0qlYZk5RcOJdCrJDoK","title":"Define sample integration settings","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/create-a-sample-integration/define-sample-integration-settings","siteSpaceId":"sitesp_p1Ikq","description":"Define integration settings for a sample integration in Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Create a sample integration"}]},{"id":"MSBEo5nXolDsEQVjk7oA","title":"Write integration code","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/create-a-sample-integration/write-integration-code","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for writing sample integration code.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Create a sample integration"}]},{"id":"UYUSgwmjJBxuIl9Qn9AG","title":"Test the integration","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/integrations-and-scripts/create-a-sample-integration/test-the-integration","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for testing a sample integration.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Integrations and scripts"},{"label":"Create a sample integration"}]},{"id":"rLippjFXtLGw9wYnXwIn","title":"Playbooks","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/playbooks","siteSpaceId":"sitesp_p1Ikq","description":"Create playbooks with the Playbook Editor to automate complex workflows in Cortex XSIAM without requiring complicated coding. Add the playbook to a content pack.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"YHKYua71Q7CHjPr240Mp","title":"Add a Playbook to a Content Pack","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/playbooks/add-a-playbook-to-a-content-pack","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for adding a playbook to a content pack.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Playbooks"}]},{"id":"r9iCykQ5NkhqIZduMXV3","title":"Playbook conventions","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/playbooks/playbook-conventions","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM conventions for playbook design, tasks, and naming.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Playbooks"}]},{"id":"yi3lfHpodixYbsghcvpi","title":"Generic playbooks","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/playbooks/generic-playbooks","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM generic playbooks for common analyst workflows.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Playbooks"}]},{"id":"inedu7mYlx0EBNomPEin","title":"Lists","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/lists","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for creating and packaging lists.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"SCDaW0Kqnn5wke3V9eb8","title":"Issues","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/alerts","siteSpaceId":"sitesp_p1Ikq","description":"Create a content pack for Cortex XSIAM with custom content for issues.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"TTKKfbfvCPZqkBRVStEn","title":"Data modeling rules","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/data-modeling-rules","siteSpaceId":"sitesp_p1Ikq","description":"Map your Cortex XSIAM logs into a single, unified data model with a consolidated schema.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"7l7Awh7xXAEc4ojtU76o","title":"Create data model rules","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/data-modeling-rules/create-data-model-rules","siteSpaceId":"sitesp_p1Ikq","description":"Once events are ingested in the data set, create data model rules in the repository and then map the ingested raw events to Cortex XSIAM system fields.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Data modeling rules"}]},{"id":"2nFAqJ7zrX1p5fTd8A7U","title":"Test Data Model Rules","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/data-modeling-rules/create-data-model-rules/test-data-model-rules","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for testing data model rules.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Data modeling rules"},{"label":"Create data model rules"}]},{"id":"AR1fRDc3VKnBzLMmrDHO","title":"Indicators","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/indicators","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for indicators, relationships, and extraction.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"Yp4GNqDllZbeXyrf5LJ9","title":"URL extraction","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/indicators/url-extraction","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for extracting URL indicators from text.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Indicators"}]},{"id":"DE96mi6DOSW6WPUEoZzn","title":"Domain extraction","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/indicators/domain-extraction","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for extracting domain indicators from text.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Indicators"}]},{"id":"jsjcerKcrOtjGty49P0W","title":"Relationships","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/indicators/relationships","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for creating indicator relationships during enrichment.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Indicators"}]},{"id":"h0rcpZf77eupfDvdmFT3","title":"Documentation","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM documentation best practices for content packs and contributions.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"o9PSNylbk9yrmtcgu4ev","title":"Documentation best practices","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/documentation-best-practices","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM documentation best practices for content authors.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"oMWSU1PGjllhqEfywgmc","title":"Content pack metadata file","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/content-pack-metadata-file","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM content pack metadata file reference for Marketplace publishing.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"gh9J6CLkjrleweJSOTad","title":"Content pack release notes","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/content-pack-release-notes","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM best practices for content pack release notes.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"knt31atnVCaUPdtFnJt3","title":"Content Pack README","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/content-pack-readme","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for writing content pack README files.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"v5zYgXjA7SCaUER1yOYl","title":"README files for content entities","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/readme-files-for-content-entities","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for README files for content entities.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"zqNuDti5gpj2Fdfbh4Jr","title":"Images in documentation","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/images-in-documentation","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for adding images to documentation.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"7PTUtJfU5IoegdZPCKPt","title":"Videos in documentation","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/videos-in-documentation","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for adding videos to documentation.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"k7Ti19KuYOOtGOlDIJGx","title":"Documentation Contributions","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/documentation/documentation-contributions","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for contributing documentation or reporting issues.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Documentation"}]},{"id":"LKW4hhvOksUJ9zrOHcRb","title":"Testing","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/testing","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM methods for linting, testing, and debugging content.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"x6Kw0IFrAZ91tIyRCD8Y","title":"Linting","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/testing/linting","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for linting content and finding code issues.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Testing"}]},{"id":"M8jbYXWESr4iTMdOxShI","title":"Unit testing","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/testing/unit-testing","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for writing and running unit tests.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Testing"}]},{"id":"gIrLzF8wb42U6jTiRD1t","title":"Test playbooks","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/testing/test-playbooks","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for testing integration commands and scripts with playbooks.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Testing"}]},{"id":"WzljUgVRHlfBffQr76NK","title":"Debugging","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/testing/debugging","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM debugging guidance for logs, War Room, and IDE tools.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Testing"}]},{"id":"wk49c3VDFU3cdwZp9IdD","title":"Contributing content","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content","siteSpaceId":"sitesp_p1Ikq","description":"How to contribute content for Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"}]},{"id":"CaXxnlxG38UWL5R1kFwF","title":"Contribution requirements","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content/contribution-requirements","siteSpaceId":"sitesp_p1Ikq","description":"Prerequisite tools and environments for developing content for contributions to Cortex XSIAM.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Contributing content"}]},{"id":"xug7a0QG2KqvFVlnOsHk","title":"File checklist","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content/file-checklist","siteSpaceId":"sitesp_p1Ikq","description":"A checklist of all the files you need to contribute to the Cortex XSIAM content repository.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Contributing content"}]},{"id":"ZJ1FiJHyh1wT0Wzdl3Gq","title":"Content pack structure","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content/content-pack-structure","siteSpaceId":"sitesp_p1Ikq","description":"File structure for files included in the Cortex XSIAM content pack.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Contributing content"}]},{"id":"aK2r5zhbxzoSujMD8zqs","title":"Content pack dependencies","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content/content-pack-dependencies","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM steps for identifying and fixing content pack dependencies.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Contributing content"}]},{"id":"0XsAY0YM8XHvcDlglvRz","title":"Pull request conventions","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content/pull-request-conventions","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM pull request conventions and build process guidance.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Contributing content"}]},{"id":"ypNoTgNrJfgF667gzPlB","title":"Contribution demo preparation","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content/contribution-demo-preparation","siteSpaceId":"sitesp_p1Ikq","description":"Cortex XSIAM guidance for preparing a content contribution demo.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Contributing content"}]},{"id":"Ns1DAc6cMXg67qWTeQLZ","title":"Contribution SLA","pathname":"/cortex-xsiam-developer-guide/cortex-xsiam-development-guide/contributing-content/contribution-sla","siteSpaceId":"sitesp_p1Ikq","description":"An SLA detailing the required services and the expected level of services when contributing content to the Cortex XSIAM Marketplace","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex XSIAM Developer Guide","icon":"terminal"},{"label":"Cortex XSIAM Development Guide"},{"label":"Contributing content"}]},{"id":"T2Z9He3CZGO8tmrAI5MY","title":"Cortex CLI","pathname":"/cortex-cli","siteSpaceId":"sitesp_Kqxle","description":"The Cortex CLI is a unified command-line tool integrating Cloud Workload Protection, API Security, and Code Security scans into a single executable.","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"eJGkULrj5EzYE8anYOls","title":"Connect Cortex CLI","pathname":"/cortex-cli/connect-cortex-cli","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"aL1vPYFIBiQutjXgFWfw","title":"Authenticate credentials","pathname":"/cortex-cli/authenticate-credentials","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"d3p8TYARbNAl4PpvuUoZ","title":"Cortex CLI usage","pathname":"/cortex-cli/cortex-cli-usage","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"TMeIIo6Xx7ZpivHEt71w","title":"Self-service API keys for CLI scans","pathname":"/cortex-cli/self-service-api-keys-for-cli-scans","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"PLfMJm80qNbFlcvAfnUY","title":"Cortex CLI common command line reference guide","pathname":"/cortex-cli/cortex-cli-common-command-line-reference-guide","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"C1BunnPEBSqwraXOPYl8","title":"Cortex CLI for API Security","pathname":"/cortex-cli/cortex-cli-for-api-security","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"e5dUgyyAePS6xVWImiRp","title":"Cortex CLI for Cloud Workload Protection","pathname":"/cortex-cli/cortex-cli-for-cloud-workload-protection","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"ZwzejANjbeM2OZLKRmXi","title":"Cortex CLI for Code Security","pathname":"/cortex-cli/cortex-cli-for-code-security","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"}]},{"id":"eYxEqAgk3CSzAtoU8cZB","title":"Cortex CLI usage for Application Security","pathname":"/cortex-cli/cortex-cli-for-code-security/cortex-cli-usage-for-application-security","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"},{"label":"Cortex CLI for Code Security"}]},{"id":"j3rcDVLyZs08JoS4FCwo","title":"Cortex CLI Application Security command line reference","pathname":"/cortex-cli/cortex-cli-for-code-security/cortex-cli-application-security-command-line-reference","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"},{"label":"Cortex CLI for Code Security"}]},{"id":"YxSXNQIqCQAcCnJFeUfp","title":"Cortex CLI pre-commit hooks","pathname":"/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-commit-hooks","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"},{"label":"Cortex CLI for Code Security"}]},{"id":"Bl7BjHh8QBkTmAYspssm","title":"Pre-commit hook usage","pathname":"/cortex-cli/cortex-cli-for-code-security/pre-commit-hook-usage","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"},{"label":"Cortex CLI for Code Security"}]},{"id":"hPJw7WCzXCSAKWtXzcwg","title":"Cortex CLI pre-receive hooks","pathname":"/cortex-cli/cortex-cli-for-code-security/cortex-cli-pre-receive-hooks","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"},{"label":"Cortex CLI for Code Security"}]},{"id":"PaiZZoiMjw1tKbmd7ngK","title":"Pre-receive hook usage","pathname":"/cortex-cli/cortex-cli-for-code-security/pre-receive-hook-usage","siteSpaceId":"sitesp_Kqxle","description":"","breadcrumbs":[{"label":"Developer Docs","icon":"terminal"},{"label":"Cortex CLI","icon":"terminal"},{"label":"Cortex CLI for Code Security"}]},{"id":"gaSafmoeRCcS6OFSb3qU","title":"Cortex XQL Command Reference","pathname":"/xql-command-reference-guide","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"}]},{"id":"3rM9nQT8vOGIbYKOXg5X","title":"Reference overview","pathname":"/xql-command-reference-guide/readme/introduction","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"}]},{"id":"6tyMuuOOeCv1BzvAKzB0","title":"Browse the reference","pathname":"/xql-command-reference-guide/readme/summary","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"}]},{"id":"lHoKvfVHM0o1q1eRPZeZ","title":"Functions","pathname":"/xql-command-reference-guide/readme/functions","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"}]},{"id":"kVjHemN1JnoUSChcIQbp","title":"Functions overview","pathname":"/xql-command-reference-guide/readme/functions/index","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"7efuKuuUdE4egPZQC66z","title":"Functions list","pathname":"/xql-command-reference-guide/readme/functions/functions-list","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"2NVYzoMx6Xogk4PRpHkL","title":"acos","pathname":"/xql-command-reference-guide/readme/functions/acos","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"AKL6xeoc4nOnci2P43pP","title":"add","pathname":"/xql-command-reference-guide/readme/functions/add","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"uLPs7LcG7vFzdsTjz1WJ","title":"approx_count","pathname":"/xql-command-reference-guide/readme/functions/approx_count","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"wP5iJeJTZVImhwsLfNxd","title":"approx_quantiles","pathname":"/xql-command-reference-guide/readme/functions/approx_quantiles","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"HVrmvdkEoVfmLrubANIC","title":"approx_top","pathname":"/xql-command-reference-guide/readme/functions/approx_top","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"0rrI8bcX9BQr7miEujSH","title":"array_all","pathname":"/xql-command-reference-guide/readme/functions/array_all","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"pcLIf2BzFoCeoJbUUiKY","title":"array_any","pathname":"/xql-command-reference-guide/readme/functions/array_any","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"suPj1LVRiSQWYoeRPHhK","title":"array_length","pathname":"/xql-command-reference-guide/readme/functions/array_length","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"FgWHtHKIkeLeyKIeCWdl","title":"arrayconcat","pathname":"/xql-command-reference-guide/readme/functions/arrayconcat","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"kqYTKOEndswXjI9ZnGfd","title":"arraycreate","pathname":"/xql-command-reference-guide/readme/functions/arraycreate","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"8fVkfs4IWbDi0Ogyrqtt","title":"arraydistinct","pathname":"/xql-command-reference-guide/readme/functions/arraydistinct","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"XzKqRj4zhpudMeC4j1vP","title":"arrayfilter","pathname":"/xql-command-reference-guide/readme/functions/arrayfilter","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"1AkbHJEPBlmhkpHGr8By","title":"arrayindex","pathname":"/xql-command-reference-guide/readme/functions/arrayindex","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"LFodQotqEuoKI6n879In","title":"arrayindexof","pathname":"/xql-command-reference-guide/readme/functions/arrayindexof","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"2w8jEga25bDxXwiTxwjy","title":"arraymap","pathname":"/xql-command-reference-guide/readme/functions/arraymap","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"zNnMgyWrXYamMsbLl8lY","title":"arraymerge","pathname":"/xql-command-reference-guide/readme/functions/arraymerge","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"HrTH9geirgqhbrC2a4HD","title":"arrayrange","pathname":"/xql-command-reference-guide/readme/functions/arrayrange","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"yMfnklrM9J475k8UpsVm","title":"arraystring","pathname":"/xql-command-reference-guide/readme/functions/arraystring","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"qWb5fgcnS4Fn0ufW1hv2","title":"asin","pathname":"/xql-command-reference-guide/readme/functions/asin","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"77TqvlrLCxqdHKAwT7TW","title":"avg (comp)","pathname":"/xql-command-reference-guide/readme/functions/avg_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"u7Sh0dZUQi0EfUpGDSZn","title":"avg (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/avg_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ayRsFDLCss7MCJzRB9eK","title":"bitwise_and","pathname":"/xql-command-reference-guide/readme/functions/bitwise_and","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"hKk6v5EP9QNzlaJ8AgmK","title":"bitwise_or","pathname":"/xql-command-reference-guide/readme/functions/bitwise_or","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"BjECo7jm6aOpYxolz487","title":"bitwise_sleft","pathname":"/xql-command-reference-guide/readme/functions/bitwise_sleft","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ywOV23fCpgR1Izw46f26","title":"bitwise_sright","pathname":"/xql-command-reference-guide/readme/functions/bitwise_sright","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"gdDfFVaJKQQqW4KKOJec","title":"bitwise_xor","pathname":"/xql-command-reference-guide/readme/functions/bitwise_xor","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"qz1AvgMYlEu2lTaBPk1p","title":"cbrt","pathname":"/xql-command-reference-guide/readme/functions/cbrt","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ITVkDC5ufJnYuUWHVUfT","title":"ceil","pathname":"/xql-command-reference-guide/readme/functions/ceil","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"OmDsDaoKDLjwxYY6I8kZ","title":"coalesce","pathname":"/xql-command-reference-guide/readme/functions/coalesce","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Oh1QUbA5sRiRV00fOMv4","title":"concat","pathname":"/xql-command-reference-guide/readme/functions/concat","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"QszeGudF4AV9vWqw5VSD","title":"convert_from_base_64","pathname":"/xql-command-reference-guide/readme/functions/convert_from_base_64","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ua3xsROHRNqrkkxtG9ow","title":"convert_to_base_64","pathname":"/xql-command-reference-guide/readme/functions/convert_to_base_64","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"j4TrBBp1RCNl1nBRQUYA","title":"cos","pathname":"/xql-command-reference-guide/readme/functions/cos","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"guFhYENW8w9GxHUNPth8","title":"cosine_distance","pathname":"/xql-command-reference-guide/readme/functions/cosine_distance","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"oj4MKZ6yYseLY31I2hTF","title":"cot","pathname":"/xql-command-reference-guide/readme/functions/cot","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Y2wf6itaaLL3bCIiPyfq","title":"count_distinct","pathname":"/xql-command-reference-guide/readme/functions/count_distinct","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"RbKdyI1bnRNfWOefPX1a","title":"count (comp)","pathname":"/xql-command-reference-guide/readme/functions/count_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"OKs43cynfO8l1cvpiNJZ","title":"count (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/count_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"yasaagK9D88h7vN5ygml","title":"csc","pathname":"/xql-command-reference-guide/readme/functions/csc","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"iQShUWsgKcipXwdz3Ghv","title":"current_time","pathname":"/xql-command-reference-guide/readme/functions/current_time","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"nLC3TjBQSa9jr5WMWxEb","title":"date_floor","pathname":"/xql-command-reference-guide/readme/functions/date_floor","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"JpfcYQeXZhX7fZEdazKX","title":"divide","pathname":"/xql-command-reference-guide/readme/functions/divide","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"e1w6sVpzClK8yc4QciZB","title":"earliest","pathname":"/xql-command-reference-guide/readme/functions/earliest","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"aIcjLzHzAjDA0oywepU9","title":"euclidean_distance","pathname":"/xql-command-reference-guide/readme/functions/euclidean_distance","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"YhSF4RiHjoiEa897Gix0","title":"exp","pathname":"/xql-command-reference-guide/readme/functions/exp","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"OLhLrlTu5izojecA8f1N","title":"extract_time","pathname":"/xql-command-reference-guide/readme/functions/extract_time","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"M9PDLSBE3dIELGTAxzAr","title":"extract_url_host","pathname":"/xql-command-reference-guide/readme/functions/extract_url_host","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"hnjtjtQSk2RH6iXYF0HP","title":"extract_url_pub_suffix","pathname":"/xql-command-reference-guide/readme/functions/extract_url_pub_suffix","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"FvGFoEkEHZOgwAxBmL7Y","title":"extract_url_registered_domain","pathname":"/xql-command-reference-guide/readme/functions/extract_url_registered_domain","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"3q2IWUT2XbCsa0frlmbQ","title":"first","pathname":"/xql-command-reference-guide/readme/functions/first","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"dXYiG0RrUZTB1UN7xQty","title":"first_value","pathname":"/xql-command-reference-guide/readme/functions/first_value","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ZJWdNcTec6vtLaZ3nXyT","title":"floor","pathname":"/xql-command-reference-guide/readme/functions/floor","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"aA8wh7ecyeuiufqPHE3v","title":"format_string","pathname":"/xql-command-reference-guide/readme/functions/format_string","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"idajvtRho6ftodSun8U1","title":"format_timestamp","pathname":"/xql-command-reference-guide/readme/functions/format_timestamp","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"VTOcrTTeOB8OWRQqmfEp","title":"greatest","pathname":"/xql-command-reference-guide/readme/functions/greatest","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"c05a951fde321c60b8eb50c5f1e37a6f0e398738","title":"hierarchy_match","pathname":"/xql-command-reference-guide/readme/functions/hierarchy_match","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"KRV0cNbeqrWd6LNQNZPa","title":"if","pathname":"/xql-command-reference-guide/readme/functions/if","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"uAGdq114yuioh2yndVX1","title":"incidr","pathname":"/xql-command-reference-guide/readme/functions/incidr","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"qAh9xhULJN4484ohbo48","title":"incidr6","pathname":"/xql-command-reference-guide/readme/functions/incidr6","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"9mzpZPXaktefLW9e3YcT","title":"incidrlist","pathname":"/xql-command-reference-guide/readme/functions/incidrlist","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"wsMs5VtASn6da8cQtM7w","title":"int_to_ip","pathname":"/xql-command-reference-guide/readme/functions/int_to_ip","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"S5KqzbxOdXpRVhXcAc8n","title":"ip_to_int","pathname":"/xql-command-reference-guide/readme/functions/ip_to_int","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"uLmyz6CzI1ga4ftM9gI3","title":"is_ipv4","pathname":"/xql-command-reference-guide/readme/functions/is_ipv4","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"8MHv9AOrfeN03wbaeJvi","title":"is_ipv6","pathname":"/xql-command-reference-guide/readme/functions/is_ipv6","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"URIifInRxpIRbvKNXvBW","title":"is_known_private_ipv4","pathname":"/xql-command-reference-guide/readme/functions/is_known_private_ipv4","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ktKQhweIaC6xubcFnr58","title":"is_known_private_ipv6","pathname":"/xql-command-reference-guide/readme/functions/is_known_private_ipv6","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"6ffd5e90149fb75b7f7ed2a0d8abd2f684dad033","title":"is_sla_breached","pathname":"/xql-command-reference-guide/readme/functions/is_sla_breached","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"8SeUarJO1uQeg7GvCU7s","title":"json_extract","pathname":"/xql-command-reference-guide/readme/functions/json_extract","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"iNml4Zp7C6BT2020UFEf","title":"json_extract_array","pathname":"/xql-command-reference-guide/readme/functions/json_extract_array","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"QSz5AcInO3XTA1BcGtA1","title":"json_extract_scalar","pathname":"/xql-command-reference-guide/readme/functions/json_extract_scalar","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"wkLfHe4yqLBRHZm1VqSs","title":"json_extract_scalar_array","pathname":"/xql-command-reference-guide/readme/functions/json_extract_scalar_array","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"PSQOJb1eSrFCIA7JQMb5","title":"XQL JSON Functions Reference","pathname":"/xql-command-reference-guide/readme/functions/json_functions_reference","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"YU6BOXLykb8EmxIbFJOi","title":"json_path_extract","pathname":"/xql-command-reference-guide/readme/functions/json_path_extract","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"9RUTWX4isQeDjFcHGzgS","title":"lag","pathname":"/xql-command-reference-guide/readme/functions/lag","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"AlipbeZJJzbJQQQGDwnW","title":"last","pathname":"/xql-command-reference-guide/readme/functions/last","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"vgd0VKgC2szfOhWHmxBe","title":"last_value","pathname":"/xql-command-reference-guide/readme/functions/last_value","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"edV56h0CEOEULsAMSyX7","title":"latest","pathname":"/xql-command-reference-guide/readme/functions/latest","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"vUWYPDVq4VFIJxwkbyhU","title":"least","pathname":"/xql-command-reference-guide/readme/functions/least","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"6N4FIBhZ1edQosQbKXoG","title":"len","pathname":"/xql-command-reference-guide/readme/functions/len","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"xQMmbMqfq1YofkOIMu0O","title":"list (comp)","pathname":"/xql-command-reference-guide/readme/functions/list_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"lfYH2zvsPLUjkOt7NYhV","title":"ln","pathname":"/xql-command-reference-guide/readme/functions/ln","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"MwRFru2eLQOj5wXJfvhF","title":"log","pathname":"/xql-command-reference-guide/readme/functions/log","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"VXg76qAWVAxQ5j5wwfWe","title":"log10","pathname":"/xql-command-reference-guide/readme/functions/log10","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"QdRt2E85DaGZOOet8fHR","title":"lowercase","pathname":"/xql-command-reference-guide/readme/functions/lowercase","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"lWal7ohakXguxZ59JZkj","title":"ltrim","pathname":"/xql-command-reference-guide/readme/functions/ltrim","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"5WWgMaum1UjYM5wuXnJR","title":"max (comp)","pathname":"/xql-command-reference-guide/readme/functions/max_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"oqywPOpjWhLmltzeMWFw","title":"max (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/max_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ayk66FQiWd5U9hbK00t2","title":"md5","pathname":"/xql-command-reference-guide/readme/functions/md5","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ldHOSBM7l9ql2U03haht","title":"median (comp)","pathname":"/xql-command-reference-guide/readme/functions/median_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"B2RQ9QGhV6KJW4GQZAYE","title":"median (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/median_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"KKf1X1WHZRIRIL6QgOMi","title":"min (comp)","pathname":"/xql-command-reference-guide/readme/functions/min_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"gMryTk2MKRr8Rl5tkth6","title":"min (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/min_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"aFqxFn9ry2eGUHoDFOr3","title":"mod","pathname":"/xql-command-reference-guide/readme/functions/mod","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"jTzE3hl6ps8uoTfb6vc6","title":"multiply","pathname":"/xql-command-reference-guide/readme/functions/multiply","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Y2Q7T3oNtWXA3T4olatW","title":"object_create","pathname":"/xql-command-reference-guide/readme/functions/object_create","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"nMZIypyKRCj2BkaIUSvo","title":"object_merge","pathname":"/xql-command-reference-guide/readme/functions/object_merge","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"ukNqRt4T0JUcMhtjF2Xu","title":"parse_epoch","pathname":"/xql-command-reference-guide/readme/functions/parse_epoch","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"CO2TW9EDm3wvb2nusEbR","title":"parse_timestamp","pathname":"/xql-command-reference-guide/readme/functions/parse_timestamp","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"LlJm2ggxM74mkL9h9Gyo","title":"pow","pathname":"/xql-command-reference-guide/readme/functions/pow","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"J8Yy6hRK6WpnLnKurph6","title":"power","pathname":"/xql-command-reference-guide/readme/functions/power","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"RlbEjbj650yj379RL6Tm","title":"rand","pathname":"/xql-command-reference-guide/readme/functions/rand","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"TwLj2DIoGbcUozKYjbRd","title":"range_bucket","pathname":"/xql-command-reference-guide/readme/functions/range_bucket","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"O3TRIOQkiPkloelhdh6Q","title":"rank (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/rank_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"KzxSVEVvkpOOWPXkiHWW","title":"regexcapture","pathname":"/xql-command-reference-guide/readme/functions/regexcapture","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"IeEK7vzKKJ1X2adkp1UD","title":"regextract","pathname":"/xql-command-reference-guide/readme/functions/regextract","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"IxNMSvxEBCSYEnhf0gF5","title":"replace","pathname":"/xql-command-reference-guide/readme/functions/replace","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"TMyJ69Z7dhi6rSkGIFyD","title":"replex","pathname":"/xql-command-reference-guide/readme/functions/replex","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"GN2S84RP4FUhwtIcDYtX","title":"round","pathname":"/xql-command-reference-guide/readme/functions/round","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"IedoZRlZA8kAxl6m2kfh","title":"row_number (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/row_number_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"0EoOFESN6EQ4jVk9rjYF","title":"rtrim","pathname":"/xql-command-reference-guide/readme/functions/rtrim","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"dRxj63yUKVpYI2jjy7Jf","title":"safe_add","pathname":"/xql-command-reference-guide/readme/functions/safe_add","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"zPRl0gQnX8RfTAGOvbeN","title":"safe_divide","pathname":"/xql-command-reference-guide/readme/functions/safe_divide","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"u6QTg8Eog9kTb6hCQJqu","title":"safe_multiply","pathname":"/xql-command-reference-guide/readme/functions/safe_multiply","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"v5lUBuh6LRRuluMbFxe7","title":"safe_negate","pathname":"/xql-command-reference-guide/readme/functions/safe_negate","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"XsMnYTKPIDKDZdY9uNJS","title":"safe_subtract","pathname":"/xql-command-reference-guide/readme/functions/safe_subtract","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"CUvChGv8qx3SPacuG7m9","title":"sec","pathname":"/xql-command-reference-guide/readme/functions/sec","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"aufyvnncsRi3wWcv6tPN","title":"sha1","pathname":"/xql-command-reference-guide/readme/functions/sha1","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"EFykjHLOTW8rfiF0l0PO","title":"sha256","pathname":"/xql-command-reference-guide/readme/functions/sha256","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Wx5aEENfxLAG5Bm7uN5r","title":"sha512","pathname":"/xql-command-reference-guide/readme/functions/sha512","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"UK5I4PoPWPduLcKa1pfn","title":"sign","pathname":"/xql-command-reference-guide/readme/functions/sign","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"0O1RZykslC3FmxCoh8gZ","title":"sin","pathname":"/xql-command-reference-guide/readme/functions/sin","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"f1a0ca692eda180e03e861df4bf8814f0b86009f","title":"sla_time_remaining","pathname":"/xql-command-reference-guide/readme/functions/sla_time_remaining","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"jUo6isDCva8FL9kzqd29","title":"split","pathname":"/xql-command-reference-guide/readme/functions/split","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"F384SNnAp2QFYg04k335","title":"sqrt","pathname":"/xql-command-reference-guide/readme/functions/sqrt","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"gkHRv0tMz5DcFnlLXPqM","title":"stddev_population (comp)","pathname":"/xql-command-reference-guide/readme/functions/stddev_population_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Npa0UcyWDdljuPh7FMy7","title":"stddev_population (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/stddev_population_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"o9WpFx1KQCqESNsRiAn5","title":"stddev_sample (comp)","pathname":"/xql-command-reference-guide/readme/functions/stddev_sample_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"uaD1Hv6L5GR85GOqSTyj","title":"stddev_sample (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/stddev_sample_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"agE7V7RzQhs33vi86R0T","title":"string_count","pathname":"/xql-command-reference-guide/readme/functions/string_count","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"UJyF3Hhq00jJFmaL6Xcj","title":"subtract","pathname":"/xql-command-reference-guide/readme/functions/subtract","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"wipaGnbaRfr72FHqgdgg","title":"sum (comp)","pathname":"/xql-command-reference-guide/readme/functions/sum_with_comp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"E1ff2t1ExHeb9HxdltVD","title":"sum (windowcomp)","pathname":"/xql-command-reference-guide/readme/functions/sum_with_windowcomp_stage","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"jnZwSZd1h5PFWmyQGQTX","title":"tan","pathname":"/xql-command-reference-guide/readme/functions/tan","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"3IlitEAhHHjSIEfCmQnd","title":"time_frame_end","pathname":"/xql-command-reference-guide/readme/functions/time_frame_end","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"zkjnXzBVis5MErAjv85f","title":"timestamp_diff","pathname":"/xql-command-reference-guide/readme/functions/timestamp_diff","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"PGNiLDXyIFQwO2o75YVx","title":"timestamp_seconds","pathname":"/xql-command-reference-guide/readme/functions/timestamp_seconds","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"qxB4dfjNcFxoG3R0QKG6","title":"to_boolean","pathname":"/xql-command-reference-guide/readme/functions/to_boolean","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"weG1z0inyiryd2DJi4iN","title":"to_epoch","pathname":"/xql-command-reference-guide/readme/functions/to_epoch","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"KKJVejku6bhHnsABNWyx","title":"to_float","pathname":"/xql-command-reference-guide/readme/functions/to_float","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Jj9puX3rhKINwGiVizzS","title":"to_integer","pathname":"/xql-command-reference-guide/readme/functions/to_integer","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Nwi8amy743wELfkD0ALG","title":"to_json_string","pathname":"/xql-command-reference-guide/readme/functions/to_json_string","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"BAfWCp2NnRbOGNUPiCOa","title":"to_number","pathname":"/xql-command-reference-guide/readme/functions/to_number","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"B0xJk5NwB8fMISTHlHLz","title":"to_string","pathname":"/xql-command-reference-guide/readme/functions/to_string","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Tmv2cxoCYHRtGPk6xSRo","title":"to_timestamp","pathname":"/xql-command-reference-guide/readme/functions/to_timestamp","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"U8QBxAzravW6F0acU3zp","title":"trim","pathname":"/xql-command-reference-guide/readme/functions/trim","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Zxens3XrD62eoMejkirt","title":"trunc","pathname":"/xql-command-reference-guide/readme/functions/trunc","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"gUyFTtZ3Kvj0DmnCn4RO","title":"uppercase","pathname":"/xql-command-reference-guide/readme/functions/uppercase","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"Y21wNWRWVgy6KL5iww4Q","title":"values","pathname":"/xql-command-reference-guide/readme/functions/values","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"sGcvr3DPD6RCD503WUE3","title":"var","pathname":"/xql-command-reference-guide/readme/functions/var","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"n5aWQUTi4fjrwX6btN2b","title":"wildcard_match","pathname":"/xql-command-reference-guide/readme/functions/wildcard_match","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Functions"}]},{"id":"evpWULbY5TJyPyPJVK38","title":"Stages","pathname":"/xql-command-reference-guide/readme/stages","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"}]},{"id":"yhyASTUPdoNswt0Mlv0P","title":"Stages overview","pathname":"/xql-command-reference-guide/readme/stages/index","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"bVTRXdAsGtgkw3ijOt4o","title":"Stages list","pathname":"/xql-command-reference-guide/readme/stages/stages-list","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"PmDdbPpSn42ztJ6U6Y2f","title":"alter","pathname":"/xql-command-reference-guide/readme/stages/alter","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"CRI9mH1wg94KiTyK84r0","title":"arrayexpand","pathname":"/xql-command-reference-guide/readme/stages/arrayexpand","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"25664e17010031534131f73e4497a1379ed457aa","title":"bin","pathname":"/xql-command-reference-guide/readme/stages/bin","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"FiXYFWB5ei3kO6VmjJba","title":"call","pathname":"/xql-command-reference-guide/readme/stages/call","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"NAcSqZorF7kAXlaYTXoH","title":"comp","pathname":"/xql-command-reference-guide/readme/stages/comp","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"Kwn5CSu5T9eFpyUS6xHY","title":"config","pathname":"/xql-command-reference-guide/readme/stages/config","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"YAp3BBKQwp4w0pQ7UIms","title":"dataset","pathname":"/xql-command-reference-guide/readme/stages/dataset","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"e8ZcT52CpWjdqoVH6HMX","title":"dedup","pathname":"/xql-command-reference-guide/readme/stages/dedup","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"NJsFZtS2G4bzFbpiz1L0","title":"fields","pathname":"/xql-command-reference-guide/readme/stages/fields","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"ovI8NXclPPblvEtuHIjF","title":"filter","pathname":"/xql-command-reference-guide/readme/stages/filter","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"3nVFjmBR2TkqH9wHAi7a","title":"iploc","pathname":"/xql-command-reference-guide/readme/stages/iploc","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"WTBGRNigiBUOGBWeG1B2","title":"join","pathname":"/xql-command-reference-guide/readme/stages/join","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"tUX3AT0HxNhQf52fLn7p","title":"limit","pathname":"/xql-command-reference-guide/readme/stages/limit","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"KdOaLCHjgZIHLiQWNZcL","title":"pivot","pathname":"/xql-command-reference-guide/readme/stages/pivot","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"YvtcLpkmF9Qhn3k7YCl0","title":"preset","pathname":"/xql-command-reference-guide/readme/stages/presets","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"cqvamJqoNXZ7riap2AYE","title":"replacenull","pathname":"/xql-command-reference-guide/readme/stages/replacenull","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"f5256e7a848d6a8304464dc85f124e5398412ed9","title":"search","pathname":"/xql-command-reference-guide/readme/stages/search","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"NwoWGbfDQ7UDXI0LCKzG","title":"sort","pathname":"/xql-command-reference-guide/readme/stages/sort","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"s6aPsFBLjumzk2ECV949","title":"tag","pathname":"/xql-command-reference-guide/readme/stages/tag","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"n3zJnK2gherZqZKPTdKC","title":"target","pathname":"/xql-command-reference-guide/readme/stages/target","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"cOEjnvcRWwOdtzMPlIfO","title":"top","pathname":"/xql-command-reference-guide/readme/stages/top","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"hTNlnUMkq3IFSiINH45H","title":"transaction","pathname":"/xql-command-reference-guide/readme/stages/transaction","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"63d4ea0327b156e852b555a1e966b8b618634eac","title":"transpose","pathname":"/xql-command-reference-guide/readme/stages/transpose","siteSpaceId":"sitesp_xHTjX","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"ICA3SUmCgQrRdH1vlkKN","title":"union","pathname":"/xql-command-reference-guide/readme/stages/union","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"5jFGMfq0V20UGlrAsjBW","title":"view","pathname":"/xql-command-reference-guide/readme/stages/view","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"e0joKSFv92RUV7ngRdVt","title":"windowcomp","pathname":"/xql-command-reference-guide/readme/stages/windowcomp","siteSpaceId":"sitesp_xHTjX","description":"","breadcrumbs":[{"label":"XQL","icon":"square-code"},{"label":"XQL Command Reference Guide","icon":"square-code"},{"label":"Cortex XQL Command Reference"},{"label":"Stages"}]},{"id":"d8goLjBw0VGaonNvbyqa","title":"Cortex Analytics Alert Reference","pathname":"/analytics-alerts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"}]},{"id":"krmVwd9HaRXKevczcdPZ","title":"Alerts by name","pathname":"/analytics-alerts/alerts-by-name","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"}]},{"id":"IktJDFUUOyN78KVwZexU","title":"64-bit PowerShell spawning an uncommon 32-bit PowerShell","pathname":"/analytics-alerts/alerts-by-name/64-bit-powershell-spawning-an-uncommon-32-bit-powershell","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"csjQZ1d1ZtcSOLZOwQMN","title":"A Backup vault policy was modified","pathname":"/analytics-alerts/alerts-by-name/a-backup-vault-policy-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AQlV54xy2vJOQIQvMCMp","title":"A browser extension was installed or loaded in an uncommon way","pathname":"/analytics-alerts/alerts-by-name/a-browser-extension-was-installed-or-loaded-in-an-uncommon-way","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"t3omyku1FhFv46WiZfHV","title":"A browser was opened in private mode","pathname":"/analytics-alerts/alerts-by-name/a-browser-was-opened-in-private-mode","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NQLXHmvVTvSRnQSSid3G","title":"A Cloud DB instance was exported to an unknown destination","pathname":"/analytics-alerts/alerts-by-name/a-cloud-db-instance-was-exported-to-an-unknown-destination","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6OtYAegVASFxAOBSv9EN","title":"A cloud function was created with an unusual runtime","pathname":"/analytics-alerts/alerts-by-name/a-cloud-function-was-created-with-an-unusual-runtime","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ocbLG0z0vhjjPTvQY0kM","title":"A cloud identity created or modified a security group","pathname":"/analytics-alerts/alerts-by-name/a-cloud-identity-created-or-modified-a-security-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AH4TTZQTawIh6fVGdsZd","title":"A cloud identity executed an API call from an unusual country","pathname":"/analytics-alerts/alerts-by-name/a-cloud-identity-executed-an-api-call-from-an-unusual-country","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"W06YtWQq915mDay9a8E3","title":"A cloud identity had escalated its permissions","pathname":"/analytics-alerts/alerts-by-name/a-cloud-identity-had-escalated-its-permissions","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"A4dV1Dg0COfZauTPvPhM","title":"A cloud identity invoked IAM related persistence operations","pathname":"/analytics-alerts/alerts-by-name/a-cloud-identity-invoked-iam-related-persistence-operations","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JT2hwWMXSTnM4oA2JlGk","title":"A cloud identity performed multiple unusual activities","pathname":"/analytics-alerts/alerts-by-name/a-cloud-identity-performed-multiple-unusual-activities","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qw5fhGwinmRmByLnGVVH","title":"A cloud identity started a Cloud Shell session","pathname":"/analytics-alerts/alerts-by-name/a-cloud-identity-started-a-cloud-shell-session","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bHfuK0lrRqra2Sp5ARz1","title":"A cloud instance was stopped","pathname":"/analytics-alerts/alerts-by-name/a-cloud-instance-was-stopped","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XLuL6VxN9MauNLgJMLX9","title":"A cloud snapshot of AWS database or storage was modified or shared","pathname":"/analytics-alerts/alerts-by-name/a-cloud-snapshot-of-aws-database-or-storage-was-modified-or-shared","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YNTWJLr565882wY2Ln9X","title":"A cloud storage configuration was modified","pathname":"/analytics-alerts/alerts-by-name/a-cloud-storage-configuration-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NLu7Pv5Ylf5LtWuRjNX2","title":"A cloud storage object was copied to a foreign cloud account","pathname":"/analytics-alerts/alerts-by-name/a-cloud-storage-object-was-copied-to-a-foreign-cloud-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nHomaSzkrgifQjXutINL","title":"A Command Line Interface (CLI) command was executed from a GCP serverless compute service","pathname":"/analytics-alerts/alerts-by-name/a-command-line-interface-cli-command-was-executed-from-a-gcp-serverless-compute-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DfIHV47SNs8fM9ZUW6MJ","title":"A Command Line Interface (CLI) command was executed from an AWS serverless compute service","pathname":"/analytics-alerts/alerts-by-name/a-command-line-interface-cli-command-was-executed-from-an-aws-serverless-compute-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KIhR3AgifjkmXqMqfOdX","title":"A commonly abused process connected to a rare cloud resource","pathname":"/analytics-alerts/alerts-by-name/a-commonly-abused-process-connected-to-a-rare-cloud-resource","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JsYWoiTc67VYiJALhSIf","title":"A commonly abused process connected to a rare external host","pathname":"/analytics-alerts/alerts-by-name/a-commonly-abused-process-connected-to-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ArdFiYVg40FrxO0Xry8f","title":"A compiled HTML help file wrote a script file to the disk","pathname":"/analytics-alerts/alerts-by-name/a-compiled-html-help-file-wrote-a-script-file-to-the-disk","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wQ9iHdMPoCPTzzhDCx5I","title":"A compressed file was exfiltrated over SSH","pathname":"/analytics-alerts/alerts-by-name/a-compressed-file-was-exfiltrated-over-ssh","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Z84fRcIz72VScXQGfU4W","title":"A compromised process accessed a rare cloud resource","pathname":"/analytics-alerts/alerts-by-name/a-compromised-process-accessed-a-rare-cloud-resource","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yXmaZIlLZpw974umFMmp","title":"A compromised process accessed a rare external host","pathname":"/analytics-alerts/alerts-by-name/a-compromised-process-accessed-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wWypCCbd5ljH0LdmHCwY","title":"A compute-attached identity executed API calls outside the instance's region","pathname":"/analytics-alerts/alerts-by-name/a-compute-attached-identity-executed-api-calls-outside-the-instance-s-region","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oVX81UXQQfZrVlc8qLSB","title":"A computer account was promoted to DC","pathname":"/analytics-alerts/alerts-by-name/a-computer-account-was-promoted-to-dc","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"48UY2IUjZbehUdREyx3n","title":"A contained executable from a mounted share initiated a suspicious outbound network connection","pathname":"/analytics-alerts/alerts-by-name/a-contained-executable-from-a-mounted-share-initiated-a-suspicious-outbound-network-connection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"j4y4Xt4cP122x5sP9ld7","title":"A contained executable was executed by an unusual process","pathname":"/analytics-alerts/alerts-by-name/a-contained-executable-was-executed-by-an-unusual-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QfzJhBywGoHW69jOANai","title":"A contained process attempted to escape using the 'notify on release' feature","pathname":"/analytics-alerts/alerts-by-name/a-contained-process-attempted-to-escape-using-the-notify-on-release-feature","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3f3gqnuGTFsGl19U7C1C","title":"A container registry was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-container-registry-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eStQJRwDyg2lhmaIwHe2","title":"A disabled user attempted to authenticate via SSO","pathname":"/analytics-alerts/alerts-by-name/a-disabled-user-attempted-to-authenticate-via-sso","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IrXSMvW384xTFZaDHDxj","title":"A disabled user attempted to log in to a VPN","pathname":"/analytics-alerts/alerts-by-name/a-disabled-user-attempted-to-log-in-to-a-vpn","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Wppwzb9MNJ9bpbS7ILmU","title":"A disabled user attempted to log in","pathname":"/analytics-alerts/alerts-by-name/a-disabled-user-attempted-to-log-in","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zfVqxFOlqghJMdFSHAlR","title":"A domain was added to the trusted domains list","pathname":"/analytics-alerts/alerts-by-name/a-domain-was-added-to-the-trusted-domains-list","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JKT4hLGJGyp7qsXbQ8JL","title":"A GCP Cloud SQL DB instance was exported from a production account","pathname":"/analytics-alerts/alerts-by-name/a-gcp-cloud-sql-db-instance-was-exported-from-a-production-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"x15aoRxrto1bA8mz4okE","title":"A GCP service account was delegated domain-wide authority in Google Workspace","pathname":"/analytics-alerts/alerts-by-name/a-gcp-service-account-was-delegated-domain-wide-authority-in-google-workspace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QEqmTbI7mvaFLgFJWu8M","title":"A Google Workspace identity created, assigned or modified a role","pathname":"/analytics-alerts/alerts-by-name/a-google-workspace-identity-created-assigned-or-modified-a-role","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DpYLdjaIKXhrdumOOtOZ","title":"A Google Workspace identity performed an unusual admin console activity","pathname":"/analytics-alerts/alerts-by-name/a-google-workspace-identity-performed-an-unusual-admin-console-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fFDcwxQxGdoE9APr1hWn","title":"A Google Workspace identity used the security investigation tool","pathname":"/analytics-alerts/alerts-by-name/a-google-workspace-identity-used-the-security-investigation-tool","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1wF2uSW7eocqKCjwSevR","title":"A Google Workspace Role privilege was deleted","pathname":"/analytics-alerts/alerts-by-name/a-google-workspace-role-privilege-was-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"S5IPDYgYhZGKq3TJz7jq","title":"A Google Workspace service was configured as unrestricted","pathname":"/analytics-alerts/alerts-by-name/a-google-workspace-service-was-configured-as-unrestricted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rWygAOAFWLOmSOmojTj2","title":"A Google Workspace user was added to a group","pathname":"/analytics-alerts/alerts-by-name/a-google-workspace-user-was-added-to-a-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8ICWt8N1WaXK98COUigL","title":"A Google Workspace user was removed from a group","pathname":"/analytics-alerts/alerts-by-name/a-google-workspace-user-was-removed-from-a-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zQahTzGQHF8Qna2v5ZvO","title":"A Kubernetes API operation was successfully invoked by an anonymous user","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-api-operation-was-successfully-invoked-by-an-anonymous-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7qfoJk5PchdJYHKdaUFC","title":"A Kubernetes cluster role binding was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-cluster-role-binding-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QADRWGMcN5cqjnYBwkCJ","title":"A Kubernetes cluster role was created","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-cluster-role-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KWj4DihWpxjCyv5bqgva","title":"A Kubernetes cluster was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-cluster-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CLi4e87vl7LcfawTbLg0","title":"A Kubernetes ConfigMap was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-configmap-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"s5PmU5toEDvQt3xIIkxk","title":"A Kubernetes Cronjob was created","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-cronjob-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nrxM5VBsmmKfAbgeMWgh","title":"A Kubernetes DaemonSet was created","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-daemonset-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"f76FtaKsejVwtXESJKyT","title":"A Kubernetes dashboard service account was used outside the cluster","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-dashboard-service-account-was-used-outside-the-cluster","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"og1W3MJxLnIFVHtBl7mz","title":"A Kubernetes deployment was created","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-deployment-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mgYIQavW9s7wkuEauvPu","title":"A Kubernetes ephemeral container was created","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-ephemeral-container-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"c1VcGuFby3bAXBPO8vys","title":"A Kubernetes namespace was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-namespace-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Msj4dq5EEn2J0cIvjAed","title":"A Kubernetes node service account activity from external IP","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-node-service-account-activity-from-external-ip","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VllE6FEOtX7h1gUEXpSa","title":"A Kubernetes Pod was created with a sidecar container","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-pod-was-created-with-a-sidecar-container","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SV2xqpbvSR5ok5luu6YC","title":"A Kubernetes Pod was deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-pod-was-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XmWKxOYgwB2WAxIgVOGx","title":"A Kubernetes ReplicaSet was created","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-replicaset-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OvQkTPgLtIN7y7iftISQ","title":"A Kubernetes role binding was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-role-binding-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"azGjsSdgwCWjpsJx3fXs","title":"A Kubernetes secret was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-secret-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Zevh3PdxxE7AbifbxB5H","title":"A Kubernetes service account executed an unusual API call","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-service-account-executed-an-unusual-api-call","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zDr3mWs2rPIeIGVUJVzs","title":"A Kubernetes service account has enumerated its permissions","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-service-account-has-enumerated-its-permissions","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ReWYIfUn7puoKGLo4xKb","title":"A Kubernetes service account was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-service-account-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fyz5kFRR2fCk3eORyjc9","title":"A Kubernetes service was created or deleted","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-service-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sKtKggMMJvap9QLljgzh","title":"A Kubernetes StatefulSet was created","pathname":"/analytics-alerts/alerts-by-name/a-kubernetes-statefulset-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DRPUZX1pmWCd5ZHkdGBg","title":"A lightweight JavaScript runtime executing a script wrote a Python file to disk","pathname":"/analytics-alerts/alerts-by-name/a-lightweight-javascript-runtime-executing-a-script-wrote-a-python-file-to-disk","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3YOjZ2U9XJ4CQ7ut22mj","title":"A LOLBIN was copied to a different location","pathname":"/analytics-alerts/alerts-by-name/a-lolbin-was-copied-to-a-different-location","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DIiEYcyNh99TOh5WkcO6","title":"A machine certificate was issued with a mismatch","pathname":"/analytics-alerts/alerts-by-name/a-machine-certificate-was-issued-with-a-mismatch","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Wv5tS0AX05bhgWwvlN8H","title":"A mail forwarding rule was configured in Google Workspace","pathname":"/analytics-alerts/alerts-by-name/a-mail-forwarding-rule-was-configured-in-google-workspace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9XhR9XVe3RaJqdf0wAbi","title":"A Microsoft Teams application was installed","pathname":"/analytics-alerts/alerts-by-name/a-microsoft-teams-application-was-installed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GH99rCJKg6t82yp2u7wD","title":"A Microsoft Teams bot was added to a team","pathname":"/analytics-alerts/alerts-by-name/a-microsoft-teams-bot-was-added-to-a-team","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pSfXW8Qu1kFbqdPWY0BL","title":"A new AWS user credentials creation attempt from an unusual country","pathname":"/analytics-alerts/alerts-by-name/a-new-aws-user-credentials-creation-attempt-from-an-unusual-country","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"g8NduhHh88on4j9BEdL8","title":"A new Azure email domain verification was requested","pathname":"/analytics-alerts/alerts-by-name/a-new-azure-email-domain-verification-was-requested","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Zp2kIi8fzl3nn4a6YwrK","title":"A new machine attempted Kerberos delegation","pathname":"/analytics-alerts/alerts-by-name/a-new-machine-attempted-kerberos-delegation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1uw80QePreqODLsExHBZ","title":"A New Server was Added to an Azure Active Directory Hybrid Health ADFS Environment","pathname":"/analytics-alerts/alerts-by-name/a-new-server-was-added-to-an-azure-active-directory-hybrid-health-adfs-environment","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ltTq7WNeYbRgxE3Cuxu3","title":"A non-browser process accessed a website UI","pathname":"/analytics-alerts/alerts-by-name/a-non-browser-process-accessed-a-website-ui","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zjzCa7Y51EVUjZ5UNCpN","title":"A Possible crypto miner was detected on a host","pathname":"/analytics-alerts/alerts-by-name/a-possible-crypto-miner-was-detected-on-a-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"usF1eeYiBcSdv7vsjsIY","title":"A possible risky login to Azure","pathname":"/analytics-alerts/alerts-by-name/a-possible-risky-login-to-azure","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FmPoI09T3lASLlQco4Y3","title":"A process connected to a rare cloud resource","pathname":"/analytics-alerts/alerts-by-name/a-process-connected-to-a-rare-cloud-resource","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tLl8NpoCFE0qHy6F5lGi","title":"A process connected to a rare external host","pathname":"/analytics-alerts/alerts-by-name/a-process-connected-to-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"k9U5ROKzyK6yFrksVmVO","title":"A process connected to rare external host","pathname":"/analytics-alerts/alerts-by-name/a-process-connected-to-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SrAXkJ5XV4uV4ZaTKpqS","title":"A process is masquerading as a common Microsoft product","pathname":"/analytics-alerts/alerts-by-name/a-process-is-masquerading-as-a-common-microsoft-product","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"U5JgM79mK7zhIUEvbr75","title":"A process modified an SSH authorized_keys file","pathname":"/analytics-alerts/alerts-by-name/a-process-modified-an-ssh-authorized-keys-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zqaLhXfYQLe2ruzqmhQm","title":"A process queried the ADFS database decryption key via LDAP","pathname":"/analytics-alerts/alerts-by-name/a-process-queried-the-adfs-database-decryption-key-via-ldap","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rpB2rK6ueizKY1qDnAqv","title":"A process was executed with a command line obfuscated by Unicode character substitution","pathname":"/analytics-alerts/alerts-by-name/a-process-was-executed-with-a-command-line-obfuscated-by-unicode-character-substitution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wJGQX2gHT9DQKilhnFSH","title":"A rare DLL, signed by an uncommon vendor, was hijacked into a Microsoft process","pathname":"/analytics-alerts/alerts-by-name/a-rare-dll-signed-by-an-uncommon-vendor-was-hijacked-into-a-microsoft-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3MUtswMIU5cXWpaBnR2v","title":"A rare file path was added to the AppInit_DLLs registry value","pathname":"/analytics-alerts/alerts-by-name/a-rare-file-path-was-added-to-the-appinit-dlls-registry-value","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3yqnrPH0jjPxO98zNdl8","title":"A rare FTP user has been detected on an existing FTP server","pathname":"/analytics-alerts/alerts-by-name/a-rare-ftp-user-has-been-detected-on-an-existing-ftp-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xf6JPiv2Dzj4A3UjwJvI","title":"A rare local administrator login","pathname":"/analytics-alerts/alerts-by-name/a-rare-local-administrator-login","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hXU33GJXQQHyV2S4Mz3J","title":"A remote service was created via RPC over SMB","pathname":"/analytics-alerts/alerts-by-name/a-remote-service-was-created-via-rpc-over-smb","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7oh9v8tYv86dyUj106jK","title":"A Service Principal was created in Azure","pathname":"/analytics-alerts/alerts-by-name/a-service-principal-was-created-in-azure","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vel7wtCNb9E2Oyii2b2k","title":"A Service Principal was removed from Azure","pathname":"/analytics-alerts/alerts-by-name/a-service-principal-was-removed-from-azure","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sdRUs6r1iNUakgIlp2z4","title":"A service was disabled","pathname":"/analytics-alerts/alerts-by-name/a-service-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sd4QdH3ADdoRZTYz8zNt","title":"A Successful login from TOR","pathname":"/analytics-alerts/alerts-by-name/a-successful-login-from-tor","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2dhON6ZLU9kT3HC3gviJ","title":"A successful SSO sign-in from TOR","pathname":"/analytics-alerts/alerts-by-name/a-successful-sso-sign-in-from-tor","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1YhHGRjX3nPFwkn8AE3b","title":"A Successful VPN connection from TOR","pathname":"/analytics-alerts/alerts-by-name/a-successful-vpn-connection-from-tor","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zrcr6A6M9lny7NZkpmY2","title":"A suspicious direct syscall was executed","pathname":"/analytics-alerts/alerts-by-name/a-suspicious-direct-syscall-was-executed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eYqanXq8ejykiVt8vD6z","title":"A suspicious executable with multiple file extensions was created","pathname":"/analytics-alerts/alerts-by-name/a-suspicious-executable-with-multiple-file-extensions-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2UxTdy0BQ4q6UAWCIYKT","title":"A suspicious process enrolled for a certificate","pathname":"/analytics-alerts/alerts-by-name/a-suspicious-process-enrolled-for-a-certificate","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"e0ppwfQqrULWVQhOX8xt","title":"A suspicious process queried AD CS objects via LDAP","pathname":"/analytics-alerts/alerts-by-name/a-suspicious-process-queried-ad-cs-objects-via-ldap","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0x5OdFwoFi5FbgM0WnsX","title":"A TCP stream was created directly in a shell","pathname":"/analytics-alerts/alerts-by-name/a-tcp-stream-was-created-directly-in-a-shell","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"upMP5LDKxiyiCRE0ZbpV","title":"A third-party application's access to the Google Workspace domain's resources was revoked","pathname":"/analytics-alerts/alerts-by-name/a-third-party-application-s-access-to-the-google-workspace-domain-s-resources-was-revoked","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ei69b05r6N8dSqB1q6nu","title":"A third-party application was authorized to access the Google Workspace APIs","pathname":"/analytics-alerts/alerts-by-name/a-third-party-application-was-authorized-to-access-the-google-workspace-apis","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"plg3PYbuaIgSERWJRBgF","title":"A third-party utility was copied to a different location","pathname":"/analytics-alerts/alerts-by-name/a-third-party-utility-was-copied-to-a-different-location","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MDv0NubDV0r9Teb8DeOg","title":"A Torrent client was detected on a host","pathname":"/analytics-alerts/alerts-by-name/a-torrent-client-was-detected-on-a-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"G0mCSTX78QRsBp3w0BbG","title":"A user accessed an abnormal number of files on a remote shared folder","pathname":"/analytics-alerts/alerts-by-name/a-user-accessed-an-abnormal-number-of-files-on-a-remote-shared-folder","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FZdpcFJmqMUjfbvYjtB4","title":"A user accessed an abnormal number of remote shared folders","pathname":"/analytics-alerts/alerts-by-name/a-user-accessed-an-abnormal-number-of-remote-shared-folders","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"x9qhWUOky91btYiwDbnt","title":"A user accessed an uncommon AppID","pathname":"/analytics-alerts/alerts-by-name/a-user-accessed-an-uncommon-appid","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qX4Fakr7cS0940arRAlR","title":"A user accessed multiple time-consuming websites","pathname":"/analytics-alerts/alerts-by-name/a-user-accessed-multiple-time-consuming-websites","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"S6ODxrTgkfnqdVV5u5hz","title":"A user accessed multiple unusual resources via SSO","pathname":"/analytics-alerts/alerts-by-name/a-user-accessed-multiple-unusual-resources-via-sso","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0G8D2gdg0fqU0txhqzEy","title":"A user accessed Okta's admin application","pathname":"/analytics-alerts/alerts-by-name/a-user-accessed-okta-s-admin-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Y0odg8zd4SoWTd9VTitl","title":"A user account was modified to password never expires","pathname":"/analytics-alerts/alerts-by-name/a-user-account-was-modified-to-password-never-expires","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oVpsSFaavkY3FQkB5w3S","title":"A user added a Windows firewall rule","pathname":"/analytics-alerts/alerts-by-name/a-user-added-a-windows-firewall-rule","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IUNkUs1yRHtuC1vVLzbR","title":"A user attempted to bypass Okta MFA","pathname":"/analytics-alerts/alerts-by-name/a-user-attempted-to-bypass-okta-mfa","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"r3NMMxrEDhEpladVFD5W","title":"A user authenticated successfully via SSO from a suspicious tunnel operator","pathname":"/analytics-alerts/alerts-by-name/a-user-authenticated-successfully-via-sso-from-a-suspicious-tunnel-operator","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"B5poP5Tr52mYFvsTNaPa","title":"A user authenticated with weak NTLM to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/a-user-authenticated-with-weak-ntlm-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"X5BDri8R6e040vmt89bU","title":"A user certificate was issued with a mismatch","pathname":"/analytics-alerts/alerts-by-name/a-user-certificate-was-issued-with-a-mismatch","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"slYGG1pVXrSCo9TzhGFJ","title":"A user changed the Windows system time","pathname":"/analytics-alerts/alerts-by-name/a-user-changed-the-windows-system-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8HMTzpazgpimmiiSrCq5","title":"A user connected a new USB storage device to a host","pathname":"/analytics-alerts/alerts-by-name/a-user-connected-a-new-usb-storage-device-to-a-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qPALgRiczEpWMlG3uIIJ","title":"A user connected a new USB storage device to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/a-user-connected-a-new-usb-storage-device-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GHbD3CYV32FJ0ggjdcbd","title":"A user connected a USB storage device for the first time","pathname":"/analytics-alerts/alerts-by-name/a-user-connected-a-usb-storage-device-for-the-first-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"c6JgalwEBVfVgqUUIVBZ","title":"A user connected from a new country","pathname":"/analytics-alerts/alerts-by-name/a-user-connected-from-a-new-country","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GgeWu1JcovIAPxzIadEi","title":"A user connected to a VPN from a new country","pathname":"/analytics-alerts/alerts-by-name/a-user-connected-to-a-vpn-from-a-new-country","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"drip19eIpmgz6F3uFBvD","title":"A user created a pfx file for the first time","pathname":"/analytics-alerts/alerts-by-name/a-user-created-a-pfx-file-for-the-first-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aO7ln92q3rbGYtCwFhLx","title":"A user created an abnormal password-protected archive","pathname":"/analytics-alerts/alerts-by-name/a-user-created-an-abnormal-password-protected-archive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0oiNL8Wm2pN7PLZmRpmD","title":"A user enabled a default local account","pathname":"/analytics-alerts/alerts-by-name/a-user-enabled-a-default-local-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eHJq81HbhdcR5SdWHlQu","title":"A user established an SMB connection to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/a-user-established-an-smb-connection-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TmzTNWjTEMYaYFaNGBur","title":"A user executed multiple LDAP enumeration queries","pathname":"/analytics-alerts/alerts-by-name/a-user-executed-multiple-ldap-enumeration-queries","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vR7M0KCuRYDdt0zCR1Xo","title":"A user logged in at an unusual time via SSO","pathname":"/analytics-alerts/alerts-by-name/a-user-logged-in-at-an-unusual-time-via-sso","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UPHkvio2QI76lOEkeGD4","title":"A user logged in at an unusual time via VPN","pathname":"/analytics-alerts/alerts-by-name/a-user-logged-in-at-an-unusual-time-via-vpn","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"R11YYSTh03G0lsC1EFhH","title":"A user logged in from an abnormal country or ASN","pathname":"/analytics-alerts/alerts-by-name/a-user-logged-in-from-an-abnormal-country-or-asn","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KzaqAGhjvt6SKsBIRDBm","title":"A user logged in to the AWS console for the first time","pathname":"/analytics-alerts/alerts-by-name/a-user-logged-in-to-the-aws-console-for-the-first-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FDvMxheNDiEx2sYzYdhg","title":"A user logged on to multiple workstations via Schannel","pathname":"/analytics-alerts/alerts-by-name/a-user-logged-on-to-multiple-workstations-via-schannel","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"b8bsjuQ7NZsYndMnIQoJ","title":"A user modified an Okta MFA factor","pathname":"/analytics-alerts/alerts-by-name/a-user-modified-an-okta-mfa-factor","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fUK4FU96bgFHyYHryRVo","title":"A user modified an Okta network zone","pathname":"/analytics-alerts/alerts-by-name/a-user-modified-an-okta-network-zone","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SCeH8zGTcOwjbMdqWUgf","title":"A user modified an Okta policy rule","pathname":"/analytics-alerts/alerts-by-name/a-user-modified-an-okta-policy-rule","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kZQt0njaM4y0WFleZTpU","title":"A user modified the CA audit policy","pathname":"/analytics-alerts/alerts-by-name/a-user-modified-the-ca-audit-policy","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1Bs6OAWzdTfmSXPnYAB1","title":"A user observed and reported unusual activity in Okta","pathname":"/analytics-alerts/alerts-by-name/a-user-observed-and-reported-unusual-activity-in-okta","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"95nWaoL67YzsadmEgv6C","title":"A user performed suspiciously massive file activity","pathname":"/analytics-alerts/alerts-by-name/a-user-performed-suspiciously-massive-file-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"B31DTdEFJlBhZsJDxOnM","title":"A user printed an unusual number of files","pathname":"/analytics-alerts/alerts-by-name/a-user-printed-an-unusual-number-of-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"t6uOdiFOEF4WB89WTytI","title":"A user queried AD CS objects via LDAP","pathname":"/analytics-alerts/alerts-by-name/a-user-queried-ad-cs-objects-via-ldap","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tnXvl7FQDlXomoowTpwI","title":"A user received multiple weakly encrypted service tickets","pathname":"/analytics-alerts/alerts-by-name/a-user-received-multiple-weakly-encrypted-service-tickets","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1mNFpUCcxtoprTCzeM52","title":"A user rejected an SSO request from an unusual country","pathname":"/analytics-alerts/alerts-by-name/a-user-rejected-an-sso-request-from-an-unusual-country","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tAAORE6lcz1R4cyVMV5W","title":"A user requested multiple service tickets","pathname":"/analytics-alerts/alerts-by-name/a-user-requested-multiple-service-tickets","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"52afJULz9zs4l95xC1Y5","title":"A user sent multiple TGT requests to irregular service","pathname":"/analytics-alerts/alerts-by-name/a-user-sent-multiple-tgt-requests-to-irregular-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DkLrVooj9dzzMa5W2bFR","title":"A user took numerous screenshots","pathname":"/analytics-alerts/alerts-by-name/a-user-took-numerous-screenshots","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fcUPeblvF6sIpmt4sErb","title":"A user uploaded malware to SharePoint or OneDrive","pathname":"/analytics-alerts/alerts-by-name/a-user-uploaded-malware-to-sharepoint-or-onedrive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Z1tgEaWjki16rDF0vGTQ","title":"A user was added to a Windows security group","pathname":"/analytics-alerts/alerts-by-name/a-user-was-added-to-a-windows-security-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cdSp95lpUpVAmj748kPR","title":"A WMI subscriber was created","pathname":"/analytics-alerts/alerts-by-name/a-wmi-subscriber-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hazK2UGKKS93vPXwSISj","title":"Abnormal Allocation of compute resources in multiple regions","pathname":"/analytics-alerts/alerts-by-name/abnormal-allocation-of-compute-resources-in-multiple-regions","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"McN0OueNBitVyVNewDdu","title":"Abnormal Communication to a Rare Domain","pathname":"/analytics-alerts/alerts-by-name/abnormal-communication-to-a-rare-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"I5vvVuyzYoey8sAmmabK","title":"Abnormal communication with a rare combination of TLS and HTTP User Agent","pathname":"/analytics-alerts/alerts-by-name/abnormal-communication-with-a-rare-combination-of-tls-and-http-user-agent","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rdqIu5vSkIayfghNaagl","title":"Abnormal connections to a dormant host from a newly seen endpoint","pathname":"/analytics-alerts/alerts-by-name/abnormal-connections-to-a-dormant-host-from-a-newly-seen-endpoint","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZYFl3FBI8aN7rkmHTOAD","title":"Abnormal File Activity in SCCMContentLib Shared Folder by user","pathname":"/analytics-alerts/alerts-by-name/abnormal-file-activity-in-sccmcontentlib-shared-folder-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nly4BIvaQBQuxJtRxY7Y","title":"Abnormal ICMP echo (PING) to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/abnormal-icmp-echo-ping-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HZ3fx0VneLsHVKAhMmOa","title":"Abnormal increase in network-related alerts on the same host","pathname":"/analytics-alerts/alerts-by-name/abnormal-increase-in-network-related-alerts-on-the-same-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"f1J6WbMK6bsB2BnvmZKW","title":"Abnormal network communication through TOR using an uncommon port","pathname":"/analytics-alerts/alerts-by-name/abnormal-network-communication-through-tor-using-an-uncommon-port","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bNawaf93i6tHOc6HXiba","title":"Abnormal network communication with a rare combination of HTTP User Agent and HTTP Server","pathname":"/analytics-alerts/alerts-by-name/abnormal-network-communication-with-a-rare-combination-of-http-user-agent-and-http-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Si1UB1AfCRd6xr1mIAdc","title":"Abnormal process connection to default Meterpreter port","pathname":"/analytics-alerts/alerts-by-name/abnormal-process-connection-to-default-meterpreter-port","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jmGaokYr0y6D0Ojukjzc","title":"Abnormal RDP connections to multiple hosts from a rarely seen host","pathname":"/analytics-alerts/alerts-by-name/abnormal-rdp-connections-to-multiple-hosts-from-a-rarely-seen-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3wNPjqNKDsB7xV0ItGc8","title":"Abnormal RDP connections to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/abnormal-rdp-connections-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qZAUFk69Z23BbxEoWlhr","title":"Abnormal RDP session to a remote host from a rarely seen host","pathname":"/analytics-alerts/alerts-by-name/abnormal-rdp-session-to-a-remote-host-from-a-rarely-seen-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XiKorh6GwnSS3SvoNKAK","title":"Abnormal Recurring Communications to a Rare Domain","pathname":"/analytics-alerts/alerts-by-name/abnormal-recurring-communications-to-a-rare-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PHNORnNr6ZtI9ZE44GM1","title":"Abnormal RPC traffic to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/abnormal-rpc-traffic-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8oIXzkYWpAYKXPP3uNHE","title":"Abnormal sensitive RPC traffic to multiple hosts from a rarely seen host","pathname":"/analytics-alerts/alerts-by-name/abnormal-sensitive-rpc-traffic-to-multiple-hosts-from-a-rarely-seen-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9SNNESzdv9YMX6TefEGz","title":"Abnormal sensitive RPC traffic to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/abnormal-sensitive-rpc-traffic-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KZCzR7ez6o9VOiNubtfr","title":"Abnormal SMB activity to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/abnormal-smb-activity-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1Ly4sjjdkjJKt85oyXG3","title":"Abnormal SMB scanning activity to multiple hosts","pathname":"/analytics-alerts/alerts-by-name/abnormal-smb-scanning-activity-to-multiple-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KSiUhg7urtm0QJ7iSMul","title":"Abnormal User Login to Domain Controller","pathname":"/analytics-alerts/alerts-by-name/abnormal-user-login-to-domain-controller","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xpaOWBRTIM6vu4gPWvPu","title":"Abusable command-line activity by untrusted causality actor","pathname":"/analytics-alerts/alerts-by-name/abusable-command-line-activity-by-untrusted-causality-actor","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4RAZJIePIds0DjgdPDKN","title":"Access to kubelet credentials file","pathname":"/analytics-alerts/alerts-by-name/access-to-kubelet-credentials-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1UDdSqage0VCZY0Bosjd","title":"Access to Kubernetes CA certificate file","pathname":"/analytics-alerts/alerts-by-name/access-to-kubernetes-ca-certificate-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mqMb4Nkc9FgQvUBs51nm","title":"Access to Kubernetes configuration file","pathname":"/analytics-alerts/alerts-by-name/access-to-kubernetes-configuration-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cAEUFiZ4GLIjwcE0t0aC","title":"Access to sensitive host files from within a Kubernetes pod","pathname":"/analytics-alerts/alerts-by-name/access-to-sensitive-host-files-from-within-a-kubernetes-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7IOd4t2HEM0yzwY7XTiM","title":"Account probing","pathname":"/analytics-alerts/alerts-by-name/account-probing","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fxv8NDMTazqd1K9KV5ks","title":"Adding execution privileges","pathname":"/analytics-alerts/alerts-by-name/adding-execution-privileges","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yTKaYkAu6EVr5ggkSed6","title":"ADFS DKM Key Access","pathname":"/analytics-alerts/alerts-by-name/adfs-dkm-key-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VqBZm0KqxIKoq3Pc0gA5","title":"Admin privileges were granted to a Google Workspace user","pathname":"/analytics-alerts/alerts-by-name/admin-privileges-were-granted-to-a-google-workspace-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"B0v3swQfAxEG3YhBztob","title":"Administrator groups enumerated via LDAP","pathname":"/analytics-alerts/alerts-by-name/administrator-groups-enumerated-via-ldap","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GBBFamDypd21uEpuBNgO","title":"AI-determined combination of risky alerts under the same actor process","pathname":"/analytics-alerts/alerts-by-name/ai-determined-combination-of-risky-alerts-under-the-same-actor-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bbTT1ilz5f4F5Xrfjmgp","title":"AI-determined combination of risky alerts under the same causality","pathname":"/analytics-alerts/alerts-by-name/ai-determined-combination-of-risky-alerts-under-the-same-causality","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SHXorAWYDfg0t9DxuNRB","title":"AI model discovery","pathname":"/analytics-alerts/alerts-by-name/ai-model-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Zm3Hl4ITuXQyB317zhd7","title":"AI safeguards deletion attempt","pathname":"/analytics-alerts/alerts-by-name/ai-safeguards-deletion-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IIPOzJoV74l6V4jNWQSZ","title":"AI safeguards were modified","pathname":"/analytics-alerts/alerts-by-name/ai-safeguards-were-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7JvanGBrhubTwbAfxrD6","title":"Allocation of multiple cloud compute resources","pathname":"/analytics-alerts/alerts-by-name/allocation-of-multiple-cloud-compute-resources","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gMyabk4HIW3EtQFoCy6a","title":"An app was added to Google Marketplace","pathname":"/analytics-alerts/alerts-by-name/an-app-was-added-to-google-marketplace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kS1EcOWXHhbsezZTyo9r","title":"An app was added to the Google Workspace trusted OAuth apps list","pathname":"/analytics-alerts/alerts-by-name/an-app-was-added-to-the-google-workspace-trusted-oauth-apps-list","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8WWhp3MtwXS5LmUyLyBJ","title":"An app was removed from a blocked list in Google Workspace","pathname":"/analytics-alerts/alerts-by-name/an-app-was-removed-from-a-blocked-list-in-google-workspace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GSLWTcAlLvCujAqpF7nP","title":"An AWS database service master user password was changed","pathname":"/analytics-alerts/alerts-by-name/an-aws-database-service-master-user-password-was-changed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vfugh0empwTA1Rmv4IOq","title":"An AWS EC2 instance containing sensitive data was exported","pathname":"/analytics-alerts/alerts-by-name/an-aws-ec2-instance-containing-sensitive-data-was-exported","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yUf4iLCoQjA4wGjEWgkd","title":"An AWS EC2 instance was exported from a production account","pathname":"/analytics-alerts/alerts-by-name/an-aws-ec2-instance-was-exported-from-a-production-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OQt8eMuyQwxB8pbupNgn","title":"An AWS EC2 instance was exported into an unknown S3 bucket","pathname":"/analytics-alerts/alerts-by-name/an-aws-ec2-instance-was-exported-into-an-unknown-s3-bucket","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"p9hU7jPsYg6Vg5MalI3e","title":"An AWS EFS File-share mount was deleted","pathname":"/analytics-alerts/alerts-by-name/an-aws-efs-file-share-mount-was-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"io2ngmTHOtxELQplbbH9","title":"An AWS EFS file-share was deleted","pathname":"/analytics-alerts/alerts-by-name/an-aws-efs-file-share-was-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uEMRea5UyttqpfWpr2GB","title":"An AWS EKS cluster was created or deleted","pathname":"/analytics-alerts/alerts-by-name/an-aws-eks-cluster-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UnEg8jLNgjADGnXbq9fn","title":"An AWS GuardDuty IP set was created","pathname":"/analytics-alerts/alerts-by-name/an-aws-guardduty-ip-set-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rDrRhlhaHA7rhhVV3ufD","title":"An AWS Lambda Function was created","pathname":"/analytics-alerts/alerts-by-name/an-aws-lambda-function-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JSrKufwUpX0aXT4kOJbL","title":"An AWS Lambda function was modified","pathname":"/analytics-alerts/alerts-by-name/an-aws-lambda-function-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SFCDbErGyeB3qPhbA3qi","title":"An AWS RDS Global Cluster Deletion","pathname":"/analytics-alerts/alerts-by-name/an-aws-rds-global-cluster-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"k2XxrdlDNKnV98cwgiQD","title":"An AWS RDS instance was created from a snapshot","pathname":"/analytics-alerts/alerts-by-name/an-aws-rds-instance-was-created-from-a-snapshot","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZoCo6wDaJnRfAJ2DBPdO","title":"An AWS Route 53 domain was transferred to another AWS account","pathname":"/analytics-alerts/alerts-by-name/an-aws-route-53-domain-was-transferred-to-another-aws-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1GnukE4JFWcAtlDHM1Xa","title":"An AWS S3 bucket configuration was modified","pathname":"/analytics-alerts/alerts-by-name/an-aws-s3-bucket-configuration-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1nljNhRny0UjsmByROpO","title":"An AWS SAML provider was modified","pathname":"/analytics-alerts/alerts-by-name/an-aws-saml-provider-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hmkkaF5mSDlBtUHdXrRc","title":"An AWS SES identity was deleted","pathname":"/analytics-alerts/alerts-by-name/an-aws-ses-identity-was-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AC7Xv2OFGxQkPQG82B8K","title":"An Azure application reached a throttling API rate","pathname":"/analytics-alerts/alerts-by-name/an-azure-application-reached-a-throttling-api-rate","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZuIqq1mB1MXoRrEgk95B","title":"An Azure DNS Zone was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-dns-zone-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"krZojZ2FDF7JTnvxsnhz","title":"An Azure Firewall policy deletion","pathname":"/analytics-alerts/alerts-by-name/an-azure-firewall-policy-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CFfnuhM4UHeQf7CoIiXk","title":"An Azure Firewall rule collection group was modified or deleted","pathname":"/analytics-alerts/alerts-by-name/an-azure-firewall-rule-collection-group-was-modified-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YPI3tapDNxKkakaz3Cue","title":"An Azure firewall rule group was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-firewall-rule-group-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WAicqoL486SUi5pQBCKE","title":"An Azure Firewall was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-firewall-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xohav9Wlc04T6gVvPkJn","title":"An Azure identity performed multiple actions that were denied","pathname":"/analytics-alerts/alerts-by-name/an-azure-identity-performed-multiple-actions-that-were-denied","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ee93DtFSKoofcDz12RGz","title":"An Azure Key Vault key was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-key-vault-key-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KivPKhbiZjsNdhAY4JsN","title":"An Azure Key Vault was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-key-vault-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yb6qFkOKeZz1Sxk8tjfk","title":"An Azure Kubernetes Cluster was created or deleted","pathname":"/analytics-alerts/alerts-by-name/an-azure-kubernetes-cluster-was-created-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IMhXa6BZMIqkZAp4GyU7","title":"An Azure Kubernetes Role-Binding or Cluster-Role-Binding was modified or deleted","pathname":"/analytics-alerts/alerts-by-name/an-azure-kubernetes-role-binding-or-cluster-role-binding-was-modified-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hvdEN5DCUillq0AcAcuw","title":"An Azure Kubernetes Role or Cluster-Role was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-kubernetes-role-or-cluster-role-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hMEnXXmlDV4dtyVbvHfz","title":"An Azure Kubernetes Service Account was modified or deleted","pathname":"/analytics-alerts/alerts-by-name/an-azure-kubernetes-service-account-was-modified-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pf3hf7rXgB4ZF2IijNoB","title":"An Azure Network Security Group was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-network-security-group-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OifckDUcWxPg50Am8ZNS","title":"An Azure Point-to-Site VPN was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-point-to-site-vpn-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kQfwCibOvgjCT9fYT7GB","title":"An Azure SQL database was exported from a production subscription","pathname":"/analytics-alerts/alerts-by-name/an-azure-sql-database-was-exported-from-a-production-subscription","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"teu5iuVr1ltV2Nm4Y74z","title":"An Azure Suppression Rule was created","pathname":"/analytics-alerts/alerts-by-name/an-azure-suppression-rule-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OkW48xaRQ2IxPm9Kb5Zp","title":"An Azure virtual network Device was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-virtual-network-device-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GEzJZkcZCgHkeYGKNRhD","title":"An Azure virtual network was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-virtual-network-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SPP9evQZZO2kWBJmRl6m","title":"An Azure VM snapshot SAS URL was generated for export from a production subscription","pathname":"/analytics-alerts/alerts-by-name/an-azure-vm-snapshot-sas-url-was-generated-for-export-from-a-production-subscription","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"iueGYF2VGAHw9ugUttQ5","title":"An Azure VM snapshot SAS URL was generated","pathname":"/analytics-alerts/alerts-by-name/an-azure-vm-snapshot-sas-url-was-generated","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sAD0FS8ujnfhfyaXtVQP","title":"An Azure VPN Connection was modified","pathname":"/analytics-alerts/alerts-by-name/an-azure-vpn-connection-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lBl4fCQ9Xa8r4CDVrFbW","title":"An EBS snapshot block was downloaded","pathname":"/analytics-alerts/alerts-by-name/an-ebs-snapshot-block-was-downloaded","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fjrBtHbPIE6ylqSiH2Cp","title":"An Email address was added to AWS SES","pathname":"/analytics-alerts/alerts-by-name/an-email-address-was-added-to-aws-ses","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PcG9qt2ywsaPP3VbwB8F","title":"An executable was written and executed by a web server","pathname":"/analytics-alerts/alerts-by-name/an-executable-was-written-and-executed-by-a-web-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lgAIJoScrYvd6eu05mcn","title":"An IAM group was created","pathname":"/analytics-alerts/alerts-by-name/an-iam-group-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qwM0BqYsLCYfmLYimc32","title":"An identity accessed a backup cloud storage","pathname":"/analytics-alerts/alerts-by-name/an-identity-accessed-a-backup-cloud-storage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gYJYDjmqoQX9YJOKTaqS","title":"An identity accessed a cloud storage for the first time","pathname":"/analytics-alerts/alerts-by-name/an-identity-accessed-a-cloud-storage-for-the-first-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4t2XrP3DaV3sU1gmV5UP","title":"An identity accessed Azure Kubernetes Secrets","pathname":"/analytics-alerts/alerts-by-name/an-identity-accessed-azure-kubernetes-secrets","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CPJXx3du4aK6i7y5VaHo","title":"An identity attached an administrative policy to an IAM user or role","pathname":"/analytics-alerts/alerts-by-name/an-identity-attached-an-administrative-policy-to-an-iam-user-or-role","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FlzB9KH0cAOmZ4xwKGcr","title":"An identity created or updated password for an IAM user","pathname":"/analytics-alerts/alerts-by-name/an-identity-created-or-updated-password-for-an-iam-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cbELCR7R38GlSvKgl2Id","title":"An identity disabled bucket logging","pathname":"/analytics-alerts/alerts-by-name/an-identity-disabled-bucket-logging","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sH2I0szS68dHflwDusFx","title":"An identity initiated a download of multiple cloud objects","pathname":"/analytics-alerts/alerts-by-name/an-identity-initiated-a-download-of-multiple-cloud-objects","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"d6H1ojP4YXQZ1uxAeWqV","title":"An identity performed a suspicious download of multiple cloud storage objects","pathname":"/analytics-alerts/alerts-by-name/an-identity-performed-a-suspicious-download-of-multiple-cloud-storage-objects","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"iYxBFb3cklT8438Mf649","title":"An identity started an AWS SSM session","pathname":"/analytics-alerts/alerts-by-name/an-identity-started-an-aws-ssm-session","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SSjqxInMgHb6hGmHF99L","title":"An identity successfully extracted multiple secrets within the organization","pathname":"/analytics-alerts/alerts-by-name/an-identity-successfully-extracted-multiple-secrets-within-the-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zNsWTqPLisadWtu6Y9QE","title":"An identity was granted permissions to manage user access to Azure resources","pathname":"/analytics-alerts/alerts-by-name/an-identity-was-granted-permissions-to-manage-user-access-to-azure-resources","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pQwzItiSsFUrh6euukBm","title":"An internal Cloud resource performed port scan on external networks","pathname":"/analytics-alerts/alerts-by-name/an-internal-cloud-resource-performed-port-scan-on-external-networks","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xtUQaCwkkFm6wVnrJJRy","title":"An operation was performed by an identity from a domain that was not seen in the organization","pathname":"/analytics-alerts/alerts-by-name/an-operation-was-performed-by-an-identity-from-a-domain-that-was-not-seen-in-the-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"q9LbnUtlDPGmg664vWkm","title":"An RDS snapshot containing sensitive data was exported","pathname":"/analytics-alerts/alerts-by-name/an-rds-snapshot-containing-sensitive-data-was-exported","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"meQ8QKernuAhMf72KgxA","title":"An RDS snapshot was exported from a production account","pathname":"/analytics-alerts/alerts-by-name/an-rds-snapshot-was-exported-from-a-production-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"iJ1KrVknxCI3teMVhnzS","title":"An RDS snapshot was exported to an unknown bucket","pathname":"/analytics-alerts/alerts-by-name/an-rds-snapshot-was-exported-to-an-unknown-bucket","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"dzt8nb5EQoLorbRjxW3A","title":"An RDS snapshot was exported to an unknown S3 bucket","pathname":"/analytics-alerts/alerts-by-name/an-rds-snapshot-was-exported-to-an-unknown-s3-bucket","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lMR3222JHUIIi3DTAuqF","title":"An S3 replication policy to an unknown bucket was created","pathname":"/analytics-alerts/alerts-by-name/an-s3-replication-policy-to-an-unknown-bucket-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UeQmNJASXY5aCKjSHLly","title":"An uncommon executable was remotely written over SMB to an uncommon destination","pathname":"/analytics-alerts/alerts-by-name/an-uncommon-executable-was-remotely-written-over-smb-to-an-uncommon-destination","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UWJRSNyf8ARasieZgq7s","title":"An uncommon file added to startup-related Registry keys","pathname":"/analytics-alerts/alerts-by-name/an-uncommon-file-added-to-startup-related-registry-keys","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SJhzpe5zCEtfMnaQbnjL","title":"An uncommon file was created in the startup folder","pathname":"/analytics-alerts/alerts-by-name/an-uncommon-file-was-created-in-the-startup-folder","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aCRheh9F6iBNTiDYYadr","title":"An uncommon lolbin execution by scheduled task","pathname":"/analytics-alerts/alerts-by-name/an-uncommon-lolbin-execution-by-scheduled-task","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Pflhc5wCrJQkqfFu1wsX","title":"An uncommon RDP session from a managed host","pathname":"/analytics-alerts/alerts-by-name/an-uncommon-rdp-session-from-a-managed-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4h8isfTbcfEkBOO4R9iF","title":"An uncommon RDP session was established","pathname":"/analytics-alerts/alerts-by-name/an-uncommon-rdp-session-was-established","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"622uoTk4nhOGXDESmmNp","title":"An uncommon service was started","pathname":"/analytics-alerts/alerts-by-name/an-uncommon-service-was-started","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BH6favHrTuMtOKLeoHUt","title":"An unknown account was invited to the AWS organization","pathname":"/analytics-alerts/alerts-by-name/an-unknown-account-was-invited-to-the-aws-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uRSvOoKGdWj8n6uazdcP","title":"An unpopular process accessed the microphone on the host","pathname":"/analytics-alerts/alerts-by-name/an-unpopular-process-accessed-the-microphone-on-the-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VnPuyYkkwJwmLSIlL3J7","title":"An unsigned process created scheduled task and performed an injection","pathname":"/analytics-alerts/alerts-by-name/an-unsigned-process-created-scheduled-task-and-performed-an-injection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"V5DrHHp8VexHHu9TAfe2","title":"An unusual archive file creation by a user","pathname":"/analytics-alerts/alerts-by-name/an-unusual-archive-file-creation-by-a-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"M0xhqLNlCECGlisInVep","title":"An unusual cloud identity was granted permissions to a BigQuery resource","pathname":"/analytics-alerts/alerts-by-name/an-unusual-cloud-identity-was-granted-permissions-to-a-bigquery-resource","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2CHdwNymBpfAiHMAE1UO","title":"An unusual process in ingress-nginx has accessed a service-account token file","pathname":"/analytics-alerts/alerts-by-name/an-unusual-process-in-ingress-nginx-has-accessed-a-service-account-token-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pfYTwYQa8VeRfMEcoCBa","title":"An unusual read activity of cloud object","pathname":"/analytics-alerts/alerts-by-name/an-unusual-read-activity-of-cloud-object","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WED7Ddw2VqZHVHbkIqrE","title":"Analytics enhanced NGFW Threat Alert - Rare Internal Firewall Vulnerability Threat Alert","pathname":"/analytics-alerts/alerts-by-name/analytics-enhanced-ngfw-threat-alert-rare-internal-firewall-vulnerability-threat-alert","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Y0rOT3PNyI1eEgoyimpI","title":"AppleScript executed a shell script","pathname":"/analytics-alerts/alerts-by-name/applescript-executed-a-shell-script","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"y1J4jXku8tobtSvZ9Tx8","title":"AppleScript interpreter dynamic library loaded into a process","pathname":"/analytics-alerts/alerts-by-name/applescript-interpreter-dynamic-library-loaded-into-a-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fpsIvoB6GWSkPjmXr8sC","title":"AppleScript process executed with a rare command line","pathname":"/analytics-alerts/alerts-by-name/applescript-process-executed-with-a-rare-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OF5Xnpj99AVy0xwJlKIa","title":"Attempt to execute a command on a remote host using PsExec.exe","pathname":"/analytics-alerts/alerts-by-name/attempt-to-execute-a-command-on-a-remote-host-using-psexec-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cFbFr2q1D4qt01rSO14q","title":"Attempted Azure application access from unknown tenant","pathname":"/analytics-alerts/alerts-by-name/attempted-azure-application-access-from-unknown-tenant","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nBqGhTzC2lRDQHDK9eed","title":"Aurora DB cluster stopped","pathname":"/analytics-alerts/alerts-by-name/aurora-db-cluster-stopped","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sFKHn5bsxBNLtYCAuQK3","title":"Authentication attempt by a honey user","pathname":"/analytics-alerts/alerts-by-name/authentication-attempt-by-a-honey-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fncopHCbq13RtZPcJVqY","title":"Authentication Attempt From a Dormant Account","pathname":"/analytics-alerts/alerts-by-name/authentication-attempt-from-a-dormant-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UwcjjxBjbUMCySaR6S5Q","title":"Authentication method added to an Azure account","pathname":"/analytics-alerts/alerts-by-name/authentication-method-added-to-an-azure-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Y2Y06fhKB3nNrC0k8WnE","title":"Authentication method was added to Azure account","pathname":"/analytics-alerts/alerts-by-name/authentication-method-was-added-to-azure-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tufvHOaQvPBaclvTh5Ai","title":"Autorun.inf created in root C drive","pathname":"/analytics-alerts/alerts-by-name/autorun-inf-created-in-root-c-drive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uglP4AIgCiP9E3m7y5RJ","title":"AWS Backup recovery point deletion","pathname":"/analytics-alerts/alerts-by-name/aws-backup-recovery-point-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qjJR40H7j27jt7VC8JBq","title":"AWS Backup vault was deleted","pathname":"/analytics-alerts/alerts-by-name/aws-backup-vault-was-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vjK2qZj86Y0Q6PIkXu2A","title":"AWS Bedrock AI infrastructure enumeration activity","pathname":"/analytics-alerts/alerts-by-name/aws-bedrock-ai-infrastructure-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OcPaNhVLniuBTT9P1yvi","title":"AWS Bedrock model invocation logging deletion","pathname":"/analytics-alerts/alerts-by-name/aws-bedrock-model-invocation-logging-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SvWeBXJtU1Yo8YmHFhDK","title":"AWS CloudTrail has been stopped","pathname":"/analytics-alerts/alerts-by-name/aws-cloudtrail-has-been-stopped","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tkSB2jtunkm3uft7oVUI","title":"AWS CloudTrail modification","pathname":"/analytics-alerts/alerts-by-name/aws-cloudtrail-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yTgrpv981GBx9K1kVnPA","title":"AWS CloudWatch log group deletion","pathname":"/analytics-alerts/alerts-by-name/aws-cloudwatch-log-group-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WyTaSWfPHfwEann9PJ6E","title":"AWS CloudWatch log stream deletion","pathname":"/analytics-alerts/alerts-by-name/aws-cloudwatch-log-stream-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"u6HYNKgpu72OEn6KLCjp","title":"AWS Config Recorder stopped","pathname":"/analytics-alerts/alerts-by-name/aws-config-recorder-stopped","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"n3mIAs66BukP6mW9eLIb","title":"AWS config resource deletion","pathname":"/analytics-alerts/alerts-by-name/aws-config-resource-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hzlxYyYhT9BGqwywFLeH","title":"AWS console login without MFA","pathname":"/analytics-alerts/alerts-by-name/aws-console-login-without-mfa","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JcrydRn0rTlikAlTcAEw","title":"AWS data asset shared public","pathname":"/analytics-alerts/alerts-by-name/aws-data-asset-shared-public","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"71dG1lvepxB9K1BP67cG","title":"AWS EBS enumeration activity","pathname":"/analytics-alerts/alerts-by-name/aws-ebs-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xCo0ZciNxxJk9bfvBzDU","title":"AWS EBS snapshot deletion","pathname":"/analytics-alerts/alerts-by-name/aws-ebs-snapshot-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WF2oyJ6FXw4gTgGlfZef","title":"AWS EC2 infrastructure enumeration activity","pathname":"/analytics-alerts/alerts-by-name/aws-ec2-infrastructure-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"K4nbydS0cZNaQN3I28Uj","title":"AWS EC2 instance exported into S3","pathname":"/analytics-alerts/alerts-by-name/aws-ec2-instance-exported-into-s3","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fAq8RYc8cLey4GGjuwEy","title":"AWS Flow Logs deletion","pathname":"/analytics-alerts/alerts-by-name/aws-flow-logs-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jMAfdZNnMmm0pBkPI9hZ","title":"AWS Guard-Duty detector deletion","pathname":"/analytics-alerts/alerts-by-name/aws-guard-duty-detector-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"S8hBpPHFbl7T21Tj8OmH","title":"AWS IAM resource group deletion","pathname":"/analytics-alerts/alerts-by-name/aws-iam-resource-group-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WAU00YPdDl5jIKK9G76n","title":"AWS IAM Role Created with Cross-Account Access","pathname":"/analytics-alerts/alerts-by-name/aws-iam-role-created-with-cross-account-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QgSgN4em9q1IzalqGpxs","title":"AWS IAM Role's Trusted Policy Modification Allows Cross-Account Access","pathname":"/analytics-alerts/alerts-by-name/aws-iam-role-s-trusted-policy-modification-allows-cross-account-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FRDJkl0KKiW0X8izLkde","title":"AWS Lambda Cross-Account sensitive permissions configured","pathname":"/analytics-alerts/alerts-by-name/aws-lambda-cross-account-sensitive-permissions-configured","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RzguP1zacCm8WgwEfBWN","title":"AWS Lambda infrastructure enumeration activity","pathname":"/analytics-alerts/alerts-by-name/aws-lambda-infrastructure-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ujgInORZs2t9toDaBW8P","title":"AWS network ACL rule creation","pathname":"/analytics-alerts/alerts-by-name/aws-network-acl-rule-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XF9lGnbEasmdv74VPvdG","title":"AWS network ACL rule deletion","pathname":"/analytics-alerts/alerts-by-name/aws-network-acl-rule-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"m8Gzk16EVvIhD028fqLE","title":"AWS Password Policy Discovery","pathname":"/analytics-alerts/alerts-by-name/aws-password-policy-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RPAEN8BDnRM11hcYvlIn","title":"AWS principals discovery","pathname":"/analytics-alerts/alerts-by-name/aws-principals-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Wb4Bevd8tcWluZdjDNiY","title":"AWS RDS cluster deletion","pathname":"/analytics-alerts/alerts-by-name/aws-rds-cluster-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EZcq6aKRvTfCFHfkMSFA","title":"AWS resource discovery","pathname":"/analytics-alerts/alerts-by-name/aws-resource-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hoW4d7EsLlGmClnxV7G3","title":"AWS root account activity","pathname":"/analytics-alerts/alerts-by-name/aws-root-account-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vbaxY96F6kIIoMv0YG5u","title":"AWS Route53 DNS Resolver query logging configuration deletion","pathname":"/analytics-alerts/alerts-by-name/aws-route53-dns-resolver-query-logging-configuration-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qlohPUzHpYEmnSbCCSRO","title":"AWS S3 bucket data retention policy change through S3 Lifecycle rule","pathname":"/analytics-alerts/alerts-by-name/aws-s3-bucket-data-retention-policy-change-through-s3-lifecycle-rule","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"W2rOCief3ikHu5Ueejo1","title":"AWS S3 bucket or object was exposed to public access","pathname":"/analytics-alerts/alerts-by-name/aws-s3-bucket-or-object-was-exposed-to-public-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"C45Y6zBd2bn5MZSCSnWc","title":"AWS S3 Buckets enumeration activity","pathname":"/analytics-alerts/alerts-by-name/aws-s3-buckets-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gnTznaTSAQs8AhmLss1B","title":"AWS Secrets Manager discovery","pathname":"/analytics-alerts/alerts-by-name/aws-secrets-manager-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qa6UuLAMRFgT2aWVX5x6","title":"AWS Security Group remote access allowed from an unknown external IP address","pathname":"/analytics-alerts/alerts-by-name/aws-security-group-remote-access-allowed-from-an-unknown-external-ip-address","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Pk6B9qPEVAxgcPESpnOU","title":"AWS Security Service Enumeration","pathname":"/analytics-alerts/alerts-by-name/aws-security-service-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vvdE3ajaSTIbgaUfToeg","title":"AWS SecurityHub findings were modified","pathname":"/analytics-alerts/alerts-by-name/aws-securityhub-findings-were-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ewJduLntXsTaNsEb9tKl","title":"AWS SES account sending settings modified","pathname":"/analytics-alerts/alerts-by-name/aws-ses-account-sending-settings-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qUJUm1GynBQk2T3zhEyv","title":"AWS SSM association created with inventory collection document","pathname":"/analytics-alerts/alerts-by-name/aws-ssm-association-created-with-inventory-collection-document","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NyLXQq4YEbntlTxqAUSR","title":"AWS SSM parameters discovery","pathname":"/analytics-alerts/alerts-by-name/aws-ssm-parameters-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MwNlup7wSKiSv7wGtOeV","title":"AWS SSM parameters retrieval","pathname":"/analytics-alerts/alerts-by-name/aws-ssm-parameters-retrieval","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"capztI3TI1amNbIen6RA","title":"AWS SSM send command attempt","pathname":"/analytics-alerts/alerts-by-name/aws-ssm-send-command-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wphVQfV53iLnxyaTSmx4","title":"AWS Storage Gateway enumeration","pathname":"/analytics-alerts/alerts-by-name/aws-storage-gateway-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NtK76oBOJjMVOKVHa6vM","title":"AWS Storage Gateway file share enumeration","pathname":"/analytics-alerts/alerts-by-name/aws-storage-gateway-file-share-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xg0dBvy8orF9EsQix8XM","title":"AWS STS temporary credentials were generated","pathname":"/analytics-alerts/alerts-by-name/aws-sts-temporary-credentials-were-generated","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pF6EfTjftnxGEMAxGYtM","title":"AWS support case creation","pathname":"/analytics-alerts/alerts-by-name/aws-support-case-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yvS0op2wQf3RHoLcLnsz","title":"AWS Systems Manager hosts enumeration","pathname":"/analytics-alerts/alerts-by-name/aws-systems-manager-hosts-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wtHTIM2vjYJAmJQiukIX","title":"AWS Transfer Family server created","pathname":"/analytics-alerts/alerts-by-name/aws-transfer-family-server-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zuk4niDZ2lWMzRsvQl9R","title":"AWS user creation","pathname":"/analytics-alerts/alerts-by-name/aws-user-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MRZJeJXI5MRGlaSkgEZo","title":"AWS web ACL deletion","pathname":"/analytics-alerts/alerts-by-name/aws-web-acl-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"m1eiIXVB2wgwL345mknn","title":"Azure account creation by a non-standard account","pathname":"/analytics-alerts/alerts-by-name/azure-account-creation-by-a-non-standard-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bFgPZZjfcrDIY3oisKtY","title":"Azure account deletion by a non-standard account","pathname":"/analytics-alerts/alerts-by-name/azure-account-deletion-by-a-non-standard-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6SnBcX5VhjSmmqr1bNpA","title":"Azure AD account unlock/password reset attempt","pathname":"/analytics-alerts/alerts-by-name/azure-ad-account-unlock-password-reset-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"k8PlpUSoSvsaOcoeKqNF","title":"Azure AD PIM alert disabled","pathname":"/analytics-alerts/alerts-by-name/azure-ad-pim-alert-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1MZlH6pnaWGkgMRcwAUY","title":"Azure AD PIM elevation request","pathname":"/analytics-alerts/alerts-by-name/azure-ad-pim-elevation-request","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"G6jrzg3KIMGO0BXw2afV","title":"Azure AD PIM role settings change","pathname":"/analytics-alerts/alerts-by-name/azure-ad-pim-role-settings-change","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SeJ35e9F5uUQqxoMPPdM","title":"Azure application consent","pathname":"/analytics-alerts/alerts-by-name/azure-application-consent","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"umHoVrKGpfh9VSsZ6ydQ","title":"Azure application credentials added","pathname":"/analytics-alerts/alerts-by-name/azure-application-credentials-added","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ltBpwcItR5P6AJqAAdNb","title":"Azure application removed","pathname":"/analytics-alerts/alerts-by-name/azure-application-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"md0YzCdgXjqljNX21AXY","title":"Azure application URI modification","pathname":"/analytics-alerts/alerts-by-name/azure-application-uri-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6zowsPKDMWjKeRkdQJqU","title":"Azure Automation Account Creation","pathname":"/analytics-alerts/alerts-by-name/azure-automation-account-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xKDV5MV6Tdy7KDtBs17B","title":"Azure Automation Runbook Creation/Modification","pathname":"/analytics-alerts/alerts-by-name/azure-automation-runbook-creation-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YPgdWGWOOtFNkI1Q79lI","title":"Azure Automation Runbook Deletion","pathname":"/analytics-alerts/alerts-by-name/azure-automation-runbook-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qtqrHEDJhn9mlB59rxAQ","title":"Azure Automation Webhook creation","pathname":"/analytics-alerts/alerts-by-name/azure-automation-webhook-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"m6OeB7FwU4guuSTYXeXW","title":"Azure Blob Container Access Level Modification","pathname":"/analytics-alerts/alerts-by-name/azure-blob-container-access-level-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kXQclHhpOUHuKRh9nYDe","title":"Azure conditional access policy creation or modification","pathname":"/analytics-alerts/alerts-by-name/azure-conditional-access-policy-creation-or-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XkAP2ScTYobn2kWPiHVN","title":"Azure diagnostic configuration deletion","pathname":"/analytics-alerts/alerts-by-name/azure-diagnostic-configuration-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wIHf8m45rERpcsTPLXxl","title":"Azure domain federation settings modification attempt","pathname":"/analytics-alerts/alerts-by-name/azure-domain-federation-settings-modification-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FQdRiDrWYPkOxcFpO2nh","title":"Azure enumeration activity using Microsoft Graph API","pathname":"/analytics-alerts/alerts-by-name/azure-enumeration-activity-using-microsoft-graph-api","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SuqboF9JMxvKJJChxvhr","title":"Azure Event Hub Authorization rule creation/modification","pathname":"/analytics-alerts/alerts-by-name/azure-event-hub-authorization-rule-creation-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Xv2Lfv2YWVYYKfNo1W5E","title":"Azure Event Hub Deletion","pathname":"/analytics-alerts/alerts-by-name/azure-event-hub-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5trfzH7sF25sl7couvRL","title":"Azure group creation/deletion","pathname":"/analytics-alerts/alerts-by-name/azure-group-creation-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"91w4ewal8tUZy0mgc116","title":"Azure Key Vault modification","pathname":"/analytics-alerts/alerts-by-name/azure-key-vault-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hJaGrfVdLODC0Ag9KpCW","title":"Azure Key Vault Secrets were modified","pathname":"/analytics-alerts/alerts-by-name/azure-key-vault-secrets-were-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nzLMohhcGYEfbKfiPQcb","title":"Azure Kubernetes events were deleted","pathname":"/analytics-alerts/alerts-by-name/azure-kubernetes-events-were-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gRY7GyWRa7eMncXIDE8n","title":"Azure mailbox rule creation","pathname":"/analytics-alerts/alerts-by-name/azure-mailbox-rule-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DVI1WOWQo7LIwgRpIQA5","title":"Azure Monitor alert rule deleted","pathname":"/analytics-alerts/alerts-by-name/azure-monitor-alert-rule-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KfZrXLpytOHBk2ENZ1dC","title":"Azure Network Watcher Deletion","pathname":"/analytics-alerts/alerts-by-name/azure-network-watcher-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GlMQAJR1XVewil9ikedb","title":"Azure permission delegation granted","pathname":"/analytics-alerts/alerts-by-name/azure-permission-delegation-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zQdNI6ZagKinHejUDk3f","title":"Azure Privilege Escalation Using an Application","pathname":"/analytics-alerts/alerts-by-name/azure-privilege-escalation-using-an-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MYw2SrbNmcWi4nh8oDDE","title":"Azure Resource Group Deletion","pathname":"/analytics-alerts/alerts-by-name/azure-resource-group-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8x3XuZC2A5e1DoWbSoXk","title":"Azure route table creation or modification","pathname":"/analytics-alerts/alerts-by-name/azure-route-table-creation-or-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EjK34xlSSWv8ikoa5O5g","title":"Azure Service principal/Application creation","pathname":"/analytics-alerts/alerts-by-name/azure-service-principal-application-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cQJvedqtLSCZFV9Fcsz0","title":"Azure service principal assigned app role","pathname":"/analytics-alerts/alerts-by-name/azure-service-principal-assigned-app-role","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OQUJORV5bsvOIBXBn63U","title":"Azure storage account blob anonymous access is enabled","pathname":"/analytics-alerts/alerts-by-name/azure-storage-account-blob-anonymous-access-is-enabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0f1vcQOjrIN3fn7QWP1N","title":"Azure storage account cross-tenant object replication was enabled","pathname":"/analytics-alerts/alerts-by-name/azure-storage-account-cross-tenant-object-replication-was-enabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8D7zEE8rkikekZTNaaZb","title":"Azure Storage Account key generated","pathname":"/analytics-alerts/alerts-by-name/azure-storage-account-key-generated","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zzQQ0fxCLY3fMfDdSi2T","title":"Azure storage account was publicly shared","pathname":"/analytics-alerts/alerts-by-name/azure-storage-account-was-publicly-shared","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vZ2tDQDhS0NhSL7iJtMc","title":"Azure Temporary Access Pass (TAP) registered to an account","pathname":"/analytics-alerts/alerts-by-name/azure-temporary-access-pass-tap-registered-to-an-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TVbAq3mXZZTmJkpuRJfP","title":"Azure user creation/deletion","pathname":"/analytics-alerts/alerts-by-name/azure-user-creation-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cyfrEn0ukcrRvvmvewRc","title":"Azure user password reset","pathname":"/analytics-alerts/alerts-by-name/azure-user-password-reset","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Emi9ogaCeBgrzxnB1EnW","title":"Azure virtual machine commands execution","pathname":"/analytics-alerts/alerts-by-name/azure-virtual-machine-commands-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Imt9mHuKGXM7K6cCu9nw","title":"Azure VM extension abuse attempt","pathname":"/analytics-alerts/alerts-by-name/azure-vm-extension-abuse-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1uLxOY1JjRKMRwoyaX9Z","title":"Bedrock model shared with a foreign account","pathname":"/analytics-alerts/alerts-by-name/bedrock-model-shared-with-a-foreign-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"S19oCBhvTNHlcluJsytm","title":"BigQuery table or query results exfiltrated to a foreign project","pathname":"/analytics-alerts/alerts-by-name/bigquery-table-or-query-results-exfiltrated-to-a-foreign-project","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GX25JrLr39le5me7j2RR","title":"Billing admin role was removed","pathname":"/analytics-alerts/alerts-by-name/billing-admin-role-was-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CqYNxkOREdW2Gpp8W5BD","title":"BitLocker key retrieval","pathname":"/analytics-alerts/alerts-by-name/bitlocker-key-retrieval","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"dN9t3hCFrMgVb9M7MBrf","title":"Bitsadmin.exe persistence using command-line callback","pathname":"/analytics-alerts/alerts-by-name/bitsadmin-exe-persistence-using-command-line-callback","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"f9eMNGEktslbmYKAdh4L","title":"Broker Collection Error","pathname":"/analytics-alerts/alerts-by-name/broker-collection-error","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DOWKgF06v7ouvE6zCUuy","title":"Bronze-Bit exploit","pathname":"/analytics-alerts/alerts-by-name/bronze-bit-exploit","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Kh4AxBaBGQKdkDMy7H5J","title":"Browser bookmark files accessed by a rare non-browser process","pathname":"/analytics-alerts/alerts-by-name/browser-bookmark-files-accessed-by-a-rare-non-browser-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ecUXdVzSKNBgQury7Fxb","title":"Browser Extension Installed","pathname":"/analytics-alerts/alerts-by-name/browser-extension-installed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5vHsgAjmirIX7em27mYv","title":"Brute-force attempt on a local account","pathname":"/analytics-alerts/alerts-by-name/brute-force-attempt-on-a-local-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"g3eu2T0h5uhJKJgf34zW","title":"Bucket's block public access setting disabled or deleted","pathname":"/analytics-alerts/alerts-by-name/bucket-s-block-public-access-setting-disabled-or-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5Re4WdDRffrqe7clkVqf","title":"Bucket's object ownership controls were modified","pathname":"/analytics-alerts/alerts-by-name/bucket-s-object-ownership-controls-were-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KKaobETB6p1qd9QBgwKr","title":"Cached credentials discovery with cmdkey","pathname":"/analytics-alerts/alerts-by-name/cached-credentials-discovery-with-cmdkey","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HLUFR59zbI0Sx27ioaPu","title":"Certutil pfx parsing","pathname":"/analytics-alerts/alerts-by-name/certutil-pfx-parsing","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0iYpuEJYeUChSE2YntuH","title":"Change of sudo caching configuration","pathname":"/analytics-alerts/alerts-by-name/change-of-sudo-caching-configuration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jJTCDT2fP4ITh27zPRba","title":"Chrome Extension Installed By User","pathname":"/analytics-alerts/alerts-by-name/chrome-extension-installed-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WaE81cskadrL4YbRD3l0","title":"Chrome OS Remote Access policy was modified in Google Workspace","pathname":"/analytics-alerts/alerts-by-name/chrome-os-remote-access-policy-was-modified-in-google-workspace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rl8H9pefySb5gOsvbnKZ","title":"ClickFix - PowerShell executed through the run application","pathname":"/analytics-alerts/alerts-by-name/clickfix-powershell-executed-through-the-run-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IgqpBCf9NGnKs09shSjl","title":"Cloud access key creation","pathname":"/analytics-alerts/alerts-by-name/cloud-access-key-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"e5d0kYSVuJudBaEPKKjb","title":"Cloud activity from a high-risk IP address","pathname":"/analytics-alerts/alerts-by-name/cloud-activity-from-a-high-risk-ip-address","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XZS0YNikLDMFICmgRuw9","title":"Cloud AI agent was modified","pathname":"/analytics-alerts/alerts-by-name/cloud-ai-agent-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"B5aiU48h7fIthI0r7urp","title":"Cloud compute instance user data script modification","pathname":"/analytics-alerts/alerts-by-name/cloud-compute-instance-user-data-script-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KZDaBMutKVZtsrT4R2Pj","title":"Cloud compute serial console access","pathname":"/analytics-alerts/alerts-by-name/cloud-compute-serial-console-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8ZRi3U0HkrlYWisup4EZ","title":"Cloud compute volume creation attempt","pathname":"/analytics-alerts/alerts-by-name/cloud-compute-volume-creation-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IaYoq0Eneazf1pM14CHJ","title":"Cloud email infrastructure enumeration activity","pathname":"/analytics-alerts/alerts-by-name/cloud-email-infrastructure-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nCrex6sHmmb30AhTmST8","title":"Cloud email sending was enabled","pathname":"/analytics-alerts/alerts-by-name/cloud-email-sending-was-enabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kguBgcUmBTpSZxknxZHE","title":"Cloud email service activity","pathname":"/analytics-alerts/alerts-by-name/cloud-email-service-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"c6WS8i4IXlJ0hZCzy7g1","title":"Cloud identity reached a throttling API rate","pathname":"/analytics-alerts/alerts-by-name/cloud-identity-reached-a-throttling-api-rate","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PwvcpaNtJ9FWD6NYVq1Q","title":"Cloud IMDS access followed by remote token usage","pathname":"/analytics-alerts/alerts-by-name/cloud-imds-access-followed-by-remote-token-usage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JYiYxQ95LjV6dSRno914","title":"Cloud impersonation attempt by unusual identity type","pathname":"/analytics-alerts/alerts-by-name/cloud-impersonation-attempt-by-unusual-identity-type","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Sr4YfIQzO5sHnQqD6knQ","title":"Cloud infrastructure discovery across multiple regions","pathname":"/analytics-alerts/alerts-by-name/cloud-infrastructure-discovery-across-multiple-regions","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lT8cKhtfvcPIzEFGjxaf","title":"Cloud infrastructure enumeration activity","pathname":"/analytics-alerts/alerts-by-name/cloud-infrastructure-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"h8NHCIWanC3j12wTmJ0H","title":"Cloud instance creation attempt","pathname":"/analytics-alerts/alerts-by-name/cloud-instance-creation-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ug0LY2aWoWhvrenMzHh9","title":"Cloud instance deletion attempt","pathname":"/analytics-alerts/alerts-by-name/cloud-instance-deletion-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FWao9b7nSVVe50BOJ7yR","title":"Cloud Organizational policy was created or modified","pathname":"/analytics-alerts/alerts-by-name/cloud-organizational-policy-was-created-or-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RdsgVJBOq6rfhyZ4et9o","title":"Cloud penetration testing tool activity","pathname":"/analytics-alerts/alerts-by-name/cloud-penetration-testing-tool-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cSygibufPMKGrPxhZ83t","title":"Cloud resource logging was disabled","pathname":"/analytics-alerts/alerts-by-name/cloud-resource-logging-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jDfdbPs0hiqw14H9EPNf","title":"Cloud snapshot created or modified","pathname":"/analytics-alerts/alerts-by-name/cloud-snapshot-created-or-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WtfWZqRA9HEUVldRWtvf","title":"Cloud snapshot of a database or storage instance was publicly shared","pathname":"/analytics-alerts/alerts-by-name/cloud-snapshot-of-a-database-or-storage-instance-was-publicly-shared","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OvWPK3hFNrhSUZTP7xpQ","title":"Cloud storage automatic backup disabled","pathname":"/analytics-alerts/alerts-by-name/cloud-storage-automatic-backup-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"deI3yuEboX2d8x0otfpj","title":"Cloud storage delete protection disabled","pathname":"/analytics-alerts/alerts-by-name/cloud-storage-delete-protection-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"q76C5q8MBOqtEaYytZuo","title":"Cloud user performed multiple actions that were denied","pathname":"/analytics-alerts/alerts-by-name/cloud-user-performed-multiple-actions-that-were-denied","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DlJyLMJ5ZYGLrrjBVki4","title":"Cloud Watch alarm deletion","pathname":"/analytics-alerts/alerts-by-name/cloud-watch-alarm-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zORktRFADDcFDs0FKI9F","title":"CloudTrail logging deletion","pathname":"/analytics-alerts/alerts-by-name/cloudtrail-logging-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"snA4frZUKZ4ibswylTS0","title":"Collection error","pathname":"/analytics-alerts/alerts-by-name/collection-error","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JsW8iUu1yT7cl11paDE5","title":"Command execution in a Kubernetes pod","pathname":"/analytics-alerts/alerts-by-name/command-execution-in-a-kubernetes-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6huJQvPRYkmRVudxrQuW","title":"Command execution via AWS SSM","pathname":"/analytics-alerts/alerts-by-name/command-execution-via-aws-ssm","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CzoXt3uKmNCcWX83IUu0","title":"Command execution via wmiexec","pathname":"/analytics-alerts/alerts-by-name/command-execution-via-wmiexec","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jXI4E1yxUe3AyFobPMnx","title":"Command running with COMSPEC in the command line argument","pathname":"/analytics-alerts/alerts-by-name/command-running-with-comspec-in-the-command-line-argument","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AxBXPIUBx3Orq3xlUpVr","title":"Common third-party software name masquerading","pathname":"/analytics-alerts/alerts-by-name/common-third-party-software-name-masquerading","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"R8t6hpNF63qJw1VURO82","title":"Commonly abused AutoIT script connects to an external domain","pathname":"/analytics-alerts/alerts-by-name/commonly-abused-autoit-script-connects-to-an-external-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qwtSHGJ1R8tHS22Dxiwu","title":"Commonly abused AutoIT script drops an executable file to disk","pathname":"/analytics-alerts/alerts-by-name/commonly-abused-autoit-script-drops-an-executable-file-to-disk","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"98j3mzXyJF5Op63YLDm3","title":"Commonly abused process launched as a system service","pathname":"/analytics-alerts/alerts-by-name/commonly-abused-process-launched-as-a-system-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OqF8sQbNlQjaZvDeiKgS","title":"Compressing data using python","pathname":"/analytics-alerts/alerts-by-name/compressing-data-using-python","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lK3ZI2DDLJZezafoVh3R","title":"Compute activity in dormant cloud region","pathname":"/analytics-alerts/alerts-by-name/compute-activity-in-dormant-cloud-region","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zqloaK3soVU5t76HC5f4","title":"Conditional Access policy removed","pathname":"/analytics-alerts/alerts-by-name/conditional-access-policy-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CdD1y9GQ9osXXbSidnpO","title":"Conhost.exe spawned a suspicious cmd process","pathname":"/analytics-alerts/alerts-by-name/conhost-exe-spawned-a-suspicious-cmd-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vyAZ69mkwKKQ9hHQ9oed","title":"Contained process execution with a rare GitHub URL","pathname":"/analytics-alerts/alerts-by-name/contained-process-execution-with-a-rare-github-url","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Z7iBzSmRAzKzZKI1ZCV8","title":"Copy a process memory file","pathname":"/analytics-alerts/alerts-by-name/copy-a-process-memory-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7qfDeJAj1wZBNnxrJfbk","title":"Copy a user's GnuPG directory with rsync","pathname":"/analytics-alerts/alerts-by-name/copy-a-user-s-gnupg-directory-with-rsync","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3ZeT7Lj9TJOLEO7ozKBw","title":"Correlation rule error","pathname":"/analytics-alerts/alerts-by-name/correlation-rule-error","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"dcwS70FlEe72aNSDpCzS","title":"Creation or modification of the default command executed when opening an application","pathname":"/analytics-alerts/alerts-by-name/creation-or-modification-of-the-default-command-executed-when-opening-an-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pVcXAGS3kwFr3kDtN9le","title":"Credentials were added to Azure application","pathname":"/analytics-alerts/alerts-by-name/credentials-were-added-to-azure-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VYJt1YtUTnRe5NJT7qzo","title":"Data encryption was disabled","pathname":"/analytics-alerts/alerts-by-name/data-encryption-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3ZT1Rp7PPgblTzSiYjYZ","title":"Data exfiltration from cloud database","pathname":"/analytics-alerts/alerts-by-name/data-exfiltration-from-cloud-database","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hcazlqnJsVgV65VGGWxk","title":"Data Sharing between GCP and Google Workspace was disabled","pathname":"/analytics-alerts/alerts-by-name/data-sharing-between-gcp-and-google-workspace-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8XrOrKcm5ZqqomsPTTof","title":"Delayed Deletion of Files","pathname":"/analytics-alerts/alerts-by-name/delayed-deletion-of-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AwHfoPXQtSqp08i4puoA","title":"Deletion of AD CS certificate database entries","pathname":"/analytics-alerts/alerts-by-name/deletion-of-ad-cs-certificate-database-entries","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"H3jYtauEN3YZkzxRIfBv","title":"Deletion of multiple cloud resources","pathname":"/analytics-alerts/alerts-by-name/deletion-of-multiple-cloud-resources","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IlTkbKHUeLYSrtYEKqvt","title":"Denied API call by a Kubernetes service account","pathname":"/analytics-alerts/alerts-by-name/denied-api-call-by-a-kubernetes-service-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uZbyLSityxYcCh9tDqLY","title":"Device Registration Policy modification","pathname":"/analytics-alerts/alerts-by-name/device-registration-policy-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sCC3zK2C2TSB5GOO2LoQ","title":"Disable AWS audit logs through Event Selectors","pathname":"/analytics-alerts/alerts-by-name/disable-aws-audit-logs-through-event-selectors","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JN3c0XyRRogdSXaTXU1C","title":"Disable encryption operations","pathname":"/analytics-alerts/alerts-by-name/disable-encryption-operations","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PfpdpAGj1MoNO0SyicBT","title":"Disable Microsoft Defender Antivirus via registry","pathname":"/analytics-alerts/alerts-by-name/disable-microsoft-defender-antivirus-via-registry","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DGGspoYGAX4RNodyERyh","title":"Discovery of accounts with pre-authentication disabled via LDAP","pathname":"/analytics-alerts/alerts-by-name/discovery-of-accounts-with-pre-authentication-disabled-via-ldap","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OASv412E694yQJrZtDyB","title":"Discovery of host users via WMIC","pathname":"/analytics-alerts/alerts-by-name/discovery-of-host-users-via-wmic","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4Pwa9pKrxGeXvw0QWih7","title":"Discovery of misconfigured certificate templates using LDAP","pathname":"/analytics-alerts/alerts-by-name/discovery-of-misconfigured-certificate-templates-using-ldap","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HEerL5vAKaEN8hX7Ad5P","title":"Display text URL differs from actual URL","pathname":"/analytics-alerts/alerts-by-name/display-text-url-differs-from-actual-url","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Kp1OAtie3hzImUtn5xhE","title":"DLP sensitive data exposed to external users","pathname":"/analytics-alerts/alerts-by-name/dlp-sensitive-data-exposed-to-external-users","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Y6GpcrMFKlfmMd5tnEzH","title":"DNS Tunneling","pathname":"/analytics-alerts/alerts-by-name/dns-tunneling","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WyBKHT725PhTJRVQyhi8","title":"Docker state manipulation via docker.sock","pathname":"/analytics-alerts/alerts-by-name/docker-state-manipulation-via-docker-sock","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fk8lVnaIfzgSE6qp7hAQ","title":"Download a script using the python requests module","pathname":"/analytics-alerts/alerts-by-name/download-a-script-using-the-python-requests-module","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4okiIQePWDZzDK7Ds8BJ","title":"Download pattern that resembles Peer to Peer traffic","pathname":"/analytics-alerts/alerts-by-name/download-pattern-that-resembles-peer-to-peer-traffic","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aBDkarsXV2HnADaCXgHR","title":"DSC (Desired State Configuration) lateral movement using PowerShell","pathname":"/analytics-alerts/alerts-by-name/dsc-desired-state-configuration-lateral-movement-using-powershell","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KS2xLWHv5PaxLOIZckjV","title":"EBS snapshots were created from an EC2 instance","pathname":"/analytics-alerts/alerts-by-name/ebs-snapshots-were-created-from-an-ec2-instance","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FYWSa5nPqQVgDFf66jBr","title":"EBS volume attachment attempt","pathname":"/analytics-alerts/alerts-by-name/ebs-volume-attachment-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"upHUiahZhXMtRWzGv98o","title":"EBS volume detachment attempt","pathname":"/analytics-alerts/alerts-by-name/ebs-volume-detachment-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"850YTs9Qmtj5pfMOwS8N","title":"EC2 backdoor created with newly added external SSH or RDP access","pathname":"/analytics-alerts/alerts-by-name/ec2-backdoor-created-with-newly-added-external-ssh-or-rdp-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ejxXNgTxJnWUclH01z5N","title":"EC2 instance Amazon machine image was created","pathname":"/analytics-alerts/alerts-by-name/ec2-instance-amazon-machine-image-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GcqFCb2EX8R6y4iH0gyz","title":"Elevation to SYSTEM via services","pathname":"/analytics-alerts/alerts-by-name/elevation-to-system-via-services","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2DomYBaTILyw62W1spwx","title":"Email attachment(s) with potentially malicious MIME type","pathname":"/analytics-alerts/alerts-by-name/email-attachment-s-with-potentially-malicious-mime-type","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8tFNZGZMUjDRAAXCAalt","title":"Email attachment with a potentially malicious file extension","pathname":"/analytics-alerts/alerts-by-name/email-attachment-with-a-potentially-malicious-file-extension","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Cd4jdALlybF1wlvuaYXb","title":"Email attachment with multiple extensions","pathname":"/analytics-alerts/alerts-by-name/email-attachment-with-multiple-extensions","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vqstzr94pV60SZaYWPtT","title":"Email attachment with Right-to-Left Override Unicode character","pathname":"/analytics-alerts/alerts-by-name/email-attachment-with-right-to-left-override-unicode-character","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xia87OXcFbtP9F0qaBCR","title":"Email containing a link with an IP address convention was detected","pathname":"/analytics-alerts/alerts-by-name/email-containing-a-link-with-an-ip-address-convention-was-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jhtmAXtUdv9ObzWhqpiP","title":"Email containing a redirected link","pathname":"/analytics-alerts/alerts-by-name/email-containing-a-redirected-link","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PxkonW004EYqGgkEZ0Rf","title":"Email contains URL delivering high-risk file type","pathname":"/analytics-alerts/alerts-by-name/email-contains-url-delivering-high-risk-file-type","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6IAhJCQMYrmKugdkqpBH","title":"Email marked as spam and bulk based on Spam Confidence Level and Bulk Complaint Level values","pathname":"/analytics-alerts/alerts-by-name/email-marked-as-spam-and-bulk-based-on-spam-confidence-level-and-bulk-complaint-level-values","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SbGyaFuA1QhOwVQ3zZ52","title":"Email mimics replies or forwards without an actual ongoing conversation","pathname":"/analytics-alerts/alerts-by-name/email-mimics-replies-or-forwards-without-an-actual-ongoing-conversation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yE9SVGwy9biuan1J7rt9","title":"Email sent using an automated system or script detected","pathname":"/analytics-alerts/alerts-by-name/email-sent-using-an-automated-system-or-script-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Xg5MyzgkYQT0oRcjT0Dv","title":"Email was received from an unknown address using a public provider domain","pathname":"/analytics-alerts/alerts-by-name/email-was-received-from-an-unknown-address-using-a-public-provider-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qJzJNbL8b6UnVqWFYNx6","title":"Email was received from an unknown sender using a disposable domain","pathname":"/analytics-alerts/alerts-by-name/email-was-received-from-an-unknown-sender-using-a-disposable-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"W2K7U82ZvpaUnF6cVNsK","title":"Email with file-sharing link containing auto-download parameter","pathname":"/analytics-alerts/alerts-by-name/email-with-file-sharing-link-containing-auto-download-parameter","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Dcz50MyRpUclObs9RXEt","title":"Email with Google Apps Script web app URL detected","pathname":"/analytics-alerts/alerts-by-name/email-with-google-apps-script-web-app-url-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oIPDIV3gdYZE6ooIQUKV","title":"Email with URL shortener detected","pathname":"/analytics-alerts/alerts-by-name/email-with-url-shortener-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yHNugI6nJLsZTZMmRWjn","title":"Encoded information using Windows certificate management tool","pathname":"/analytics-alerts/alerts-by-name/encoded-information-using-windows-certificate-management-tool","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YjveZut5Mfwegmy81OKN","title":"Error in event forwarding","pathname":"/analytics-alerts/alerts-by-name/error-in-event-forwarding","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3EGkIFBMy8cP5xaH7pZp","title":"Excessive user account lockouts","pathname":"/analytics-alerts/alerts-by-name/excessive-user-account-lockouts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"j7Omd107azbQOLT43VkE","title":"Exchange anti-phish policy disabled or removed","pathname":"/analytics-alerts/alerts-by-name/exchange-anti-phish-policy-disabled-or-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VVL8FyGCS2jOmuRjJLUA","title":"Exchange audit log disabled","pathname":"/analytics-alerts/alerts-by-name/exchange-audit-log-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HOo3yP359m2XikADSplF","title":"Exchange compliance search created","pathname":"/analytics-alerts/alerts-by-name/exchange-compliance-search-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CIkARKuI0hT10g0PHagg","title":"Exchange DKIM signing configuration disabled","pathname":"/analytics-alerts/alerts-by-name/exchange-dkim-signing-configuration-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZNdURENEH7i5h6Bf2xgv","title":"Exchange email-hiding inbox rule","pathname":"/analytics-alerts/alerts-by-name/exchange-email-hiding-inbox-rule","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Kx4amEbxwYeedRUipvmz","title":"Exchange email-hiding transport rule","pathname":"/analytics-alerts/alerts-by-name/exchange-email-hiding-transport-rule","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"grQP4TCOLghmAi0k3wF3","title":"Exchange inbox forwarding rule configured","pathname":"/analytics-alerts/alerts-by-name/exchange-inbox-forwarding-rule-configured","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kmyArilEVdrDzDJ3HMUl","title":"Exchange mailbox audit bypass","pathname":"/analytics-alerts/alerts-by-name/exchange-mailbox-audit-bypass","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qQ96CC16iOt0pDWwvpWQ","title":"Exchange mailbox delegation permissions added","pathname":"/analytics-alerts/alerts-by-name/exchange-mailbox-delegation-permissions-added","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FVt3UCevAHwbswrfVP6w","title":"Exchange mailbox folder permission modification","pathname":"/analytics-alerts/alerts-by-name/exchange-mailbox-folder-permission-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vtwaHiiGM4vG5v172EQq","title":"Exchange malware filter policy removed","pathname":"/analytics-alerts/alerts-by-name/exchange-malware-filter-policy-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"R0hScFASnOvp4x1Rzy0W","title":"Exchange Safe Attachment policy disabled or removed","pathname":"/analytics-alerts/alerts-by-name/exchange-safe-attachment-policy-disabled-or-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2KNDWB74cWwscqh1WEPb","title":"Exchange Safe Link policy disabled or removed","pathname":"/analytics-alerts/alerts-by-name/exchange-safe-link-policy-disabled-or-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nT3ZpTqlQ8pMI8ATBfp3","title":"Exchange transport forwarding rule configured","pathname":"/analytics-alerts/alerts-by-name/exchange-transport-forwarding-rule-configured","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vy6TnWBm0zGRKbqQjRti","title":"Exchange user mailbox forwarding","pathname":"/analytics-alerts/alerts-by-name/exchange-user-mailbox-forwarding","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"58E7LoCS3OsILX5mXCYG","title":"Executable created to disk by lsass.exe","pathname":"/analytics-alerts/alerts-by-name/executable-created-to-disk-by-lsass-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KWhmSaBQSkFIlZKzoonZ","title":"Executable moved to Windows system folder","pathname":"/analytics-alerts/alerts-by-name/executable-moved-to-windows-system-folder","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T4nyRzntJlrfhmqf6YUw","title":"Executable or Script file written by a web server process","pathname":"/analytics-alerts/alerts-by-name/executable-or-script-file-written-by-a-web-server-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TB71P5fRoUJHCtXMNZeN","title":"Execution of an uncommon process at an early startup stage by Windows system binary","pathname":"/analytics-alerts/alerts-by-name/execution-of-an-uncommon-process-at-an-early-startup-stage-by-windows-system-binary","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"26ZqAdsJ79Mjb7dOBwBs","title":"Execution of an uncommon process at an early startup stage","pathname":"/analytics-alerts/alerts-by-name/execution-of-an-uncommon-process-at-an-early-startup-stage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8cq3IoQqPPxNQGKEzxVs","title":"Execution of an uncommon process with a local/domain user SID at an early startup stage","pathname":"/analytics-alerts/alerts-by-name/execution-of-an-uncommon-process-with-a-local-domain-user-sid-at-an-early-startup-stage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DAwjCh0w7lKFhoE2ECCr","title":"Execution of an uncommon process with a local/domain user SID at early startup by a system binary","pathname":"/analytics-alerts/alerts-by-name/execution-of-an-uncommon-process-with-a-local-domain-user-sid-at-early-startup-by-a-system-binary","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ODoTLTPgZpNxLxFkSKjW","title":"Execution of command from within a Kubernetes pod using kubelet credentials","pathname":"/analytics-alerts/alerts-by-name/execution-of-command-from-within-a-kubernetes-pod-using-kubelet-credentials","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lhFbLEx79QeCyFH6E4C8","title":"Execution of dllhost.exe with an empty command line","pathname":"/analytics-alerts/alerts-by-name/execution-of-dllhost-exe-with-an-empty-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"s71clfsti7Mk0wbGH1yg","title":"Execution of masqueraded third-party utility","pathname":"/analytics-alerts/alerts-by-name/execution-of-masqueraded-third-party-utility","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fRiVe5xXSGLyi9kxNv5i","title":"Execution of renamed lolbin","pathname":"/analytics-alerts/alerts-by-name/execution-of-renamed-lolbin","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TRCW6OoNmW3gQGcvXgYm","title":"External email display name impersonation of internal personnel","pathname":"/analytics-alerts/alerts-by-name/external-email-display-name-impersonation-of-internal-personnel","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SGgZF7YaEuRBzSDsYnnx","title":"External email with a single internal recipient hidden in BCC","pathname":"/analytics-alerts/alerts-by-name/external-email-with-a-single-internal-recipient-hidden-in-bcc","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0ZNkA12POicoIhtW6mfj","title":"External Login Password Spray","pathname":"/analytics-alerts/alerts-by-name/external-login-password-spray","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"A4lMogj0TyHcSuMGtgOF","title":"External SaaS file-sharing activity","pathname":"/analytics-alerts/alerts-by-name/external-saas-file-sharing-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PKNBVZZNQwpbdJbMIFje","title":"External Sharing was turned on for Google Drive","pathname":"/analytics-alerts/alerts-by-name/external-sharing-was-turned-on-for-google-drive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4ErZvetzbBOa7SdKG9Xb","title":"External user added a link to a Microsoft Teams chat","pathname":"/analytics-alerts/alerts-by-name/external-user-added-a-link-to-a-microsoft-teams-chat","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Waf9cxVdGrvfn6lsXCgm","title":"External user call via Microsoft Teams","pathname":"/analytics-alerts/alerts-by-name/external-user-call-via-microsoft-teams","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OkFaRFOq0hqEbSzBWKiu","title":"External user created a Microsoft Teams conversation with suspicious operations","pathname":"/analytics-alerts/alerts-by-name/external-user-created-a-microsoft-teams-conversation-with-suspicious-operations","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8djNlSpO3HqR3mP2QvtX","title":"External user invitation to Azure tenant","pathname":"/analytics-alerts/alerts-by-name/external-user-invitation-to-azure-tenant","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RmIM6nB0GmWzFx7ssTHJ","title":"External user started a Microsoft Teams conversation","pathname":"/analytics-alerts/alerts-by-name/external-user-started-a-microsoft-teams-conversation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EzgTExdtBsJbZRPVa4KL","title":"Extracting credentials from Unix files","pathname":"/analytics-alerts/alerts-by-name/extracting-credentials-from-unix-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZFJwhqhu6WoERGnaIujh","title":"Failed Connections","pathname":"/analytics-alerts/alerts-by-name/failed-connections","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZpGObwcgWilGLEfqE7l4","title":"Failed DNS","pathname":"/analytics-alerts/alerts-by-name/failed-dns","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GzB1ybRqqbWP3pMHVLiX","title":"Failed Login For a Long Username With Special Characters","pathname":"/analytics-alerts/alerts-by-name/failed-login-for-a-long-username-with-special-characters","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ib1TZVRa2S2v5XdR488X","title":"Failed Login For Locked-Out Account","pathname":"/analytics-alerts/alerts-by-name/failed-login-for-locked-out-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Z5xWtjsSNL0W4mqCt677","title":"File transfer from unusual IP using known tools","pathname":"/analytics-alerts/alerts-by-name/file-transfer-from-unusual-ip-using-known-tools","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Sz3G7pPHlLctTZYgNYA3","title":"First Azure AD PowerShell operation for a user","pathname":"/analytics-alerts/alerts-by-name/first-azure-ad-powershell-operation-for-a-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sqJaItZFVGCU0Ud5SyJv","title":"First connection from a country in organization","pathname":"/analytics-alerts/alerts-by-name/first-connection-from-a-country-in-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6vC8YK3mJEpILUNwbaEp","title":"First-seen email from mailbox owner to external recipient's address in the last 30 days","pathname":"/analytics-alerts/alerts-by-name/first-seen-email-from-mailbox-owner-to-external-recipient-s-address-in-the-last-30-days","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bcfGc53FAuygdCCNxRc6","title":"First seen Resent-From address in the organization","pathname":"/analytics-alerts/alerts-by-name/first-seen-resent-from-address-in-the-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YU456WJCRLBxkMIa60kM","title":"First SSO access from ASN for user","pathname":"/analytics-alerts/alerts-by-name/first-sso-access-from-asn-for-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"naR3iZUlU9QA1qZXA8I8","title":"First SSO access from ASN in organization","pathname":"/analytics-alerts/alerts-by-name/first-sso-access-from-asn-in-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"c2F2jy6PvFB2eCBPjlDr","title":"First SSO Resource Access in the Organization","pathname":"/analytics-alerts/alerts-by-name/first-sso-resource-access-in-the-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cJzCDtASMhvoTwxKrPbg","title":"First-time attachment exchange","pathname":"/analytics-alerts/alerts-by-name/first-time-attachment-exchange","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BkT1nZLguODnuLXVDeRT","title":"First-time directory sync of an on-premises domain user to an existing cloud account","pathname":"/analytics-alerts/alerts-by-name/first-time-directory-sync-of-an-on-premises-domain-user-to-an-existing-cloud-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CgmMmUcdBqOYBGmG7dM2","title":"First VPN access attempt from a country in organization","pathname":"/analytics-alerts/alerts-by-name/first-vpn-access-attempt-from-a-country-in-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Aj0bRhrPyStRg7BFLC8J","title":"First VPN access from ASN for user","pathname":"/analytics-alerts/alerts-by-name/first-vpn-access-from-asn-for-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Tft409TuMUXIzyZCK9n6","title":"First VPN access from ASN in organization","pathname":"/analytics-alerts/alerts-by-name/first-vpn-access-from-asn-in-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4Vn5jhzp2nZYnTiHW61M","title":"Fodhelper.exe UAC bypass","pathname":"/analytics-alerts/alerts-by-name/fodhelper-exe-uac-bypass","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"v6FoP80mPocoJWZaycOU","title":"Foreign account was granted permissions to S3 bucket via resource-based policy","pathname":"/analytics-alerts/alerts-by-name/foreign-account-was-granted-permissions-to-s3-bucket-via-resource-based-policy","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tncNW0X5qL5dvfWoD3Rc","title":"FTP Connection Using an Anonymous Login or Default Credentials","pathname":"/analytics-alerts/alerts-by-name/ftp-connection-using-an-anonymous-login-or-default-credentials","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ACMwN6FXiDmWkT4LClcB","title":"GCP administrative role granted to a cloud identity","pathname":"/analytics-alerts/alerts-by-name/gcp-administrative-role-granted-to-a-cloud-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"e4hge9epPyZulVqFO2pN","title":"GCP data asset shared public","pathname":"/analytics-alerts/alerts-by-name/gcp-data-asset-shared-public","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Q3LYqNutIdaRR0uDRSZS","title":"GCP Firewall Rule creation","pathname":"/analytics-alerts/alerts-by-name/gcp-firewall-rule-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mv79lAnO9oZgBOB2w9II","title":"GCP Firewall Rule Modification","pathname":"/analytics-alerts/alerts-by-name/gcp-firewall-rule-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0tnRH7C00mqqUffnDuMc","title":"GCP IAM deny policy creation","pathname":"/analytics-alerts/alerts-by-name/gcp-iam-deny-policy-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CzRJvUXOaBexLx93sFg8","title":"GCP IAM Role Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-iam-role-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BEBhdBzYFTCoJMSliAtC","title":"GCP IAM Service Account Key Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-iam-service-account-key-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"e6Pyw0VzAvN0eAwz8XCp","title":"GCP Logging Bucket Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-logging-bucket-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"j3Tbo2f2cLsqQZdlOzWJ","title":"GCP logging sink deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-logging-sink-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4LZKWzPvGcBXZ6n8FFWY","title":"GCP logging sink modification","pathname":"/analytics-alerts/alerts-by-name/gcp-logging-sink-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WktvAXNwW17sTY7RQZx1","title":"GCP Pub/Sub Subscription Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-pub-sub-subscription-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Ol8hED6NCdbYUSXbbhAv","title":"GCP Pub/Sub Topic Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-pub-sub-topic-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ngNzOKkXoZMYYzvGRBJ2","title":"GCP sensitive Cloud Run role granted","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-cloud-run-role-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uQCFUmGP3x7vQSuwqfl2","title":"GCP sensitive compute role granted","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-compute-role-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"G4oj7Y33FwOXtpSYEo4l","title":"GCP sensitive Deployment Manager role granted","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-deployment-manager-role-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aBpRPOu3qhGU5M54Mq7k","title":"GCP sensitive Functions role granted","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-functions-role-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"g7WmvN60e9SDMTuUZU5I","title":"GCP sensitive IAM role granted","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-iam-role-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"geLWIkCkU4MuKB7Ej39a","title":"GCP sensitive role granted to group","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-role-granted-to-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"t3j0ryxFtpjy1U4t41Sc","title":"GCP sensitive Secret Manager role granted","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-secret-manager-role-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"X0pv8M7g7VrXKvTtNWxA","title":"GCP sensitive storage role granted","pathname":"/analytics-alerts/alerts-by-name/gcp-sensitive-storage-role-granted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RAmqwMk8pYoU8JDbZsCd","title":"GCP Service Account creation","pathname":"/analytics-alerts/alerts-by-name/gcp-service-account-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vF8GKkisyA0Ci2CLKadS","title":"GCP Service Account Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-service-account-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YjRkHtYHACg3lXZeS6VB","title":"GCP Service Account Disable","pathname":"/analytics-alerts/alerts-by-name/gcp-service-account-disable","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ciCJ7vg1fA6K8N4qCVg7","title":"GCP service account impersonation attempt","pathname":"/analytics-alerts/alerts-by-name/gcp-service-account-impersonation-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"og20vkBqrJ2N9gk0PFPO","title":"GCP Service Account key creation","pathname":"/analytics-alerts/alerts-by-name/gcp-service-account-key-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qeU8ksumH2PM5ybhNgEn","title":"GCP set IAM policy activity","pathname":"/analytics-alerts/alerts-by-name/gcp-set-iam-policy-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8FKWDdJ4iQSodYoPXSQ9","title":"GCP Storage Bucket Configuration Modification","pathname":"/analytics-alerts/alerts-by-name/gcp-storage-bucket-configuration-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0wjHjDCVcAL6AiRrjJc0","title":"GCP Storage Bucket deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-storage-bucket-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LhZiHdtBiKRHAbwo0xtV","title":"GCP Storage Bucket Permissions Modification","pathname":"/analytics-alerts/alerts-by-name/gcp-storage-bucket-permissions-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8G1vbq3h8rtoBJugEQYE","title":"GCP Virtual Private Cloud (VPC) Network Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-virtual-private-cloud-vpc-network-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"v5TB0ELGHAPDimH99gvI","title":"GCP Virtual Private Network Route Creation","pathname":"/analytics-alerts/alerts-by-name/gcp-virtual-private-network-route-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FsxVkOgFrer94nT9BG9u","title":"GCP Virtual Private Network Route Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-virtual-private-network-route-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eCpVIm9hg664WoCVnkgw","title":"GCP VPC Firewall Rule Deletion","pathname":"/analytics-alerts/alerts-by-name/gcp-vpc-firewall-rule-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ggiIGNFDGBSRvFzdPmuO","title":"Globally uncommon high entropy module was loaded","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-high-entropy-module-was-loaded","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YyeWb9lxAaQujZ5h0LBx","title":"Globally uncommon high entropy process was executed","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-high-entropy-process-was-executed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wfmWMskTGPGqtjChBj9K","title":"Globally uncommon image load from a signed process","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-image-load-from-a-signed-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gLhOwl28NomQ7c4I1R43","title":"Globally uncommon injection from a signed process","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-injection-from-a-signed-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yKMJFEkxskXRWFRxGKBh","title":"Globally uncommon IP address by a common process (sha256)","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-ip-address-by-a-common-process-sha256","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IKnLt5ApdMFnqQGxN1ks","title":"Globally uncommon IP address connection from a signed process","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-ip-address-connection-from-a-signed-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"dRPNWUWwyVsyYl8sMk9F","title":"Globally uncommon process execution from a signed process","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-process-execution-from-a-signed-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZonbXbVlAandqKpNM3bp","title":"Globally uncommon root domain from a signed process","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-root-domain-from-a-signed-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QTwwbioz3Eeph9Mva4Ge","title":"Globally uncommon root-domain port combination by a common process (sha256)","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-root-domain-port-combination-by-a-common-process-sha256","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XGTGvNfK2aNUWfC2uwMM","title":"Globally uncommon root-domain port combination from a signed process","pathname":"/analytics-alerts/alerts-by-name/globally-uncommon-root-domain-port-combination-from-a-signed-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6mU5auOgGh2yqB5r5hgX","title":"Gmail delegation was turned on for the organization","pathname":"/analytics-alerts/alerts-by-name/gmail-delegation-was-turned-on-for-the-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hLVO60tDXAQmFW1Ipf8I","title":"Gmail routing settings changed","pathname":"/analytics-alerts/alerts-by-name/gmail-routing-settings-changed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"h4sjm2UgiSGk6HxdMMfj","title":"Google Marketplace restrictions were modified","pathname":"/analytics-alerts/alerts-by-name/google-marketplace-restrictions-were-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vwM5Lt2UCcLVqNqC2Tqu","title":"Google Workspace automation was created","pathname":"/analytics-alerts/alerts-by-name/google-workspace-automation-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gYpnzFxLJ1hfUCMvGVoi","title":"Google Workspace organizational unit was modified","pathname":"/analytics-alerts/alerts-by-name/google-workspace-organizational-unit-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rZ4jTPgtfinjjZnfFsYy","title":"Google Workspace third-party application's security settings were changed","pathname":"/analytics-alerts/alerts-by-name/google-workspace-third-party-application-s-security-settings-were-changed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"y05SyRRNQ5erZmEn6xca","title":"Google Workspace user authentication information changed","pathname":"/analytics-alerts/alerts-by-name/google-workspace-user-authentication-information-changed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UQNqXTbZkFxPNHCvf8uq","title":"Granting Access to an Account","pathname":"/analytics-alerts/alerts-by-name/granting-access-to-an-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"K88eXm6SYDdXy1CPQHr4","title":"Harvesting multiple Kubernetes pod tokens from within a Kubernetes pod","pathname":"/analytics-alerts/alerts-by-name/harvesting-multiple-kubernetes-pod-tokens-from-within-a-kubernetes-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MrydUVO2BksvdNOC4W1c","title":"Hidden Attribute was added to a file using attrib.exe","pathname":"/analytics-alerts/alerts-by-name/hidden-attribute-was-added-to-a-file-using-attrib-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FoEKSrWQoYA5ls5QNYoG","title":"High-volume resent emails from various sources","pathname":"/analytics-alerts/alerts-by-name/high-volume-resent-emails-from-various-sources","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zIkJA9qZE4YcaPdQfn2b","title":"HTTP with suspicious characteristics","pathname":"/analytics-alerts/alerts-by-name/http-with-suspicious-characteristics","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XgyLOzkSuK9Pvzb17crp","title":"Hydra Password Brute-Force Tool Execution","pathname":"/analytics-alerts/alerts-by-name/hydra-password-brute-force-tool-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ykitQTMQQxBKXLFAL9Sy","title":"IAM Enumeration sequence","pathname":"/analytics-alerts/alerts-by-name/iam-enumeration-sequence","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1kiDitoAoXvXDUg8xZvA","title":"IAM inline policy was added to group","pathname":"/analytics-alerts/alerts-by-name/iam-inline-policy-was-added-to-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VXbuL6VHS9h2EgVlWKYi","title":"IAM inline policy was added to role","pathname":"/analytics-alerts/alerts-by-name/iam-inline-policy-was-added-to-role","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"D5lkZTIEyLAtHp4j6fLA","title":"IAM inline policy was added to user","pathname":"/analytics-alerts/alerts-by-name/iam-inline-policy-was-added-to-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"p7S4WUAPLeBNkKgDiVVW","title":"IAM instance profile associations were described","pathname":"/analytics-alerts/alerts-by-name/iam-instance-profile-associations-were-described","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3qqrkgr1YdIOAGVYDOlM","title":"IAM instance profile was associated with EC2 instance","pathname":"/analytics-alerts/alerts-by-name/iam-instance-profile-was-associated-with-ec2-instance","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OxZefNRZE252zVthqrk2","title":"IAM instance profile was created","pathname":"/analytics-alerts/alerts-by-name/iam-instance-profile-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YtYZeHYXtwJJ5Tur66PS","title":"IAM instance profile was replaced for EC2 instance","pathname":"/analytics-alerts/alerts-by-name/iam-instance-profile-was-replaced-for-ec2-instance","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HnAf98zW6q9FSyYzEHfm","title":"IAM policy default version was changed","pathname":"/analytics-alerts/alerts-by-name/iam-policy-default-version-was-changed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oPOhA9USR9k24YRpUX6H","title":"IAM policy version was created","pathname":"/analytics-alerts/alerts-by-name/iam-policy-version-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OWiQfWjY6fGxYl8kTSn0","title":"IAM policy was attached to group","pathname":"/analytics-alerts/alerts-by-name/iam-policy-was-attached-to-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2Ivdo8VTmqEPjrp9NLQ8","title":"IAM policy was attached to role","pathname":"/analytics-alerts/alerts-by-name/iam-policy-was-attached-to-role","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Q71FoGSwLH2Ln81yeBlw","title":"IAM role-attached managed policies were listed","pathname":"/analytics-alerts/alerts-by-name/iam-role-attached-managed-policies-were-listed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ROI1HrxFyGTPc8heV85Z","title":"IAM role trust policy modification","pathname":"/analytics-alerts/alerts-by-name/iam-role-trust-policy-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eE5eiNHoQA2Ir1mJAuoE","title":"IAM role was created","pathname":"/analytics-alerts/alerts-by-name/iam-role-was-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Jmdiq1Hsc8vdYD11xJo3","title":"IAM User added to an IAM group","pathname":"/analytics-alerts/alerts-by-name/iam-user-added-to-an-iam-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"v2jMlK5lUgx9ies77W8R","title":"Identity assigned an Azure AD Administrator Role","pathname":"/analytics-alerts/alerts-by-name/identity-assigned-an-azure-ad-administrator-role","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EhXjJ5rlQyZXu53Ntt2e","title":"Image file execution options (IFEO) registry key set","pathname":"/analytics-alerts/alerts-by-name/image-file-execution-options-ifeo-registry-key-set","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eyRNZXUc3umo0uQUUTi8","title":"Impossible travel by a cloud identity","pathname":"/analytics-alerts/alerts-by-name/impossible-travel-by-a-cloud-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"afLpIWy8hvsvFnCFmHs8","title":"Impossible traveler - SSO","pathname":"/analytics-alerts/alerts-by-name/impossible-traveler-sso","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LZoykH4x43ZUBwzRlSi1","title":"Impossible traveler - VPN","pathname":"/analytics-alerts/alerts-by-name/impossible-traveler-vpn","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ETIpdBbPtGXbvUbThrUB","title":"Increase in Job-Related Site Visits","pathname":"/analytics-alerts/alerts-by-name/increase-in-job-related-site-visits","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RHvCcznys0zVk8FF0dP2","title":"Indicator blocking","pathname":"/analytics-alerts/alerts-by-name/indicator-blocking","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MaVI5qP1A9DCsf30F0ow","title":"Indirect command execution using the Program Compatibility Assistant","pathname":"/analytics-alerts/alerts-by-name/indirect-command-execution-using-the-program-compatibility-assistant","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ne9CAQTxHrFMbGSUikUq","title":"Information gathering via docker.sock","pathname":"/analytics-alerts/alerts-by-name/information-gathering-via-docker-sock","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QS1nJCns1kRus6XRaGF2","title":"Initial person-to-person email contact","pathname":"/analytics-alerts/alerts-by-name/initial-person-to-person-email-contact","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"A4T7132VX5CfBYa5evOZ","title":"Injection into rundll32.exe","pathname":"/analytics-alerts/alerts-by-name/injection-into-rundll32-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"64pAZqgKSABoN1bp2JSm","title":"Installation of a new System-V service","pathname":"/analytics-alerts/alerts-by-name/installation-of-a-new-system-v-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"em3VWe61BPrKHI3unTfU","title":"Intense SSO failures","pathname":"/analytics-alerts/alerts-by-name/intense-sso-failures","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8jzk2Ok9cqwQZsd2WbX1","title":"Interactive at.exe privilege escalation method","pathname":"/analytics-alerts/alerts-by-name/interactive-at-exe-privilege-escalation-method","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mRwir9BjwvTXYHKGEtaA","title":"Interactive local account enumeration","pathname":"/analytics-alerts/alerts-by-name/interactive-local-account-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HtMMbBdhBhfwH8KoqNiL","title":"Interactive login by a machine account","pathname":"/analytics-alerts/alerts-by-name/interactive-login-by-a-machine-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nr3M6b1lhvLEcSPNyWwp","title":"Interactive login by a service account","pathname":"/analytics-alerts/alerts-by-name/interactive-login-by-a-service-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7gIXaNAoT7quE7B7x0G0","title":"Interactive login from a shared user account","pathname":"/analytics-alerts/alerts-by-name/interactive-login-from-a-shared-user-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"54Nux695PlRIv7Gi7Lb9","title":"Internal address failed authentication","pathname":"/analytics-alerts/alerts-by-name/internal-address-failed-authentication","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7BRkbuHDSI6gSOXRtD9C","title":"Internal Login Password Spray","pathname":"/analytics-alerts/alerts-by-name/internal-login-password-spray","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IqJcjQN2Qt2MMYVcXGkr","title":"Invalid SAML Detected","pathname":"/analytics-alerts/alerts-by-name/invalid-saml-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sxBwJNNeo5gw6ZHIg6UD","title":"IP Rotation Pattern in SSO Spray","pathname":"/analytics-alerts/alerts-by-name/ip-rotation-pattern-in-sso-spray","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"a5xmjkhya1bEISZZwGgr","title":"Iptables configuration command was executed","pathname":"/analytics-alerts/alerts-by-name/iptables-configuration-command-was-executed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2kk8PE3oeJs905Ua72ni","title":"JS runtime attempted to read Git authentication tokens","pathname":"/analytics-alerts/alerts-by-name/js-runtime-attempted-to-read-git-authentication-tokens","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9ZpHcncesb5otLckatRH","title":"Kerberos Pre-Auth Failures by Host","pathname":"/analytics-alerts/alerts-by-name/kerberos-pre-auth-failures-by-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MdF5ipIKCPpV155iiYjj","title":"Kerberos Pre-Auth Failures by User and Host","pathname":"/analytics-alerts/alerts-by-name/kerberos-pre-auth-failures-by-user-and-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CLIgBlaHu5ZpasVp1H0W","title":"Kerberos Traffic from Non-Standard Process","pathname":"/analytics-alerts/alerts-by-name/kerberos-traffic-from-non-standard-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Gsfg5Syh4EqzlpXc63np","title":"Kerberos User Enumeration","pathname":"/analytics-alerts/alerts-by-name/kerberos-user-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ljO8pqENsXAfpAYSxsRG","title":"Key credential attribute modification","pathname":"/analytics-alerts/alerts-by-name/key-credential-attribute-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PB8qYDMzCWphKyrcuN5p","title":"Keylogging using system commands","pathname":"/analytics-alerts/alerts-by-name/keylogging-using-system-commands","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9zQkuI9MftRZP1ZQOVV5","title":"KMS key policy was changed","pathname":"/analytics-alerts/alerts-by-name/kms-key-policy-was-changed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8vRUaTacLLjY0fqJ5XUQ","title":"Known service display name with uncommon image-path","pathname":"/analytics-alerts/alerts-by-name/known-service-display-name-with-uncommon-image-path","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FVqDd3sMzKV1nwK2DC3M","title":"Known service name with an uncommon image-path","pathname":"/analytics-alerts/alerts-by-name/known-service-name-with-an-uncommon-image-path","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kfPsym76IR1DFYsuUBgH","title":"Kubelet server communication from a pod","pathname":"/analytics-alerts/alerts-by-name/kubelet-server-communication-from-a-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9mdWzYsFfSJZbniuMqfC","title":"Kubernetes admission controller activity","pathname":"/analytics-alerts/alerts-by-name/kubernetes-admission-controller-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uCUEYPyO2kRLSDdcspdB","title":"Kubernetes API server communication from within a pod","pathname":"/analytics-alerts/alerts-by-name/kubernetes-api-server-communication-from-within-a-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T5EDuw6XSUFsmRQxrfxZ","title":"Kubernetes cluster events deletion","pathname":"/analytics-alerts/alerts-by-name/kubernetes-cluster-events-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NVXDT6et7LqmwBdrQJMq","title":"Kubernetes enumeration activity","pathname":"/analytics-alerts/alerts-by-name/kubernetes-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6A5D8AGMwothhBwfy6HJ","title":"Kubernetes environment enumeration activity","pathname":"/analytics-alerts/alerts-by-name/kubernetes-environment-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AW40xWpvcdy4FRI5SnkP","title":"Kubernetes network policy modification","pathname":"/analytics-alerts/alerts-by-name/kubernetes-network-policy-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sijbgJcJITykVN9vqAu5","title":"Kubernetes nsenter container escape","pathname":"/analytics-alerts/alerts-by-name/kubernetes-nsenter-container-escape","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EVxkpftFuYaB2y9U1IfH","title":"Kubernetes Pod Created with host Inter Process Communications (IPC) namespace","pathname":"/analytics-alerts/alerts-by-name/kubernetes-pod-created-with-host-inter-process-communications-ipc-namespace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eHjMtfvYfQOVh7ArbxSu","title":"Kubernetes Pod created with host process ID (PID) namespace","pathname":"/analytics-alerts/alerts-by-name/kubernetes-pod-created-with-host-process-id-pid-namespace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oT25Cg779yAhtk1DtTD2","title":"Kubernetes Pod Created With Sensitive Volume","pathname":"/analytics-alerts/alerts-by-name/kubernetes-pod-created-with-sensitive-volume","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3l1C4PcfYAEcITgfzGKb","title":"Kubernetes pod creation from unknown container image registry","pathname":"/analytics-alerts/alerts-by-name/kubernetes-pod-creation-from-unknown-container-image-registry","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZoBfqWsR5IxdCYMenQwm","title":"Kubernetes pod creation with host network","pathname":"/analytics-alerts/alerts-by-name/kubernetes-pod-creation-with-host-network","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DkUEp8O3xZGMxkab4pT9","title":"Kubernetes Privileged Pod Creation","pathname":"/analytics-alerts/alerts-by-name/kubernetes-privileged-pod-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1NiHh78GaBYTakqE9jVG","title":"Kubernetes RBAC enumeration","pathname":"/analytics-alerts/alerts-by-name/kubernetes-rbac-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DaDQhIS3h72iJt1tAPNS","title":"Kubernetes secret enumeration activity","pathname":"/analytics-alerts/alerts-by-name/kubernetes-secret-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T71zIQyKeOsVkREKuNqY","title":"Kubernetes secrets enumeration for the first time","pathname":"/analytics-alerts/alerts-by-name/kubernetes-secrets-enumeration-for-the-first-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ysgNfXtDOtR9Cfz2PFt6","title":"Kubernetes service account activity outside the cluster","pathname":"/analytics-alerts/alerts-by-name/kubernetes-service-account-activity-outside-the-cluster","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BVsH6oyb9XICb0Zy82DS","title":"Kubernetes version disclosure","pathname":"/analytics-alerts/alerts-by-name/kubernetes-version-disclosure","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bS0NKUvQmh6h5HL0Q3vH","title":"Kubernetes vulnerability scanner activity","pathname":"/analytics-alerts/alerts-by-name/kubernetes-vulnerability-scanner-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VVysWlSIZZsj3kzP1WFk","title":"Kubernetes vulnerability scanning tool usage","pathname":"/analytics-alerts/alerts-by-name/kubernetes-vulnerability-scanning-tool-usage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SBSzG5VzlJfGX94IOmyC","title":"Large Upload (FTP)","pathname":"/analytics-alerts/alerts-by-name/large-upload-ftp","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DADPTQOS1k12veRNoeKz","title":"Large Upload (Generic)","pathname":"/analytics-alerts/alerts-by-name/large-upload-generic","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lTRg9MykLWUQYvpK4eK6","title":"Large Upload (HTTPS)","pathname":"/analytics-alerts/alerts-by-name/large-upload-https","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TOZ1DtPCz7mHGCvUvlqU","title":"Large Upload (SMTP)","pathname":"/analytics-alerts/alerts-by-name/large-upload-smtp","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ln1lVALoZ4ImdNM8Lqen","title":"Large volume of files potentially containing credentials accessed in Google Drive","pathname":"/analytics-alerts/alerts-by-name/large-volume-of-files-potentially-containing-credentials-accessed-in-google-drive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ovPcGD5PSLHDwxTqCiM1","title":"LDAP AD CS Enumeration via Attack Tool","pathname":"/analytics-alerts/alerts-by-name/ldap-ad-cs-enumeration-via-attack-tool","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fYI7OHWedCrDLC39DKLa","title":"LDAP search query from an unpopular and unsigned process","pathname":"/analytics-alerts/alerts-by-name/ldap-search-query-from-an-unpopular-and-unsigned-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"r0iTiRY4mSj7iwVfgGeE","title":"LDAP traffic from non-standard process","pathname":"/analytics-alerts/alerts-by-name/ldap-traffic-from-non-standard-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nGIgfG5weHntabcorMVS","title":"Linux local user account creation","pathname":"/analytics-alerts/alerts-by-name/linux-local-user-account-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0sZT3MM5SNAWX5u9351Q","title":"Linux network share discovery","pathname":"/analytics-alerts/alerts-by-name/linux-network-share-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WXvT6sCwQYRexfR13cv8","title":"Linux process execution with a rare GitHub URL","pathname":"/analytics-alerts/alerts-by-name/linux-process-execution-with-a-rare-github-url","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AgvEV7W5imresfXK2x0l","title":"Linux system firewall was modified","pathname":"/analytics-alerts/alerts-by-name/linux-system-firewall-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MDZJQaSHgTgHNh0aQxjF","title":"Local account discovery","pathname":"/analytics-alerts/alerts-by-name/local-account-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NFe0oQzYsaK0g57OSTJM","title":"Local group enumeration via RPC","pathname":"/analytics-alerts/alerts-by-name/local-group-enumeration-via-rpc","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TsXKtJpRoNuKwgV1U9Wy","title":"Local group enumeration","pathname":"/analytics-alerts/alerts-by-name/local-group-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0cuVjtCzkOkVUoIFScMy","title":"Local user account creation by a machine account","pathname":"/analytics-alerts/alerts-by-name/local-user-account-creation-by-a-machine-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gYqs5LZF8ymOLt8XPKOv","title":"Local user account creation","pathname":"/analytics-alerts/alerts-by-name/local-user-account-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gUwTTIukxUwR5nj4aETk","title":"Local user enumeration via SAMR","pathname":"/analytics-alerts/alerts-by-name/local-user-enumeration-via-samr","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1DgxVHgzFrGGrqHRMRNg","title":"Log enumeration via cloud native logging service","pathname":"/analytics-alerts/alerts-by-name/log-enumeration-via-cloud-native-logging-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T3HpgqrSLtAOuywvw4IQ","title":"Logging was impaired via external encryption key","pathname":"/analytics-alerts/alerts-by-name/logging-was-impaired-via-external-encryption-key","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LLt5Uu2KLqJvmJ1bwyIC","title":"Login attempt by a honey user","pathname":"/analytics-alerts/alerts-by-name/login-attempt-by-a-honey-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2OcTQV0GkGf21jWa4XQ9","title":"Login by a dormant user","pathname":"/analytics-alerts/alerts-by-name/login-by-a-dormant-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BEbA64ZFO8mOKdh2NfnA","title":"Logs were not collected from a data source for an abnormally long time","pathname":"/analytics-alerts/alerts-by-name/logs-were-not-collected-from-a-data-source-for-an-abnormally-long-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"D8r7UtmOmXbsCghxSFex","title":"LOLBAS executable injects into another process","pathname":"/analytics-alerts/alerts-by-name/lolbas-executable-injects-into-another-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"N88HWPmLkUz14Z3iofY0","title":"LOLBIN created a PSScriptPolicyTest PowerShell script file","pathname":"/analytics-alerts/alerts-by-name/lolbin-created-a-psscriptpolicytest-powershell-script-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nsNr6WLXaUvljWeliAWC","title":"LOLBIN process executed with a high integrity level","pathname":"/analytics-alerts/alerts-by-name/lolbin-process-executed-with-a-high-integrity-level","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0SIBAZ5fWOY5tm5A99H7","title":"LSASS dump file written to disk","pathname":"/analytics-alerts/alerts-by-name/lsass-dump-file-written-to-disk","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nBs0EIK99t5ccWrAhPmF","title":"Machine Account NTLM Relay","pathname":"/analytics-alerts/alerts-by-name/machine-account-ntlm-relay","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gWzQvUNO0HtulFGf0I29","title":"Machine account was added to a domain admins group","pathname":"/analytics-alerts/alerts-by-name/machine-account-was-added-to-a-domain-admins-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qZrUgyua6UOnUHBu6Q8r","title":"Mailbox Client Access Setting (CAS) changed","pathname":"/analytics-alerts/alerts-by-name/mailbox-client-access-setting-cas-changed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JUlEWsUSJvksAF3Htb2O","title":"Mailbox enumeration activity by Azure application","pathname":"/analytics-alerts/alerts-by-name/mailbox-enumeration-activity-by-azure-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1H9q5mCWxF4ktyBJx4Qh","title":"Manipulation of netsh helper DLLs Registry keys","pathname":"/analytics-alerts/alerts-by-name/manipulation-of-netsh-helper-dlls-registry-keys","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vgKcIhHVsVquZWejHcNF","title":"Masquerading as a default local account","pathname":"/analytics-alerts/alerts-by-name/masquerading-as-a-default-local-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aH6EP2V7sU3puEKX8MQc","title":"Masquerading as the Linux crond process","pathname":"/analytics-alerts/alerts-by-name/masquerading-as-the-linux-crond-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Un9egBSCdg4oBlKEKGT6","title":"Mass deletion of versioned S3 objects","pathname":"/analytics-alerts/alerts-by-name/mass-deletion-of-versioned-s3-objects","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ABZNH5fZgaqt313UX3A0","title":"Massive file activity abnormal to process","pathname":"/analytics-alerts/alerts-by-name/massive-file-activity-abnormal-to-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eps8AkRXoQk7sTdS5bcg","title":"Massive file compression by user","pathname":"/analytics-alerts/alerts-by-name/massive-file-compression-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UWLjdDsxdpvKjXmfd3hx","title":"Massive file downloads from SaaS service","pathname":"/analytics-alerts/alerts-by-name/massive-file-downloads-from-saas-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"j7lJ76rhB8ZiISHyPO6k","title":"Massive files deletion in Box","pathname":"/analytics-alerts/alerts-by-name/massive-files-deletion-in-box","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jIq0T8Wpej59LMtTLjrF","title":"Massive files deletion in Dropbox","pathname":"/analytics-alerts/alerts-by-name/massive-files-deletion-in-dropbox","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZqDXSlrvckYA4zJDqnLw","title":"Massive files deletion in Google Drive","pathname":"/analytics-alerts/alerts-by-name/massive-files-deletion-in-google-drive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4feA4XWD57KK8G0034rf","title":"Massive files deletion in Microsoft SharePoint or OneDrive","pathname":"/analytics-alerts/alerts-by-name/massive-files-deletion-in-microsoft-sharepoint-or-onedrive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xwYyontZzqDLvlZOaFGy","title":"Massive files editing in Box","pathname":"/analytics-alerts/alerts-by-name/massive-files-editing-in-box","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Vr1RItpV7enLb9NbTFJe","title":"Massive files editing in Dropbox","pathname":"/analytics-alerts/alerts-by-name/massive-files-editing-in-dropbox","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FQkjLGioN4eUin5EnNIZ","title":"Massive files editing in Google Drive","pathname":"/analytics-alerts/alerts-by-name/massive-files-editing-in-google-drive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ySNtwbaGoOOSScsnYfaH","title":"Massive files editing in Microsoft SharePoint or OneDrive","pathname":"/analytics-alerts/alerts-by-name/massive-files-editing-in-microsoft-sharepoint-or-onedrive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nvOaRX449m06Bxa5EQjU","title":"Massive upload to a rare storage or mail domain","pathname":"/analytics-alerts/alerts-by-name/massive-upload-to-a-rare-storage-or-mail-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"faYEEuA4drV3pIl0N6hK","title":"Massive upload to SaaS service","pathname":"/analytics-alerts/alerts-by-name/massive-upload-to-saas-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"btGxLxtU3JiyYViSAVF5","title":"Member added to a Windows local security group","pathname":"/analytics-alerts/alerts-by-name/member-added-to-a-windows-local-security-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"n2Xk1vRzfeLf6wZg9CnU","title":"Memory dumping with comsvcs.dll","pathname":"/analytics-alerts/alerts-by-name/memory-dumping-with-comsvcs-dll","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9TFUjcxko2DyXd25SblO","title":"MFA device was removed/deactivated from an IAM user","pathname":"/analytics-alerts/alerts-by-name/mfa-device-was-removed-deactivated-from-an-iam-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kjnpwPJAkr1dh8aVyLak","title":"MFA Disabled for Google Workspace","pathname":"/analytics-alerts/alerts-by-name/mfa-disabled-for-google-workspace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"r5tpN63KHAM2hNEWtnQG","title":"MFA was disabled for a Google Workspace user","pathname":"/analytics-alerts/alerts-by-name/mfa-was-disabled-for-a-google-workspace-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WFSj3rLeWiD2wr5Ky6M2","title":"MFA was disabled for an Azure identity","pathname":"/analytics-alerts/alerts-by-name/mfa-was-disabled-for-an-azure-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rzUEWuVYHc9lDXA5aEzH","title":"Microsoft 365 DLP policy disabled or removed","pathname":"/analytics-alerts/alerts-by-name/microsoft-365-dlp-policy-disabled-or-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1ofFLdgWSRCbMKl8Yjb9","title":"Microsoft 365 storage services exfiltration activity","pathname":"/analytics-alerts/alerts-by-name/microsoft-365-storage-services-exfiltration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lc5NwlnJHhijCSPzeGxG","title":"Microsoft Configuration Manager device registration and policy request","pathname":"/analytics-alerts/alerts-by-name/microsoft-configuration-manager-device-registration-and-policy-request","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aXqktY2YI1xw9Ou2EgH9","title":"Microsoft HTML Application Host spawns from CMD or PowerShell","pathname":"/analytics-alerts/alerts-by-name/microsoft-html-application-host-spawns-from-cmd-or-powershell","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KAAWkF5i7JuM9YyJCyUo","title":"Microsoft Office adds a value to autostart Registry key","pathname":"/analytics-alerts/alerts-by-name/microsoft-office-adds-a-value-to-autostart-registry-key","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SLrd0WW8hJiCsF8d0yVN","title":"Microsoft Office injects code into a process","pathname":"/analytics-alerts/alerts-by-name/microsoft-office-injects-code-into-a-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6Q0PN3EadY85W3VWgsmf","title":"Microsoft Office Process Spawning a Suspicious One-Liner","pathname":"/analytics-alerts/alerts-by-name/microsoft-office-process-spawning-a-suspicious-one-liner","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8k9Pt2jkSfahvqvlujZ1","title":"Microsoft Office process spawns a commonly abused process","pathname":"/analytics-alerts/alerts-by-name/microsoft-office-process-spawns-a-commonly-abused-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ff4vvU0BJ6Sx1BoroUjD","title":"Microsoft Office process spawns conhost.exe","pathname":"/analytics-alerts/alerts-by-name/microsoft-office-process-spawns-conhost-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"v5f9gsLWrRrJYFrDfGWg","title":"Microsoft OneDrive enumeration activity","pathname":"/analytics-alerts/alerts-by-name/microsoft-onedrive-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Tw6VvZo66SncymapslT7","title":"Microsoft OneNote enumeration activity","pathname":"/analytics-alerts/alerts-by-name/microsoft-onenote-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"h0RgPGHIENJJbvru2kAo","title":"Microsoft SharePoint enumeration activity","pathname":"/analytics-alerts/alerts-by-name/microsoft-sharepoint-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"z4urbfJZgPyFA1FOQgDS","title":"Microsoft Teams application setup policy was modified","pathname":"/analytics-alerts/alerts-by-name/microsoft-teams-application-setup-policy-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Sona5H8n8JVYTD4HYp88","title":"Microsoft Teams enumeration activity","pathname":"/analytics-alerts/alerts-by-name/microsoft-teams-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"q7sy6Qi2v6IbLriWhq8s","title":"Microsoft Teams external communication policy was modified","pathname":"/analytics-alerts/alerts-by-name/microsoft-teams-external-communication-policy-was-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CDxK4tggwRnN8KJVlPwa","title":"Microsoft Teams messages were exported from conversation","pathname":"/analytics-alerts/alerts-by-name/microsoft-teams-messages-were-exported-from-conversation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LExt2v06UsmIXkEH9VZP","title":"Mimikatz command-line arguments","pathname":"/analytics-alerts/alerts-by-name/mimikatz-command-line-arguments","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MLp8DgLB8KrBtK7naemV","title":"ML artifacts destruction","pathname":"/analytics-alerts/alerts-by-name/ml-artifacts-destruction","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mbpP4W4QhzI59e4QZzG3","title":"Modification of NTLM restrictions in the Registry","pathname":"/analytics-alerts/alerts-by-name/modification-of-ntlm-restrictions-in-the-registry","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"APaV0cfllT2p06tW5mct","title":"Modification of PAM","pathname":"/analytics-alerts/alerts-by-name/modification-of-pam","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hwWykjtRNv23TWM8LEWO","title":"Modification of the AD FS IdentityServer configuration file","pathname":"/analytics-alerts/alerts-by-name/modification-of-the-ad-fs-identityserver-configuration-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yqSDf2B660NT5ZnAKYF1","title":"Modification or Deletion of an Azure Application Gateway Detected","pathname":"/analytics-alerts/alerts-by-name/modification-or-deletion-of-an-azure-application-gateway-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eozpQXeYMAZm9iZgnTpS","title":"Moniker link detected in URL(s)","pathname":"/analytics-alerts/alerts-by-name/moniker-link-detected-in-url-s","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZZIgd5oheJiqJt51z0Mj","title":"Mount command was executed from within a Kubernetes pod to list all the attached filesystems","pathname":"/analytics-alerts/alerts-by-name/mount-command-was-executed-from-within-a-kubernetes-pod-to-list-all-the-attached-filesystems","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MgfuC2xeuR4vhi3kcxCb","title":"MpCmdRun.exe was used to download files into the system","pathname":"/analytics-alerts/alerts-by-name/mpcmdrun-exe-was-used-to-download-files-into-the-system","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Y4IFk5U77cepFtSeHoWr","title":"Mshta.exe launched with suspicious arguments","pathname":"/analytics-alerts/alerts-by-name/mshta-exe-launched-with-suspicious-arguments","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gOmmQuFl2JrG0keghLjB","title":"Mshta.exe spawns from a browser process","pathname":"/analytics-alerts/alerts-by-name/mshta-exe-spawns-from-a-browser-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"X5vgO3Ip6Z7pLnEglq7A","title":"MSI accessed a web page running a server-side script","pathname":"/analytics-alerts/alerts-by-name/msi-accessed-a-web-page-running-a-server-side-script","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mAmUBkHN9iZIhJaxXZE8","title":"Msiexec execution of an executable from an uncommon remote location","pathname":"/analytics-alerts/alerts-by-name/msiexec-execution-of-an-executable-from-an-uncommon-remote-location","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lphqY2YHzId4USzkAgOY","title":"Multi region enumeration activity","pathname":"/analytics-alerts/alerts-by-name/multi-region-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T6eLf6KyQSqbDCx0Wwkh","title":"Multiple alerts associated with a single RDP connection","pathname":"/analytics-alerts/alerts-by-name/multiple-alerts-associated-with-a-single-rdp-connection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cPiJYa81Y9S3aBejwnbY","title":"Multiple alerts of different MITRE tactics were seen","pathname":"/analytics-alerts/alerts-by-name/multiple-alerts-of-different-mitre-tactics-were-seen","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"677zdn9DVE9yufj0SSJD","title":"Multiple Azure AD admin role removals","pathname":"/analytics-alerts/alerts-by-name/multiple-azure-ad-admin-role-removals","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uWxWZ5UMBayaX4QUujRM","title":"Multiple cloud snapshots export","pathname":"/analytics-alerts/alerts-by-name/multiple-cloud-snapshots-export","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"igIJ7H7BpTTIDigItcXX","title":"Multiple discovery commands on a Linux host by the same process","pathname":"/analytics-alerts/alerts-by-name/multiple-discovery-commands-on-a-linux-host-by-the-same-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9TBQOOIlJ3hLxMs1Ptnd","title":"Multiple discovery commands on a Windows host by the same process","pathname":"/analytics-alerts/alerts-by-name/multiple-discovery-commands-on-a-windows-host-by-the-same-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8IiIsdpDM37ILrlQq2dN","title":"Multiple discovery commands","pathname":"/analytics-alerts/alerts-by-name/multiple-discovery-commands","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mFQtg5OeXPO9cKoXZ8Dw","title":"Multiple discovery-like commands","pathname":"/analytics-alerts/alerts-by-name/multiple-discovery-like-commands","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TaIkGF3OQHEESWXeZqcl","title":"Multiple failed AWS assume role attempts","pathname":"/analytics-alerts/alerts-by-name/multiple-failed-aws-assume-role-attempts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JSb4C8PtAdoKqm9FqIuS","title":"Multiple failed logins from a single IP","pathname":"/analytics-alerts/alerts-by-name/multiple-failed-logins-from-a-single-ip","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PXntwfLbhrON7bkHt194","title":"Multiple mail items were accessed in a short period of time","pathname":"/analytics-alerts/alerts-by-name/multiple-mail-items-were-accessed-in-a-short-period-of-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"11lo63adYN2ljm3Xf61U","title":"Multiple network-related alerts of different MITRE tactics on the same host","pathname":"/analytics-alerts/alerts-by-name/multiple-network-related-alerts-of-different-mitre-tactics-on-the-same-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"P4v0ZKlZ2BxyPbCYvGp9","title":"Multiple network-related alerts produced by different detectors on the same host","pathname":"/analytics-alerts/alerts-by-name/multiple-network-related-alerts-produced-by-different-detectors-on-the-same-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FC6Idafy41JwZuUzmfb4","title":"Multiple Okta MFA requests sent to a user","pathname":"/analytics-alerts/alerts-by-name/multiple-okta-mfa-requests-sent-to-a-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XjTehladpolwQ7YfUO3k","title":"Multiple Rare LOLBIN Process Executions by User","pathname":"/analytics-alerts/alerts-by-name/multiple-rare-lolbin-process-executions-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eVhRvJoh5c4WpAHHq7pz","title":"Multiple Rare Process Executions in Organization","pathname":"/analytics-alerts/alerts-by-name/multiple-rare-process-executions-in-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WHTKEVzIqZGRb5bY8u0r","title":"Multiple risk indicators for a cloud identity","pathname":"/analytics-alerts/alerts-by-name/multiple-risk-indicators-for-a-cloud-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GivnON5GWcG6d1wEEAKo","title":"Multiple Suspicious FTP Login Attempts","pathname":"/analytics-alerts/alerts-by-name/multiple-suspicious-ftp-login-attempts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QJ0e1O3MbhRAAMOookuI","title":"Multiple suspicious user accounts were created","pathname":"/analytics-alerts/alerts-by-name/multiple-suspicious-user-accounts-were-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VbtVWswykoaQOSTnsbpn","title":"Multiple TGT requests for users without Kerberos pre-authentication","pathname":"/analytics-alerts/alerts-by-name/multiple-tgt-requests-for-users-without-kerberos-pre-authentication","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HM0ZsPnFpEtFW7Bltt3m","title":"Multiple uncommon SSH Servers with the same Server host key","pathname":"/analytics-alerts/alerts-by-name/multiple-uncommon-ssh-servers-with-the-same-server-host-key","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Q5bKY92C8Tp2GqNwLnYB","title":"Multiple user accounts failed login due to account lockouts","pathname":"/analytics-alerts/alerts-by-name/multiple-user-accounts-failed-login-due-to-account-lockouts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RSm8dyBlO69YR7QgIboG","title":"Multiple user accounts were deleted","pathname":"/analytics-alerts/alerts-by-name/multiple-user-accounts-were-deleted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xwbBgMWp9KWZV5zeOK9r","title":"Multiple users authenticated with weak NTLM to a host","pathname":"/analytics-alerts/alerts-by-name/multiple-users-authenticated-with-weak-ntlm-to-a-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DyBAtvh9GwPPIf1cbObP","title":"Multiple Weakly-Encrypted Kerberos Tickets Received","pathname":"/analytics-alerts/alerts-by-name/multiple-weakly-encrypted-kerberos-tickets-received","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QsK1sgIQXaJBdFRXAhZZ","title":"Near-empty email from an external sender","pathname":"/analytics-alerts/alerts-by-name/near-empty-email-from-an-external-sender","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Cxq3VbT7iTcIan113JDM","title":"Netcat makes or gets connections","pathname":"/analytics-alerts/alerts-by-name/netcat-makes-or-gets-connections","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"n5EUFhOUbfSYikvXJm86","title":"Network sniffing detected in Cloud environment","pathname":"/analytics-alerts/alerts-by-name/network-sniffing-detected-in-cloud-environment","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8PY1nAl1lvnuZEIVpFRx","title":"New addition to Windows Defender exclusion list","pathname":"/analytics-alerts/alerts-by-name/new-addition-to-windows-defender-exclusion-list","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fcb5zxPEFoyE4JQbw4Hn","title":"New Administrative Behavior","pathname":"/analytics-alerts/alerts-by-name/new-administrative-behavior","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6T4qJOXsipvrtLOmcGlQ","title":"New cloud identity created with administrative policy","pathname":"/analytics-alerts/alerts-by-name/new-cloud-identity-created-with-administrative-policy","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WY4H4wqd5GHMmEnyghZy","title":"New FTP Server","pathname":"/analytics-alerts/alerts-by-name/new-ftp-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Zgcxt9SXDV8nEZFDeFly","title":"New Shared User Account","pathname":"/analytics-alerts/alerts-by-name/new-shared-user-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0g6CK6uhlNKulVvM76i9","title":"New Teams application published to the organization catalog","pathname":"/analytics-alerts/alerts-by-name/new-teams-application-published-to-the-organization-catalog","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"l681HLnmVZX6HvTjNHX4","title":"Non-browser access to a pastebin-like site","pathname":"/analytics-alerts/alerts-by-name/non-browser-access-to-a-pastebin-like-site","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GAq7kPWNGM65zGQ5HHMF","title":"NTDS.dit file written by an uncommon executable","pathname":"/analytics-alerts/alerts-by-name/ntds-dit-file-written-by-an-uncommon-executable","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DA72Sxf9NiTXZ4T5ufpU","title":"NTLM Brute Force on a Service Account","pathname":"/analytics-alerts/alerts-by-name/ntlm-brute-force-on-a-service-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"utDrqPMCq1SvP4V2vMY3","title":"NTLM Brute Force on an Administrator Account","pathname":"/analytics-alerts/alerts-by-name/ntlm-brute-force-on-an-administrator-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UZW6iBXoWEek7iocZ9gU","title":"NTLM Brute Force","pathname":"/analytics-alerts/alerts-by-name/ntlm-brute-force","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LzGTze9lbzr77ORidTez","title":"NTLM Hash Harvesting","pathname":"/analytics-alerts/alerts-by-name/ntlm-hash-harvesting","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oKBEFEQ1xCCuDi4Kprkj","title":"NTLM Password Spray","pathname":"/analytics-alerts/alerts-by-name/ntlm-password-spray","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5YyiGJ0LhewCCNNkwU5u","title":"NTLM Relay","pathname":"/analytics-alerts/alerts-by-name/ntlm-relay","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"I0I7mJOPUBDg2FlGguPy","title":"Numerous emails sent by a single sender to multiple internal recipients","pathname":"/analytics-alerts/alerts-by-name/numerous-emails-sent-by-a-single-sender-to-multiple-internal-recipients","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GqgR3xHsb1fk9Yo3ZA7S","title":"Object versioning was disabled","pathname":"/analytics-alerts/alerts-by-name/object-versioning-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2mWMMquE0C4QaD9tglPM","title":"Office process accessed an unusual .LNK file","pathname":"/analytics-alerts/alerts-by-name/office-process-accessed-an-unusual-lnk-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JbuinX01qIqsjbSHdafC","title":"Office process spawned with suspicious command-line arguments","pathname":"/analytics-alerts/alerts-by-name/office-process-spawned-with-suspicious-command-line-arguments","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6YFWQ2920SGIgU0eqUcz","title":"Okta account reset password attempt","pathname":"/analytics-alerts/alerts-by-name/okta-account-reset-password-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Jldj4EdOQITr5uTTZnEJ","title":"Okta account unlock by admin","pathname":"/analytics-alerts/alerts-by-name/okta-account-unlock-by-admin","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"l2qy4tnqbK6hYZNWy99i","title":"Okta account unlock","pathname":"/analytics-alerts/alerts-by-name/okta-account-unlock","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7SrtnXgkIWkkpLYXmfA6","title":"Okta admin privilege assignment","pathname":"/analytics-alerts/alerts-by-name/okta-admin-privilege-assignment","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zdjjdQSDMSlxkrozXOzL","title":"Okta API Token Created","pathname":"/analytics-alerts/alerts-by-name/okta-api-token-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"udDKrkYjnhWwffW1OBH6","title":"Okta device assignment","pathname":"/analytics-alerts/alerts-by-name/okta-device-assignment","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"a3V84wy47YLawXUYR7rz","title":"Okta FastPass reported phishing attack suspected","pathname":"/analytics-alerts/alerts-by-name/okta-fastpass-reported-phishing-attack-suspected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NtfO6Ul5wwhimYIVoN0m","title":"Okta Reported Attack Suspected","pathname":"/analytics-alerts/alerts-by-name/okta-reported-attack-suspected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eGA2Wimv7ZbLkO2xQGVp","title":"Okta Reported Threat Detected","pathname":"/analytics-alerts/alerts-by-name/okta-reported-threat-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"o8nhL6uJmssqocidLdWJ","title":"Okta User Session Impersonation","pathname":"/analytics-alerts/alerts-by-name/okta-user-session-impersonation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TYm3RbNOhJsnOnjI6iF6","title":"OneDrive file download","pathname":"/analytics-alerts/alerts-by-name/onedrive-file-download","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4wMVE7lImMqiUS3Jywia","title":"OneDrive file upload","pathname":"/analytics-alerts/alerts-by-name/onedrive-file-upload","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Hf00KhrxRoguzkb0HQxT","title":"OneDrive folder creation","pathname":"/analytics-alerts/alerts-by-name/onedrive-folder-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qvutT21UmhxTYAmC3dsB","title":"Outbound email contains file-sharing service link sent to external recipient","pathname":"/analytics-alerts/alerts-by-name/outbound-email-contains-file-sharing-service-link-sent-to-external-recipient","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VHcRsnzePHb87JPtPNBs","title":"Outbound email includes an external BCC recipient observed for the first time","pathname":"/analytics-alerts/alerts-by-name/outbound-email-includes-an-external-bcc-recipient-observed-for-the-first-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6owD7wBj0dM7ag9k2Jq1","title":"Outbound email to an address hosted by a public email service provider","pathname":"/analytics-alerts/alerts-by-name/outbound-email-to-an-address-hosted-by-a-public-email-service-provider","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yjOgiP8t6dy5svYM2KwL","title":"Outlook files accessed by an unsigned process","pathname":"/analytics-alerts/alerts-by-name/outlook-files-accessed-by-an-unsigned-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JIp0PyTWwy5tRtHKaAnz","title":"Owner added to Azure application","pathname":"/analytics-alerts/alerts-by-name/owner-added-to-azure-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zNjltZnEMXoOmYAHK7Pm","title":"Owner was added to Azure application","pathname":"/analytics-alerts/alerts-by-name/owner-was-added-to-azure-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aEzGCgA4vb4KiJMDQJ63","title":"Parsing Rule Error","pathname":"/analytics-alerts/alerts-by-name/parsing-rule-error","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Ta7E9niDONoXOqs4OQrr","title":"Penetration testing tool activity attempt","pathname":"/analytics-alerts/alerts-by-name/penetration-testing-tool-activity-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SCo6qMW32tSXKBRzhG15","title":"Permission Groups discovery commands","pathname":"/analytics-alerts/alerts-by-name/permission-groups-discovery-commands","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PS7sMMpHGJYyrVVNl4oS","title":"Phantom DLL Loading","pathname":"/analytics-alerts/alerts-by-name/phantom-dll-loading","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eUFvzBipXOqu3B72C0Bj","title":"PIM privilege member removal","pathname":"/analytics-alerts/alerts-by-name/pim-privilege-member-removal","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"N7rAqGbqcnuCjVyxb4qX","title":"Ping to localhost from an uncommon, unsigned parent process","pathname":"/analytics-alerts/alerts-by-name/ping-to-localhost-from-an-uncommon-unsigned-parent-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7y51Vbx3VfJ0qvJ1nVWB","title":"PKINIT TGT authentication request","pathname":"/analytics-alerts/alerts-by-name/pkinit-tgt-authentication-request","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fyDCRNraFjVOGi6wj4KX","title":"Port Scan","pathname":"/analytics-alerts/alerts-by-name/port-scan","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"p9bwPRPxN24ClVcqK1gC","title":"Port Sweep","pathname":"/analytics-alerts/alerts-by-name/port-sweep","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1j3k3l8xBuL5YiSo1iYv","title":"Possible AS-REP Roasting Attack","pathname":"/analytics-alerts/alerts-by-name/possible-as-rep-roasting-attack","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5CbNORiRCmfuTjdkeWTf","title":"Possible authentication coercion","pathname":"/analytics-alerts/alerts-by-name/possible-authentication-coercion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cJ8eVaOGkqspckVFyLDJ","title":"Possible binary padding using dd","pathname":"/analytics-alerts/alerts-by-name/possible-binary-padding-using-dd","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"slTRZLXnkAPWJ3h4Zclk","title":"Possible Brute-Force attempt","pathname":"/analytics-alerts/alerts-by-name/possible-brute-force-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PAjbQSZwNyP9fvxhSkyd","title":"Possible brute force on sudo user","pathname":"/analytics-alerts/alerts-by-name/possible-brute-force-on-sudo-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hQcTGwQXPeXB8zWw6BMy","title":"Possible brute force or configuration change attempt on cytool","pathname":"/analytics-alerts/alerts-by-name/possible-brute-force-or-configuration-change-attempt-on-cytool","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CRVUtI04fanm9Fe3rvES","title":"Possible code downloading from a remote host by Regsvr32","pathname":"/analytics-alerts/alerts-by-name/possible-code-downloading-from-a-remote-host-by-regsvr32","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ipY8Hr9wWaj3BAHGKLv9","title":"Possible collection of screen captures with Windows Problem Steps Recorder","pathname":"/analytics-alerts/alerts-by-name/possible-collection-of-screen-captures-with-windows-problem-steps-recorder","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4RGtMcwM3Z6dmK1IKHWI","title":"Possible compromised machine account","pathname":"/analytics-alerts/alerts-by-name/possible-compromised-machine-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3G1ixxumkB08xKDOEtzS","title":"Possible ConsentFix - OAuth Token Theft Detected","pathname":"/analytics-alerts/alerts-by-name/possible-consentfix-oauth-token-theft-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jctiSFScMK94dDA7MZdm","title":"Possible data exfiltration over a USB storage device","pathname":"/analytics-alerts/alerts-by-name/possible-data-exfiltration-over-a-usb-storage-device","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6yzSqodUd720X75kJDin","title":"Possible data obfuscation","pathname":"/analytics-alerts/alerts-by-name/possible-data-obfuscation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ukaJiYrKHXEGAgyqvPyf","title":"Possible DCSync attack","pathname":"/analytics-alerts/alerts-by-name/possible-dcsync-attack","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KmGAtqBxSKQTTLWlXUut","title":"Possible DCSync from a non domain controller","pathname":"/analytics-alerts/alerts-by-name/possible-dcsync-from-a-non-domain-controller","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VhcWjjvv6bOcvt6F5z59","title":"Possible Distributed File System Namespace Management (DFSNM) abuse","pathname":"/analytics-alerts/alerts-by-name/possible-distributed-file-system-namespace-management-dfsnm-abuse","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MfWoTN7GQjGJ1MmxJLCc","title":"Possible DLL Hijack into a Microsoft process","pathname":"/analytics-alerts/alerts-by-name/possible-dll-hijack-into-a-microsoft-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YLf0YQMMrYAnXT1we25J","title":"Possible DLL Search Order Hijacking","pathname":"/analytics-alerts/alerts-by-name/possible-dll-search-order-hijacking","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6ElGafpkwCHNX8ALv9zR","title":"Possible Email collection using Outlook RPC","pathname":"/analytics-alerts/alerts-by-name/possible-email-collection-using-outlook-rpc","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"U7PDvcsQYJMIHDAHwywc","title":"Possible external RDP Brute-Force","pathname":"/analytics-alerts/alerts-by-name/possible-external-rdp-brute-force","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"59rYfCbiPAuuGpbmO75t","title":"Possible GPO Enumeration","pathname":"/analytics-alerts/alerts-by-name/possible-gpo-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TstoFuZnfdmLG9x6Wp5E","title":"Possible Impossible Travel Pattern - SSO","pathname":"/analytics-alerts/alerts-by-name/possible-impossible-travel-pattern-sso","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Yb5ci7sBakihlqJwKldT","title":"Possible Insider Threat Activity","pathname":"/analytics-alerts/alerts-by-name/possible-insider-threat-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kSpiHsHl4StP5hUoAkHM","title":"Possible internal data exfiltration over a USB storage device","pathname":"/analytics-alerts/alerts-by-name/possible-internal-data-exfiltration-over-a-usb-storage-device","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IsTxE0yzMHKlret9Qh4i","title":"Possible IPFS traffic was detected","pathname":"/analytics-alerts/alerts-by-name/possible-ipfs-traffic-was-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"heSksYRGgF9DJfLyaZPF","title":"Possible Kerberoasting attack","pathname":"/analytics-alerts/alerts-by-name/possible-kerberoasting-attack","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7YqVeuoAzEGWNwhWOTlL","title":"Possible Kerberoasting without SPNs","pathname":"/analytics-alerts/alerts-by-name/possible-kerberoasting-without-spns","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"j5vTuMi8OKMWiqVqU4vD","title":"Possible Kerberos relay attack","pathname":"/analytics-alerts/alerts-by-name/possible-kerberos-relay-attack","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cj941bxRSL7irxlbTVsv","title":"Possible Kerberos User Enumeration","pathname":"/analytics-alerts/alerts-by-name/possible-kerberos-user-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8c1lDrlEujzLcImHELqZ","title":"Possible LDAP enumeration by unsigned process","pathname":"/analytics-alerts/alerts-by-name/possible-ldap-enumeration-by-unsigned-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0wpJwe6Hbd4BpKi2T5Pt","title":"Possible LDAP Enumeration of Microsoft Configuration Manager","pathname":"/analytics-alerts/alerts-by-name/possible-ldap-enumeration-of-microsoft-configuration-manager","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Dj5FA2PZBNsz5lB6PWfJ","title":"Possible LDAP Enumeration Tool Usage","pathname":"/analytics-alerts/alerts-by-name/possible-ldap-enumeration-tool-usage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9b8gbJsf6vQzb4vGbXWb","title":"Possible malicious .NET compilation started by a commonly abused process","pathname":"/analytics-alerts/alerts-by-name/possible-malicious-net-compilation-started-by-a-commonly-abused-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ry55pdOzu95m4NQ9LsMy","title":"Possible multistage attack in Microsoft Teams","pathname":"/analytics-alerts/alerts-by-name/possible-multistage-attack-in-microsoft-teams","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LQTeNwv3mC7jjVVuXh70","title":"Possible network service discovery via command-line tool","pathname":"/analytics-alerts/alerts-by-name/possible-network-service-discovery-via-command-line-tool","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xSo7mnXVN5v1GHPuAPQA","title":"Possible network sniffing attempt via tcpdump or tshark","pathname":"/analytics-alerts/alerts-by-name/possible-network-sniffing-attempt-via-tcpdump-or-tshark","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EOj1yfcTiiZbFIvWPme7","title":"Possible new DHCP server","pathname":"/analytics-alerts/alerts-by-name/possible-new-dhcp-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4d3a5d4vAq6a3n5brvOb","title":"Possible Pass-the-Hash","pathname":"/analytics-alerts/alerts-by-name/possible-pass-the-hash","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AXVkYdElzhjXW7b1fU1H","title":"Possible path traversal via HTTP request","pathname":"/analytics-alerts/alerts-by-name/possible-path-traversal-via-http-request","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yOiVVgmrgRk0cIQ4Kcde","title":"Possible Persistence via group policy Registry keys","pathname":"/analytics-alerts/alerts-by-name/possible-persistence-via-group-policy-registry-keys","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5KXSmXMxXMycTn0oyEyR","title":"Possible phishing attack via Microsoft Teams","pathname":"/analytics-alerts/alerts-by-name/possible-phishing-attack-via-microsoft-teams","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kwvvf0yPSz7ZbpAjMM4X","title":"Possible Privilege Escalation using Delegated MSA account","pathname":"/analytics-alerts/alerts-by-name/possible-privilege-escalation-using-delegated-msa-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ApIrGJd4MVGm4arlOyL7","title":"Possible RDP session hijacking using tscon.exe","pathname":"/analytics-alerts/alerts-by-name/possible-rdp-session-hijacking-using-tscon-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"d0NcXqjvweFyx1CNokUC","title":"Possible Search For Password Files","pathname":"/analytics-alerts/alerts-by-name/possible-search-for-password-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5RjC990GoZaSFPZZ8kHY","title":"Possible SPN enumeration","pathname":"/analytics-alerts/alerts-by-name/possible-spn-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yeH9xyOGXSKDRKFjTr7c","title":"Possible TGT reuse from different hosts (pass the ticket)","pathname":"/analytics-alerts/alerts-by-name/possible-tgt-reuse-from-different-hosts-pass-the-ticket","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Vxysu17cuS1sl4OF3cv2","title":"Possible use of a networking driver for network sniffing","pathname":"/analytics-alerts/alerts-by-name/possible-use-of-a-networking-driver-for-network-sniffing","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JqB9jQtwuAXcbcErHYyV","title":"Possible use of IPFS was detected","pathname":"/analytics-alerts/alerts-by-name/possible-use-of-ipfs-was-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PMKjGlW8cpLaoUCjnL6r","title":"Possible webshell file written by a web server process","pathname":"/analytics-alerts/alerts-by-name/possible-webshell-file-written-by-a-web-server-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aQTEfryOdFf94zlVOxgQ","title":"Potential creation of persistent cloud credentials","pathname":"/analytics-alerts/alerts-by-name/potential-creation-of-persistent-cloud-credentials","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YDzFpraZQCza3rIRZgWx","title":"Potential DCSync by an unusual user","pathname":"/analytics-alerts/alerts-by-name/potential-dcsync-by-an-unusual-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jjhubvgt557DDb7QGyeW","title":"Potential denial of wallet abusing AI services","pathname":"/analytics-alerts/alerts-by-name/potential-denial-of-wallet-abusing-ai-services","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LmnrFgRZXabQu08a86Uw","title":"Potential extraction of NAA Account Credentials in Microsoft Configuration Manager","pathname":"/analytics-alerts/alerts-by-name/potential-extraction-of-naa-account-credentials-in-microsoft-configuration-manager","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9gWnvFbo8TvWexxAO8C1","title":"Potential kubelet impersonation attempt","pathname":"/analytics-alerts/alerts-by-name/potential-kubelet-impersonation-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DupeKCuLcExIIfyC6JL3","title":"Potential NTLM Relay Attack against a Microsoft Configuration Manager Site Server","pathname":"/analytics-alerts/alerts-by-name/potential-ntlm-relay-attack-against-a-microsoft-configuration-manager-site-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7s0K3x4rzy1zdwrm33uJ","title":"Potential NTLM Relay Attack","pathname":"/analytics-alerts/alerts-by-name/potential-ntlm-relay-attack","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SI1svYMuNqxvQgnkptRy","title":"Potential Okta access limit breach","pathname":"/analytics-alerts/alerts-by-name/potential-okta-access-limit-breach","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Mk8dcSBYhMzSB0kGw5A9","title":"Potential Phishing has been detected","pathname":"/analytics-alerts/alerts-by-name/potential-phishing-has-been-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qLyat2qbUr8YF2rPqKqB","title":"Potential SCCM credential harvesting using WMI detected","pathname":"/analytics-alerts/alerts-by-name/potential-sccm-credential-harvesting-using-wmi-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YkmYrR4nfditwnEJJvly","title":"Potential spoofing of internal domain spotted","pathname":"/analytics-alerts/alerts-by-name/potential-spoofing-of-internal-domain-spotted","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YglvVBzIkgcfOhZLKsHk","title":"PowerShell Initiates a Network Connection to GitHub","pathname":"/analytics-alerts/alerts-by-name/powershell-initiates-a-network-connection-to-github","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"e4qcgTUK7qH3JNXLj4NP","title":"PowerShell pfx certificate extraction","pathname":"/analytics-alerts/alerts-by-name/powershell-pfx-certificate-extraction","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Zr5nuCNgkiLwUoLxmpHc","title":"PowerShell running with download in the command line","pathname":"/analytics-alerts/alerts-by-name/powershell-running-with-download-in-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oi0M4u5W0SHX807COPRN","title":"PowerShell runs suspicious base64-encoded commands","pathname":"/analytics-alerts/alerts-by-name/powershell-runs-suspicious-base64-encoded-commands","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bPmqPiQPnchMYAGIKzsH","title":"PowerShell script executed from a temporary directory","pathname":"/analytics-alerts/alerts-by-name/powershell-script-executed-from-a-temporary-directory","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YnjjpZLmClIGe420jvBk","title":"PowerShell suspicious flags","pathname":"/analytics-alerts/alerts-by-name/powershell-suspicious-flags","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"51ZVJmD6kPTUlJJo77WK","title":"PowerShell used to export mailbox contents","pathname":"/analytics-alerts/alerts-by-name/powershell-used-to-export-mailbox-contents","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nWLaEksGilrJUrsF8v1d","title":"PowerShell used to remove mailbox export request logs","pathname":"/analytics-alerts/alerts-by-name/powershell-used-to-remove-mailbox-export-request-logs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"B2RAfuoU0vaoPw0t5LDs","title":"Privileged certificate request via certificate template","pathname":"/analytics-alerts/alerts-by-name/privileged-certificate-request-via-certificate-template","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"icoJ0JSySTIVcyieLrbk","title":"Privileged role used by Azure application","pathname":"/analytics-alerts/alerts-by-name/privileged-role-used-by-azure-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"So9JpmjmSivA4NioZ3IN","title":"Procdump executed from an atypical directory","pathname":"/analytics-alerts/alerts-by-name/procdump-executed-from-an-atypical-directory","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"E1Bazxi2a3w2T5PE57QK","title":"PsExec was executed with a suspicious command line","pathname":"/analytics-alerts/alerts-by-name/psexec-was-executed-with-a-suspicious-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eaFViycfikBXjl6icJBQ","title":"Punycode characters detected in URL(s)","pathname":"/analytics-alerts/alerts-by-name/punycode-characters-detected-in-url-s","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vaUegig8Jdlts3Hon7oH","title":"Python HTTP server started","pathname":"/analytics-alerts/alerts-by-name/python-http-server-started","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FQviR1wAyXCGwgIg5v6R","title":"Quarantined email released to recipients","pathname":"/analytics-alerts/alerts-by-name/quarantined-email-released-to-recipients","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kSxMsp9WTJbltVBwLf9j","title":"Random-Looking Domain Names","pathname":"/analytics-alerts/alerts-by-name/random-looking-domain-names","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4Gkukt8VKOUrTaDU1JmE","title":"Rare access to known advertising domains","pathname":"/analytics-alerts/alerts-by-name/rare-access-to-known-advertising-domains","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bQF6TLWJvxNzd6aoZEsr","title":"Rare AppID usage to a rare destination","pathname":"/analytics-alerts/alerts-by-name/rare-appid-usage-to-a-rare-destination","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ijc2Cr3eB4lmk33lWzhW","title":"Rare binary connected to a rare cloud resource","pathname":"/analytics-alerts/alerts-by-name/rare-binary-connected-to-a-rare-cloud-resource","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"f9VC2ph6APPyf9QLEzbo","title":"Rare binary connected to a rare external host","pathname":"/analytics-alerts/alerts-by-name/rare-binary-connected-to-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"v2veSAfUrvY74UqxMkte","title":"Rare communication over email ports to external email server by unsigned process","pathname":"/analytics-alerts/alerts-by-name/rare-communication-over-email-ports-to-external-email-server-by-unsigned-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Cxv3pmsqxK6vw9wRGgsy","title":"Rare connection to external IP address or host by an application using RMI-IIOP or LDAP protocol","pathname":"/analytics-alerts/alerts-by-name/rare-connection-to-external-ip-address-or-host-by-an-application-using-rmi-iiop-or-ldap-protocol","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zbOujgDe9fqqyy1SNvQn","title":"Rare DCOM RPC activity","pathname":"/analytics-alerts/alerts-by-name/rare-dcom-rpc-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VoyuvpfA2CfrLQOxATTG","title":"Rare DLP rule match by user","pathname":"/analytics-alerts/alerts-by-name/rare-dlp-rule-match-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"In3gRYLvu43jFYL45RRQ","title":"Rare file transfer over SMB protocol","pathname":"/analytics-alerts/alerts-by-name/rare-file-transfer-over-smb-protocol","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Zpsft0okrS1r7HgzYDaF","title":"Rare LDAP enumeration","pathname":"/analytics-alerts/alerts-by-name/rare-ldap-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EvlatCARaZ0OBwyW4uN3","title":"Rare LOLBIN Process Execution by User","pathname":"/analytics-alerts/alerts-by-name/rare-lolbin-process-execution-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8zuVNDKcflkFvIcJPiYi","title":"Rare machine account creation","pathname":"/analytics-alerts/alerts-by-name/rare-machine-account-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aA5R5ZN3dL3V86ixNeMR","title":"Rare MS-Update Server was detected","pathname":"/analytics-alerts/alerts-by-name/rare-ms-update-server-was-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"l3MCB4vswr6jI0kozMXG","title":"Rare MS-Update traffic over HTTP","pathname":"/analytics-alerts/alerts-by-name/rare-ms-update-traffic-over-http","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BJSR11Ej4XlUO2dXrSvW","title":"Rare NTLM Access By User To Host","pathname":"/analytics-alerts/alerts-by-name/rare-ntlm-access-by-user-to-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KopBpYgzQ3rifXn32fSn","title":"Rare NTLM Usage by User","pathname":"/analytics-alerts/alerts-by-name/rare-ntlm-usage-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rHDG2Kx8UuO0s9BLTmxu","title":"Rare process accessed a Keychain file","pathname":"/analytics-alerts/alerts-by-name/rare-process-accessed-a-keychain-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wxXoKWDfwlqgYZELXB3N","title":"Rare process created an SSH session to an uncommon cloud resource","pathname":"/analytics-alerts/alerts-by-name/rare-process-created-an-ssh-session-to-an-uncommon-cloud-resource","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kcLvIoVMfJ5L1eu8isOs","title":"Rare process created an SSH session to an uncommon external host","pathname":"/analytics-alerts/alerts-by-name/rare-process-created-an-ssh-session-to-an-uncommon-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T0rp79B4IVIElP1grlnt","title":"Rare process executed by an AppleScript","pathname":"/analytics-alerts/alerts-by-name/rare-process-executed-by-an-applescript","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"plGRB9ZM7Kz76qxwlQ8A","title":"Rare process execution by user","pathname":"/analytics-alerts/alerts-by-name/rare-process-execution-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lNTChIVnF4ElyVpGXJpQ","title":"Rare process execution in organization","pathname":"/analytics-alerts/alerts-by-name/rare-process-execution-in-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RH5xqcEjQFFhj535MjRQ","title":"Rare process spawned by srvany.exe","pathname":"/analytics-alerts/alerts-by-name/rare-process-spawned-by-srvany-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8F6lCT6G533GTYH4XNeN","title":"Rare process with VNC server capabilities started","pathname":"/analytics-alerts/alerts-by-name/rare-process-with-vnc-server-capabilities-started","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NWepMVcX0rAqaeQuRDl5","title":"Rare RDP session to a remote host","pathname":"/analytics-alerts/alerts-by-name/rare-rdp-session-to-a-remote-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"G7ep1sWCwJdIAuvh4egb","title":"Rare Remote Service (SVCCTL) RPC activity","pathname":"/analytics-alerts/alerts-by-name/rare-remote-service-svcctl-rpc-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hgSqLoDK1TSherPVpNE4","title":"Rare scheduled task created","pathname":"/analytics-alerts/alerts-by-name/rare-scheduled-task-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2DddQrvRQI1gtIPGKpZP","title":"Rare Scheduled Task RPC activity from a rarely seen host","pathname":"/analytics-alerts/alerts-by-name/rare-scheduled-task-rpc-activity-from-a-rarely-seen-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9JhkkBFvqz3UhBjOr1oX","title":"Rare Scheduled Task RPC activity","pathname":"/analytics-alerts/alerts-by-name/rare-scheduled-task-rpc-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3RnbmXv5J3lino5hEcnJ","title":"Rare security product signed executable executed in the network","pathname":"/analytics-alerts/alerts-by-name/rare-security-product-signed-executable-executed-in-the-network","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zpSNqkLmSqI0QNJlm6j3","title":"Rare service DLL was added to the registry","pathname":"/analytics-alerts/alerts-by-name/rare-service-dll-was-added-to-the-registry","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0Pisw2s4mQI72BzmTlIP","title":"Rare signature signed executable executed in the network","pathname":"/analytics-alerts/alerts-by-name/rare-signature-signed-executable-executed-in-the-network","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eJUgQmAV7k6v8jnQwLVf","title":"Rare SMB session to a remote host","pathname":"/analytics-alerts/alerts-by-name/rare-smb-session-to-a-remote-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bazBUYa2iBsnUyRPD0sY","title":"Rare SMTP/S Session","pathname":"/analytics-alerts/alerts-by-name/rare-smtp-s-session","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"dmMxQvwBGmrGefXz4z08","title":"Rare SSH Session","pathname":"/analytics-alerts/alerts-by-name/rare-ssh-session","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KDNEZYnA4G7bw77sswZf","title":"Rare Unix process divided files by size","pathname":"/analytics-alerts/alerts-by-name/rare-unix-process-divided-files-by-size","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yB3ZJ4bHin7oWKAalOQ2","title":"Rare unsigned process execution by scheduled task","pathname":"/analytics-alerts/alerts-by-name/rare-unsigned-process-execution-by-scheduled-task","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"No1dr0WnwQOVcsx6ddbJ","title":"Rare Unsigned Process Spawned by Office Process Under Suspicious Directory","pathname":"/analytics-alerts/alerts-by-name/rare-unsigned-process-spawned-by-office-process-under-suspicious-directory","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Kv1uUNlrEIrXnMDAw9z1","title":"Rare Windows Remote Management (WinRM) HTTP Activity","pathname":"/analytics-alerts/alerts-by-name/rare-windows-remote-management-winrm-http-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Lbw8cK2vhwwVsvsQ6koF","title":"Rare WinRM Session","pathname":"/analytics-alerts/alerts-by-name/rare-winrm-session","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tzs95l7THZbuSExukx6J","title":"Rarely seen sender address in the organization","pathname":"/analytics-alerts/alerts-by-name/rarely-seen-sender-address-in-the-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WdbLHYxE9P9WW4TBKQaU","title":"Rarely seen sender domain in the organization","pathname":"/analytics-alerts/alerts-by-name/rarely-seen-sender-domain-in-the-organization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"TM1Lg3Iz6YAoR0pRN4Ij","title":"RDP Connection to localhost","pathname":"/analytics-alerts/alerts-by-name/rdp-connection-to-localhost","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vNmGUx4G0aPqrmXdDGhz","title":"RDP connections enabled remotely via Registry","pathname":"/analytics-alerts/alerts-by-name/rdp-connections-enabled-remotely-via-registry","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AdVFRtg1BeRzX4MQEyAu","title":"RDP from an unmanaged endpoint in a typically managed subnet","pathname":"/analytics-alerts/alerts-by-name/rdp-from-an-unmanaged-endpoint-in-a-typically-managed-subnet","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SQW9Jkc8S0ftWgz9xXQM","title":"Reading bash command history file","pathname":"/analytics-alerts/alerts-by-name/reading-bash-command-history-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XT70fIn3KWkLfvKhIFOH","title":"Recurring access to rare domain","pathname":"/analytics-alerts/alerts-by-name/recurring-access-to-rare-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QNazPG4DTWm3OnKIyVwF","title":"Recurring access to rare IP","pathname":"/analytics-alerts/alerts-by-name/recurring-access-to-rare-ip","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZhDJud9ozwlwuDYdgYuE","title":"Recurring rare domain access from an unsigned process","pathname":"/analytics-alerts/alerts-by-name/recurring-rare-domain-access-from-an-unsigned-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"avXMr4ohTvaWmRRwvdr2","title":"Recurring rare domain access to dynamic DNS domain","pathname":"/analytics-alerts/alerts-by-name/recurring-rare-domain-access-to-dynamic-dns-domain","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QW7yvUWHnPbd2scPie4I","title":"Registration of Uncommon .NET Services and/or Assemblies","pathname":"/analytics-alerts/alerts-by-name/registration-of-uncommon-net-services-and-or-assemblies","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"t5jROgD22T57ohQ6eeYt","title":"Registry credentials extraction","pathname":"/analytics-alerts/alerts-by-name/registry-credentials-extraction","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WMs4IugKJJTnhRa7fdM3","title":"Remote account enumeration","pathname":"/analytics-alerts/alerts-by-name/remote-account-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2rG4VFwNhZnvdqU0p6Ob","title":"Remote code execution into Kubernetes Pod","pathname":"/analytics-alerts/alerts-by-name/remote-code-execution-into-kubernetes-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Fn55klyYvuRq0fD8wfxt","title":"Remote command execution via wmic.exe","pathname":"/analytics-alerts/alerts-by-name/remote-command-execution-via-wmic-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rXchJoaLFAqs1SX6Vb9f","title":"Remote DCOM command execution","pathname":"/analytics-alerts/alerts-by-name/remote-dcom-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"o80zDUXPJCqX62tPcVh6","title":"Remote PsExec-like command execution","pathname":"/analytics-alerts/alerts-by-name/remote-psexec-like-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xWrtK3CEA9B0D7nTcznS","title":"Remote service command execution from an uncommon source","pathname":"/analytics-alerts/alerts-by-name/remote-service-command-execution-from-an-uncommon-source","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uVFvhm3VMoSOjnuUWlNs","title":"Remote service start from an uncommon source","pathname":"/analytics-alerts/alerts-by-name/remote-service-start-from-an-uncommon-source","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5RCN9EYF411JY0vwj8Pz","title":"Remote usage of an App engine Service Account token","pathname":"/analytics-alerts/alerts-by-name/remote-usage-of-an-app-engine-service-account-token","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ez0suiZKHtd2CtvIdty6","title":"Remote usage of an AWS service token","pathname":"/analytics-alerts/alerts-by-name/remote-usage-of-an-aws-service-token","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RxuRatdo3I2KYX075LgA","title":"Remote usage of an Azure Managed Identity token","pathname":"/analytics-alerts/alerts-by-name/remote-usage-of-an-azure-managed-identity-token","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fEd2RLAtQGjovAhMgtbW","title":"Remote usage of an Azure Service Principal token","pathname":"/analytics-alerts/alerts-by-name/remote-usage-of-an-azure-service-principal-token","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YtYpCK74NtYXQHFV2g5j","title":"Remote usage of AWS Lambda's role","pathname":"/analytics-alerts/alerts-by-name/remote-usage-of-aws-lambda-s-role","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QQZXYFRpvabF0XDuD0sO","title":"Remote usage of EC2 token","pathname":"/analytics-alerts/alerts-by-name/remote-usage-of-ec2-token","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"w0aPmP3ykWuzvTuJPydd","title":"Remote usage of VM Service Account token","pathname":"/analytics-alerts/alerts-by-name/remote-usage-of-vm-service-account-token","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8GUJIsJVdqrlW7HaY4VE","title":"Remote WMI process execution","pathname":"/analytics-alerts/alerts-by-name/remote-wmi-process-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qmNOPAc5oO4yYVWf2fZV","title":"Removal of an Azure Owner from an Application or Service Principal","pathname":"/analytics-alerts/alerts-by-name/removal-of-an-azure-owner-from-an-application-or-service-principal","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oj0oGoEZCPifig03UXUs","title":"Retrieval of cloud compute EC2 instance user data","pathname":"/analytics-alerts/alerts-by-name/retrieval-of-cloud-compute-ec2-instance-user-data","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wJd7Vdkw8QCsWhotSB4k","title":"Retrieval of kubelet credentials","pathname":"/analytics-alerts/alerts-by-name/retrieval-of-kubelet-credentials","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2YBvG0jzn65oznW6RLYu","title":"Run downloaded script using pipe","pathname":"/analytics-alerts/alerts-by-name/run-downloaded-script-using-pipe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OWQvCJ4ZAlURAhA1vIdM","title":"Rundll32.exe executes a rare unsigned module","pathname":"/analytics-alerts/alerts-by-name/rundll32-exe-executes-a-rare-unsigned-module","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ms4Zz2G60zrXdAxEGkVm","title":"Rundll32.exe running with no command-line arguments","pathname":"/analytics-alerts/alerts-by-name/rundll32-exe-running-with-no-command-line-arguments","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"49PSQgTcYwcfAdjbrFbx","title":"Rundll32.exe spawns conhost.exe","pathname":"/analytics-alerts/alerts-by-name/rundll32-exe-spawns-conhost-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5avdW6MukpirtY5jwjOD","title":"S3 configuration deletion","pathname":"/analytics-alerts/alerts-by-name/s3-configuration-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6nDGrr4PGApCvD6Udde1","title":"S3 public exposure followed by data access","pathname":"/analytics-alerts/alerts-by-name/s3-public-exposure-followed-by-data-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"u3gOLF2Y7744GECpXIfz","title":"SAAS - Email was reported by the user or administrator as a phishing attempt","pathname":"/analytics-alerts/alerts-by-name/saas-email-was-reported-by-the-user-or-administrator-as-a-phishing-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vsjYWbplUcjw3YAU3w6C","title":"SaaS suspicious external domain user activity","pathname":"/analytics-alerts/alerts-by-name/saas-suspicious-external-domain-user-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bLg6KB0iu4Lf5NJhoTAE","title":"SCCM log files enumeration","pathname":"/analytics-alerts/alerts-by-name/sccm-log-files-enumeration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZBucww4Dwv4e8rwWSXtv","title":"Scheduled Task hidden by registry modification","pathname":"/analytics-alerts/alerts-by-name/scheduled-task-hidden-by-registry-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RE6FO7VhzVI7olaNhu0F","title":"Scrcons.exe Rare Child Process","pathname":"/analytics-alerts/alerts-by-name/scrcons-exe-rare-child-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CSEghENCWayAFon7mmU1","title":"Screensaver process executed from Users or temporary folder","pathname":"/analytics-alerts/alerts-by-name/screensaver-process-executed-from-users-or-temporary-folder","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VEqeEE1ErEz8xFzRNj7G","title":"Script file added to startup-related Registry keys","pathname":"/analytics-alerts/alerts-by-name/script-file-added-to-startup-related-registry-keys","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MJ2dDaqJdjegTs70Si1O","title":"Scripting engine connected to a rare external host","pathname":"/analytics-alerts/alerts-by-name/scripting-engine-connected-to-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Qvxg68V9Bd65emAtITC6","title":"SecureBoot was disabled","pathname":"/analytics-alerts/alerts-by-name/secureboot-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1srB9bRLErFE2RjvrkMB","title":"Security object deletion in Google Workspace Admin Console","pathname":"/analytics-alerts/alerts-by-name/security-object-deletion-in-google-workspace-admin-console","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"exzubANP4IZspPmpIHRY","title":"Security tools detection attempt","pathname":"/analytics-alerts/alerts-by-name/security-tools-detection-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AIObYweTOhzoW9aiUHxI","title":"Sender name used by multiple addresses across multiple domains","pathname":"/analytics-alerts/alerts-by-name/sender-name-used-by-multiple-addresses-across-multiple-domains","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bJk8C0jaJl5gRLazvCJ9","title":"Sending unusual file(s) to an external address","pathname":"/analytics-alerts/alerts-by-name/sending-unusual-file-s-to-an-external-address","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KaFJSGX9sewxHcjReB4a","title":"Sensitive account password reset attempt","pathname":"/analytics-alerts/alerts-by-name/sensitive-account-password-reset-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"v7sIa5AYFPLN0KGW1U4W","title":"Sensitive browser credential files accessed by a rare non browser process","pathname":"/analytics-alerts/alerts-by-name/sensitive-browser-credential-files-accessed-by-a-rare-non-browser-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"35jpvS8IziEM4vbXRwFR","title":"Sensitive Exchange mail sent to external users","pathname":"/analytics-alerts/alerts-by-name/sensitive-exchange-mail-sent-to-external-users","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6HWPf2TNBsB27dNCISgX","title":"Serial console access was enabled in AWS account","pathname":"/analytics-alerts/alerts-by-name/serial-console-access-was-enabled-in-aws-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IGlOQJHylnVp9MrVxEGs","title":"Service execution via sc.exe","pathname":"/analytics-alerts/alerts-by-name/service-execution-via-sc-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Wi26harXfbRC3me4C3O5","title":"Service ticket request with a spoofed sAMAccountName","pathname":"/analytics-alerts/alerts-by-name/service-ticket-request-with-a-spoofed-samaccountname","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZUgghAJoF4YWyjregxuB","title":"SES Production Access Requested","pathname":"/analytics-alerts/alerts-by-name/ses-production-access-requested","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9vIfCbwVIrjrK8Pvyxhe","title":"Setting Windows Auto Logon by uncommon process","pathname":"/analytics-alerts/alerts-by-name/setting-windows-auto-logon-by-uncommon-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Tfj9CHaX4fRKid76r3pD","title":"Setuid and Setgid file bit manipulation","pathname":"/analytics-alerts/alerts-by-name/setuid-and-setgid-file-bit-manipulation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KMejyyeJA6QhFiffepF9","title":"SharePoint Site Collection admin group addition","pathname":"/analytics-alerts/alerts-by-name/sharepoint-site-collection-admin-group-addition","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pXmJfJWbXlc0ghwhK2so","title":"Short-lived Azure AD user account","pathname":"/analytics-alerts/alerts-by-name/short-lived-azure-ad-user-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Ce1uWVm6xgI006fQqgi2","title":"Short-lived user account","pathname":"/analytics-alerts/alerts-by-name/short-lived-user-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cE3WxAGKZ3J0ZQuMJ7pP","title":"Signed process creates a scheduled task via file access","pathname":"/analytics-alerts/alerts-by-name/signed-process-creates-a-scheduled-task-via-file-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6sWt8J0gzYysTcoegfum","title":"Signed process performed an unpopular DLL injection","pathname":"/analytics-alerts/alerts-by-name/signed-process-performed-an-unpopular-dll-injection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OVmQtExhk48rIxrQdEc2","title":"Signed process performed an unpopular injection","pathname":"/analytics-alerts/alerts-by-name/signed-process-performed-an-unpopular-injection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vdcjiElIEs9QcyEVrf2f","title":"Single account excessively locked out","pathname":"/analytics-alerts/alerts-by-name/single-account-excessively-locked-out","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NgrlRLaSCAZ1DwEXNfTk","title":"Single IP accessed mail items of multiple users","pathname":"/analytics-alerts/alerts-by-name/single-ip-accessed-mail-items-of-multiple-users","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mWXVe1FKcHrpqNzEFLuQ","title":"SMB Traffic from Non-Standard Process","pathname":"/analytics-alerts/alerts-by-name/smb-traffic-from-non-standard-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"SGP1S6NfMQnIepUUbiPZ","title":"Soft delete of cloud storage configuration was disabled","pathname":"/analytics-alerts/alerts-by-name/soft-delete-of-cloud-storage-configuration-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pxmOWIUhma0lMPaYSSqa","title":"Space after filename","pathname":"/analytics-alerts/alerts-by-name/space-after-filename","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pOh891FKiCVlvFL5enUu","title":"Spam Bot Traffic","pathname":"/analytics-alerts/alerts-by-name/spam-bot-traffic","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ndSxc4ccSLX17kPzTQ4O","title":"SPNs cleared from a machine account","pathname":"/analytics-alerts/alerts-by-name/spns-cleared-from-a-machine-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6S2TFgKUfHXeeLhS0r0K","title":"SSH authentication brute force attempts","pathname":"/analytics-alerts/alerts-by-name/ssh-authentication-brute-force-attempts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UwNCqcGyfnXCvl7fHEJO","title":"SSO authentication attempt by a honey user","pathname":"/analytics-alerts/alerts-by-name/sso-authentication-attempt-by-a-honey-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4vguSIb34qdoOm6Uz9W5","title":"SSO authentication by a machine account","pathname":"/analytics-alerts/alerts-by-name/sso-authentication-by-a-machine-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"axjWYmmlQtANXbWS5rRJ","title":"SSO authentication by a service account","pathname":"/analytics-alerts/alerts-by-name/sso-authentication-by-a-service-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6WyAnWnMDfwiFNAfBCiC","title":"SSO Brute Force","pathname":"/analytics-alerts/alerts-by-name/sso-brute-force","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EuK0lqdzoPJ4lquAcOdE","title":"SSO Password Spray","pathname":"/analytics-alerts/alerts-by-name/sso-password-spray","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4scammCZMZqMiFsz590n","title":"SSO with abnormal operating system","pathname":"/analytics-alerts/alerts-by-name/sso-with-abnormal-operating-system","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5kpE8im7y0y2kEpJXPNK","title":"SSO with abnormal user agent","pathname":"/analytics-alerts/alerts-by-name/sso-with-abnormal-user-agent","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mGHavmjhDvzJM1HWEBUl","title":"SSO with new operating system","pathname":"/analytics-alerts/alerts-by-name/sso-with-new-operating-system","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fKvOmE9043sTNZnCbfwT","title":"Storage enumeration activity","pathname":"/analytics-alerts/alerts-by-name/storage-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sDXxiTdHdU5tojvy2bMg","title":"Stored credentials exported using credwiz.exe","pathname":"/analytics-alerts/alerts-by-name/stored-credentials-exported-using-credwiz-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8J3etEjz7Io3fS9xf64O","title":"Subdomain Fuzzing","pathname":"/analytics-alerts/alerts-by-name/subdomain-fuzzing","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"x6NKRjfABkanlJlNjQML","title":"Successful SSO authentication from a suspicious tunnel operator","pathname":"/analytics-alerts/alerts-by-name/successful-sso-authentication-from-a-suspicious-tunnel-operator","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vE3GVIGVHccZsmYiVERy","title":"Successful unusual guest user invitation","pathname":"/analytics-alerts/alerts-by-name/successful-unusual-guest-user-invitation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4RJm3GvA8GSRBlCScwWe","title":"Sudden spike in outbound email volume","pathname":"/analytics-alerts/alerts-by-name/sudden-spike-in-outbound-email-volume","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6HLZCieP9M4TlKWXAHMH","title":"Sudoedit Brute force attempt","pathname":"/analytics-alerts/alerts-by-name/sudoedit-brute-force-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hk45cwOYKiYBvVJTcFcu","title":"SUID/GUID permission discovery","pathname":"/analytics-alerts/alerts-by-name/suid-guid-permission-discovery","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1QnTfjWHpX154uMmeAk3","title":"Suspicious access of the System Management Container","pathname":"/analytics-alerts/alerts-by-name/suspicious-access-of-the-system-management-container","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Gf3y7X9Tn2YVuSqFPtJh","title":"Suspicious access to cloud credential files","pathname":"/analytics-alerts/alerts-by-name/suspicious-access-to-cloud-credential-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ruaAyzMiFW4k9VeCm6Bg","title":"Suspicious access to Kubernetes API with kubelet credentials","pathname":"/analytics-alerts/alerts-by-name/suspicious-access-to-kubernetes-api-with-kubelet-credentials","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lVmcj1fd5oVoznkjdd0C","title":"Suspicious access to shadow file","pathname":"/analytics-alerts/alerts-by-name/suspicious-access-to-shadow-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"REvDfsvJ6BmA58cqYQYL","title":"Suspicious account attribute modification that matches that of another account","pathname":"/analytics-alerts/alerts-by-name/suspicious-account-attribute-modification-that-matches-that-of-another-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3h49EvrIxQpjhS8FyTr2","title":"Suspicious active setup registered","pathname":"/analytics-alerts/alerts-by-name/suspicious-active-setup-registered","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"dSqkFneR88fLPIaE86i3","title":"Suspicious activity indicating a potential abuse of a cloud-native email service","pathname":"/analytics-alerts/alerts-by-name/suspicious-activity-indicating-a-potential-abuse-of-a-cloud-native-email-service","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"a4jXnirxLPKhVLu1AhEU","title":"Suspicious activity on logging bucket","pathname":"/analytics-alerts/alerts-by-name/suspicious-activity-on-logging-bucket","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OGPiXp8ZpBV8ScWcCHn7","title":"Suspicious AI Dataset Download","pathname":"/analytics-alerts/alerts-by-name/suspicious-ai-dataset-download","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tF6LcbksVZlQ5jvtnkZB","title":"Suspicious AI Dataset Label Modification","pathname":"/analytics-alerts/alerts-by-name/suspicious-ai-dataset-label-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"np3bAv76oekgXm7Ocj3J","title":"Suspicious AI model usage from a Tor exit node","pathname":"/analytics-alerts/alerts-by-name/suspicious-ai-model-usage-from-a-tor-exit-node","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"jVJgflQ1DeVHgo0LVKNA","title":"Suspicious AMSI decode attempt","pathname":"/analytics-alerts/alerts-by-name/suspicious-amsi-decode-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tCHEDbYkyoiVYk5YV7av","title":"Suspicious API call from a Tor exit node","pathname":"/analytics-alerts/alerts-by-name/suspicious-api-call-from-a-tor-exit-node","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fIVlkgVhbZErvqWMt6E2","title":"Suspicious authentication package registered","pathname":"/analytics-alerts/alerts-by-name/suspicious-authentication-package-registered","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"97VnqRuRkboyF00jLlj0","title":"Suspicious authentication with Azure Password Hash Sync user","pathname":"/analytics-alerts/alerts-by-name/suspicious-authentication-with-azure-password-hash-sync-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6JJ356edMOty2pP6ao0i","title":"Suspicious AWS SSM parameters retrieval activity","pathname":"/analytics-alerts/alerts-by-name/suspicious-aws-ssm-parameters-retrieval-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2rCdysnZLHEGtUoxlUGb","title":"Suspicious Azure AD interactive sign-in using PowerShell","pathname":"/analytics-alerts/alerts-by-name/suspicious-azure-ad-interactive-sign-in-using-powershell","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gjgq1QMuNkOKRy96ChwX","title":"Suspicious Azure enumeration activity","pathname":"/analytics-alerts/alerts-by-name/suspicious-azure-enumeration-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VNLOrmJIIn7zT5Id5ghv","title":"Suspicious brand affiliation detected","pathname":"/analytics-alerts/alerts-by-name/suspicious-brand-affiliation-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ETtcDYW6p3cLgXqcXzj0","title":"Suspicious certificate template modification","pathname":"/analytics-alerts/alerts-by-name/suspicious-certificate-template-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5Eusqp00mcHWVb99nqU0","title":"Suspicious Certutil AD CS contact","pathname":"/analytics-alerts/alerts-by-name/suspicious-certutil-ad-cs-contact","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LrTpIXB9C28rUvlCSffS","title":"Suspicious certutil command line","pathname":"/analytics-alerts/alerts-by-name/suspicious-certutil-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tRJBCypEKZTQfgAutEV4","title":"Suspicious cloud compute instance SSH keys modification attempt","pathname":"/analytics-alerts/alerts-by-name/suspicious-cloud-compute-instance-ssh-keys-modification-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"w3MMh9UonPyQLlNsO1YQ","title":"Suspicious cloud user data modification attempt followed by VM restart","pathname":"/analytics-alerts/alerts-by-name/suspicious-cloud-user-data-modification-attempt-followed-by-vm-restart","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QAbjSMxXCo1N8BfTrRKk","title":"Suspicious container orchestration job","pathname":"/analytics-alerts/alerts-by-name/suspicious-container-orchestration-job","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sZteRUnkb7YlhIyE7Cow","title":"Suspicious container reconnaissance activity in a Kubernetes pod","pathname":"/analytics-alerts/alerts-by-name/suspicious-container-reconnaissance-activity-in-a-kubernetes-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6iqRAUNIBWVQWplqD2Oq","title":"Suspicious container runtime connection from within a Kubernetes Pod","pathname":"/analytics-alerts/alerts-by-name/suspicious-container-runtime-connection-from-within-a-kubernetes-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zz3NsH4W88hEKrSbyn98","title":"Suspicious curl user agent","pathname":"/analytics-alerts/alerts-by-name/suspicious-curl-user-agent","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"J5lAjN5fi9oei0Gh0ClX","title":"Suspicious data encryption","pathname":"/analytics-alerts/alerts-by-name/suspicious-data-encryption","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IXZdz5hnPmyqoZPKeqCB","title":"Suspicious disablement of the Windows Firewall using PowerShell commands","pathname":"/analytics-alerts/alerts-by-name/suspicious-disablement-of-the-windows-firewall-using-powershell-commands","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"G8AeDG3nmCMLbhfBeLvR","title":"Suspicious disablement of the Windows Firewall","pathname":"/analytics-alerts/alerts-by-name/suspicious-disablement-of-the-windows-firewall","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"K83s5WrzuYnkC5bxxoyw","title":"Suspicious DKIM Result","pathname":"/analytics-alerts/alerts-by-name/suspicious-dkim-result","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8jHYNG9JxopwoB2eTeNY","title":"Suspicious DMARC result","pathname":"/analytics-alerts/alerts-by-name/suspicious-dmarc-result","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VXdbvIqwxlhUmKMOSxDb","title":"Suspicious DNS traffic","pathname":"/analytics-alerts/alerts-by-name/suspicious-dns-traffic","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BH6UYAn5K73iGTGCWFy2","title":"Suspicious dNSHostName attribute change to DC name","pathname":"/analytics-alerts/alerts-by-name/suspicious-dnshostname-attribute-change-to-dc-name","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6KSP2NUSHqTsXOot8cFC","title":"Suspicious docker image download from an unusual repository","pathname":"/analytics-alerts/alerts-by-name/suspicious-docker-image-download-from-an-unusual-repository","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DKqjcFbbUyijskFtJNbU","title":"Suspicious domain user account creation","pathname":"/analytics-alerts/alerts-by-name/suspicious-domain-user-account-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kW6zLtE8rhFzVpaU3wcD","title":"Suspicious DotNet log file created","pathname":"/analytics-alerts/alerts-by-name/suspicious-dotnet-log-file-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ngEGdaYngpiRfe5KKr8a","title":"Suspicious dump of ntds.dit using Shadow Copy with ntdsutil/vssadmin","pathname":"/analytics-alerts/alerts-by-name/suspicious-dump-of-ntds-dit-using-shadow-copy-with-ntdsutil-vssadmin","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rOH1jmXEIXsHbMrYBFA5","title":"Suspicious EBS snapshots deletion","pathname":"/analytics-alerts/alerts-by-name/suspicious-ebs-snapshots-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"L2tylIDZSAqR4JQ6OGL6","title":"Suspicious Encrypting File System Remote call (EFSRPC) to domain controller","pathname":"/analytics-alerts/alerts-by-name/suspicious-encrypting-file-system-remote-call-efsrpc-to-domain-controller","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UnyfGnhMiTlDkTEtchsn","title":"Suspicious Entra ID Device Code Authentication Flow","pathname":"/analytics-alerts/alerts-by-name/suspicious-entra-id-device-code-authentication-flow","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gYyk3KnnM12V3QMpMIam","title":"Suspicious External RDP Login","pathname":"/analytics-alerts/alerts-by-name/suspicious-external-rdp-login","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"i5RmLFuCGv6UbEzUrmvm","title":"Suspicious failed HTTP request - potential Spring4Shell exploit","pathname":"/analytics-alerts/alerts-by-name/suspicious-failed-http-request-potential-spring4shell-exploit","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OttNQOT9xjC8JFoPojiT","title":"Suspicious heavy allocation of compute resources - possible mining activity","pathname":"/analytics-alerts/alerts-by-name/suspicious-heavy-allocation-of-compute-resources-possible-mining-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NZBINyohs2TZ3D9nRoAv","title":"Suspicious hidden user created","pathname":"/analytics-alerts/alerts-by-name/suspicious-hidden-user-created","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"durdC4gLdbIHaGnS5ftU","title":"Suspicious HTTP parameters detected","pathname":"/analytics-alerts/alerts-by-name/suspicious-http-parameters-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YgTGEpFagHojdMrLsOWj","title":"Suspicious ICMP packet","pathname":"/analytics-alerts/alerts-by-name/suspicious-icmp-packet","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"H8PKOTLtHhcocYT1MtOw","title":"Suspicious ICMP traffic that resembles smurf attack","pathname":"/analytics-alerts/alerts-by-name/suspicious-icmp-traffic-that-resembles-smurf-attack","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uXoXu6WkFfKa9EPEvSeH","title":"Suspicious identity downloaded multiple objects from a bucket","pathname":"/analytics-alerts/alerts-by-name/suspicious-identity-downloaded-multiple-objects-from-a-bucket","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WemR6X27Ete8rTL307jA","title":"Suspicious Kerberos Pre-Auth Failures by Host","pathname":"/analytics-alerts/alerts-by-name/suspicious-kerberos-pre-auth-failures-by-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CvIAiQtKZVYEuHDjcJct","title":"Suspicious Kubernetes pod token access","pathname":"/analytics-alerts/alerts-by-name/suspicious-kubernetes-pod-token-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Lkp0Bm7d2Kqkmty6vIft","title":"Suspicious LDAP queries followed by shared folder access","pathname":"/analytics-alerts/alerts-by-name/suspicious-ldap-queries-followed-by-shared-folder-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wF2mLkCZM14WpJGdLv6s","title":"Suspicious LDAP search query executed","pathname":"/analytics-alerts/alerts-by-name/suspicious-ldap-search-query-executed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RX8mpByIgdOHzpqm8rnz","title":"Suspicious MFA request reported by user in Entra ID","pathname":"/analytics-alerts/alerts-by-name/suspicious-mfa-request-reported-by-user-in-entra-id","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BhQaJOy4yvvr45Ri578P","title":"Suspicious ML Model Download","pathname":"/analytics-alerts/alerts-by-name/suspicious-ml-model-download","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QlX9T7A5rgBMvvwjKg2K","title":"Suspicious modification of the AdminSDHolder's ACL","pathname":"/analytics-alerts/alerts-by-name/suspicious-modification-of-the-adminsdholder-s-acl","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tu8j2UyhSdRYfbJ1xuuN","title":"Suspicious module load using direct syscall","pathname":"/analytics-alerts/alerts-by-name/suspicious-module-load-using-direct-syscall","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4uwELi1V6cFFOoONjpk6","title":"Suspicious .NET process loads an MSBuild DLL","pathname":"/analytics-alerts/alerts-by-name/suspicious-net-process-loads-an-msbuild-dll","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tTYf1DAMJzO4oEFTY3Dp","title":"Suspicious Network Connection Originating from AWS SSM Agent","pathname":"/analytics-alerts/alerts-by-name/suspicious-network-connection-originating-from-aws-ssm-agent","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5g3bPX6625qTAdmAvJOz","title":"Suspicious NTLM authentication with machine account","pathname":"/analytics-alerts/alerts-by-name/suspicious-ntlm-authentication-with-machine-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hGgvzu3qaqcFYwq2SxEP","title":"Suspicious OAuth application was authorized in Google Workspace","pathname":"/analytics-alerts/alerts-by-name/suspicious-oauth-application-was-authorized-in-google-workspace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YfAp51DUVdtlhSMJOmwd","title":"Suspicious objects encryption in an AWS bucket","pathname":"/analytics-alerts/alerts-by-name/suspicious-objects-encryption-in-an-aws-bucket","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UO5fq6ZB6imZUvAlPYO2","title":"Suspicious PowerShell Command Line","pathname":"/analytics-alerts/alerts-by-name/suspicious-powershell-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"J1FOX6udcJKc4NvlwAto","title":"Suspicious PowerShell Enumeration of Running Processes","pathname":"/analytics-alerts/alerts-by-name/suspicious-powershell-enumeration-of-running-processes","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HTZPBngOJXX6PgPjvAQe","title":"Suspicious PowerSploit's recon module (PowerView) net function was executed","pathname":"/analytics-alerts/alerts-by-name/suspicious-powersploit-s-recon-module-powerview-net-function-was-executed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hK68oFziRkWTrQ05IX1a","title":"Suspicious PowerSploit's recon module (PowerView) used to search for exposed hosts","pathname":"/analytics-alerts/alerts-by-name/suspicious-powersploit-s-recon-module-powerview-used-to-search-for-exposed-hosts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"9eaZn3bOoez5YMWbtmJa","title":"Suspicious print processor registered","pathname":"/analytics-alerts/alerts-by-name/suspicious-print-processor-registered","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xMxFI6Nroe9r0Xsq4DAv","title":"Suspicious Print System Remote Protocol usage by a process","pathname":"/analytics-alerts/alerts-by-name/suspicious-print-system-remote-protocol-usage-by-a-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0ccJYiUulj2IuDkUbIDZ","title":"Suspicious process accessed a site masquerading as Google","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-accessed-a-site-masquerading-as-google","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"QzTQx6Nzy6XbR15VfLPS","title":"Suspicious process accessed certificate files","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-accessed-certificate-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rnl7xetPisb1Umz7L8Db","title":"Suspicious process executed with a high integrity level","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-executed-with-a-high-integrity-level","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aqY618xWU1l3DNrb09hE","title":"Suspicious process execution from tmp folder","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-execution-from-tmp-folder","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3iQEcwQKZuqvyV6kSvS5","title":"Suspicious process execution in a privileged container","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-execution-in-a-privileged-container","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hwiVBbar2a9S1eGLR3BH","title":"Suspicious process loads a known PowerShell module","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-loads-a-known-powershell-module","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mVEKRlqJpcV3lIXk7kDq","title":"Suspicious process modified RC script file","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-modified-rc-script-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4YJp3MjdtGY7wPZBNolG","title":"Suspicious Process Spawned by Adobe Reader","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-spawned-by-adobe-reader","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"EqlmjoaPSrBrHPWekENx","title":"Suspicious Process Spawned by wininit.exe","pathname":"/analytics-alerts/alerts-by-name/suspicious-process-spawned-by-wininit-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"02TzFss6pDkEva53S8fR","title":"Suspicious proxy environment variable setting","pathname":"/analytics-alerts/alerts-by-name/suspicious-proxy-environment-variable-setting","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"B2Q4e4EEBhkx6fQ3tMne","title":"Suspicious reconnaissance using LDAP","pathname":"/analytics-alerts/alerts-by-name/suspicious-reconnaissance-using-ldap","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pfIE3lXmWRmeGvAK3EBO","title":"Suspicious runonce.exe parent process","pathname":"/analytics-alerts/alerts-by-name/suspicious-runonce-exe-parent-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cCkfJKcHL7j79BMfaiKw","title":"Suspicious RunOnce Parent Process","pathname":"/analytics-alerts/alerts-by-name/suspicious-runonce-parent-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aoDYrj3045VkidJNmUqD","title":"Suspicious SaaS API call from a Tor exit node","pathname":"/analytics-alerts/alerts-by-name/suspicious-saas-api-call-from-a-tor-exit-node","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MZv4CLlCrQ6XaNj6DfSR","title":"Suspicious sAMAccountName change","pathname":"/analytics-alerts/alerts-by-name/suspicious-samaccountname-change","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"j9tpIEuCUnYmWaDyLmzs","title":"Suspicious SearchProtocolHost.exe parent process","pathname":"/analytics-alerts/alerts-by-name/suspicious-searchprotocolhost-exe-parent-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vA78kiMrAmBnYYQNbhaX","title":"Suspicious secrets dump activity","pathname":"/analytics-alerts/alerts-by-name/suspicious-secrets-dump-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8a5vFDSz6ChpAjeUgkez","title":"Suspicious sender exhibiting automated sending patterns","pathname":"/analytics-alerts/alerts-by-name/suspicious-sender-exhibiting-automated-sending-patterns","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"aEXUatnCu0F27N3L6ps2","title":"Suspicious sending domain with sender address randomization","pathname":"/analytics-alerts/alerts-by-name/suspicious-sending-domain-with-sender-address-randomization","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BKiHWydIHXAUK6d5EYpi","title":"Suspicious setspn.exe execution","pathname":"/analytics-alerts/alerts-by-name/suspicious-setspn-exe-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ATxLnD2dj2mgTSdBLFV6","title":"Suspicious SMB connection from domain controller","pathname":"/analytics-alerts/alerts-by-name/suspicious-smb-connection-from-domain-controller","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"F7tUmBVLcFE52eNvBe7J","title":"Suspicious SPF Result","pathname":"/analytics-alerts/alerts-by-name/suspicious-spf-result","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IDpJ2jv9Hmv2Zpkm6ldQ","title":"Suspicious SSH Downgrade","pathname":"/analytics-alerts/alerts-by-name/suspicious-ssh-downgrade","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ooNfqBTmq3Or0HXUGli4","title":"Suspicious sshpass command execution","pathname":"/analytics-alerts/alerts-by-name/suspicious-sshpass-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"t91QV8RocrfaeGOOBo53","title":"Suspicious SSO access from ASN","pathname":"/analytics-alerts/alerts-by-name/suspicious-sso-access-from-asn","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"gmEpg3kLlkOqW3l5Suhu","title":"Suspicious SSO authentication","pathname":"/analytics-alerts/alerts-by-name/suspicious-sso-authentication","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"q3nwbaMGOvCPA4PcKQDe","title":"Suspicious successful RDP connection to localhost","pathname":"/analytics-alerts/alerts-by-name/suspicious-successful-rdp-connection-to-localhost","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T3pNJOT4u2O25sDeI6Jb","title":"Suspicious systemd timer activity","pathname":"/analytics-alerts/alerts-by-name/suspicious-systemd-timer-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KDphc0JM9TU4kQClXJL6","title":"Suspicious theme and sentiment in email","pathname":"/analytics-alerts/alerts-by-name/suspicious-theme-and-sentiment-in-email","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GbGVJ8WHMwBHfdCV33Gv","title":"Suspicious time provider registered","pathname":"/analytics-alerts/alerts-by-name/suspicious-time-provider-registered","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"n4yLqiD0hnRJpce7rjxG","title":"Suspicious Udev driver rule execution manipulation","pathname":"/analytics-alerts/alerts-by-name/suspicious-udev-driver-rule-execution-manipulation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6W9kEUlvOkPhquqg0sbR","title":"Suspicious Unicode character detected in email","pathname":"/analytics-alerts/alerts-by-name/suspicious-unicode-character-detected-in-email","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LSrtM1vOhPuGPDjOz45A","title":"Suspicious usage of File Server Remote VSS Protocol (FSRVP)","pathname":"/analytics-alerts/alerts-by-name/suspicious-usage-of-file-server-remote-vss-protocol-fsrvp","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uFfY5At7iqVwmll6sVEh","title":"Suspicious usage of Microsoft's Active Directory PowerShell module remote discovery cmdlet","pathname":"/analytics-alerts/alerts-by-name/suspicious-usage-of-microsoft-s-active-directory-powershell-module-remote-discovery-cmdlet","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hajwZVzNigbCHDSyygt7","title":"Svchost.exe loads a rare unsigned module","pathname":"/analytics-alerts/alerts-by-name/svchost-exe-loads-a-rare-unsigned-module","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"NeDGIbwOeSxS15ZWFZea","title":"System information discovery via psinfo.exe","pathname":"/analytics-alerts/alerts-by-name/system-information-discovery-via-psinfo-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"L7tACTXh8mrY4jYeIKQY","title":"System profiling WMI query execution","pathname":"/analytics-alerts/alerts-by-name/system-profiling-wmi-query-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ADp2ht6B7B5z2uRKV7w9","title":"System shutdown or reboot","pathname":"/analytics-alerts/alerts-by-name/system-shutdown-or-reboot","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xOwEACX0EnwIWhakepk9","title":"Tampering with Internet Explorer Protected Mode configuration","pathname":"/analytics-alerts/alerts-by-name/tampering-with-internet-explorer-protected-mode-configuration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kRzvLZIccGwOHkrcmIeR","title":"Tampering with the Windows User Account Controls (UAC) configuration","pathname":"/analytics-alerts/alerts-by-name/tampering-with-the-windows-user-account-controls-uac-configuration","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Uae2KfJ1TBZ9w9VfIMKR","title":"TGT request with a spoofed sAMAccountName - Event log","pathname":"/analytics-alerts/alerts-by-name/tgt-request-with-a-spoofed-samaccountname-event-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rcCPwDE1HxflOqcF8RpR","title":"TGT request with a spoofed sAMAccountName - Network","pathname":"/analytics-alerts/alerts-by-name/tgt-request-with-a-spoofed-samaccountname-network","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZFySd72vek7X6p0cXuwk","title":"The CA policy EditFlags was queried","pathname":"/analytics-alerts/alerts-by-name/the-ca-policy-editflags-was-queried","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CtsTCqxl6vLxqX4QREGt","title":"The Linux system firewall was disabled","pathname":"/analytics-alerts/alerts-by-name/the-linux-system-firewall-was-disabled","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GyXvUk8WW2dxcJMMAdln","title":"Training simulation email detected","pathname":"/analytics-alerts/alerts-by-name/training-simulation-email-detected","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KfEuLKh0PgNew3lypVAl","title":"Uncommon access to cloud platforms' sensitive files by a scripting engine","pathname":"/analytics-alerts/alerts-by-name/uncommon-access-to-cloud-platforms-sensitive-files-by-a-scripting-engine","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Z3JpSntXwZ0vohQQyOjU","title":"Uncommon access to /etc/passwd","pathname":"/analytics-alerts/alerts-by-name/uncommon-access-to-etc-passwd","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3f51043X8QNFhlxg9oyd","title":"Uncommon access to Microsoft Teams cookies files","pathname":"/analytics-alerts/alerts-by-name/uncommon-access-to-microsoft-teams-cookies-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UdhTgdIhdDJFFCkTetU6","title":"Uncommon access to Microsoft Teams credential files","pathname":"/analytics-alerts/alerts-by-name/uncommon-access-to-microsoft-teams-credential-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lONCaOq3mS7PmJwctgbL","title":"Uncommon AppleScript containing a potential obfuscation technique was executed","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-containing-a-potential-obfuscation-technique-was-executed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LmwZUUYWeuHsfFsQT5CS","title":"Uncommon AppleScript containing a potential persistence command was executed via the command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-containing-a-potential-persistence-command-was-executed-via-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"x2esTdjV1jNE7bLjSe4s","title":"Uncommon AppleScript designed to access credential files was executed via the command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-designed-to-access-credential-files-was-executed-via-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YQKVZQqsK4KN7e2dXKlf","title":"Uncommon AppleScript designed to access cryptocurrency wallet data was executed via the command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-designed-to-access-cryptocurrency-wallet-data-was-executed-via-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"A6fiaNX1ItINDFnhvh6n","title":"Uncommon AppleScript designed to access sensitive application data was executed via the command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-designed-to-access-sensitive-application-data-was-executed-via-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OxkW5Jbhu8gS0kBTjpik","title":"Uncommon AppleScript designed to capture screen or clipboard data was executed via the command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-designed-to-capture-screen-or-clipboard-data-was-executed-via-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Q8iX11zcKC8ow0F8ZjlK","title":"Uncommon AppleScript potentially utilizes credential-grabbing techniques to steal user passwords","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-potentially-utilizes-credential-grabbing-techniques-to-steal-user-passwords","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BYRBGMhseOp2kiZp9O8o","title":"Uncommon AppleScript was executed via the command line to contact an external server","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-was-executed-via-the-command-line-to-contact-an-external-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wmUvM1QsEo9GI0lGSH8h","title":"Uncommon AppleScript with a potential defense-evasion command was executed via the command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-with-a-potential-defense-evasion-command-was-executed-via-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KxRGNxLmHRpr03nH8wqV","title":"Uncommon AppleScript with a potential discovery command was executed via the command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-applescript-with-a-potential-discovery-command-was-executed-via-the-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LWUIWQU2lesVoDUDq1OU","title":"Uncommon ARP cache listing via arp.exe","pathname":"/analytics-alerts/alerts-by-name/uncommon-arp-cache-listing-via-arp-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"u629O77ougVrueEWIHMr","title":"Uncommon AT task-job creation by user","pathname":"/analytics-alerts/alerts-by-name/uncommon-at-task-job-creation-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"H54RR4DMMCfELvGZxaHV","title":"Uncommon attempt at discovering a sensitive file","pathname":"/analytics-alerts/alerts-by-name/uncommon-attempt-at-discovering-a-sensitive-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qOuXzLNPCbrjupJTldbN","title":"Uncommon attempt at grabbing credentials from a sensitive file","pathname":"/analytics-alerts/alerts-by-name/uncommon-attempt-at-grabbing-credentials-from-a-sensitive-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MOo3pGSSDnl5fyq2OUrF","title":"Uncommon attempt to clear shell history","pathname":"/analytics-alerts/alerts-by-name/uncommon-attempt-to-clear-shell-history","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"BQ4K90L6F6b7vEWsvrjN","title":"Uncommon Azure Cosmos DB master key read by identity","pathname":"/analytics-alerts/alerts-by-name/uncommon-azure-cosmos-db-master-key-read-by-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"O0tNpAkakPBEWajkbbcE","title":"Uncommon browser extension loaded","pathname":"/analytics-alerts/alerts-by-name/uncommon-browser-extension-loaded","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rP0UwWgHSQCJbiP2gLXg","title":"Uncommon cloud CLI tool usage","pathname":"/analytics-alerts/alerts-by-name/uncommon-cloud-cli-tool-usage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Qwm9r7GBccmLeJ7zV4hd","title":"Uncommon command executed on a virtualization host","pathname":"/analytics-alerts/alerts-by-name/uncommon-command-executed-on-a-virtualization-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HuGuL1qzHfBPuF4PGmVI","title":"Uncommon command was executed on a device","pathname":"/analytics-alerts/alerts-by-name/uncommon-command-was-executed-on-a-device","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yKENya7ezP2TT0ZpGU4B","title":"Uncommon communication to an instant messaging server","pathname":"/analytics-alerts/alerts-by-name/uncommon-communication-to-an-instant-messaging-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ba1BjNwFvFI8lwqTpYHg","title":"Uncommon creation or access operation of sensitive shadow copy","pathname":"/analytics-alerts/alerts-by-name/uncommon-creation-or-access-operation-of-sensitive-shadow-copy","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IC1zDU9EFuqrMkGX3q37","title":"Uncommon DLL-sideloading from a logical CD-ROM (ISO) device","pathname":"/analytics-alerts/alerts-by-name/uncommon-dll-sideloading-from-a-logical-cd-rom-iso-device","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"iRu2jrEjDQveApQ8MeQX","title":"Uncommon DotNet module load relationship","pathname":"/analytics-alerts/alerts-by-name/uncommon-dotnet-module-load-relationship","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LlNgVOVau318e4Xpc2dL","title":"Uncommon driver loaded","pathname":"/analytics-alerts/alerts-by-name/uncommon-driver-loaded","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"0yf9lVZoIM4DUTY3aaFc","title":"Uncommon execution of ODBCConf","pathname":"/analytics-alerts/alerts-by-name/uncommon-execution-of-odbcconf","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ilpHuQZpFYh9ylSPsjv6","title":"Uncommon file access over WebDAV","pathname":"/analytics-alerts/alerts-by-name/uncommon-file-access-over-webdav","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xTZUbUGDb0GNFWB5j3vw","title":"Uncommon GetClipboardData API function invocation of a possible information stealer","pathname":"/analytics-alerts/alerts-by-name/uncommon-getclipboarddata-api-function-invocation-of-a-possible-information-stealer","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"HYj5Sj605evbnNrFOtiO","title":"Uncommon increase in Azure Microsoft Graph API request sizes","pathname":"/analytics-alerts/alerts-by-name/uncommon-increase-in-azure-microsoft-graph-api-request-sizes","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"w7EZWMQAkfVw7fsbnqtf","title":"Uncommon IP Configuration Listing via ipconfig.exe","pathname":"/analytics-alerts/alerts-by-name/uncommon-ip-configuration-listing-via-ipconfig-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"t0AFDq7itJpqNEaHNza4","title":"Uncommon jsp file write by a Java process","pathname":"/analytics-alerts/alerts-by-name/uncommon-jsp-file-write-by-a-java-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1z7LbZPgkKAolhip6MQQ","title":"Uncommon kernel module load","pathname":"/analytics-alerts/alerts-by-name/uncommon-kernel-module-load","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"STt7abY6Xp6SeKfRcXGe","title":"Uncommon Launch Agent persistency was registered or modified","pathname":"/analytics-alerts/alerts-by-name/uncommon-launch-agent-persistency-was-registered-or-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uv3YWVcSS9e1QRqUCMhv","title":"Uncommon Launch Daemon persistency was registered or modified","pathname":"/analytics-alerts/alerts-by-name/uncommon-launch-daemon-persistency-was-registered-or-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pgdunOFnFi7hTwQffC0v","title":"Uncommon Linux process communication to a rare external host","pathname":"/analytics-alerts/alerts-by-name/uncommon-linux-process-communication-to-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WXx5xFUg2x538vAhN1GA","title":"Uncommon Linux remote shell command execution","pathname":"/analytics-alerts/alerts-by-name/uncommon-linux-remote-shell-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2TOmQd6UjEXCGikk705d","title":"Uncommon Linux shell command execution","pathname":"/analytics-alerts/alerts-by-name/uncommon-linux-shell-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hSbNtuam7UmVnh1YZNoo","title":"Uncommon local scheduled task creation via schtasks.exe","pathname":"/analytics-alerts/alerts-by-name/uncommon-local-scheduled-task-creation-via-schtasks-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vOoi7U89DmYOQsM31Rs3","title":"Uncommon login item persistency was registered or modified","pathname":"/analytics-alerts/alerts-by-name/uncommon-login-item-persistency-was-registered-or-modified","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5weFLnyM2t5oRUOfp6gl","title":"Uncommon macOS process communication to a rare external host","pathname":"/analytics-alerts/alerts-by-name/uncommon-macos-process-communication-to-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3KCUNBNtGoAOWWeAsp3S","title":"Uncommon macOS shell command execution","pathname":"/analytics-alerts/alerts-by-name/uncommon-macos-shell-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Bt5prA7lzs9puIMLzQmz","title":"Uncommon Managed Object Format (MOF) compiler usage","pathname":"/analytics-alerts/alerts-by-name/uncommon-managed-object-format-mof-compiler-usage","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JqzqRP1pxZ9XBlOY11gL","title":"Uncommon msiexec execution of an arbitrary file from a remote location","pathname":"/analytics-alerts/alerts-by-name/uncommon-msiexec-execution-of-an-arbitrary-file-from-a-remote-location","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7nYG5cDItu6rNvicXVB9","title":"Uncommon net group command execution","pathname":"/analytics-alerts/alerts-by-name/uncommon-net-group-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FiYWpnT0QzJV2OGJtMDg","title":"Uncommon net localgroup command execution","pathname":"/analytics-alerts/alerts-by-name/uncommon-net-localgroup-command-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yUkJn1nRAyBahr6GSsuB","title":"Uncommon network connection under an untrusted and newly created causality actor","pathname":"/analytics-alerts/alerts-by-name/uncommon-network-connection-under-an-untrusted-and-newly-created-causality-actor","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"STFGOzeh8yEv5wY5NYTX","title":"Uncommon network connection under an untrusted causality actor","pathname":"/analytics-alerts/alerts-by-name/uncommon-network-connection-under-an-untrusted-causality-actor","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"AyuKOXwPMZZyDclUOU42","title":"Uncommon network tunnel creation","pathname":"/analytics-alerts/alerts-by-name/uncommon-network-tunnel-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T87QAOfkgFH67WR5uV0O","title":"Uncommon Node.js package initiated communication to an external host","pathname":"/analytics-alerts/alerts-by-name/uncommon-node-js-package-initiated-communication-to-an-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XrJSLs7BEFPUVMBWm3S5","title":"Uncommon NtWriteVirtualMemoryRemote API invocation with a PE header buffer","pathname":"/analytics-alerts/alerts-by-name/uncommon-ntwritevirtualmemoryremote-api-invocation-with-a-pe-header-buffer","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kG6nCN5qAMNbIMCXj1yi","title":"Uncommon PowerShell commands used to create or alter scheduled task parameters","pathname":"/analytics-alerts/alerts-by-name/uncommon-powershell-commands-used-to-create-or-alter-scheduled-task-parameters","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JUBlbUODuCaioDURaKZC","title":"Uncommon RDP connection","pathname":"/analytics-alerts/alerts-by-name/uncommon-rdp-connection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6Fn7hUq7SaZJyjFYEI5d","title":"Uncommon recurring rare external host access","pathname":"/analytics-alerts/alerts-by-name/uncommon-recurring-rare-external-host-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kCRrr7V3zH4iOyIXbEwW","title":"Uncommon remote monitoring and management tool","pathname":"/analytics-alerts/alerts-by-name/uncommon-remote-monitoring-and-management-tool","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IrNTTCmEhoopRRkIEqQl","title":"Uncommon remote scheduled task creation","pathname":"/analytics-alerts/alerts-by-name/uncommon-remote-scheduled-task-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JgXRnI3ntfseBizOLFc3","title":"Uncommon remote service start via sc.exe","pathname":"/analytics-alerts/alerts-by-name/uncommon-remote-service-start-via-sc-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"us3vvRy117Gxje35LMAC","title":"Uncommon reverse SSH tunnel to external domain/ip","pathname":"/analytics-alerts/alerts-by-name/uncommon-reverse-ssh-tunnel-to-external-domain-ip","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mIrAftw8nQixhMg0Ah22","title":"Uncommon routing table listing via route.exe","pathname":"/analytics-alerts/alerts-by-name/uncommon-routing-table-listing-via-route-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GdPnE8bjXCKftmjWP7up","title":"Uncommon Security Support Provider (SSP) registered via a registry key","pathname":"/analytics-alerts/alerts-by-name/uncommon-security-support-provider-ssp-registered-via-a-registry-key","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"CTAgaMff24uTyRKjc9Xi","title":"Uncommon sensitive filesystem registry hive access","pathname":"/analytics-alerts/alerts-by-name/uncommon-sensitive-filesystem-registry-hive-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5s7mSM79RKTKjfT1O6rE","title":"Uncommon sensitive registry hive dump","pathname":"/analytics-alerts/alerts-by-name/uncommon-sensitive-registry-hive-dump","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pUtlpMDrm88OclY9mrWd","title":"Uncommon Service Create/Config","pathname":"/analytics-alerts/alerts-by-name/uncommon-service-create-config","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"M8TkiwJ8ypv4YnxjSbhC","title":"Uncommon service stop operation","pathname":"/analytics-alerts/alerts-by-name/uncommon-service-stop-operation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vIcp0eWqleXF7VXJsNIU","title":"Uncommon SetWindowsHookEx API invocation of a possible keylogger","pathname":"/analytics-alerts/alerts-by-name/uncommon-setwindowshookex-api-invocation-of-a-possible-keylogger","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6bsXjJxpKcapqXjGrLKh","title":"Uncommon signed process execution by scheduled task","pathname":"/analytics-alerts/alerts-by-name/uncommon-signed-process-execution-by-scheduled-task","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Tcq8D9BVh9UajEZvyjiN","title":"Uncommon SQL like command line","pathname":"/analytics-alerts/alerts-by-name/uncommon-sql-like-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ixJwVJotumJ7yoegMNHY","title":"Uncommon SSH session was established","pathname":"/analytics-alerts/alerts-by-name/uncommon-ssh-session-was-established","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"IvEq4p6TbIVb6ALhCXBO","title":"Uncommon URL domain(s) in your organization detected in email","pathname":"/analytics-alerts/alerts-by-name/uncommon-url-domain-s-in-your-organization-detected-in-email","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"I81zZxtbetYZL5eA2hFq","title":"Uncommon user management via net command","pathname":"/analytics-alerts/alerts-by-name/uncommon-user-management-via-net-command","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YOadmEmviK1lfiimbIml","title":"Uncommon VNC server communication","pathname":"/analytics-alerts/alerts-by-name/uncommon-vnc-server-communication","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mEQQkBQc1IY0LBA2eeap","title":"Uncommon WPAD queries","pathname":"/analytics-alerts/alerts-by-name/uncommon-wpad-queries","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"VaVNWfYJDSJaB7xbuMN8","title":"Unicode RTL Override Character","pathname":"/analytics-alerts/alerts-by-name/unicode-rtl-override-character","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"h6PwKwKEwfvVBBerK1ht","title":"Unique client computer model was detected via MS-Update protocol","pathname":"/analytics-alerts/alerts-by-name/unique-client-computer-model-was-detected-via-ms-update-protocol","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4g01yfbtAD87v1JUKPd5","title":"Unknown DLL was added to the AD FS Global Assembly Cache path","pathname":"/analytics-alerts/alerts-by-name/unknown-dll-was-added-to-the-ad-fs-global-assembly-cache-path","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kSiqIfmuYtxqqFEYn2wF","title":"Unpopular rsync process execution","pathname":"/analytics-alerts/alerts-by-name/unpopular-rsync-process-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"pvrQ1zoFsoU7ofdeFK75","title":"Unprivileged process opened a registry hive","pathname":"/analytics-alerts/alerts-by-name/unprivileged-process-opened-a-registry-hive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"piW36DIOT0AY271cH8BI","title":"Unrecognized internal address (AAD mismatch)","pathname":"/analytics-alerts/alerts-by-name/unrecognized-internal-address-aad-mismatch","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"R6n6Vz281tPILFUAq0DO","title":"Unsigned and unpopular process performed a DLL injection","pathname":"/analytics-alerts/alerts-by-name/unsigned-and-unpopular-process-performed-a-dll-injection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MP7kgnoyqNsVe5CIajrG","title":"Unsigned and unpopular process performed an injection","pathname":"/analytics-alerts/alerts-by-name/unsigned-and-unpopular-process-performed-an-injection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YwPAOqqdua5z16w1kgJL","title":"Unsigned DLL Hijack into a Microsoft process","pathname":"/analytics-alerts/alerts-by-name/unsigned-dll-hijack-into-a-microsoft-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hb2BUZgkKJ91mF2vUolj","title":"Unsigned DLL Side-Loading","pathname":"/analytics-alerts/alerts-by-name/unsigned-dll-side-loading","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ton0oYHHt4neecoTRct8","title":"Unsigned process creates a scheduled task via file access","pathname":"/analytics-alerts/alerts-by-name/unsigned-process-creates-a-scheduled-task-via-file-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"PJqH7V1lj3xa58LFeSxM","title":"Unsigned process injecting into a Windows system binary with no command line","pathname":"/analytics-alerts/alerts-by-name/unsigned-process-injecting-into-a-windows-system-binary-with-no-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ufZMHwWq351bKQzvYAia","title":"Unsigned process running from a temporary directory","pathname":"/analytics-alerts/alerts-by-name/unsigned-process-running-from-a-temporary-directory","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xHFJwKx3lT12xKPmV4JO","title":"Untrusted process contacted LLM API","pathname":"/analytics-alerts/alerts-by-name/untrusted-process-contacted-llm-api","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"wIQWf9ysCTXb4oSltHTF","title":"Unusual access to Microsoft 365 storage services","pathname":"/analytics-alerts/alerts-by-name/unusual-access-to-microsoft-365-storage-services","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FSiHUUQTgDcxKIfvpKWw","title":"Unusual access to the AD Sync credential files","pathname":"/analytics-alerts/alerts-by-name/unusual-access-to-the-ad-sync-credential-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LrHcofeoip7yRnWLKeXh","title":"Unusual access to the Windows Internal Database on an ADFS server","pathname":"/analytics-alerts/alerts-by-name/unusual-access-to-the-windows-internal-database-on-an-adfs-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FGgALQPYgsEc3UXZu1tn","title":"Unusual ADConnect database file access","pathname":"/analytics-alerts/alerts-by-name/unusual-adconnect-database-file-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LMYnTyE9hlLQSZBJcBx1","title":"Unusual ADFS Remote Synchronization network connections from non-ADFS server","pathname":"/analytics-alerts/alerts-by-name/unusual-adfs-remote-synchronization-network-connections-from-non-adfs-server","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZJlgX5dnkUXCCIbtmSb8","title":"Unusual AI dataset modification","pathname":"/analytics-alerts/alerts-by-name/unusual-ai-dataset-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7ihiAb4eUHqKpEbeDUIT","title":"Unusual AI Knowledge Base Modification","pathname":"/analytics-alerts/alerts-by-name/unusual-ai-knowledge-base-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"5wPrXzQEErAGZbUxw8ie","title":"Unusual AI model invocation","pathname":"/analytics-alerts/alerts-by-name/unusual-ai-model-invocation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1GwQjFy7BZoV8aK8J4KQ","title":"Unusual AI RAG Knowledge Base Modification","pathname":"/analytics-alerts/alerts-by-name/unusual-ai-rag-knowledge-base-modification","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tiVe4AeNRPDoP3Hrm5pK","title":"Unusual app.n8n.cloud URL(s) in email","pathname":"/analytics-alerts/alerts-by-name/unusual-app-n8n-cloud-url-s-in-email","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bRcSfb1RBof8x74eW3ap","title":"Unusual attachment volume in outbound emails","pathname":"/analytics-alerts/alerts-by-name/unusual-attachment-volume-in-outbound-emails","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"sJYOr0T8gKnoGsThNkXW","title":"Unusual AWS Bedrock model access request","pathname":"/analytics-alerts/alerts-by-name/unusual-aws-bedrock-model-access-request","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LIrXbHpEOzwRjT9oytoF","title":"Unusual AWS CLI/SDK activity","pathname":"/analytics-alerts/alerts-by-name/unusual-aws-cli-sdk-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"3qk5eXLst3eyoBUJskUd","title":"Unusual AWS credentials creation","pathname":"/analytics-alerts/alerts-by-name/unusual-aws-credentials-creation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bw100L3VBgNeJ0tME4Q2","title":"Unusual AWS S3 objects deletion","pathname":"/analytics-alerts/alerts-by-name/unusual-aws-s3-objects-deletion","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qwErVPGd7vMOi9U7rIdd","title":"Unusual AWS SageMaker notebook access","pathname":"/analytics-alerts/alerts-by-name/unusual-aws-sagemaker-notebook-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zcDQPsvcUdugvrLT9gdX","title":"Unusual AWS systems manager activity","pathname":"/analytics-alerts/alerts-by-name/unusual-aws-systems-manager-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GtAXIJk4N1FPmwKadIrG","title":"Unusual AWS user added to group","pathname":"/analytics-alerts/alerts-by-name/unusual-aws-user-added-to-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hgX58fulbhTOenhOj7BJ","title":"Unusual Azure AD sync module load","pathname":"/analytics-alerts/alerts-by-name/unusual-azure-ad-sync-module-load","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MKOG8KsgheTppl5NQJKQ","title":"Unusual certificate management activity","pathname":"/analytics-alerts/alerts-by-name/unusual-certificate-management-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rxbuLXRa7x8VuUt5NNWk","title":"Unusual CertLog Remote File Write","pathname":"/analytics-alerts/alerts-by-name/unusual-certlog-remote-file-write","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"60gnBhaBooP4NLQyx7kp","title":"Unusual CIM repository file access","pathname":"/analytics-alerts/alerts-by-name/unusual-cim-repository-file-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"45UXlTQAlusKbXmDWt1Q","title":"Unusual cloud identity impersonation","pathname":"/analytics-alerts/alerts-by-name/unusual-cloud-identity-impersonation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kpsnMplVSFPB8kRB4mhr","title":"Unusual cloud Instance Metadata Service (IMDS) access","pathname":"/analytics-alerts/alerts-by-name/unusual-cloud-instance-metadata-service-imds-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"40Nt13WgNeqADWa0bhE5","title":"Unusual compressed file password protection","pathname":"/analytics-alerts/alerts-by-name/unusual-compressed-file-password-protection","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"52WBJjynu1b85Dn24CwF","title":"Unusual Conditional Access operation for an identity","pathname":"/analytics-alerts/alerts-by-name/unusual-conditional-access-operation-for-an-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"T8HiFAAaLmmbNDbQrA0H","title":"Unusual cross projects activity","pathname":"/analytics-alerts/alerts-by-name/unusual-cross-projects-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"niqwSGh4PIoMQMZump02","title":"Unusual DB process spawning a shell","pathname":"/analytics-alerts/alerts-by-name/unusual-db-process-spawning-a-shell","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DM9BtcxRZcAsrNQLOMrq","title":"Unusual display name in From header","pathname":"/analytics-alerts/alerts-by-name/unusual-display-name-in-from-header","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Du1hQ64iYx1QThz23RCx","title":"Unusual Encrypting File System Remote call (EFSRPC) to domain controller","pathname":"/analytics-alerts/alerts-by-name/unusual-encrypting-file-system-remote-call-efsrpc-to-domain-controller","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KLpWdlJCDjIcoQcDrH50","title":"Unusual exec into a Kubernetes Pod","pathname":"/analytics-alerts/alerts-by-name/unusual-exec-into-a-kubernetes-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"euasgikYaMXjBkxHizAw","title":"Unusual file-sharing links for mailbox owner","pathname":"/analytics-alerts/alerts-by-name/unusual-file-sharing-links-for-mailbox-owner","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"o2vDzA6jzpqTLRaMIQvT","title":"Unusual hostname for the sending mail server in the email headers","pathname":"/analytics-alerts/alerts-by-name/unusual-hostname-for-the-sending-mail-server-in-the-email-headers","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lekNXsUFHd66RYCeNyBk","title":"Unusual IAM enumeration activity by a non-user Identity","pathname":"/analytics-alerts/alerts-by-name/unusual-iam-enumeration-activity-by-a-non-user-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Cn1AcbV45eRvCHsrhl8S","title":"Unusual Identity and Access Management (IAM) activity","pathname":"/analytics-alerts/alerts-by-name/unusual-identity-and-access-management-iam-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2orBe65Pii1Wc4jStukC","title":"Unusual internal access to network device management interface","pathname":"/analytics-alerts/alerts-by-name/unusual-internal-access-to-network-device-management-interface","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"vaOPUfBPhyiIAOXMCgTT","title":"Unusual key management activity","pathname":"/analytics-alerts/alerts-by-name/unusual-key-management-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"fgF0z6XW7M6dhW9bi5xT","title":"Unusual Kubernetes dashboard communication from a pod","pathname":"/analytics-alerts/alerts-by-name/unusual-kubernetes-dashboard-communication-from-a-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"8cdatNbyhIH53d0HaWHa","title":"Unusual Kubernetes secret access","pathname":"/analytics-alerts/alerts-by-name/unusual-kubernetes-secret-access","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"raGAb6kVdoxFeE6j884r","title":"Unusual Kubernetes service account file read","pathname":"/analytics-alerts/alerts-by-name/unusual-kubernetes-service-account-file-read","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yBD6tmkdLidmI59SoYRx","title":"Unusual Lolbins Process Spawned by InstallUtil.exe","pathname":"/analytics-alerts/alerts-by-name/unusual-lolbins-process-spawned-by-installutil-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UJMnPo1FPLvLZgCGg0vN","title":"Unusual multi-region AWS Resource Explorer searches","pathname":"/analytics-alerts/alerts-by-name/unusual-multi-region-aws-resource-explorer-searches","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7pOzIxG7DN3oaJCYw0Xy","title":"Unusual Netsh PortProxy rule","pathname":"/analytics-alerts/alerts-by-name/unusual-netsh-portproxy-rule","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"U7axVPov5zrmwHVMku0K","title":"Unusual process access to ld.so.preload file","pathname":"/analytics-alerts/alerts-by-name/unusual-process-access-to-ld-so-preload-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zmw1gdt9CkzTUm6g21ZJ","title":"Unusual process accessed a crypto wallet's files","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-a-crypto-wallet-s-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"oIEFUFVpplFERoBkpZvW","title":"Unusual process accessed a macOS notes DB file","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-a-macos-notes-db-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"UHWXAM6xKgRqM2xND0pL","title":"Unusual process accessed a messaging app's files","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-a-messaging-app-s-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FaScN0S5ciixpuN96Ze7","title":"Unusual process accessed a web browser history file","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-a-web-browser-history-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"m12DV16PLGEpUwLqWphO","title":"Unusual process accessed FTP Client credentials","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-ftp-client-credentials","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"g43bQ7tTPQccOOY19nHN","title":"Unusual process accessed the PowerShell history file","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-the-powershell-history-file","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rF1CYVzgZ1luIgSHsICX","title":"Unusual process accessed web browser cookies","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-web-browser-cookies","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6hngmRxNoQqSbw8HTwd9","title":"Unusual process accessed web browser credentials","pathname":"/analytics-alerts/alerts-by-name/unusual-process-accessed-web-browser-credentials","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"OhvbW06UsnB2ENXnltlL","title":"Unusual process executed by AWS Systems Manager","pathname":"/analytics-alerts/alerts-by-name/unusual-process-executed-by-aws-systems-manager","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"celjx3auc9Ismbe71y5J","title":"Unusual Process Spawned by Nginx in Ingress-Nginx pod","pathname":"/analytics-alerts/alerts-by-name/unusual-process-spawned-by-nginx-in-ingress-nginx-pod","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"toqEJb09GCFJID9EQLA2","title":"Unusual resource access by Azure application","pathname":"/analytics-alerts/alerts-by-name/unusual-resource-access-by-azure-application","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xFey8mjtQHqpPr2MBi8I","title":"Unusual resource modification by newly seen IAM user","pathname":"/analytics-alerts/alerts-by-name/unusual-resource-modification-by-newly-seen-iam-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"KKBUeY3SoAhkP7Phu6Fo","title":"Unusual secret management activity","pathname":"/analytics-alerts/alerts-by-name/unusual-secret-management-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"YHKFG9i9lKm7SYjqY55N","title":"Unusual sender IP subnet","pathname":"/analytics-alerts/alerts-by-name/unusual-sender-ip-subnet","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eFYcDPtPYa4r4zzTRZYA","title":"Unusual SSH activity that resembles SSH proxy","pathname":"/analytics-alerts/alerts-by-name/unusual-ssh-activity-that-resembles-ssh-proxy","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nNuyj6VKTs3xIVg9bU9r","title":"Unusual SSH Activity","pathname":"/analytics-alerts/alerts-by-name/unusual-ssh-activity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xfP947QHYEyrNfkRoIvN","title":"Unusual URL(s) sent by a brand were observed in the email","pathname":"/analytics-alerts/alerts-by-name/unusual-url-s-sent-by-a-brand-were-observed-in-the-email","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"xie57eC2avHsM0ObbaIJ","title":"Unusual use of a 'SysInternals' tool","pathname":"/analytics-alerts/alerts-by-name/unusual-use-of-a-sysinternals-tool","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WvhRgiUleRGUPXvuYBIS","title":"Unusual user account enablement","pathname":"/analytics-alerts/alerts-by-name/unusual-user-account-enablement","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"A0lTE8bvcrdrY33VLObd","title":"Unusual user account unlock","pathname":"/analytics-alerts/alerts-by-name/unusual-user-account-unlock","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tuYUwTObiBhZBjYhAWio","title":"Unusual user-agent for a cloud identity","pathname":"/analytics-alerts/alerts-by-name/unusual-user-agent-for-a-cloud-identity","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DhXturMIripprky4eEQu","title":"Unusual weak authentication by user","pathname":"/analytics-alerts/alerts-by-name/unusual-weak-authentication-by-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"JkSFHzrtEuGqQmjgap9z","title":"Unverified domain added to Azure AD","pathname":"/analytics-alerts/alerts-by-name/unverified-domain-added-to-azure-ad","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hG5nCmW383kYnN6sarMP","title":"Upload pattern that resembles Peer to Peer traffic","pathname":"/analytics-alerts/alerts-by-name/upload-pattern-that-resembles-peer-to-peer-traffic","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XSHjGDLbWhIHnpR8HNNL","title":"Usage of homograph characters detected in an email attachment(s) name","pathname":"/analytics-alerts/alerts-by-name/usage-of-homograph-characters-detected-in-an-email-attachment-s-name","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"cPjtc3C8g1nMb82KrM25","title":"Usage of homograph characters detected in an email's from header","pathname":"/analytics-alerts/alerts-by-name/usage-of-homograph-characters-detected-in-an-email-s-from-header","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mXMU2KGQc2GhI2e1JuBQ","title":"Usage of homograph characters detected in an email","pathname":"/analytics-alerts/alerts-by-name/usage-of-homograph-characters-detected-in-an-email","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WCfbFmFz2LePEe7sjpul","title":"User accessed multiple O365 AIP sensitive files","pathname":"/analytics-alerts/alerts-by-name/user-accessed-multiple-o365-aip-sensitive-files","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"kzvGyPqT0w5en3TaBM5s","title":"User accessed SaaS resource via anonymous link","pathname":"/analytics-alerts/alerts-by-name/user-accessed-saas-resource-via-anonymous-link","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"45htLmF0mMXzORtYXuUe","title":"User account delegation change","pathname":"/analytics-alerts/alerts-by-name/user-account-delegation-change","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"iRaHoYW7Fods2sshsw0J","title":"User added a new device to Okta Verify instance","pathname":"/analytics-alerts/alerts-by-name/user-added-a-new-device-to-okta-verify-instance","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"n3XSwndzYX40Ekxjd2CR","title":"User added SID History to an account","pathname":"/analytics-alerts/alerts-by-name/user-added-sid-history-to-an-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"4JyhwUUTR3qupwTXxoNe","title":"User added to a group and removed","pathname":"/analytics-alerts/alerts-by-name/user-added-to-a-group-and-removed","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eKynL3rbmA8MbScyPMf5","title":"User added to the SMS Admins local group","pathname":"/analytics-alerts/alerts-by-name/user-added-to-the-sms-admins-local-group","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6TAKbkvK3Kcq8aLVyEkv","title":"User and Group Enumeration via SAMR","pathname":"/analytics-alerts/alerts-by-name/user-and-group-enumeration-via-samr","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"f9juaYZDdNpwiWOkhO28","title":"User attempted to connect from a suspicious country","pathname":"/analytics-alerts/alerts-by-name/user-attempted-to-connect-from-a-suspicious-country","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"WoAIZ6ywfBYp8ilMwB66","title":"User collected remote shared files in an archive","pathname":"/analytics-alerts/alerts-by-name/user-collected-remote-shared-files-in-an-archive","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"qgJKNwbIf5eydD5nGOCz","title":"User discovery via WMI query execution","pathname":"/analytics-alerts/alerts-by-name/user-discovery-via-wmi-query-execution","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"zn7txY8msI2HfjDoWXYq","title":"User exported multiple messages in Microsoft Teams via Graph API","pathname":"/analytics-alerts/alerts-by-name/user-exported-multiple-messages-in-microsoft-teams-via-graph-api","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"tTKDeUmHPiryDkaFUOKj","title":"User installed an application in Microsoft Teams via Graph API","pathname":"/analytics-alerts/alerts-by-name/user-installed-an-application-in-microsoft-teams-via-graph-api","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"FkdTlU90qqg3zVzwheUT","title":"User mail items accessed from multiple IPs in the same subnet","pathname":"/analytics-alerts/alerts-by-name/user-mail-items-accessed-from-multiple-ips-in-the-same-subnet","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2bGTwdSPLZufmp8PiBeE","title":"User moved Exchange sent messages to deleted items","pathname":"/analytics-alerts/alerts-by-name/user-moved-exchange-sent-messages-to-deleted-items","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rDHP56BGYVWdss8TCGgQ","title":"User sent messages in Microsoft Teams to multiple conversations via Graph API","pathname":"/analytics-alerts/alerts-by-name/user-sent-messages-in-microsoft-teams-to-multiple-conversations-via-graph-api","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"yy42DROw2sk5R0OcRUry","title":"User set insecure CA registry setting for global SANs","pathname":"/analytics-alerts/alerts-by-name/user-set-insecure-ca-registry-setting-for-global-sans","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"1E0Dyxypec279SL6wMFU","title":"User signed in to an application via Power Automate for the first time","pathname":"/analytics-alerts/alerts-by-name/user-signed-in-to-an-application-via-power-automate-for-the-first-time","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"Q13SR4gYrrKsvdVss3qR","title":"VM Detection attempt on Linux","pathname":"/analytics-alerts/alerts-by-name/vm-detection-attempt-on-linux","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"XH00RUVCWmCLr5I0kefq","title":"VM Detection attempt","pathname":"/analytics-alerts/alerts-by-name/vm-detection-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"h1Kh3w92Y5q4WF1rqk4g","title":"VPN access with an abnormal operating system","pathname":"/analytics-alerts/alerts-by-name/vpn-access-with-an-abnormal-operating-system","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"LdA2nfAz2qYnrgXK0CqT","title":"VPN login attempt by a honey user","pathname":"/analytics-alerts/alerts-by-name/vpn-login-attempt-by-a-honey-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"2TZKRXJL0ZWBXemK5nZT","title":"VPN login Brute-Force attempt","pathname":"/analytics-alerts/alerts-by-name/vpn-login-brute-force-attempt","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"ZmA1kkDwOVTICuvingM2","title":"VPN login by a dormant user","pathname":"/analytics-alerts/alerts-by-name/vpn-login-by-a-dormant-user","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"eABvKUcqXMBdfOKCeNF1","title":"VPN login by a service account","pathname":"/analytics-alerts/alerts-by-name/vpn-login-by-a-service-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"7xoV1btBQc8G4uSKiJ6Z","title":"VPN Login Password Spray","pathname":"/analytics-alerts/alerts-by-name/vpn-login-password-spray","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"mIRzWXHxcMosNHH5XGeb","title":"VPN login with a machine account","pathname":"/analytics-alerts/alerts-by-name/vpn-login-with-a-machine-account","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"x5tlFaMHJWtoU8Y0FJqa","title":"Vulnerable certificate template loaded","pathname":"/analytics-alerts/alerts-by-name/vulnerable-certificate-template-loaded","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"nZyo4ob7dPdl4RqjCG1v","title":"Wbadmin deleted files in quiet mode","pathname":"/analytics-alerts/alerts-by-name/wbadmin-deleted-files-in-quiet-mode","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DQgjAp1V4LUAZ8CxqyCa","title":"Weakly-Encrypted Kerberos TGT Response","pathname":"/analytics-alerts/alerts-by-name/weakly-encrypted-kerberos-tgt-response","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"RhzyyhYLm9nIxY8I2Qr9","title":"Weakly-Encrypted Kerberos Ticket Requested","pathname":"/analytics-alerts/alerts-by-name/weakly-encrypted-kerberos-ticket-requested","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"lrmUm8qWcRHKTpXwOaDx","title":"Web server CGO executed a process following a potential Webshell dropped","pathname":"/analytics-alerts/alerts-by-name/web-server-cgo-executed-a-process-following-a-potential-webshell-dropped","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"M7eVf5xNF60vFIRZr1s5","title":"Web server CGO executed an uncommon process","pathname":"/analytics-alerts/alerts-by-name/web-server-cgo-executed-an-uncommon-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"01jZAx1hGxKTM4zgDPAZ","title":"WebDAV drive mounted from net.exe over HTTPS","pathname":"/analytics-alerts/alerts-by-name/webdav-drive-mounted-from-net-exe-over-https","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"DgceoIEZSk9RVOhwETHJ","title":"Well-known brand in sender headers with header inconsistencies","pathname":"/analytics-alerts/alerts-by-name/well-known-brand-in-sender-headers-with-header-inconsistencies","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"MqCq5Bf6HxyUmkSXzsd0","title":"Windows CGO, actor and action processes with anomalous characteristics","pathname":"/analytics-alerts/alerts-by-name/windows-cgo-actor-and-action-processes-with-anomalous-characteristics","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"6KFys5i6d4FlOBK8Z4Ud","title":"Windows CGO, actor process and action module with anomalous characteristics","pathname":"/analytics-alerts/alerts-by-name/windows-cgo-actor-process-and-action-module-with-anomalous-characteristics","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"rlqCKBO09Yt8Cu0wYsGP","title":"Windows Event Log was cleared using wevtutil.exe","pathname":"/analytics-alerts/alerts-by-name/windows-event-log-was-cleared-using-wevtutil-exe","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"GiCivUV479MAsP3Rso2d","title":"Windows event logs were cleared with PowerShell","pathname":"/analytics-alerts/alerts-by-name/windows-event-logs-were-cleared-with-powershell","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uVyrrLT0dFgy1XlUzt6I","title":"Windows Installer exploitation for local privilege escalation","pathname":"/analytics-alerts/alerts-by-name/windows-installer-exploitation-for-local-privilege-escalation","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"51EdWtSQQB9YzjOpXpy0","title":"Windows LOLBIN executable connected to a rare external host","pathname":"/analytics-alerts/alerts-by-name/windows-lolbin-executable-connected-to-a-rare-external-host","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"hIOksEtaSab32NaqDPr2","title":"WmiPrvSe.exe Rare Child Command Line","pathname":"/analytics-alerts/alerts-by-name/wmiprvse-exe-rare-child-command-line","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"x8vjTMKdqWvzkMBAlxHG","title":"Wscript/Cscript loads .NET DLLs","pathname":"/analytics-alerts/alerts-by-name/wscript-cscript-loads-net-dlls","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"bHcSpLh2cHU0gZSVK4xB","title":"Wsmprovhost.exe Rare Child Process","pathname":"/analytics-alerts/alerts-by-name/wsmprovhost-exe-rare-child-process","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"S53qky2wpEvsG1a4sK1p","title":"X-Forefront-Antispam-Report has flagged this email as a potential threat","pathname":"/analytics-alerts/alerts-by-name/x-forefront-antispam-report-has-flagged-this-email-as-a-potential-threat","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by name"}]},{"id":"uUC9Ypmf4DmWvmFes2bJ","title":"Alerts by data source","pathname":"/analytics-alerts/alerts-by-data-source","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"}]},{"id":"UlMh7jMxrqslMSl68c5Z","title":"AWS Audit Log","pathname":"/analytics-alerts/alerts-by-data-source/aws-audit-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"sbzuqeqkKbx4hSug98g1","title":"Azure Audit Log","pathname":"/analytics-alerts/alerts-by-data-source/azure-audit-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"T5Cg3QOQV5jSrsL7dUs2","title":"Azure SignIn Log","pathname":"/analytics-alerts/alerts-by-data-source/azure-signin-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"sw97CTAfxqEx35y5sZgO","title":"AzureAD Audit Log","pathname":"/analytics-alerts/alerts-by-data-source/azuread-audit-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"YrwxOM2yBsEjrRn1PFIG","title":"AzureAD","pathname":"/analytics-alerts/alerts-by-data-source/azuread","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"4sX3p1INZ9LDq2mCsSmX","title":"Box Audit Log","pathname":"/analytics-alerts/alerts-by-data-source/box-audit-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"UF8FFELHx3MYEAlxqqc6","title":"DropBox","pathname":"/analytics-alerts/alerts-by-data-source/dropbox","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"HV2zTMCcBpOprLvYtBwg","title":"Duo","pathname":"/analytics-alerts/alerts-by-data-source/duo","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"4g4ycEs4zAfbBpnIJMTr","title":"Gcp Audit Log","pathname":"/analytics-alerts/alerts-by-data-source/gcp-audit-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"Fb0U0wGgaP4GO88wVAvm","title":"Google Workspace","pathname":"/analytics-alerts/alerts-by-data-source/google-workspace","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"E0IlxKIpUAyJorsQfYn1","title":"Health Monitoring Data","pathname":"/analytics-alerts/alerts-by-data-source/health-monitoring-data","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"iT6AvlE6E1O1vlLf6zv7","title":"Idira","pathname":"/analytics-alerts/alerts-by-data-source/idira","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"zkJ09o2hs9CZCTcH87vX","title":"Kubernetes Audit Logs","pathname":"/analytics-alerts/alerts-by-data-source/kubernetes-audit-logs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"6rtxP0R9TEoNCztgrusj","title":"Microsoft 365 Emails","pathname":"/analytics-alerts/alerts-by-data-source/microsoft-365-emails","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"vxLBPgMNnWBxM9bkRg54","title":"Microsoft Graph Logs","pathname":"/analytics-alerts/alerts-by-data-source/microsoft-graph-logs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"oRW5dz1Req5iGheTD1vg","title":"Office 365 Audit","pathname":"/analytics-alerts/alerts-by-data-source/office-365-audit","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"jXbAjCRCOoO3QJTMOFFh","title":"Okta Audit Log","pathname":"/analytics-alerts/alerts-by-data-source/okta-audit-log","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"Waz2rEpGtaAu6M8xzuhk","title":"Okta","pathname":"/analytics-alerts/alerts-by-data-source/okta","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"PfURtcN8KiVv5dFtDiAr","title":"OneLogin","pathname":"/analytics-alerts/alerts-by-data-source/onelogin","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"TaRrEOHxZu54kmq6T8aM","title":"Palo Alto Networks Firewall EAL Logs","pathname":"/analytics-alerts/alerts-by-data-source/palo-alto-networks-firewall-eal-logs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"cgcobaV3VeL48LiIiSmR","title":"Palo Alto Networks Firewall threat Logs","pathname":"/analytics-alerts/alerts-by-data-source/palo-alto-networks-firewall-threat-logs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"3dXWb19zLO921FdcB74E","title":"Palo Alto Networks Firewall traffic Logs","pathname":"/analytics-alerts/alerts-by-data-source/palo-alto-networks-firewall-traffic-logs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"wGI8lkUyxRP815oej3zU","title":"Palo Alto Networks Global Protect","pathname":"/analytics-alerts/alerts-by-data-source/palo-alto-networks-global-protect","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"Xrqih2y9acuLerQEY2L7","title":"Palo Alto Networks Platform Alerts","pathname":"/analytics-alerts/alerts-by-data-source/palo-alto-networks-platform-alerts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"sRt5FOAknpn0jHxFMp1U","title":"Palo Alto Networks Url Logs","pathname":"/analytics-alerts/alerts-by-data-source/palo-alto-networks-url-logs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"nGgYGQMmzOCWuJ1nNObR","title":"PingOne","pathname":"/analytics-alerts/alerts-by-data-source/pingone","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"UWYu5rNRd1IhFNqZz0WK","title":"Third-Party Alerts","pathname":"/analytics-alerts/alerts-by-data-source/third-party-alerts","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"KrWnif0gr47MN1WmBwmv","title":"Third-Party Firewalls","pathname":"/analytics-alerts/alerts-by-data-source/third-party-firewalls","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"fnuJ0sy5JhCdlAUSzdAL","title":"Third-Party VPNs","pathname":"/analytics-alerts/alerts-by-data-source/third-party-vpns","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"XcjR939kUJT5AfGRmfeX","title":"VMware virtualization servers syslogs","pathname":"/analytics-alerts/alerts-by-data-source/vmware-virtualization-servers-syslogs","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"jxMA0UvYZdiTgvmXfW5c","title":"Windows Event Collector","pathname":"/analytics-alerts/alerts-by-data-source/windows-event-collector","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"pltYprWbwY319Gdw2OGP","title":"XDR Agent with eXtended Threat Hunting (XTH)","pathname":"/analytics-alerts/alerts-by-data-source/xdr-agent-with-extended-threat-hunting-xth","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"ZG7ePJByUD6ql1mLyJN5","title":"XDR Agent","pathname":"/analytics-alerts/alerts-by-data-source/xdr-agent","siteSpaceId":"sitesp_0bkZI","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"Analytics Alerts","icon":"alarm-clock"},{"label":"Alerts by data source"}]},{"id":"FjUuRKfPXD1ypia8Dtii","title":"AppSec Rules","pathname":"/appsec-rules","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"NYdbPAId5ERK2puVQsOf","title":"IaC Security","pathname":"/appsec-rules/iac-security","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"nL7sthfGiuUOh59vknW0","title":"AI And Machine Learning","pathname":"/appsec-rules/iac-security/ai-and-machine-learning","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"b6mrQL07FUklWNJuXzUn","title":"AWS SageMaker notebook instance not configured with data encryption at rest using KMS key misconfigu","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"aFyrc6MOvxYDDT0z3pAx","title":"AWS SageMaker endpoint data encryption at rest not configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-98","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"ufay7m25QuHWHN0iIGkX","title":"AWS SageMaker notebook instance configured with direct internet access feature misconfiguration dete","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-122","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"60rJQ9nK8ZN0YFsZ7c4k","title":"AWS Sagemaker domain not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-187","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"Hkwb91oEmdZjdcUqLL79","title":"AWS Kendra index Server side encryption does not use Customer Managed Keys (CMKs) misconfiguration d","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-262","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"FBl2layLzdlQVbJLwixk","title":"AWS SageMaker notebook instance with root access enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-307","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"VOV6cuXCiWMpRrtbKGnm","title":"AWS Sagemaker data quality job not encrypting model artifacts with KMS misconfiguration detected in","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-367","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"b8OOwwB2vuN1wRI4vXtX","title":"AWS Sagemaker data quality job not using KMS to encrypt data on attached storage volume misconfigura","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-368","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"rQ2OxvOQajdoUO4uSXjD","title":"AWS Sagemaker data quality job not encrypting communications between instances used for monitoring j","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-369","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"lqHA6jEFfvxmCbpymoR2","title":"AWS SageMaker model does not use network isolation misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-370","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"hGtBB1szYPuArWBkVj0g","title":"AWS SageMaker notebook instance allows for IMDSv1 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-371","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"66ubLuY0iKXE5sBMJb14","title":"AWS SageMaker Flow Definition does not use KMS for output configurations misconfiguration detected i","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-372","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"2eC8K9Ypom033Zh8gZmh","title":"AWS Bedrock agent is not associated with Bedrock guardrails misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-aws-383","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"i5fiRCyLEeyHXlwjfQxV","title":"Azure Synapse Workspaces do not enable managed virtual networks misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-58","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"tQckFu8mWfpiNMt6UAGc","title":"Azure Cognitive Services account configured with public network access misconfiguration detected in","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-134","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"oyCSpVWDrRN5PAbcMAP6","title":"Azure Machine Learning Compute Cluster Local Authentication is enabled misconfiguration detected in","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-142","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"rwozokJcOpgL9Uu4dSE6","title":"Azure Machine Learning Workspace is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-144","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"T0eqEv6G7IoyZalAm2dj","title":"Azure Machine Learning Compute Cluster Minimum Nodes is not set to 0 misconfiguration detected in co","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-150","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"yxWgtaudXqt012vXkTb5","title":"Azure Data exfiltration protection for Azure Synapse workspace is disabled misconfiguration detected","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-157","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"UXMjvKNQg80thlSadYsu","title":"Azure Databricks workspace is public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-158","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"rK45wbBh0CyRACbGp6vc","title":"Azure Cognitive Services account configured with local authentication misconfiguration detected in c","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-236","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"Of2uuUfcHTgXfWcbnImZ","title":"Azure Cognitive Services account is not configured with managed identity misconfiguration detected i","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-238","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"NbTHbQXO43VWRiMJYSAd","title":"Azure Synapse workspace administrator login password exposed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-239","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"pmHmjo9OSqjYygv1bZ7o","title":"Azure Synapse Workspace not encrypted with a Customer Managed Key (CMK) misconfiguration detected in","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-240","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"Rk5sDoeTLnksg5XdmEbl","title":"Azure Synapse SQL pool not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-241","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"X7pmDz2nKfPb8OHtHXWs","title":"Azure Synapse Spark Pool not using isolated compute misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-242","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"Ujm50vepH7R0NYCmeuFU","title":"Azure Machine learning workspace is not configured with private endpoint misconfiguration detected i","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-243","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"HwBam0bW5bo3aGQLiMzb","title":"Azure Cognitive Services account hosted with OpenAI is not configured with data loss prevention misc","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-azure-247","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"Vu54MexvIcyHW0G0GqqU","title":"GCP Vertex AI datasets do not use a Customer Manager Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-92","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"HQiehV8w4Nxo2mTApNBw","title":"GCP Vertex AI Metadata Store does not use a Customer Manager Key (CMK) misconfiguration detected in","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-96","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"144NCDcfPKQw18iNh3PG","title":"GCP Dataproc Clusters have public IPs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-103","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"1Lz1plVgpc8oMNz3mhvc","title":"GCP DataFusion does not have stack driver logging enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-104","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"xxJxlSdO8SuCx8Wfjfu2","title":"GCP DataFusion does not have stack driver monitoring enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-105","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"YWH2jI6E0qvPsWynkufX","title":"GCP Vertex AI Workbench user-managed notebook has vTPM disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-126","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"TC6qa3YOBxnghIaFTde8","title":"GCP Vertex AI Workbench user-managed notebook has Integrity monitoring disabled misconfiguration det","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec-gcp-127","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"dZUD0bUfz0fxZMSbhZyo","title":"AWS SageMaker notebook instance IAM policy is overly permissive misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-aws-68","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"LGrceVgTF5LiKRzCpJXI","title":"Azure Synapse workspaces have IP firewall rules attached misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"GSOPdbDT0BYspBTdM3WB","title":"Azure Cognitive Services does not Customer Managed Keys (CMKs) for encryption misconfiguration detec","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"mzebIHw1B6erd2VOYirZ","title":"Azure Synapse Workspace vulnerability assessment is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-46","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"05ZP7AvpomMh1F8wPiAr","title":"Azure Databricks Workspaces not using customer-managed key for root DBFS encryption misconfiguration","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-48","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"32QLPf6BGd1tY6j1xoOk","title":"Azure Machine learning workspace configured with overly permissive network access misconfiguration d","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"eAhHcQvf0OCwvipvv2hG","title":"Azure Storage Account storing Machine Learning workspace high business impact data is publicly acces","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-50","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"EwTRBCVZFIymhG2cHhki","title":"Azure Synapse SQL Pool does not have a security alert policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-51","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"sMzyY9d5k9iuHLEqsHmT","title":"Azure Synapse SQL Pool vulnerability assessment disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-52","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"5wwuaUQYiAvGcJl7T23s","title":"Azure Synapse Workspace does not have extended audit logs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-53","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"AHzY82F4khtiJQnpHHiF","title":"Log monitoring disabled for Azure Synapse SQL Pool misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-azure-54","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"v0cHErxJgT2z8SXzF3pg","title":"Vertex AI endpoint is not using a Customer Managed Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"AssA1sKebGsuIaHFfj6O","title":"Vertex AI featurestore is not configured to use a Customer Managed Key (CMK) misconfiguration detect","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"tRklAzFR5VFbI5zT2Yeo","title":"Vertex AI tensorboard does not use a Customer Managed Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"GcnLRDfSMNQFgKt4P5Gx","title":"Vertex AI endpoint is public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"CV1BKcbJ9OgdgiPWHfik","title":"Vertex AI index endpoint is public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"JQvwU0Z25Lfsw0DSuHWz","title":"Vertex AI runtime is not encrypted with a Customer Managed Key (CMK) misconfiguration detected in co","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"cZN2HCYljYSgb7WEti36","title":"Vertex AI runtime is public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/ai-and-machine-learning/appsec2-gcp-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"AI And Machine Learning"}]},{"id":"3vigfCBr9kcPwPM9Kjpx","title":"Compute","pathname":"/appsec-rules/iac-security/compute","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"qDz6CEMznNjm5bxcCXrw","title":"Alibaba Cloud RDS instance is not set to perform auto upgrades for minor versions misconfiguration d","pathname":"/appsec-rules/iac-security/compute/appsec-ali-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"8fh6Dl5xg6a3gciFF8vc","title":"Disabled Ansible URI certificate validation misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-ansible-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"9PMpxGaJu49GqWkrUrqj","title":"Certificate validation disabled with Ansible get_url module misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-ansible-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"gLvKWkHzkZE3r3tw0UVr","title":"SSL certificate validation disabled with Ansible Yum misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-ansible-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"kLS2hgfiMztapHfIDS2e","title":"SSL validation is disabled with yum misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-ansible-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"Y9dCvwchzrMqH8DTDuZp","title":"Usage of packages with unauthenticated or missing signatures allowed misconfiguration detected in co","pathname":"/appsec-rules/iac-security/compute/appsec-ansible-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"zafl6rjYty7MQQ22gB23","title":"Usage of the force parameter disabling signature validation allowed misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/compute/appsec-ansible-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"f1rneHQnLeSCf7Ass6tF","title":"AWS Lambda functions with tracing not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-50","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"0DAXc1RD0vfTW860WMbt","title":"API Gateway does not have X-Ray tracing enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-73","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"ai6ouMHJFRxJECIiV3ex","title":"AWS EC2 instance not configured with Instance Metadata Service v2 (IMDSv2) misconfiguration detected","pathname":"/appsec-rules/iac-security/compute/appsec-aws-79","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"BKOE0wkFTJd4z3DOp9a3","title":"AWS EMR cluster is not configured with Kerberos Authentication misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-114","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"tq6tGUuxdy2Fou500NMm","title":"AWS Lambda function is not configured for function-level concurrent execution Limit misconfiguration","pathname":"/appsec-rules/iac-security/compute/appsec-aws-115","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"FPi0uq8ReNnKjroP24Fj","title":"AWS Lambda function is not configured for a DLQ misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-116","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"4n6e11WsSGproU2AMOsq","title":"AWS Lambda Function is not assigned to access within VPC misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-117","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"Vjdo1ivX7DoregELQlPT","title":"AWS API Gateway caching is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-120","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"mlW49C9p2sysY3RAk1N8","title":"Autoscaling groups did not supply tags to launch configurations misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-153","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"KKwTbB5KRYebiLjypg1Q","title":"ECR image scan on push is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-163","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"vZ6X71EkzEfxTXG6BvXl","title":"AWS MQBroker's minor version updates are disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-207","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"DqfLS00vrXGFGCSnbZsP","title":"AWS MQBroker version is not up to date misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-208","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"1RZyizDsQ67DZ1TEsVE1","title":"AWS Batch Job is defined as a privileged container misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-210","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"qaewVS8LtREv5G6xIc6v","title":"AWS API deployments do not enable Create before Destroy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-217","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"zh4S0rUsx1N1L3CSGElW","title":"AWS DMS replication instance automatic version upgrade disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-222","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"btwhVjfxCFjUvsn0yOqf","title":"AWS API Gateway method settings do not enable caching misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-225","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"be9cCfRcrMvGlcYDj1am","title":"AWS DB instance does not get all minor upgrades automatically misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-226","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"pUPzaVpozxEYxrhe62a6","title":"AWS ACM certificate does not enable Create before Destroy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-233","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"AiXXIewq1LkRH6FCuhu9","title":"Ensure AWS API gateway enables Create before Destroy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-237","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"zgQdr3mM6dduPVbRR4kK","title":"AWS HTTP and HTTPS target groups do not define health check misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-261","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"rk7CWzsk1ScB5Ofei1f2","title":"AWS Lambda function is not configured to validate code-signing misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-272","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"xc5Z4R3FCfRtdUFwZvwL","title":"API Gateway method setting is not set to encrypted caching misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-308","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"DKvRrOOB8KeEtGTtC7Zl","title":"RDS cluster is not configured to copy tags to snapshots misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-313","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"xCGJOKn8guID3mJDyYrs","title":"EC2 Auto Scaling groups are not utilizing EC2 launch templates misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-315","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"LSRtmcfJHhrL6fM2ICDN","title":"AWS CodeBuild project environment privileged mode is enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-316","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"SPA0SnXW8dwggYRDFj8a","title":"Elasticsearch domains are not configured with a minimum of three dedicated master nodes misconfigura","pathname":"/appsec-rules/iac-security/compute/appsec-aws-318","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"tlJ7brCb3nKTyeSgpqSA","title":"Redshift clusters are not using the default database name. misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-320","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"SN3Vqk8o8SozZe7BGwDD","title":"Redshift clusters are not using enhanced VPC routing misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-321","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"450USwwhdG0IxmpGlJud","title":"AWS ElastiCache Redis cluster automatic version upgrade disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-322","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"JI9rvAsqVEs2JgLtHEmr","title":"ECS Fargate services are not ensured to run on the latest Fargate platform version misconfiguration","pathname":"/appsec-rules/iac-security/compute/appsec-aws-332","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"SjGTfTJ0DUup0fRnRGuZ","title":"AWS ECS task definition elevated privileges enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-334","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"OU9U8P1oLvcBuwG0r0vi","title":"ECS task definitions have their own unique process namespace or share the host's process namespace m","pathname":"/appsec-rules/iac-security/compute/appsec-aws-335","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"oemob9ZbCxYkgxq5tJRz","title":"AWS ECS task definition is not configured with read-only access to container root filesystems miscon","pathname":"/appsec-rules/iac-security/compute/appsec-aws-336","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"iXHZJFLfoL5IM2sBKtEB","title":"AWS Elastic Beanstalk environment managed platform updates are not enabled misconfiguration detected","pathname":"/appsec-rules/iac-security/compute/appsec-aws-340","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"318qjOHQsJjXzRHTPRZo","title":"AWS Auto Scaling group launch configuration configured with Instance Metadata Service hop count grea","pathname":"/appsec-rules/iac-security/compute/appsec-aws-341","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"RX5ycBUoeOTVBlgPxahF","title":"Runtime of Lambda is deprecated misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-363","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"UHhRXKxM7vL22nz9gue4","title":"Hard-coded secrets found in Parameter Store values misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-384","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"tIJRHiQrzwvalSTPCeUf","title":"Potential WhoAMI name confusion attack exposure misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-386","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"dY6yfqo9CJTLLE5UyMXV","title":"AWS SQS queue access policy is overly permissive misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-aws-387","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"v9wgHXvd7YQUED4oTrXC","title":"Secrets are exposed in Azure VM customData misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-45","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"8HWhBUGNSHazSkVChEal","title":"Azure Linux scale set does not use an SSH key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"JLA3bzMtfqWtA8NOUytk","title":"Virtual Machine extensions are installed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-50","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"ekuohOtlu0kdhw6NpPsN","title":"Azure App Service Web app doesn't use latest .Net framework version misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/compute/appsec-azure-80","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"MNJVDhY8IKlItapWFlI6","title":"Azure App Service Web app does not use latest PHP version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-81","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"adfZXIm8O5cFKN3MBJ61","title":"Azure App Service Web app does not use latest Python version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-82","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"M3ySa6mIT1z8yfmVEVU6","title":"Azure App Service Web app does not use latest Java version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-83","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"hC0rPnEORiliYibdpoqx","title":"Azure Linux and Windows Virtual Machines does not utilize Managed Disks misconfiguration detected in","pathname":"/appsec-rules/iac-security/compute/appsec-azure-92","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"GxMTmsoS4Tk7Rm87kVkr","title":"Automatic OS image patching is disabled for Virtual Machine scale sets misconfiguration detected in","pathname":"/appsec-rules/iac-security/compute/appsec-azure-95","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"CBDAC68ct0oeUv1ooDwV","title":"Azure Data Factory does not use Git repository for source control misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-103","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"2RVL9CLNuj7gd5YlpU3H","title":"Azure Service Fabric cluster not configured with cluster protection level security misconfiguration","pathname":"/appsec-rules/iac-security/compute/appsec-azure-126","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"Sj8KrdnjpNXk6wz9gsJ9","title":"Azure Container Registry (ACR) Isn't Configured to Use Signed/Trusted Images misconfiguration detect","pathname":"/appsec-rules/iac-security/compute/appsec-azure-164","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"b7UCLZZJjrPjnq79zBQ3","title":"Azure Kubernetes Cluster (AKS) Nodes Don't Limit the Maximum Pods to Greater than 50 misconfiguratio","pathname":"/appsec-rules/iac-security/compute/appsec-azure-168","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"pFzSPmRk8se0GdsG9dzu","title":"Azure Kubernetes Cluster (AKS) Nodes Do Not Use Scale Sets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-169","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"Z4zUkLHPf2EAUJDZbs1p","title":"AKS Doesn't Use the Paid SKU for its SLA misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-170","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"EWUZYtxLSp6bt8NXpWW7","title":"AKS Cluster Without Upgrade Channel misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-171","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"gm8LVZGSfes5kLHrCzwO","title":"Windows VM Without Automatic Updates misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-177","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"S4bY5gYisM7mI6B8rmoJ","title":"VM Without Azure VM Agent Installed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-179","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"YrtmQks6rLeXOq6ziPvL","title":"App Configuration Not Using Standard SKU misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-188","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"BZSPjA3I6Qme5jkgpVzA","title":"Azure App Service Plan is Not Suitable for Production misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-211","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"zpNVC7XwvSft9sizwVdL","title":"Azure App Service Not Always On misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-214","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"8qxX8Oc1Lm6YJO3QC6Fl","title":"Operating system disks are not ephemeral disks misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-226","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"bEnJhyblqEMd97lAuMlr","title":"Non-Critical System Pods Run on System Nodes misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-azure-232","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"maRNvtnhvQW10zGsMc0w","title":"Healthcheck instructions have not been added to container images misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"wmnfa5f64n9i8WeNuvDu","title":"A user for the container has not been created misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"TNpgcMJexduJWDBB3Cqp","title":"Copy is not used instead of Add in Dockerfiles misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"TRLaG3zzj67TKu9dir12","title":"Update instructions are used alone in a Dockerfile misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"OV6FIdrJYuTB6N8l1Uwq","title":"LABEL maintainer is used instead of MAINTAINER (deprecated) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"KGJSo0TdtIZKy3fcBy0s","title":"Base image uses a latest version tag misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"oUJIS9wsEctr7ATvmHrx","title":"Last USER is root misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"Esk7HHLBvREf5QOZ4Ke4","title":"Docker APT is used misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"AHiFxpdfxHwHLJQvglBx","title":"Docker WORKDIR values are not absolute paths misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"AW5XL9DiiYLvlrYtS2zw","title":"Docker From alias is not unique for multistage builds misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-docker-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"IdhqBw3vpQJDAWTPqv07","title":"GCP Kubernetes Engine Clusters not using Container-Optimized OS for Node image misconfiguration dete","pathname":"/appsec-rules/iac-security/compute/appsec-gcp-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"2X5dNUvdWHYl9GS4jyiK","title":"GCP Kubernetes Engine Clusters have legacy compute engine metadata endpoints enabled misconfiguratio","pathname":"/appsec-rules/iac-security/compute/appsec-gcp-67","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"sCBrfF4ivVqx47EFZZRy","title":"GCP Kubernetes cluster shielded GKE node with Secure Boot disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-gcp-68","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"eYEaKfjEVbA2eDDWRst3","title":"GCP Kubernetes cluster Shielded GKE Nodes feature disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-gcp-71","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"LHcjl1z8uoZjY22d1O6J","title":"GCP SQL database does not use the latest Major version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-gcp-79","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"WeXdbukgCCyCvswcC2fW","title":"GKE NodePool configuration managed at cluster level misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-gcp-123","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"wDSqy5VZyH282Y9mGX6F","title":"Containers wishing to share host process ID namespace admitted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"C8B8dTlrBjXHMRZ6CZgs","title":"Privileged containers are admitted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"IPfpIvRXnC7AS9GCw4pU","title":"Containers wishing to share host IPC namespace admitted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"ZglpsxLldt9b97AhlOKC","title":"Root containers admitted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"6ShridluL2nChIDU5TCS","title":"Containers with NET_RAW capability admitted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"hqTltbLzHZoeWsKIRayc","title":"CPU request is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"DG70mE9LzUNLezioOhLt","title":"CPU limits are not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"qT2FAR2njnhihqZxOOEc","title":"Memory requests are not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"ZajcSPfxSS8wSa2EHoph","title":"Memory limits are not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"1ypkZkJ5h6dSwntRZ6u5","title":"Image tag is not set to Fixed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"6tuSgKnY0XhHPbFeOLeO","title":"Image pull policy is not set to Always misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"hAD21Cvs0yre3DI6bZp6","title":"Container is privileged misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"eJMQdhEKi8dddyo1eDx0","title":"Containers share host process ID namespace misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"Ao249Ay1zK31FCb0bMOn","title":"Containers share host IPC namespace misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"To5V34CwyWv1wX76kQsL","title":"Containers run with AllowPrivilegeEscalation misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"kWUwsbG75EpQzPXDnhSe","title":"Default namespace is used misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"JUfSd6egfw5FLm7VLBl3","title":"Read-Only filesystem for containers is not used misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"1kLqmFNviUr9QTw1h0l4","title":"Admission of root containers not minimized misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"DBJ7sT7YqbsM9GDx7Hlp","title":"Containers with added capability are allowed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"b77mrJSPFCWttsXLhDG4","title":"Admission of containers with added capability is not minimized misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"P8M4pmKPPutZuonuBMxh","title":"Mounting Docker socket daemon in a container is not limited misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"qLX6M2yfCBZ72IyWCrW5","title":"Admission of containers with NET_RAW capability is not minimized misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"BcwiCMYikMVQgC2uP09K","title":"securityContext is not applied to pods and containers misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"WAj7LBu1LglSrmSOQDbP","title":"securityContext is not applied to pods and containers in container context misconfiguration detected","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"CuSl6ONZTSAp3yLN6XcH","title":"seccomp is not set to Docker/Default or Runtime/Default misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"qLrnBJ5B1asxX3oWhaNH","title":"seccomp profile is not set to Docker/Default or Runtime/Default misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"VqA8MAlICcWSTCgcD3Tf","title":"Kubernetes dashboard is deployed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"o2EtwTfHbeTljgQQYtCr","title":"Tiller (Helm V2) is deployed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"v40T83fHYJ1SPRfjrdbg","title":"Admission of containers with capabilities assigned is not minimised misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"1HYK75277RRI68Y5rj0t","title":"Admission of containers with capabilities assigned is not limited misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"HNJArVMyMUhZEOtVW85Y","title":"CAP_SYS_ADMIN Linux capability is used misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"1qTx8y7RZCRire60luV6","title":"Containers do not run with a high UID misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"BOVdtuD0mDTU3CFkbAOb","title":"Images are not selected using a digest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"gNa1gbs2o0zGd6qXsHDB","title":"Tiller (Helm v2) service is not deleted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"nDnKv8mkgBPea3TZCXD1","title":"The admission control plugin EventRateLimit is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-78","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"UPQLxiAB2T1ZiXHRdR18","title":"The admission control plugin AlwaysAdmit is set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-79","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"u0SbT8Huq330rwtJ8fY4","title":"The admission control plugin AlwaysPullImages is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-80","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"qMfdBNSEJWSWYhIv7SSJ","title":"The admission control plugin NamespaceLifecycle is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-83","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"ChrsGPwv8V3lOhQfyR8Y","title":"The --terminated-pod-gc-threshold argument for controller managers is not set appropriately misconfi","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-106","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"TXElm7asXrH0QHqxbEfi","title":"The --streaming-connection-idle-timeout argument is set to 0 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-143","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"ikrw392kzjl51QfQPXda","title":"The --protect-kernel-defaults argument is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-144","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"1GionBUTZ2fAnDOhUY9j","title":"The --hostname-override argument is set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-k8s-146","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"hBp7rZ6snhQXd0hQSKfB","title":"OCI Compute Instance boot volume has in-transit data encryption is disabled misconfiguration detecte","pathname":"/appsec-rules/iac-security/compute/appsec-oci-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"L9SGdvWd60pA00sLcy5z","title":"OCI Compute Instance has Legacy MetaData service endpoint enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-oci-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"BwtHP2R0T96KNLxTgHJT","title":"Operation objects do not have the 'produces' field defined for GET operations misconfiguration detec","pathname":"/appsec-rules/iac-security/compute/appsec-openapi-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"eMsYTRSqlc1znC06LSwl","title":"Operation objects for PUT, POST, and PATCH operations do not have a 'consumes' field defined misconf","pathname":"/appsec-rules/iac-security/compute/appsec-openapi-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"6wPxFntW7IjreOOe9Xef","title":"Array does not have a maximum number of items misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec-openapi-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"QCwQpLxS6kyPsroVOOse","title":"DNF usage of packages with untrusted or missing GPG signatures allowed misconfiguration detected in","pathname":"/appsec-rules/iac-security/compute/appsec2-ansible-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"4UgUsq6L7OT6CLVRwQQX","title":"SSL validation disabled within Ansible DNF module misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-ansible-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"V5ogJHMVMy0RwaKf6jZ9","title":"Certificate validation disabled within Ansible DNF module misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-ansible-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"kzSRni0xi7JehR7xfc64","title":"AWS Elasticsearch domain has Dedicated master set to disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-aws-59","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"w0PA9MtXQXBDIWuTznwq","title":"Azure Virtual Machines does not utilise Managed Disks misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-azure-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"mli7UTBOeXrJlwf33xqW","title":"Microsoft Antimalware is not configured to automatically update Virtual Machines misconfiguration de","pathname":"/appsec-rules/iac-security/compute/appsec2-azure-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"YDXbTDpmgJiTmanDryoJ","title":"Dockerfile contains the use of 'sudo' misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"abtpVWIBqcCAjQA5n9Ag","title":"Dockerfile certificate validation is disabled with curl misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"zABji5b2QOHVlS7tBPy8","title":"Dockerfile certificate validation is disabled with wget misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"b3QDYN3XDUIgmmu7AQZy","title":"Dockerfile certificate validation is disabled with the pip '--trusted-host' option misconfiguration","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"22vONVvoha5ogWT95Tom","title":"Dockerfile certificate validation is disabled with the PYTHONHTTPSVERIFY environment variable miscon","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"jYGSUcdaib1jDY9D7esT","title":"Dockerfile Node.js certificate validation is disabled with the NODE_TLS_REJECT_UNAUTHORIZED environm","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"WWx1QyOXW990Rb8u5Z3u","title":"Dockerfile APK package manager is configured to allow untrusted repositories misconfiguration detect","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"11cRv1OJWeVpPQzu4LoO","title":"Dockerfile APT package manager is configured to allow unauthenticated packages misconfiguration dete","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"2rzuwxUrRXfG8rLkp9nE","title":"Dockerfile YUM package manager is configured to skip GPG signature checks misconfiguration detected","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"hGWahCQvSJ8dqdF3Yo3y","title":"Dockerfile RPM package manager is configured to skip package signature checks misconfiguration detec","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"LK3BUtPo2eJMpbyLNJhU","title":"Dockerfile APT package manager is configured to force package installations without prompts or verif","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"LTjeEEKhAVkuHEEOjsNN","title":"Dockerfile configuration disables strict SSL for NPM misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"axjLzrcBcaKU07qHRe9b","title":"Dockerfile sets NPM configuration to disable strict SSL misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"kaM3n54dvnEBECUkOVsg","title":"Dockerfile configures GIT to disable SSL verification misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"R6E7i2wUAYuBNV4jYA44","title":"Dockerfile sets YUM configuration to disable SSL verification misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"oX3v3wYcFuFW2qDsJrG3","title":"Dockerfile uses a trusted host with pip misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-docker-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"XTRrtQyg4pYioyqnobUy","title":"GCP Kubernetes Engine Clusters have Alpha cluster feature enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/compute/appsec2-gcp-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Compute"}]},{"id":"EWzPONP99g4yze1OiwRG","title":"IAM","pathname":"/appsec-rules/iac-security/iam","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"VT3mHCrzIAGdKjuAdQ27","title":"Alibaba Cloud RAM password policy does not have a minimum of 14 characters misconfiguration detected","pathname":"/appsec-rules/iac-security/iam/appsec-ali-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"G9suRAqj02fTYg1hUYyv","title":"Alibaba Cloud RAM password policy does not have a number misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-ali-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"rIJxVp1h9AMx2j5G4uq4","title":"Alibaba Cloud RAM password policy does not have a symbol misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-ali-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"qxV0Kt1vKlzfv6ab9JLG","title":"Alibaba Cloud RAM password policy does not expire in 90 days misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-ali-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"eO6dytLm9yWLQy8bUv9G","title":"Alibaba Cloud RAM password policy does not have a lowercase character misconfiguration detected in c","pathname":"/appsec-rules/iac-security/iam/appsec-ali-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"kM5TQupihvQYJCkIU3Ji","title":"Alibaba Cloud RAM password policy does not prevent password reuse misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-ali-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"o5UgHQsRpwdy8GYZp7qd","title":"Alibaba Cloud RAM password policy does not have an uppercase character misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-ali-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ShFCxGER0tLmjneHFONi","title":"Alibaba Cloud RAM password policy maximal login attempts is more than 4 misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-ali-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"5LKgeC0zgv6a1GeS0XYO","title":"Alibaba Cloud RAM does not enforce MFA misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-ali-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"fKfdNVFPHanJwsb6Imkt","title":"Alibaba Cloud KMS Key Rotation is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-ali-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"hLKdLIlRXWjmSfJWyEsh","title":"Alibaba Cloud KMS Key is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-ali-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"BNXMbgkGdWDwiddVZEN0","title":"AWS IAM policies that allow full administrative privileges are created misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-aws-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"SK3tYtN63A3WlrOqJg4M","title":"AWS Customer Master Key (CMK) rotation is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"MQ5lFcTzOZYoZ2F6oRF8","title":"AWS IAM password policy does not expire in 90 days misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"62pTkCntlwIKVXyQG84K","title":"AWS IAM password policy does not have a minimum of 14 characters misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"bfE2yDjHBJa2H9VcRYJ3","title":"AWS IAM password policy does not have a lowercase character misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"nJhO92GZo8rnQWz9WsLu","title":"AWS IAM password policy does not have a number misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"kTlr1oCG3RZ6B3LbcdGM","title":"AWS IAM password policy does allow password reuse misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ZvSaUOuwE2rJzeFBanZO","title":"AWS IAM password policy does not have a symbol misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"e3WewL76sKteEJxBq1tj","title":"AWS IAM password policy does not have an uppercase character misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"mi5cpMKG0dY1YTo2emAx","title":"AWS Private ECR repository policy is overly permissive misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"7VOx53Rx0oG81yDYbtZR","title":"AWS KMS Key policy overly permissive misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"mNzgcoiF9GivBPOzLQYP","title":"AWS IAM policy attached to users misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ybhjieS6UBX76XeuyyEh","title":"AWS IAM policy documents do not allow * (asterisk) as a statement's action misconfiguration detected","pathname":"/appsec-rules/iac-security/iam/appsec-aws-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"tncvUQOplUj6er3UkB5e","title":"AWS IAM role allows all services or principals to be assumed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-60","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"EXhYlAogkDqJVxfuOdvq","title":"AWS IAM policy allows all principals used by any AWS service from target account to assume role misc","pathname":"/appsec-rules/iac-security/iam/appsec-aws-61","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ffb8PeT9pxQR8rLePiYK","title":"AWS IAM policies that allow full \"-\" administrative privileges are created misconfiguration detected","pathname":"/appsec-rules/iac-security/iam/appsec-aws-62","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"kkadKISHLlLUYoa6XJQM","title":"AWS IAM policy documents allow * (asterisk) as a statement's action misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/iam/appsec-aws-63","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"KruQs6w3iUrtPFo9VREf","title":"SQS policy allows all actions misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-72","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"SC9CinVwMfiIv6SgLgd2","title":"Credentials exposure actions return credentials in an API response misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-107","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"P0shyQ7HoFg3zLv65rkh","title":"Data exfiltration allowed without resource constraints misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-108","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"vVegrJa2o6J09YeyFbGf","title":"Resource exposure allows modification of policies and exposes resources misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-aws-109","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"S1tC8OQnCHYtokaSGMut","title":"IAM policies allow privilege escalation misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-110","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"BoURUYzonPTmEoMh1g1Z","title":"Write access allowed without constraint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-111","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"T9QzKAY8Miyvsmyjehpf","title":"Respective logs of Amazon RDS are disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-129","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"xzcc6NiZVwC67er4qRng","title":"RDS database does not have IAM authentication enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-161","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"5pttUrq4xJVcfCe12Gbb","title":"AWS RDS cluster not configured with IAM authentication misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-162","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"D14eMmRyoEb9lhFZm01J","title":"Glacier Vault access policy is public and not restricted to specific services or principals misconfi","pathname":"/appsec-rules/iac-security/iam/appsec-aws-167","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"8lQYX8RN2bIaB8Y3q3Ca","title":"SQS queue policy is public and access is not restricted to specific services or principals misconfig","pathname":"/appsec-rules/iac-security/iam/appsec-aws-168","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"7ReGpy3iOkiTAJ9R8opD","title":"SNS topic policy is public and access is not restricted to specific services or principals misconfig","pathname":"/appsec-rules/iac-security/iam/appsec-aws-169","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Na0YrP4tCApbTB50vOE5","title":"AWS AMI launch permissions are not limited misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-205","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"eOhwJkN1RpLPnMqV8cfw","title":"AWS Key Management Service (KMS) key is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-227","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"DcmmUsrHxeHSaVVmuBoI","title":"AWS Execution Role ARN and Task Role ARN are different in ECS Task definitions misconfiguration dete","pathname":"/appsec-rules/iac-security/iam/appsec-aws-249","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"K4DmetSiR7Sul49vpnFl","title":"AWS Codecommit branch changes has less than 2 approvals misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-257","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"aHcVYDh3AZozsQENrAYE","title":"AWS Lambda function URL AuthType set to NONE misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-258","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Jx4saChr7qulJW5mpNfB","title":"Access is not controlled through Single Sign-On (SSO) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-273","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"P0Z03SJsu04NgytGxJtS","title":"AWS AdministratorAccess policy is used by IAM roles, users, or groups misconfiguration detected in c","pathname":"/appsec-rules/iac-security/iam/appsec-aws-274","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"0S7Fir3KGtwJgNGWWfW2","title":"IAM policy uses the AWS AdministratorAccess policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-275","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"EdJSIIvOtQU9ku35vetc","title":"IAM Policy Document Allows All or Any AWS Principal Permissions to Resources misconfiguration detect","pathname":"/appsec-rules/iac-security/iam/appsec-aws-283","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"uAsxjC4dvHLaaRmKNTCJ","title":"AWS IAM Policy permission may cause privilege escalation misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-286","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"RsGUkmABL5fzUBpZ89eQ","title":"IAM policies allow exposure of credentials misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-287","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"MnLVAeQDmUmM4bgisfh2","title":"IAM policies allow data exfiltration misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-288","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"g5TE81TDY9B0GjTA4T2Q","title":"IAM policies allow permissions management or resource exposure without constraints misconfiguration","pathname":"/appsec-rules/iac-security/iam/appsec-aws-289","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"vYNNisyvjB1d5aoF0YSq","title":"IAM policies allow write access without constraints misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-290","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Knw1doPMQQ3wvgwvjoQl","title":"AWS Lambda Function resource-based policy is overly permissive misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-301","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"XM1lctmCZJE663k5kUyk","title":"Authorization type for API GatewayV2 routes is not specified misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-309","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"2rLwcIso5BkDFvfQW4Zh","title":"AWS Access key enabled on root account misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-348","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"8R7ikFIUIK2tYyFLmN7c","title":"IAM policy document allows all resources with restricted actions misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-355","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"cL1cye9R8aIPFwuBPdvD","title":"Data source IAM policy document allows all resources with restricted actions misconfiguration detect","pathname":"/appsec-rules/iac-security/iam/appsec-aws-356","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"8hruxntnd9Lya4lt4O8M","title":"AWS GitHub Actions OIDC authorization policies allow for unsafe claims or claim order misconfigurati","pathname":"/appsec-rules/iac-security/iam/appsec-aws-358","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Vy7s52gPOByXb7srFn4R","title":"AWS Neptune Cluster not configured with IAM authentication misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-359","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"rve4uGl6VrGvZFppGWBo","title":"Permissions delegated to AWS services for AWS Lambda functions are not limited by SourceArn or Sourc","pathname":"/appsec-rules/iac-security/iam/appsec-aws-364","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"NPvl9tg0unthFGjFWPTp","title":"AWS Cognito identity pool allows unauthenticated guest access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-366","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"q3nUeKUha1Si32ta8SGC","title":"AWS Security Group allows unrestricted egress traffic misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-aws-382","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"RIArXsMyEW7chWeL7EIc","title":"AWS GitHub Actions OIDC authorization policies allow for unsafe claims or claim order on IAM role mi","pathname":"/appsec-rules/iac-security/iam/appsec-aws-393","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"DD1FWY9XWWshG9lkIuJ9","title":"Azure AKS enable role-based access control (RBAC) not enforced misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"DPE2Q5upZoY5MHXjAWVZ","title":"Azure AKS cluster configured with overly permissive API server access misconfiguration detected in c","pathname":"/appsec-rules/iac-security/iam/appsec-azure-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"32iAvbJw5UwQ0FkntBFv","title":"Azure App Service Web app authentication is off misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"PgTTqZtqdrhe3sLlfp9i","title":"App Service is not registered with an Azure Active Directory account misconfiguration detected in co","pathname":"/appsec-rules/iac-security/iam/appsec-azure-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"eT9vrf8J5IS9k7CcTM9b","title":"Azure subscriptions with custom roles does not have minimum permissions misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-azure-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"BLAxjQ4EBdgBbt2bfL5N","title":"Azure Function App authentication is off misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-56","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Pyv2A3trTYzfRCYsO8mU","title":"Azure App Service Web app doesn't have a Managed Service Identity misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-71","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"rsMvodu043Pg86fa8eJr","title":"AKS does not use Azure policies add-on misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-116","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"6SJg4iiC4DiAvPjcSx9V","title":"Active Directory is not used for authentication for Service Fabric misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-125","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"OTiSvTlS8t4MZfS8qAzK","title":"Azure ACR admin account is enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-137","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"iyu4DhengzJ5bQVDLeR5","title":"Azure ACR enables anonymous image pulling misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-138","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"GsIWU7UNQIqsbpk3ncjj","title":"Azure CosmosDB does not have Local Authentication disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-140","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"fxX6h616nvzSZAlqaC4F","title":"Azure Kubernetes Service (AKS) local admin account is enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-141","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"1IrD8suk7IEXKUMmKntQ","title":"Azure SQL on Virtual Machine (Linux) with basic authentication misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-149","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"SKg1YVjdQJBDfAu78z3E","title":"Web PubSub Without Managed Identities misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-176","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"TeFBYSYixmkdWrYjUMeu","title":"Linux VM Without SSH Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-178","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"N0oTHBZ3gqpZ4wTgw590","title":"Data Explorer Not Using Managed Identities misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-181","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"yVt6LeVP52zpOTE7C8Cb","title":"App Configuration Using Local Authentication misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-184","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Te1NL2pM80OALsJvagn0","title":"Azure Event Grid Topic Managed Identity Provider misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-191","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"IXjvmt4890mfZfdAx9CY","title":"Azure Event Grid Topic Local Authentication Enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-192","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"FQZD56aWljU9l7jOywo5","title":"Azure Event Grid Domain Managed Identity Provider is Disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-194","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"3CykEnjvCgLNMJjjeMAf","title":"Azure Event Grid Domain Local Authentication Enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-195","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"CAeAhH6HCIeumtPW5iQP","title":"Azure Service Bus Without Managed Identity Provider misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-202","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"vIuX5jgU1M1M6Qimovxs","title":"Azure Service Bus with Local Authentication Enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-203","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"AFexuNYcGjGoTi27QAuf","title":"Azure Cognitive Search Without Managed Identities misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-207","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"e7hTmzwTUqISIIHtRssc","title":"Local users used for Azure Storage misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-244","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"J2DmbxUVtFsEG9I2BJwT","title":"Azure GitHub Actions OIDC trust policy is insecurely configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-azure-249","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"php8C72Lo8SuLp40f3fK","title":"GCP Kubernetes Engine Clusters have Legacy Authorization enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"okUBEP5wsUBj2VNlDGdZ","title":"GCP Kubernetes engine clusters have client certificate disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"3c2McNbE1iSX35m61tlo","title":"GCP Kubernetes Engine Clusters have pod security policy disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ccupekiLQccLoUzmHS2m","title":"GCP VM instance configured with default service account misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"JgJ2zcjxUQLoYGKlAiPG","title":"GCP VM instance using a default service account with Cloud Platform access scope misconfiguration de","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"PwXWDjQ720a5SatGVG71","title":"GCP IAM user are assigned Service Account User or Service Account Token creator roles at project lev","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"85UoZcYQGvFSCbHoSrBU","title":"GCP IAM Service account does have admin privileges misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"qwyOq9j4OgsBzEuhx7jv","title":"Roles impersonate or manage Service Accounts used at folder level misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"rEdniuZt5N5OZdDGFkTu","title":"Roles impersonate or manage Service Accounts used at organizational level misconfiguration detected","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-45","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Ezo1Nvho8vyTzREwf0j5","title":"Default Service Account is used at project level misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-46","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"HI9mIvUvkZBkpB0QRllg","title":"Default Service Account is used at organization level misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-47","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"HJUmskJOEjkU7zVKOke2","title":"Default Service Account is used at folder level misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-48","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"moApn0qPtXSQ670466Zf","title":"GCP IAM primitive roles are in use misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"D5ttyxkGM3wFPFPJJB5U","title":"Kubernetes RBAC users are not managed with Google Groups for GKE misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-65","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"opEMLhsJxGbbaZSB1qXR","title":"GCP Kubernetes Engine Clusters have binary authorization disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-66","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"L1eEznyyB9on6rTODjUn","title":"GCP Memorystore for Redis has AUTH disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-95","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"LWY3uvcaMYQRv9bjk4cw","title":"KMS policy allows public access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-112","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"e3BEBLLhH2muwprYmV6k","title":"IAM policy defines public access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-113","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"jiq81xqOrKsSMvScVF7Z","title":"Basic roles utilized at the organization level misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-115","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"g9SWgc4YI19doSOlCrPt","title":"Basic roles used at the folder level misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-116","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"EbvkmiP7UyFA4NjCcpkZ","title":"Project level utilization of basic roles misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-117","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"M3FUYG6rMTmNdPfvYGxS","title":"IAM workload identity pool provider is not restricted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-118","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"cnoihhYnf4wyIUB6Ysnd","title":"GCP GitHub Actions OIDC trust policy is insecurely configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-gcp-125","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"zT07HjxqAn0aDvzcJgOP","title":"GitHub pull request configurations defined in Terraform have less than 2 approvals misconfiguration","pathname":"/appsec-rules/iac-security/iam/appsec-git-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"dybWZEVl6Jy1LtCC9XiN","title":"GitHub repository defined in Terraform does not have GPG signatures for all commits misconfiguration","pathname":"/appsec-rules/iac-security/iam/appsec-git-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Bg3uz0mLptjNkRLr66lu","title":"Gitlab project defined in Terraform requires fewer than 2 approvals misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/iam/appsec-glb-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"2zEvblQ0CuX4PWwl381y","title":"Gitlab branch protection rules defined in Terraform allow force push misconfiguration detected in co","pathname":"/appsec-rules/iac-security/iam/appsec-glb-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"oHuIfbD26OJJYCQFs6uw","title":"Gitlab project defined in Terraform does not require signed commits misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/iam/appsec-glb-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"QDiX3z2Lo10Zj2TdCZk6","title":"Containers run with AllowPrivilegeEscalation based on Pod Security Policy setting misconfiguration d","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Cne36CH96kH7r4nZSIli","title":"Secrets used as environment variables misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"43v3SgitAWyfzP3pNTfG","title":"Service account tokens are not mounted where necessary misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"bajFVvcMhTqb93xVwUTL","title":"Default service accounts are actively used misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"TJr16Iz5O2dNTgJ1JZYJ","title":"Default Kubernetes service accounts are actively used by bounding to a role or cluster role misconfi","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"YWQPBbuQC6bj8YnwpiIT","title":"Wildcard use is not minimized in Roles and ClusterRoles misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"xpZRqkc4BZrWGO67h0JY","title":"The --anonymous-auth argument is not set to False for API server misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-68","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"CFbvWKoBSRqHFFQFPPhO","title":"The --basic-auth-file argument is Set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-69","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"PFZDZjyiBDnDTMWD6Bs9","title":"The --token-auth-file argument is Set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-70","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"OzhcyBFx5fwUUFXMRwtw","title":"The --kubelet-client-certificate and --kubelet-client-key arguments are not set appropriately miscon","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-72","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"YKOQfiQMTcNSeYZIh6YI","title":"The --kubelet-certificate-authority argument is not set appropriately misconfiguration detected in c","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-73","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"NiDVEl78rc0y64UE5rvd","title":"The --authorization-mode argument is set to AlwaysAllow for Kubelet misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-74","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"dBn2dPwGBoi4p09DKGmq","title":"The --authorization-mode argument does not include node misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-75","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"KvZ74E8RQYkjfBjIaptQ","title":"The --authorization-mode argument does not include RBAC misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-77","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"9vlh6Pul95H3c0N9zJf3","title":"The admission control plugin SecurityContextDeny is set if PodSecurityPolicy is used misconfiguratio","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-81","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"SRVu2OKGdHzKF3j1pQUs","title":"The admission control plugin ServiceAccount is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-82","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"4ffXY9Fw78zxaf3YM1pw","title":"The admission control plugin PodSecurityPolicy is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-84","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Z3hubqqTvStOVsCv10DK","title":"The admission control plugin NodeRestriction is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-85","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"cQP8LxifyecnIXOPwuNv","title":"The --service-account-lookup argument is not set to true misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-96","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ZWTRrsUqq793NRtXKOej","title":"The --service-account-key-file argument is not set appropriately misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-97","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ZyMoM10nFLhVPH5P4ynt","title":"The --etcd-cafile argument is not set appropriately misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-102","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"hQA6AYWfiZ6lniV9Fq82","title":"The --use-service-account-credentials argument for controller managers is not set to True misconfigu","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-108","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"f3YxVEGiiSFMnoSDFUXf","title":"The --service-account-private-key-file argument for controller managers is not set appropriately mis","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-110","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"PcR1rGNrLTHh1LXqg5M4","title":"The --root-ca-file argument for controller managers is not set appropriately misconfiguration detect","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-111","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"RtgJRbySzXyIW5H9mwi6","title":"The RotateKubeletServerCertificate argument for controller managers is not set to True misconfigurat","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-112","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"DW4ML9eeLju8veGt9rlh","title":"The --client-cert-auth argument is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-117","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"4XoSqzCuBYHKRgi8FpJT","title":"The --peer-client-cert-auth argument is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-121","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Zso3Qzs54tJ1gQAlGNpq","title":"The --anonymous-auth argument is not set to False for Kubelet misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-138","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"2XgM7bcXtJL3JSsxGq7L","title":"The --authorization-mode argument is set to AlwaysAllow for API server misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-139","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"fGLZbyZ2Eq9ccoL9a1aU","title":"The --client-ca-file argument for API Servers is not set appropriately misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-140","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"hVsmJBtpCKmmt5iFB9f0","title":"The --rotate-certificates argument is set to false misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-149","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"a1R7t4Ie3V3S3jf25qRm","title":"Kubernetes ClusterRoles that grant control over validating or mutating admission webhook configurati","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-155","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"z14tAxKUNHFGrnamMLZZ","title":"Kubernetes ClusterRoles that grant permissions to approve CertificateSigningRequests are not minimiz","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-156","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"I6KDM8RMyZsSEV70l6tT","title":"Kubernetes Roles and ClusterRoles that grant permissions to bind RoleBindings or ClusterRoleBindings","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-157","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Gkpz1BYUWbGCsVDVjWPW","title":"Kubernetes Roles and ClusterRoles that grant permissions to escalate Roles or ClusterRole are not mi","pathname":"/appsec-rules/iac-security/iam/appsec-k8s-158","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"h11UA14j8hTG8nDRIgrh","title":"OCI private keys are hard coded in the provider misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-oci-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"TDKYTHwULWVDCA2MY4Xg","title":"OCI IAM password policy for local (non-federated) users does not have a lowercase character misconfi","pathname":"/appsec-rules/iac-security/iam/appsec-oci-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"PJj4sGEh8UI40gMQNV9f","title":"OCI IAM password policy for local (non-federated) users does not have a number misconfiguration dete","pathname":"/appsec-rules/iac-security/iam/appsec-oci-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"kVN7DKJrDArPGOJglxFL","title":"OCI IAM password policy for local (non-federated) users does not have a symbol misconfiguration dete","pathname":"/appsec-rules/iac-security/iam/appsec-oci-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"tWuSPUep4tDkkrCB6hQT","title":"OCI IAM password policy for local (non-federated) users does not have an uppercase character misconf","pathname":"/appsec-rules/iac-security/iam/appsec-oci-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"S9VrvuXT9MD3taHba4mI","title":"OCI IAM password policy for local (non-federated) users does not have minimum 14 characters misconfi","pathname":"/appsec-rules/iac-security/iam/appsec-oci-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"idrG0Jm00kNpqqAxzKOV","title":"OpenAPI Security object needs to have defined rules in its array and rules should be defined in the","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"SyxoLW3XBz8IEL8SlPE1","title":"OpenAPI Security object for operations, if defined, must define a security scheme, otherwise it shou","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"inQAppbLcAewrgsNPHPy","title":"OpenAPI Security requirement not defined in the security definitions misconfiguration detected in co","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"N2Jfc4BAKLadB4qNMCIp","title":"API spec includes a 'password' flow in OAuth2 authentication misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"hwizxvlrEEc1dgkGiyAl","title":"Security scopes of operations are not defined in securityDefinition misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"JqkUFpIiW5I7BY46ExVU","title":"OAuth2 security definitions includes password flow in OpenAPI 2.0 file misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"O5lZDqFOf5PgtBQQ5LD1","title":"OAuth2 password flow in security definitions for OpenAPI 2.0 file misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"arbpMPkCw9woaakhBcSa","title":"Security definition uses the deprecated implicit flow on OAuth2 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"z3D9OTDI7I6dIrw3mdqA","title":"Security definitions uses basic auth misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"DnJ5FU64mrkteTGu5Nov","title":"Operation Objects Uses 'Implicit' Flow misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"MvGCcepCIWKMSBZZY6df","title":"Operation Objects Uses Basic Auth misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"c3HlCoBrqUkaVaSF1IIH","title":"The global security scope is not defined in the securityDefinitions misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/iam/appsec-openapi-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"UPRfPidhoLVgk3HTPMi0","title":"OpenStack hard coded password, token, or application_credential_secret exists in provider misconfigu","pathname":"/appsec-rules/iac-security/iam/appsec-openstack-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"X8T4woi39pRgMJOuL3Ky","title":"OpenStack instance use basic credentials misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec-openstack-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"Kl6mMuDWy3n5uy941AO0","title":"AWS IAM group not in use misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"9ppiAtYon6YYecX7AyuD","title":"Not all IAM users are members of at least one IAM group misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"kve4npuoSdbFIbKv1w2K","title":"IAM User has access to the console misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"bImCiyMgA0yl8qt5FZuL","title":"AWS IAM policy allows full administrative privileges misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"C4x2VWZ44IfsBhCnS6Fp","title":"AWS EC2 Instance IAM Role not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"EdPD1OcHovhsVV3sK0US","title":"AWS S3 buckets are accessible to any authenticated user misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"6OXQUUhEUPB31RaUzV5x","title":"AWS Cloudfront Distribution with S3 have Origin Access set to disabled misconfiguration detected in","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-46","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"pyUVmr1VsVGdHhCdcZBz","title":"AWS OpenSearch Fine-grained access control is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-52","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"fQhtROtU3N0Lk28ofnmL","title":"The AWS Managed IAMFullAccess IAM policy should not be used misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-56","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"sGQl8ml3GjsURNmiUSur","title":"A Policy is not Defined for KMS Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-64","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"CGsw8BzyszYx3hPJf6PA","title":"AWS API Gateway method lacking authorization or API keys misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-aws-70","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"5jScBhL7uSGRkyDYcZiv","title":"Azure SQL servers which doesn't have Azure Active Directory admin configured misconfiguration detect","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"SNIro310Lr92pkVx8NRR","title":"Azure SQL server not configured with Active Directory admin authentication misconfiguration detected","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"2YPPkmO2EUjZX7JeSdBv","title":"Azure Container Instance not configured with the managed identity misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"CDilbGxf5qh1raP0jZ4C","title":"Azure Recovery Services vault is not configured with managed identity misconfiguration detected in c","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"b8PLELlTP71AOp8FD5Ri","title":"Azure Automation account is not configured with managed identity misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"cVLkXwNz1OOuZhBeKWCd","title":"Azure Storage account configured with Shared Key authorization misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"6NHmqbHTBgfYCO9Uxyay","title":"Azure Storage account not configured with SAS expiration policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"byFkluUX15qLUYP8wmcz","title":"Anonymous blob access configured in Azure storage account misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-azure-47","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"x4MAQHLU3vIOMSpeAtbW","title":"'chpasswd' is used to set or remove passwords misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-docker-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"fuzTotVLPYIDQfAj744B","title":"GCP Kubernetes Engine Cluster Nodes have default Service account for Project access misconfiguration","pathname":"/appsec-rules/iac-security/iam/appsec2-gcp-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"iFiKruC2UQs1ajkh6DeN","title":"There are not only GCP-managed service account keys for each service account misconfiguration detect","pathname":"/appsec-rules/iac-security/iam/appsec2-gcp-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"lXaHfQtygEQbYi2gyUMv","title":"A MySQL database instance allows anyone to connect with administrative privileges misconfiguration d","pathname":"/appsec-rules/iac-security/iam/appsec2-gcp-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"XJWRXBpMkKdeLUhHG7aR","title":"IBM Cloud API key creation is not restricted in account settings in Terraform misconfiguration detec","pathname":"/appsec-rules/iac-security/iam/appsec2-ibm-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"w8nJAmTTHaeTsbXNNLzi","title":"IBM Cloud Multi-Factor Authentication (MFA) not enabled at the account level in Terraform misconfigu","pathname":"/appsec-rules/iac-security/iam/appsec2-ibm-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"58cvh7hE7lLAKCmyexIc","title":"IBM Cloud Service ID creation is not restricted in account settings in Terraform misconfiguration de","pathname":"/appsec-rules/iac-security/iam/appsec2-ibm-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"ZfDyI5yFOo0ShbdCEhck","title":"RoleBinding should not allow privilege escalation to a ServiceAccount or Node on other RoleBinding m","pathname":"/appsec-rules/iac-security/iam/appsec2-k8s-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"aKYpoyCrfBmSxktLbXhH","title":"Granting create permissions to nodes/proxy or pods/exec sub resources allows potential privilege esc","pathname":"/appsec-rules/iac-security/iam/appsec2-k8s-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"eSzzkFig4CGfA5KCHOoQ","title":"No ServiceAccount/Node should have impersonate permissions for groups/users/service-accounts misconf","pathname":"/appsec-rules/iac-security/iam/appsec2-k8s-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"pAa1gfdosyEJwTtlUlbK","title":"ServiceAccounts and nodes that can modify services/status may set the status.loadBalancer.ingress.ip","pathname":"/appsec-rules/iac-security/iam/appsec2-k8s-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"S8hcltCogIhImnVByAs3","title":"No ServiceAccount/Node should be able to read all secrets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-k8s-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"UwGo58hYWeh8vngT3cbS","title":"OCI tenancy administrator users are associated with API keys misconfiguration detected in code","pathname":"/appsec-rules/iac-security/iam/appsec2-oci-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"IAM"}]},{"id":"gAe2ckgT0U2irUkkjAmZ","title":"Logging","pathname":"/appsec-rules/iac-security/logging","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"0BclSNGd1SCxpVFwnSqP","title":"Alibaba Cloud Action Trail Logging is not enabled for all regions misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-ali-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"zGfzQRibgcz9Mrc5324U","title":"Alibaba Cloud Action Trail Logging is not enabled for all events misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-ali-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"3oSTNPbrJfnTDP4D0Jyd","title":"Alibaba Cloud OSS bucket has access logging enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-ali-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"8YDvXj8cktrIkT3xvhNA","title":"Alibaba Cloud RDS Instance SQL Collector Retention Period is less than 180 misconfiguration detected","pathname":"/appsec-rules/iac-security/logging/appsec-ali-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"oyF4eZExkj6QOdsQu2VD","title":"Alibaba Cloud RDS instance does not have log_duration enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-ali-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"vcIegymmbzqzrLBSjyeW","title":"Alibaba Cloud RDS instance has log_disconnections disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-ali-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"g6sDqotQkQ3Pmybm6TYj","title":"Alibaba Cloud RDS log audit is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-ali-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"3gM9X0t94K7ExXmtooWr","title":"AWS CloudTrail log validation is not enabled in all regions misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"PqLSK9p0vif5Wpm52WDe","title":"AWS EKS control plane logging disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"6XOcdRUdAQ6RkTkvOFet","title":"Amazon MQ Broker logging is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-48","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"eKenhnejwks8xWB876UT","title":"AWS CloudWatch Log groups not configured with definite retention days misconfiguration detected in c","pathname":"/appsec-rules/iac-security/logging/appsec-aws-66","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"qnX07CPCaZnsJyC2j7Tn","title":"AWS CloudTrail is not enabled with multi trail and not capturing all management events misconfigurat","pathname":"/appsec-rules/iac-security/logging/appsec-aws-67","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"k1t9lYnmqUQSYu6OH1nc","title":"AWS Redshift database does not have audit logging enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-71","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"mpJ9JXwwwRNaMubn4Kbb","title":"Global Accelerator does not have Flow logs enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-75","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"z3iwaQVK3KXYRo1DA66Q","title":"API Gateway does not have access logging enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-76","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"qdU15Bnkgvizz9HMSFme","title":"Amazon MSK cluster logging is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-80","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"LpTzRvSE6cRPrP3jRtcp","title":"AWS Elasticsearch domain logging is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-84","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"Rq1mCsue3otzN3z5tULU","title":"AWS DocumentDB logging is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-85","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"7RetKC0DxTw1lGzZP54m","title":"AWS CloudFront distribution with access logging disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-86","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"7png42G2BJ5aM5Fd8Fxt","title":"AWS Elastic Load Balancer v2 (ELBv2) with access log disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-91","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"VL2gzMyDnSa4WTfJhiZ3","title":"AWS Elastic Load Balancer (Classic) with access log disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-92","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"bCSEZSXP4kanCTM34S51","title":"AWS API Gateway V2 has Access Logging is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-95","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"2DFsyPUdfzfZ7NoaqU1S","title":"Neptune logging is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-101","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ZgA00JAvF3tkNOmldBLB","title":"AWS config is not enabled in all regions misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-121","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"Q4iDzfLExsfSEpvhh0HA","title":"AWS CloudWatch Log groups encrypted using default encryption key instead of KMS CMK misconfiguration","pathname":"/appsec-rules/iac-security/logging/appsec-aws-158","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ptOjRIIMtuGRrfEhXsaf","title":"AWS WAF Web Access Control Lists logging is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-176","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"0IrZbcMU2nO1mqvRAG78","title":"AWS AppSync's logging is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-193","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"EMRDrZTrDFuNYJPg4Lj4","title":"AWS AppSync has field-level logging disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-194","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"D4C6faXPNykig2UK1nwq","title":"AWS MQBroker audit logging is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-197","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"bdQpWGHGvm7TqmKJ5MA1","title":"AWS ECS Cluster does not enable logging of ECS Exec misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-223","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"BJO0WEl5ssJaX6Vccm9a","title":"AWS cluster logging is not enabled or client to container communication not encrypted using a Custom","pathname":"/appsec-rules/iac-security/logging/appsec-aws-224","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"lkKiuxTlEMG482yBoUQA","title":"AWS ACM certificates does not have logging preference misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-234","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"tl2qfkdhQcXo1q5meGpd","title":"AWS MWAA environment has scheduler logs disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-242","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"Hv8vs7WnvAfboAnFhJeO","title":"AWS MWAA environment has worker logs disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-243","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"07AMVQHGHX92ZKjD1lWh","title":"AWS MWAA environment has webserver logs disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-244","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"3p7HswAtmHnhZPWBcf7b","title":"AWS CloudTrail logging is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-251","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"PL1bq9Tikyl3BNiHZG7q","title":"AWS CloudTrail does not define an SNS Topic misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-252","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"85SZT1PgFioiXljB4oQ1","title":"Data Trace is not enabled in the API Gateway Method Settings misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-276","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"aA2McAbnF5nzyQyhO0dq","title":"State machine does not have X-ray tracing enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-284","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ZBBSgkvVK4kkSKVzWKYc","title":"Execution history logging is not enabled on the State Machine misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-285","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"r1YnDwzQQplNPQRTv86u","title":"AWS CodeBuild project not configured with logging configuration misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-314","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"Len9fJPKl2PNlMfP957U","title":"Elasticsearch Domain Audit Logging is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-317","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"sRW2CQygT5CBIys1wQp9","title":"RDS Cluster log capture is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-324","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"FxFGoa8tv9VMnN3JOktF","title":"RDS Cluster audit logging for MySQL engine is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-325","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"n8qM4rlzyVCVxzKQPJUq","title":"AWS ECS services have automatic public IP address assignment enabled misconfiguration detected in co","pathname":"/appsec-rules/iac-security/logging/appsec-aws-333","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"VRHo0mXStq9E7bnISvbW","title":"AWS CloudWatch log groups retention set to less than 365 days misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-338","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"UhjGQHsJiWL6HlQxhrl2","title":"RDS instances have performance insights disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-aws-353","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ngywWMZKsUDilds3U6xx","title":"Azure Network Watcher Network Security Group (NSG) flow logs retention is less than 90 days misconfi","pathname":"/appsec-rules/iac-security/logging/appsec-azure-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"VhnbK0OCt7e4QEa8k922","title":"Azure SQL Server auditing policy is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"d8q6WNcFAwHZdfrYYjjO","title":"Azure SQL Server audit log retention is not greater than 90 days misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"xOcUuTmKYCc4STOusTKZ","title":"Azure SQL server send alerts to field value is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"gCEU6F4H3cviw4qEwj2d","title":"Azure storage account logging for queues is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"QR4Flm1iTDXPNzeogals","title":"Azure Activity Log retention should not be set to less than 365 days misconfiguration detected in co","pathname":"/appsec-rules/iac-security/logging/appsec-azure-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"wiA7anhH3dLYdOcnvSjQ","title":"Azure Monitor log profile does not capture all activities misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"Wr14E2d9dd34Dkfm82EH","title":"Azure App service HTTP logging is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-63","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"2r0CYgJA0WY5p88bkV2B","title":"App service disables detailed error messages misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-65","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"Ett8IgASRPDdZI2qd85K","title":"App service does not enable failed request tracing misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-66","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"AT0AwqWqEeJbJyhERRLp","title":"Server Parameter 'log_retention' is Set to 'OFF' for PostgreSQL Database Server misconfiguration det","pathname":"/appsec-rules/iac-security/logging/appsec-azure-146","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"XXKOW0KGYwD7s4Hv9BKk","title":"Azure SQL Server does not have default auditing policy configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-156","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"lbQfRf52muH9zcoL1y0q","title":"Azure Built-in logging for Azure function app is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-159","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"oFuX1ilMfDbxvW6GyVa2","title":"Ledger feature is disabled on the database misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-azure-224","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ZRh4jKGlPWdHgKXzZzya","title":"GCP Kubernetes Engine Clusters have Cloud Logging disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"rvB6zK5oVM4oHapZaYd8","title":"GCP VPC Flow logs for the subnet is set to Off misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"wr0GmXYNq4FBcX4ONSG9","title":"GCP PostgreSQL instance with log_checkpoints database flag is disabled misconfiguration detected in","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-51","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"BzZhHYVyhkbKxA2h553Q","title":"GCP PostgreSQL instance database flag log_connections is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-52","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ndbnueiZcd4bkPPd5lXN","title":"GCP PostgreSQL instance database flag log_disconnections is disabled misconfiguration detected in co","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-53","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"uZmOwkwWWR2cuNuo0PwO","title":"GCP PostgreSQL instance database flag log_lock_waits is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-54","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"NVG5vhtK1vXY9yZVt6UR","title":"GCP PostgreSQL instance database flag log_min_messages is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-55","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"gYHXrUlilIDaqD3Lbib6","title":"GCP PostgreSQL instance database flag log_temp_files is not set to 0 misconfiguration detected in co","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-56","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"S6mFiNI8lwfk1ZB0HGpv","title":"GCP PostgreSQL instance database flag log_min_duration_statement is not set to -1 misconfiguration d","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-57","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"InHdSlNpApKt8ZW3MSPv","title":"GCP PostgreSQL instance database flag log_hostname is not set to off misconfiguration detected in co","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-108","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"e3RTRmCd1dyyoZ9i23gP","title":"Log levels of the GCP PostgreSQL database are not set to ERROR or lower misconfiguration detected in","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-109","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"arjY8LMxCxpN5gcxo03b","title":"pgAudit is disabled for your GCP PostgreSQL database misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-110","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"LBGqi86VFqvKbeCakDJn","title":"SQL statements of GCP PostgreSQL are not logged misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-gcp-111","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"QzJg6YNssHnPzrY2hOxD","title":"The --audit-log-path argument is not set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-k8s-91","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"qKKyOAoNMVzuHbMVwuyy","title":"The --audit-log-maxage argument is not set appropriately misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-k8s-92","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"BId9mIm0eyj7jdodHX3D","title":"The --audit-log-maxbackup argument is not set appropriately misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-k8s-93","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ZvvN910cBuk6Zee5jSFV","title":"The --audit-log-maxsize argument is not set appropriately misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-k8s-94","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"ONaMGq0uGt5wVAgXteKa","title":"Security policies missing descriptions in Palo Alto Networks devices misconfiguration detected in co","pathname":"/appsec-rules/iac-security/logging/appsec-pan-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"oTojLIbo8fV1D3T3pPMd","title":"Log Forwarding Profile not selected for a Palo Alto Networks device security policy rule misconfigur","pathname":"/appsec-rules/iac-security/logging/appsec-pan-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"CGyHx36u9dT07b93dMzc","title":"End-of-session logging disabled on Palo Alto Networks security policies misconfiguration detected in","pathname":"/appsec-rules/iac-security/logging/appsec-pan-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"UQ2Jl7ZYymXAxC2R7gLA","title":"Logging at session start enabled on Palo Alto Networks devices misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec-pan-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"bRNNbjL4rdSHwcSVRG09","title":"API Gateway stage does not have logging level defined appropriately misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"EnsL2dZtUVIGqTSHtPJz","title":"AWS CloudTrail trail logs is not integrated with CloudWatch Log misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"YFZHhAHUFaHuVhhDcVxV","title":"AWS VPC Flow Logs not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"nypqfaHMtMaS2AMd762A","title":"AWS RDS Postgres Cluster does not have query logging enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"HymNcuvv12tZfEK1ccsz","title":"AWS Postgres RDS have Query Logging disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"X1yJ8TBDVEJbw4X77F6E","title":"AWS WAF2 does not have a Logging Configuration misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"yrYNcwkUiepZuuwZJj26","title":"AWS Codecommit is not associated with an approval rule misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"KtgHOALbmGUrH7wto8II","title":"Domain Name System (DNS) query logging is not enabled for Amazon Route 53 hosted zones misconfigurat","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"fr556s7WNuVl150or9Ze","title":"AWS Config Recording is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-45","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"Cd0WnjXHPYufUMW8Esjl","title":"AWS Config must record all possible resources misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-48","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"AJiEkrykE7ihfhODFKzq","title":"An S3 bucket must have a lifecycle configuration misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-61","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"OJUjSdfIZTaojM77Vr8N","title":"S3 buckets do not have event notifications enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-62","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"iYeAgQSQC7qzIX5kxe4M","title":"AWS Network Firewall is not configured with logging configuration misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-aws-63","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"fgu43rGayBqdj0SsU8qZ","title":"Azure storage account logging setting for tables is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-azure-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"WR37L1dlOuTrwDqnp0RY","title":"Azure storage account logging setting for blobs is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-azure-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"qA34DKAv6nT6SpUVfry3","title":"GCP Log bucket retention policy is not configured using bucket lock misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"DPu3f4Ty2RMosog9aHKd","title":"GCP Project audit logging is not configured properly across all services and all users in a project","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"CmtSFgCbmiFSKHFhBRYh","title":"GCP PostgreSQL instance database flag log_duration is not set to on misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"uuJlN88wi1yaa7H1VFOS","title":"GCP PostgreSQL instance database flag log_executor_stats is not set to off misconfiguration detected","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"5VJklMQTLYkryw48K2kx","title":"GCP PostgreSQL instance database flag log_parser_stats is not set to off misconfiguration detected i","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"lX898hobvtb3DxUBZPKn","title":"GCP PostgreSQL instance database flag log_planner_stats is not set to off misconfiguration detected","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"L3JoYnFo0YxOWhBgCmsZ","title":"GCP PostgreSQL instance database flag log_statement_stats is not set to off misconfiguration detecte","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"uoX9IBTlgE3JrFiYaDvN","title":"Logging is disabled for Dialogflow agents misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"CyxSu8W2eA0cyggAjlWv","title":"Logging for Dialogflow CX agents is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"DFVhl6I8NIQ9dlzS66rs","title":"Logging for Dialogflow CX webhooks is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/logging/appsec2-gcp-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Logging"}]},{"id":"w5Cg5ucwLQ3m7YHUA7Es","title":"Monitoring","pathname":"/appsec-rules/iac-security/monitoring","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"32yiOla62Ktl8nwQknQ6","title":"Alibaba Cloud Kubernetes node pools are not set to auto repair misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-ali-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"VtdMGNmO7ZDYe1BpQJKr","title":"Alibaba RDS instance has log_connections disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-ali-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"OhvznGOikTQPpwuJBdvs","title":"AWS ECS cluster with container insights feature disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-65","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"uiQNXIoWnjLF76Bnt7se","title":"AWS Amazon RDS instances Enhanced Monitoring is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-118","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"PI54oO679cVqBxoaM5xQ","title":"AWS CloudFormation stack configured without SNS topic misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-124","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"SxTmJ0hfXU3LHJGSscJM","title":"AWS EC2 instance detailed monitoring disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-126","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"MCkQiQTzR2TIIP17U6Mk","title":"AWS WAF does not have associated rules misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-175","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"4LRdYd3RBIabejnLn69n","title":"AWS GuardDuty detector is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-238","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"7N1bCOMNA6ssN64LvPaa","title":"Elastic Beanstalk environments do not have enhanced health reporting enabled misconfiguration detect","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-312","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"lwp5qbzmXsv1rcP2gePD","title":"CloudWatch alarm actions are not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-319","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"aRF8SqNxryRIAizpJWqk","title":"EKS clusters are not running on a supported Kubernetes version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-339","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"7XGTiaDsXYj7RIF1JVoK","title":"AWS resources that support tags do not have Tags misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-aws-custom-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"Q2C44goOkdO4GvbeFSoF","title":"Azure AKS cluster monitoring not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"HfZAPwQKNMtqRSQR8p2Q","title":"Azure Microsoft Defender for Cloud Defender plans is set to Off misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"bQROOQptkY9afVmAyiyw","title":"Azure Microsoft Defender for Cloud security contact phone number is not set misconfiguration detecte","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"WzUJdvjjQwvUFnUXmycg","title":"Azure Microsoft Defender for Cloud security alert email notification is not set misconfiguration det","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"CVMQzW1y6EHljTk2MgLM","title":"Azure Microsoft Defender for Cloud email notification for subscription owner is not set misconfigura","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"XCl8G4lPKSZnYfKEVqYx","title":"Azure SQL Server threat detection alerts are not enabled for all threat types misconfiguration detec","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"ml0pvb6OR3XOX6dlZKjO","title":"Azure SQL Databases with disabled Email service and co-administrators for Threat Detection misconfig","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"TeiVwGNwNDflXvpvm9yt","title":"Azure Microsoft Defender for Cloud is set to Off for Servers misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-55","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"kotYB5IfeL6ZXm8sZf3Y","title":"Azure Microsoft Defender for Cloud is set to Off for App Service misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-61","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"camqQv2N301sV1anACnX","title":"Azure Microsoft Defender for Cloud is set to Off for Azure SQL Databases misconfiguration detected i","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-69","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"klqGuZRN4al2DkscV1W1","title":"Azure Microsoft Defender for Cloud is set to Off for SQL servers on machines misconfiguration detect","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-79","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"s0nRugompcHlzeMEmRmt","title":"Azure Microsoft Defender for Cloud is set to Off for Storage misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-84","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"Up6DtOSHpqxaZBzodjli","title":"Azure Security Center Defender set to Off for Kubernetes misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-85","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"wTD8Q0ojTbXYZN1SNW0T","title":"Azure Microsoft Defender for Cloud is set to Off for Container Registries misconfiguration detected","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-86","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"4WeAxKTRTIxtM8BItjyw","title":"Azure Microsoft Defender for Cloud is set to Off for Key Vault misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-87","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"ZLLFerd9JlIB3R4HvIa8","title":"My SQL server does not enable Threat Detection policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-127","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"4beCNkm1DIcb2MkVhUj1","title":"PostgreSQL server does not enable Threat Detection policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-128","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"rK3w7yolPiv02HdOmW1g","title":"Azure Microsoft Defender for Cloud security alert email notifications is not set misconfiguration de","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-131","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"qglwVaDzOIorlW5Hr8V1","title":"Vulnerability Scanning not enabled for Azure Container Registry misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-163","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"GbWZUPGdbBZru12bUf29","title":"Azure App Service Health Check Missing misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-213","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"IfKHYwDmuQmuURF9yFQ8","title":"Azure Microsoft Defender for Cloud set to Off for Resource Manager misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-234","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"FbStBgx8LMztKgocdRZ9","title":"Azure resources that support tags do not have tags misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-azure-custom-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"Zx8m2yoOBxe8uYeMXR16","title":"GCP Kubernetes Engine Clusters have Cloud Monitoring disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"47OVba5rv37esDvjQAl1","title":"GCP Kubernetes cluster node auto-repair configuration disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"MNJZhJCAgHa8I7peXf3q","title":"GCP Kubernetes cluster node auto-upgrade configuration disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"cyuEObwATRt2Ij0GWUoK","title":"GCP Kubernetes Engine Clusters without any label information misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"i15sr6FLim5MYJoxVYku","title":"The GKE metadata server is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-69","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"vxg9XGyDEEl8Trur32dd","title":"GCP Kubernetes Engine cluster not using Release Channel for version management misconfiguration dete","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-70","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"dZxcs2Ib31MYNJcVJtkT","title":"GCP Kubernetes cluster shielded GKE node with integrity monitoring disabled misconfiguration detecte","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-72","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"lEWrGRMBi3wuw9WK366a","title":"GCP Cloud Armor policy not configured with cve-canary rule misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-73","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"6jGYzMGSW8R6TYJfFs9f","title":"GCP resources that support labels do not have labels misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-gcp-custom-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"yiFgifvrVfU788O4gtrW","title":"GitHub Repository defined in Terraform doesn't have vulnerability alerts enabled misconfiguration de","pathname":"/appsec-rules/iac-security/monitoring/appsec-git-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"PG1cLF9ESKeFkqFwAgyc","title":"Liveness probe is not configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-k8s-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"5e5uVyz2zTNampBU2DTD","title":"Readiness probe is not configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-k8s-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"VqkAfAqZoS03ZwYnt8uk","title":"The --profiling argument is not set to false for API server misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-k8s-90","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"GdEz1sSdEqPXGOkuiira","title":"The --request-timeout argument is not set appropriately misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-k8s-95","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"y2jhPoRCS8yHRSfc76ZJ","title":"The --profiling argument for controller managers is not set to False misconfiguration detected in co","pathname":"/appsec-rules/iac-security/monitoring/appsec-k8s-107","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"bwxoSgkkmPXW1R19wG4d","title":"The --profiling argument is not set to False for scheduler misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-k8s-114","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"lKhGaPgAHS5LSgrX49ub","title":"The --event-qps argument is not set to a level that ensures appropriate event capture misconfigurati","pathname":"/appsec-rules/iac-security/monitoring/appsec-k8s-147","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"SWYzPkTUoKGCq2lsCjxp","title":"OCI Compute Instance has monitoring disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec-oci-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"SVE3855cIYXupxUJdMgY","title":"Terraform module sources do not use a git url with a commit hash revision misconfiguration detected","pathname":"/appsec-rules/iac-security/monitoring/appsec-tf-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"bEDKErUv41Ybi5DvUOtl","title":"Terraform module sources do not use a git url with a tag or commit hash revision misconfiguration de","pathname":"/appsec-rules/iac-security/monitoring/appsec-tf-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"bNRMqYMMK08bM66vkWt6","title":"GuardDuty is not enabled to specific org/region misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec2-aws-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"iVAhXzJdpzj0SOz0vZUy","title":"AWS CloudFront attached WAFv2 WebACL is not configured with AMR for Log4j Vulnerability misconfigura","pathname":"/appsec-rules/iac-security/monitoring/appsec2-aws-47","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"KlUBWSYAf3f5mH8eSJwj","title":"AWS RDS instance with copy tags to snapshots disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec2-aws-60","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"Mp3SFcYjnalpHqUMaagL","title":"Azure SQL Server ADS Vulnerability Assessment is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec2-azure-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"YKHPFfwqc1w0owdUfX2f","title":"Azure SQL Server ADS Vulnerability Assessment (VA) Periodic recurring scans is disabled misconfigura","pathname":"/appsec-rules/iac-security/monitoring/appsec2-azure-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"ouYPVaXzfwAN0IRrkYqM","title":"Azure SQL Server ADS Vulnerability Assessment (VA) 'Send scan reports to' is not configured misconfi","pathname":"/appsec-rules/iac-security/monitoring/appsec2-azure-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"j1QTkCHrDGaYQe6FgUdQ","title":"Azure SQL Server ADS Vulnerability Assessment (VA) 'Also send email notifications to admins and subs","pathname":"/appsec-rules/iac-security/monitoring/appsec2-azure-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"fQDKposPMgwrOXf18UB5","title":"Azure SQL server Defender setting is set to Off misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec2-azure-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"qE0QC4QcZ8iH5SPhEf69","title":"GCP GCR Container Vulnerability Scanning is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/monitoring/appsec2-gcp-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Monitoring"}]},{"id":"boUUB6OzWi10HuRHJ43T","title":"Networking","pathname":"/appsec-rules/iac-security/networking","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"4pSDxVJBo9Ce8QKU1WUx","title":"Alibaba Cloud Kubernetes does not install plugin Terway or Flannel to support standard policies misc","pathname":"/appsec-rules/iac-security/networking/appsec-ali-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"XPmNJoG8HQkmQqzrYOqr","title":"Alibaba Cloud Cypher Policy is not secured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-ali-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"RNEKIPW3dRgWnVKm7Ll9","title":"Alibaba Cloud MongoDB is not deployed inside a VPC misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-ali-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"eMWpOkDTKsB84WfhD2Ic","title":"AWS EKS cluster security group overly permissive to all traffic misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"7914TtJuu6NxmfYBaHgp","title":"AWS CloudFront web distribution with AWS Web Application Firewall (AWS WAF) service disabled misconf","pathname":"/appsec-rules/iac-security/networking/appsec-aws-68","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"PqV2OGukV6p6vxsMPt64","title":"AWS EKS node group have implicit SSH access from 0.0.0.0/0 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-100","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"if48WLcthVPUG8u2E4Lz","title":"Deletion protection disabled for load balancer misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-113","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"NUaCFLhiOE1I7FsmpMxP","title":"VPC endpoint service is not configured for manual acceptance misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-123","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"QLZPfWsZ4y5fQnUABW95","title":"Elastic load balancers do not use SSL Certificates provided by AWS Certificate Manager misconfigurat","pathname":"/appsec-rules/iac-security/networking/appsec-aws-127","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"h3SYAumbojx5zDJjMPws","title":"ALB does not drop HTTP headers misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-131","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"wmIaDIHYSUqqBC199Jcf","title":"AWS Elastic Load Balancer (Classic) with cross-zone load balancing disabled misconfiguration detecte","pathname":"/appsec-rules/iac-security/networking/appsec-aws-138","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"m2vaFxZXlrIhivJP3dOY","title":"Default VPC is planned to be provisioned misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-148","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"7c2rrepk8Wj1XwIGCshT","title":"AWS Elastic Load Balancer v2 with deletion protection feature disabled misconfiguration detected in","pathname":"/appsec-rules/iac-security/networking/appsec-aws-150","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"51HKW3f25ysVE16fFuzi","title":"AWS Elastic Load Balancer v2 (ELBv2) with cross-zone load balancing disabled misconfiguration detect","pathname":"/appsec-rules/iac-security/networking/appsec-aws-152","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"isKBdWSaIulQZirm85YU","title":"WAF enables message lookup in Log4j2 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-192","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"c1fiKRN0U8JcsbfWaU5e","title":"AWS RDS security groups are not defined misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-198","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"ZilKpkLgvGkpsqd9I1yR","title":"AWS ELB Policy uses some unsecure protocols misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-213","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"iR7jLa9sMe4LH60U8kZi","title":"AWS Cloudfront distribution is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-216","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"JjGYY4LL5fNXj7P8We85","title":"AWS Elasticsearch uses the default security group misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-248","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"pDLgvoAcbLcvb2kwflRp","title":"ALB is not configured with the defensive or strictest desync mitigation mode misconfiguration detect","pathname":"/appsec-rules/iac-security/networking/appsec-aws-328","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"2u4RDhYxFTvwVEskzIP0","title":"Network firewalls do not have deletion protection enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-344","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"L8uEOSZ3Eys4enuqtxCD","title":"Transfer server does not force secure protocols. misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-357","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"wezouie4EBWOTAq314Ha","title":"AWS CloudFront web distribution with geo restriction disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-374","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"zvMjB7p79kvIA9KmfjCT","title":"Route 53 domains do not have transfer lock protection misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-aws-377","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"TdpF6jqK3hxuxNf4pgM0","title":"Azure AKS cluster network policies are not enforced misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"dFJ5tgY6FxZrNbSmhoQN","title":"Azure RDP Internet access is not restricted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"FzvHO2bht9iwZme6P8NH","title":"CORS allows resources to access function apps misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-62","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"ovtBY0PdaA75B3qRI1Xk","title":"Azure Function App doesn't use HTTP 2.0 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-67","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"AfgvQgBOKfYAbDYUZ8P2","title":"Azure App Services Remote debugging is enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-72","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"Djmk7T1U1b7NMFVFjL3I","title":"Azure container container group is not deployed into a virtual network misconfiguration detected in","pathname":"/appsec-rules/iac-security/networking/appsec-azure-98","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"gfDUKVfyBLijjt5ESQrG","title":"API management services do not use virtual networks misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-107","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"Kbkw4PanW7uGtT0oNmkW","title":"Key vault does not allow firewall rules settings misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-109","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"sbAfkgsCZTTf0z0zH1md","title":"AKS is not enabled for private clusters misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-115","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"Nesx0j1mJ7GVDRVHMOXl","title":"Azure application gateway does not have WAF enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-120","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"nPKW0QbtK9lFu5fKNZPV","title":"Azure Front Door does not have the Azure Web application firewall (WAF) enabled misconfiguration det","pathname":"/appsec-rules/iac-security/networking/appsec-azure-121","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"d0PgXsYiZ4u1HF3xG9Xh","title":"Application gateway does not use WAF in Detection or Prevention modes misconfiguration detected in c","pathname":"/appsec-rules/iac-security/networking/appsec-azure-122","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"pylPrTZpcRAiHEHmHlA1","title":"Azure front door does not use WAF in Detection or Prevention modes misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-123","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"1I43RQw870hCWJwxJd5H","title":"Azure Front Door Web application firewall (WAF) policy rule for Remote Command Execution is disabled","pathname":"/appsec-rules/iac-security/networking/appsec-azure-133","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"cb6wzeGnYKWYi1oac1Hm","title":"Azure Application Gateway Web application firewall (WAF) policy rule for Remote Command Execution is","pathname":"/appsec-rules/iac-security/networking/appsec-azure-135","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"3LnCNro8yGFlPgsJ1zQV","title":"Firewall policy does not have IDPS mode set to deny misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-220","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"7WFeYDe4QvLpwk9S0bPu","title":"Azure Container Registry dedicated data endpoint is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-237","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"fqcUXQG40kvCVsFToq5I","title":"Azure Batch Account configured with overly permissive network access misconfiguration detected in co","pathname":"/appsec-rules/iac-security/networking/appsec-azure-248","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"55X6aPUFVtKQ62TinHAM","title":"Azure Storage Sync Service configured with overly permissive network access misconfiguration detecte","pathname":"/appsec-rules/iac-security/networking/appsec-azure-250","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"uvYDxwTBny53Pys2Zhha","title":"Azure VM disk configured with public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-azure-251","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"N2pngUXXuzVDDOPs3d2J","title":"GCP Kubernetes Engine Clusters have Network policy disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-gcp-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"qconUI6QQE7qCBtv8YUi","title":"GCP Kubernetes Engine Clusters have Master authorized networks disabled misconfiguration detected in","pathname":"/appsec-rules/iac-security/networking/appsec-gcp-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"aIFpkp9bmiXm1xKlI5oM","title":"GCP Kubernetes Engine Clusters have Alias IP disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-gcp-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"m8k0UISXTbrHTbMBYWKv","title":"GCP Kubernetes Engine private cluster has private endpoint disabled misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/networking/appsec-gcp-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"j4pXvzQ2xo3NT2f7E4MU","title":"GCP Kubernetes cluster intra-node visibility disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-gcp-61","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"oFJXGsRwf7svV2rcaUPP","title":"GCP Kubernetes Engine Clusters not configured with private nodes feature misconfiguration detected i","pathname":"/appsec-rules/iac-security/networking/appsec-gcp-64","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"SHjJIdrIqnZJ68hVApzT","title":"Containers wishing to share host network namespace admitted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"5XrGsZUnBumCcR6Uglta","title":"Containers share the host network namespace misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"zKK5sVIcbgRm8SFj9LKg","title":"hostPort is specified misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"wxPrxhutsljkTXkc5Hdo","title":"The --kubelet-https argument is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-71","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"Eut5aDM0HKdUFKkhy4hF","title":"The API server does not make use of strong cryptographic ciphers misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-105","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"JKA1gyZiauIaCQgLipnD","title":"The --bind-address argument for controller managers is not set to 127.0.0.1 misconfiguration detecte","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-113","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"QTd9mJvaNntOQsTehblV","title":"The --bind-address argument is not set to 127.0.0.1 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-115","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"nHw3H6wg1bmmPoJRt0NL","title":"The --auto-tls argument is set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-118","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"sJEj3oZsJ8d0BFVnaxto","title":"The --make-iptables-util-chains argument is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-145","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"62MvjMmOmAah1x9NKi2G","title":"The --tls-cert-file and --tls-private-key-file arguments for Kubelet are not set appropriately misco","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-148","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"sfTSIP6zvaBBRChkEygP","title":"Kubelet does not use strong cryptographic ciphers misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-151","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"d3Yd0r6DUhhNcjfA7SFg","title":"NGINX Ingress annotation snippets contains LUA code execution misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-152","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"1lvWeTY4bBqRQZBZicKN","title":"NGINX Ingress has annotation snippets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-153","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"8tWSmC8IyvaV5RY4ktDt","title":"NGINX Ingress has annotation snippets which contain alias statements misconfiguration detected in co","pathname":"/appsec-rules/iac-security/networking/appsec-k8s-154","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"ok0Jv8EPcokIN27sSU1R","title":"OCI Network Security Groups (NSG) has stateful security rules misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-oci-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"hmYgIMCKOQtoYLPh3p5Y","title":"OCI Data Catalog configured with overly permissive network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-oci-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"LaZS1M8RRn9g06raR9vp","title":"OpenStack firewall rule does not have destination IP configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-openstack-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"QwAr4LHrcMMJgGBQblx7","title":"Plain-text management HTTP enabled for Interface Management Profile in Palo Alto Networks devices mi","pathname":"/appsec-rules/iac-security/networking/appsec-pan-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"FN3rBiD1krfzz3o4Ag6O","title":"Plain-text management Telnet enabled for Interface Management Profile in Palo Alto Networks devices","pathname":"/appsec-rules/iac-security/networking/appsec-pan-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"0R76Crixk6GLhn3Azo5x","title":"Disable Server Response Inspection (DSRI) enabled in security policies for Palo Alto Networks device","pathname":"/appsec-rules/iac-security/networking/appsec-pan-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"KJEHphD2ICuxzYMK6Ufj","title":"Security rule allows any application on Palo Alto Networks devices misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-pan-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"MoJY4vWJBjy0b9dDMKEZ","title":"Security rule permits any service on Palo Alto Networks devices misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-pan-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"dxjAlH42BJOWjOpCZXe8","title":"Security Rule in Palo Alto Networks devices with overly broad Source and Destination IPs misconfigur","pathname":"/appsec-rules/iac-security/networking/appsec-pan-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"dhP0Hb5zAyP5HM7syK2b","title":"IPsec profile uses insecure authentication algorithms on Palo Alto Networks devices misconfiguration","pathname":"/appsec-rules/iac-security/networking/appsec-pan-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"SQlIj7DfaLZVLkvyHk9j","title":"IPsec profile uses insecure authentication protocols on Palo Alto Networks devices misconfiguration","pathname":"/appsec-rules/iac-security/networking/appsec-pan-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"3jFukzEqyYOqoQErIlUO","title":"Security zone on Palo Alto Networks devices does not have an associated Zone Protection Profile misc","pathname":"/appsec-rules/iac-security/networking/appsec-pan-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"18CXGOGD7rRoALMUdbKf","title":"Include ACL (Access Control List) not defined for a security zone in Palo Alto Networks devices with","pathname":"/appsec-rules/iac-security/networking/appsec-pan-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"xUtUOHuYCLa4kWbzNJfD","title":"Security rules apply to all zones on Palo Alto Networks devices misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec-pan-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"b60AKscRXLvKbCTWVvTH","title":"AWS AppSync is not protected by WAF misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-aws-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"2V0cduZSUQyLsIEYHZJD","title":"AWS NAT Gateways are not utilized for the default route misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-aws-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"q91pVdY3HDPwOAxSZqn1","title":"AWS ACM Certificate with wildcard domain name misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-aws-71","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"8QWrugWsbSMrg9MMRg6v","title":"AWS Load Balancers do not use strong ciphers misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-aws-74","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"QfVME2fDKk4L5EgZRYIL","title":"AWS Lambda function URL having overly permissive cross-origin resource sharing permissions misconfig","pathname":"/appsec-rules/iac-security/networking/appsec2-aws-75","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"A3sJqOpOYPmyAkfzjyw2","title":"Azure Automation account configured with overly permissive network access misconfiguration detected","pathname":"/appsec-rules/iac-security/networking/appsec2-azure-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"1LFa1GcDu9CvT0i5kXCX","title":"Azure MySQL Flexible Server not configured with private endpoint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-azure-56","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"N5Sn077tGxOYpnSmiNbJ","title":"PostgreSQL Flexible Server not configured with private endpoint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-azure-57","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"unCgrM6Ed992xoU83cm1","title":"GCP project is configured with legacy network misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-gcp-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"tmByexalSBH4tyvPMiSh","title":"Vertex AI workbench instances are not private misconfiguration detected in code","pathname":"/appsec-rules/iac-security/networking/appsec2-gcp-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"MYB6ircxYbEdJl6x3dMN","title":"GCP public-facing (external) regional load balancer using HTTP protocol misconfiguration detected in","pathname":"/appsec-rules/iac-security/networking/appsec2-gcp-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"G54ecqqWfTpQrb5r44jf","title":"GCP public-facing (external) global load balancer using HTTP protocol misconfiguration detected in c","pathname":"/appsec-rules/iac-security/networking/appsec2-gcp-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"gtuJiH5Gr1Wio529h5nS","title":"IBM Cloud Virtual Private Cloud (VPC) classic access is enabled in Terraform misconfiguration detect","pathname":"/appsec-rules/iac-security/networking/appsec2-ibm-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Networking"}]},{"id":"CvElWLtwS0Nz7ytWuvuz","title":"Public Exposure","pathname":"/appsec-rules/iac-security/public-exposure","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"lF5xp9ild6TEgJhHI7R3","title":"Alibaba Cloud OSS bucket accessible to public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"VYKmybkNtCOQ2buglhn5","title":"Alibaba Cloud Security group allow internet traffic to SSH port (22) misconfiguration detected in co","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"9yiN5sjI3WogOLaum9bu","title":"Alibaba Cloud Security group allow internet traffic to RDP port (3389) misconfiguration detected in","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"04O17i9W3VHA0w8i8cXM","title":"Alibaba Cloud database instance accessible to public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"DghlzFsDZUDOBiRcmGmx","title":"Alibaba Cloud RDS instance does not use SSL misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"vDmhiBfMvmdMXHg8Vbu9","title":"Alibaba Cloud API Gateway API Protocol does not use HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"WyWeykLZhbG3t9Gon8U6","title":"Alibaba cloud ALB ACL does not restrict public access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"X41TY39Guu1vurG8Tg2t","title":"Alibaba Cloud Mongodb instance does not use SSL misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"oADY51MLopt2JZHIt753","title":"Alibaba Cloud MongoDB instance is public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-ali-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"9SMnbVkuSGrpklnjIdlZ","title":"AWS Elastic Load Balancer v2 (ELBv2) listener that allow connection requests over HTTP misconfigurat","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"2d2DQWJHwDeMqOQ8W1lp","title":"AWS Elasticsearch does not have node-to-node encryption enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"C9jyRrwoAuGvuSLDFGpO","title":"AWS RDS database instance is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"GG9RaGzX1LphavKL3UDr","title":"Not every Security Group rule has a description misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"t8Mth3mTm4fxgtP4YQEo","title":"AWS Security Group allows all traffic on SSH port (22) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"TeKHllP2FQIAiJOZsctk","title":"AWS Security Group allows all traffic on RDP port (3389) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"NKQRkkIgP0wb3B91bFY1","title":"AWS ElastiCache Redis cluster with in-transit encryption disabled (Replication group) misconfigurati","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"FOri8Dg3cn3Om7hmgLiG","title":"AWS ElastiCache Redis cluster with Redis AUTH feature disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"82WT9dVUKSvVLLT7uxpg","title":"AWS CloudFront viewer protocol policy is not configured with HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"1WfiLv4FtKBdaLQKzf4L","title":"AWS EKS cluster endpoint access publicly enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"c7VJGJqeFfqUlZOXHItG","title":"AWS access keys and secrets are hard coded in infrastructure misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"bBLRM8J96lvdRL3PopVB","title":"Lambda function's environment variables expose secrets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-45","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"9SeaDps4yX33JM1xrNjx","title":"EC2 user data exposes secrets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-46","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"3XHsfFxxNqUQPnITCW6V","title":"AWS API gateway methods are publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-59","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"gn7DsaUa32ULiBXrvxpo","title":"AWS MQ is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-69","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"vse48X8zQ4N1bOpEv5TZ","title":"AWS Elasticsearch domain is not configured with HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-83","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"tL0XBoJmEEvwHYZc669O","title":"AWS Redshift cluster instance with public access setting enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-87","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ZNQnZ0zOSInNvBIf2Xqo","title":"AWS EC2 instances with public IP and associated with security groups have Internet access misconfigu","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-88","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"eFbtdVoe8zMpzVvLFuR6","title":"AWS DMS replication instance is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-89","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"OXFhY38lMkU2kI5FyTzO","title":"Neptune cluster instance is publicly available misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-102","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"4I85MQUYVgQiC52vcj4G","title":"AWS Load Balancer is not using TLS 1.2 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-103","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"nADPHii6PLoREYPqdxP4","title":"AWS VPC subnets should not allow automatic public IP assignment misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-130","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"0ux2luSe7CWN0o9eyEZF","title":"AWS Elasticsearch is not configured inside a VPC misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-137","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"kwFMGmjjnflaocSVgeRm","title":"Redshift is deployed outside of a VPC misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-154","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ZerkJcg5wmR87Ts3YIN8","title":"AWS Transfer Server is publicly exposed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-164","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"MTmdwl7kklEAhIojSV18","title":"AWS CloudFront web distribution using insecure TLS version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-174","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"YmHKLGed2CNlSecgfcDI","title":"AWS Elasticache security groups are not defined misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-196","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"fHE97DW0pn8rgLB2xuQh","title":"AWS API Gateway Domain does not use a modern security policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-206","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Bo4PWNBsXJaRQx0KIPdF","title":"AWS Cloudsearch does not use the latest (Transport Layer Security) TLS misconfiguration detected in","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-218","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"rOl57BcbAfRbZoYPh8uj","title":"AWS Cloudsearch does not use HTTPs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-220","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"C8tWP9mUNY0XUZsGDCCD","title":"AWS Elasticsearch domain does not use an updated TLS policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-228","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"pMAPZkgspiSknn6NXQJk","title":"AWS NACL allows ingress from 0.0.0.0/0 to port 21 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-229","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"mHmKBqFhkhrxFFTOTemp","title":"AWS NACL allows ingress from 0.0.0.0/0 to port 20 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-230","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"SVPbsEU8ZgFM8k9HcvFj","title":"AWS NACL allows ingress from 0.0.0.0/0 to port 3389 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-231","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"UdpjWGtgi3jYiV5orIbF","title":"AWS NACL allows ingress from 0.0.0.0/0 to port 22 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-232","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"H7PLRLAWr9nIhCVZyx0B","title":"AWS DAX cluster endpoint does not use TLS (Transport Layer Security) misconfiguration detected in co","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-239","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"UdiAHTxRHfSN94MH6cGX","title":"AWS CloudFront response header policy does not enforce Strict Transport Security misconfiguration de","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-259","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"3JqMo3R1y53xJETfd9b4","title":"AWS security groups allow ingress from 0.0.0.0/0 to port 80 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-260","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"fYR6OtJy8QXoxxRaidXl","title":"AWS Security Group allows all traffic on all ports misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-277","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"2NCJ4rkYVOpUhgLzj82m","title":"MSK nodes are not private misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-291","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"6TzKe3xvgFOJKCppmNoh","title":"AWS RDS snapshots are accessible to public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-302","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"T82mCgSsYn1OK1Ej0PDS","title":"AWS SSM documents are public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-303","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"b74g6a8s4IpsivEvlZ3n","title":"AWS CloudFront distributions does not have a default root object configured misconfiguration detecte","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-305","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"PbyBSbjIU8fDml00TlPG","title":"AWS SageMaker notebook instance is not placed in VPC misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-306","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"9NgftUaaVWwJ5YcV7Dob","title":"CloudFront distributions do not have origin failover configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-310","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"w4dJQp3BBkSTud6yaVau","title":"ElastiCache cluster is using the default subnet group misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-323","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ajE8eJFftA1El9onNxzi","title":"AWS Transit Gateway auto accept vpc attachment is enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-331","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"7Y5aJp25DpcSHMOk7hp4","title":"WAF rule does not have any actions misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-342","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"jandmDn2Y93eWHXGUDD1","title":"NACL ingress allows all ports misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-352","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"MfezY68c1zOTctOLeWpt","title":"TLS not enforced in SES configuration set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-365","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"GmBiusZ3cMSgb2dn5x0F","title":"AWS Elastic Load Balancer with listener TLS/SSL is not configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-376","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"cT5dUHmF9WoDcAARfX5l","title":"AWS Load Balancer uses HTTP protocol misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-378","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"A91GIKHYtbZMuhm5dYHN","title":"AWS S3 bucket not configured with secure data transport policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-379","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"pW2kkyETa7dno9n0iBf4","title":"AWS Transfer Server not using latest Security Policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-aws-380","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"fWFr08lobelQYKdMrTbY","title":"Azure Virtual Machine (Linux) does not authenticate using SSH keys misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"vu5fV0xfhMvL0XyVTiGy","title":"Kubernetes dashboard is not disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"6VCl27PoMWmh065D3qvw","title":"Azure Network Security Group allows all traffic on SSH port 22 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"DYG7SdUP51nc0yZVedWV","title":"Azure SQL Servers Firewall rule allow ingress access from 0.0.0.0/0 misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"yCiM1jB8mh7xVS3iGyjn","title":"Azure App Service Web app doesn't redirect HTTP to HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"BlkKryWqXE2z0lWiA4qV","title":"Azure App Service Web app doesn't use latest TLS version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"PZYdghXhRNRnnaXJedGR","title":"Azure App Service Web app client certificate is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"SOGkH2jM9roHe5e2vITC","title":"Azure App Service Web app doesn't use HTTP 2.0 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"tSfguDfi1unhIGtPjKQ0","title":"Azure MySQL Database Server SSL connection is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"S3RSjlOLrTtKuAmwE3QR","title":"Azure PostgreSQL database server with SSL connection disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"4vy5w1DMfaYHWYrXG0SC","title":"Azure storage account has a blob container that is publicly accessible misconfiguration detected in","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"HR0bhXtMzy0KHKkzdSOU","title":"Azure Storage Account default network access is set to 'Allow' misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"qMmrKLkfB0TSi3QPl59o","title":"Azure MariaDB database server with SSL connection disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-47","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"zf8Px1ISqg9QayP4u1qo","title":"MariaDB servers do not have public network access enabled set to False misconfiguration detected in","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-48","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"tiirNs49JLc56W5I5E4H","title":"'public network access enabled' is not set to 'False' for mySQL servers misconfiguration detected in","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-53","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"p9iJLnV7BmdwUUrB0CYM","title":"MySQL is not using the latest version of TLS encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-54","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Xxwo6c5adcw9ZuvMvmwE","title":"CORS allows resource to access app services misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-57","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"RVFXN58V5NOWHupgAn8R","title":"Azure storage account does allow public access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-59","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"MsQTPunMTJUDNErgRkbk","title":"Azure file sync enables public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-64","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"THF6dWeKoFhLZJLeRO68","title":"PostgreSQL server does not disable public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-68","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"X5AOJzU0XN9Y8gE3Lhqd","title":"Azure Function App doesn't redirect HTTP to HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-70","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"bkrb2AxqtZ1MZfPThbTq","title":"Azure Network Security Group having Inbound rule overly permissive to all traffic on UDP protocol mi","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-77","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"H5naYOt8IgNiXn1w2WFg","title":"Azure App Services FTP deployment is All allowed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-78","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"3qnqamAejm8AgJV9Kfch","title":"Azure cache for Redis has public network access enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-89","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"1cuBss6YIjataiaaSdZz","title":"Cosmos DB accounts do not have restricted access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-99","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Wf0EMvfOu2Etua9MgUXo","title":"Azure Cosmos DB enables public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-101","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"r3iXaduu2aN0mC9NWIb9","title":"Azure Data Factory (V2) configured with overly permissive network access misconfiguration detected i","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-104","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"QkIzd2gFmEniZVcEXh4o","title":"Azure Event Grid domain public network access is enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-106","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"PJP2lMQItCXZpKAJ4YlK","title":"Azure IoT Hub enables public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-108","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Fp62BMH7XGKdjALAlia1","title":"SQL Server is enabled for public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-113","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"4gEAu0B3ZcPjobCITa3v","title":"Azure Virtual machine NIC has IP forwarding enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-118","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"s2oq3hNqk7TvJw8TOERm","title":"Network interfaces use public IPs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-119","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"UUn36LxQl6Bb7CiNe6wl","title":"Azure cognitive search does not disable public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-124","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"CCpd2WW2uqfhPBnO1NX2","title":"Azure Container registries Public access to All networks is enabled misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-139","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"8gpIcasVwjOkimkWJ2OJ","title":"Azure AKS cluster nodes have public IP addresses misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-143","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"qjzRA2bVtmRjzWNBZyCz","title":"Azure Function App doesn't use latest TLS version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-145","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"VThRbaT50zQiVrzESVxa","title":"Azure Redis Cache does not use the latest version of TLS encryption misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-148","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"pYR2X0Mlc9byzXpKhhxg","title":"Azure Client Certificates are not enforced for API management misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-152","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"fNkVX129v20ek4gVSZN6","title":"Azure web app does not redirect all HTTP traffic to HTTPS in Azure App Service Slot misconfiguration","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-153","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"AJC2jltEddpPgnfKN64f","title":"Azure App's service slot does not use the latest version of TLS encryption misconfiguration detected","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-154","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"y4Xct7vU4eRJ428ih5JV","title":"Azure App service slot does not have debugging disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-155","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"cXEZcbKaPwVLCtsztG1L","title":"Azure HTTP (port 80) access from the internet is not restricted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-160","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"P6E2sF2VR4rxqqEaRs6N","title":"Azure Spring Cloud API Portal is not enabled for HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-161","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"gHiu1WtNvOJU9P5Klgld","title":"Azure Spring Cloud API Portal Public Access Is Enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-162","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"YeMdeoa4iiVny92qXrET","title":"API Management Without Minimum TLS 1.2 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-173","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"qOjMnZ9IylZMDFYf8hpN","title":"API Management with Public Access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-174","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"aZBvQSv2Q74mWfSB4RID","title":"Web PubSub Without SLA SKU misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-175","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"CBVyuOKwHvW37KB4WV52","title":"VNET With Only One DNS Endpoint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-182","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"DSW8Z067YpJvXWugWz0T","title":"VNET Using External DNS Addresses misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-183","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"BnyRsgWRw03XtRRNXDir","title":"App Configuration Public Access Enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-185","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"2ivMvcLSoDAW81Bk3Fcf","title":"Azure Key Vault Public Network Access Control misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-189","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"2E17cUByfPaYbGWQDehH","title":"Azure storage account has a blob container with public access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-190","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"9JzGJW0P4he5ET1VGzXg","title":"Azure Event Grid Topic Public Network Access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-193","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"7vfpDBMcGlOGipMz8LHs","title":"Azure SignalR Service not Using Paid SKU for its SLA misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-196","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"jUk25WYk96AOajTt7wcP","title":"Azure CDN Doesn't Disable HTTP Endpoint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-197","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"hpmySJhUXlxsChF9NkAc","title":"Azure CDN Endpoint Custom domains is not configured with HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-198","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"GzXUQRuSWWV0M1BovV7D","title":"Azure CDN Using Outdated TLS Encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-200","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"zxoyLoSUYFcQjr13f2Sr","title":"Azure Service Bus with Public Network Access Enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-204","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"oNB2FaNpnijNXW91pZVX","title":"Azure Service Bus Without Latest TLS Encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-205","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"pGfYDRjU6dHzXgKNGuk3","title":"Azure Cognitive Search With Global IP Allowance misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-210","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"tfBOwaPJpKcFtllJPyVw","title":"Azure App Service Instance Lacks Redundancy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-212","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"YpTPczNpP3RvxPIglSWB","title":"Backend of the API management system does not utilize HTTPS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-215","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"6TcjaQuZ7vTAwOm6WYx2","title":"DenyIntelMode for Azure Firewalls is not set to Deny misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-216","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"EuFFDsyPwRf4O6AHdcKV","title":"Azure Application gateways listener that allow connection requests over HTTP misconfiguration detect","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-217","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"QiHpglMzBMnPf2fU1laG","title":"Azure Application Gateway is configured with SSL policy having TLS version 1.1 or lower misconfigura","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-218","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"iGSDYYEzCtdqV5p2IR0t","title":"Azure Firewall does not define a firewall policy misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-219","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"6MtuwNDAYo97wBH7zvpm","title":"Azure Function app configured with public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-221","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"dxyxHJN2uTYEYaejkGu2","title":"Azure App Service web apps with public network access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-222","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"b2xUZi5np2DzzzkAyQGm","title":"Event Hub Namespace not using TLS 1.2 or greater misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-223","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"teoBHKmnESjAnsu1IGra","title":"Azure Container Instance environment variable with regular value type misconfiguration detected in c","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-235","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"9MpITmdQKIqozX6CCDtU","title":"Azure Container Instance is not configured with virtual network misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-245","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"XkPP4RtYwQi3w6z0rc3f","title":"Azure AKS cluster HTTP application routing enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-azure-246","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"sfvgabccsPZuK7GbPK0G","title":"Port 22 is exposed misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-docker-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"xdENEiyzB8lBzCsmNF4Q","title":"GCP Firewall rule allows all traffic on SSH port (22) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Q4w09ZVJqpHk1fTlwok5","title":"GCP Firewall rule allows all traffic on RDP port (3389) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"3r9jyJ4KYqTSN4IPPdZp","title":"GCP HTTPS Load balancer is set with SSL policy having TLS version 1.1 or lower misconfiguration dete","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ytU8Y0Whl8vLpybj73wR","title":"GCP SQL Instances do not have SSL configured for incoming connections misconfiguration detected in c","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"uQBYaUDdeSwwIqiMC4q7","title":"GCP SQL database is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"h8c3dFiZBffCn3kSxYVl","title":"GCP BigQuery dataset is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"VE8hIHQQv6wHdQ5Bm07y","title":"GCP Cloud DNS has DNSSEC disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"st4Aam8bnc41jh3xpgjl","title":"RSASHA1 is used for Zone-Signing and Key-Signing Keys in Cloud DNS DNSSEC misconfiguration detected","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"7PQXT73r6UoPgZDolKIu","title":"GKE control plane is public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"juO5NqZrNHdkjAz25r5h","title":"GCP project is using the default network misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Sa3UYipPHC7eUf7FyR96","title":"GCP Storage bucket is anonymously or publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"XHzekasDY25OpvXOjRaC","title":"GCP VM instances do have block project-wide SSH keys feature disabled misconfiguration detected in c","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"nBT3hHQHapvJlpYc1LWV","title":"GCP Projects do have OS Login disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"CdUpyO8dSkBiSjbwJPnU","title":"GCP Projects have OS Login disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"etTezt7sCrItDa6Z3qXd","title":"GCP VM instances have serial port access enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"m3MfqleBFQFY9QIhIMpi","title":"GCP VM instances have IP Forwarding enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"KASZlc5Q1SlpOd8jp6qf","title":"GCP VM instance with Shielded VM features disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Ct3H30Bjdi3kw2PcVf8U","title":"GCP VM instance with the external IP address misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"jI05l0u9L3DCGPOZgUSs","title":"GCP Cloud SQL database instances have public IPs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-60","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"jlvCCZy9sD7D8r1d1qNH","title":"GCP VPC Network subnets have Private Google access disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-74","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"NzGvuggJ1SrMe6aVz2Zs","title":"GCP Firewall rule allows all traffic on FTP port (21) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-75","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"30RGn57s8zeWXJG47O79","title":"GCP VPC Network subnets have Private Google access for IPv6 disabled misconfiguration detected in co","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-76","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"XsnjdrymebrhZEWmS49B","title":"GCP Google compute firewall ingress allow FTP port (20) access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-77","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ORiBj0pcKQDLVX0Ovv3i","title":"GCP cloud build workers are not private misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-86","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"K5UnO4vwtjKBep93E52t","title":"GCP data fusion instances are not private misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-87","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"sqgXLv9DHHF79vECmDzp","title":"GCP Firewall rule allows all traffic on MySQL DB port (3306) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-88","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"o8vVbo6raS87AIZxisWr","title":"GCP Vertex AI instances are not private misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-89","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"HqdOz2qZfr8CxyBASEal","title":"GCP Dataflow jobs are not private misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-94","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ouGCPzUy1Qd6IXzHW2rm","title":"GCP Dataproc clusters are anonymously or publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-98","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"YBfN8Vf6EciKjWzndMTt","title":"GCP Pub/Sub Topics are anonymously or publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-99","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"6c9erzfX9tO7Rxo4R49O","title":"GCP BigQuery Tables are anonymously or publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-100","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"kNq4PEo8JHUZqZUz9McJ","title":"GCP Artifact Registry repositories are anonymously or publicly accessible misconfiguration detected","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-101","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"I7e4KSokoZUuHSOOfS1Y","title":"GCP Cloud Run services are anonymously or publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-102","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ifhyT5sOlpNoNnm7DqKF","title":"GCP Firewall rule allows all traffic on HTTP port (80) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-106","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"tlAiQ6RBKLEipOd5bMwz","title":"GCP Cloud Function is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-107","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"LfnntEZdXgownPTn4919","title":"GCP Storage buckets are publicly accessible to all users misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-114","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"eUWhElj0zUt9jHP7bKKY","title":"GCP Cloud Function configured with overly permissive Ingress setting misconfiguration detected in co","pathname":"/appsec-rules/iac-security/public-exposure/appsec-gcp-124","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"l0oP4JbmX5FKjmaCn8dm","title":"GitHub repository webhook defined in Terraform does not use a secure SSL misconfiguration detected i","pathname":"/appsec-rules/iac-security/public-exposure/appsec-git-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"9u2RElQ5VXSJR7wit45J","title":"Tiller (Helm V2) deployment is accessible from within the cluster misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-k8s-45","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"MfDMTLn9hdSzqSGzUyKL","title":"The --insecure-bind-address argument is set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-k8s-86","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"uPfYbqla1uGk8gdpLQpL","title":"The --insecure-port argument is not set to 0 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-k8s-88","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"mjywJXdMaZAOLoKxBejM","title":"The --secure-port argument is set to 0 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-k8s-89","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"7vUXmeDqaLzsBj8PRoFq","title":"The --tls-cert-file and --tls-private-key-file arguments for API server are not set appropriately mi","pathname":"/appsec-rules/iac-security/public-exposure/appsec-k8s-100","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"eRpCoQpOZ50kJv6dLHOm","title":"The --read-only-port argument is not set to 0 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-k8s-141","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"Buxfmw9M8AE0pE6psszc","title":"OCI VCN has no inbound security list misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-oci-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"OatowMLZbMlNHXrskGhA","title":"OCI VCN Security list has stateful security rules misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-oci-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"mToEnRQXlKzbnVfLZNsZ","title":"OCI Security List allows all traffic on SSH port (22) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-oci-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ItJHvDGaUmRKAMi66iqo","title":"OCI security lists allows unrestricted ingress access to port 3389 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-oci-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"HynUrywbZDIlhCY8VLDc","title":"OCI security group allows unrestricted ingress access to port 22 misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-oci-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"HM95fvXlipNVRBm30t4t","title":"OpenAPI Security Definitions Object should be set and not empty misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openapi-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"LDad9Nxc1HWrwI3SWUZX","title":"OpenAPI If the security scheme is not of type 'oauth2', the array value must be empty misconfigurati","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openapi-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"wwlrvc1fAWKwFKx3WTrS","title":"Cleartext credentials over unencrypted channel should not be accepted for the operation misconfigura","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openapi-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"JUqPt9EEixQToNyP3lDg","title":"The path scheme is supports unencrypted HTTP connections misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openapi-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"iupvzKULgoeTKygB2RCh","title":"Global schemes use 'httpa' protocol instead of 'https' misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openapi-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"2XIm2KiNxWs9Fj2uvEcG","title":"API keys transmitted over cleartext misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openapi-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"KsWLqKUvtaEErz1U0goE","title":"OpenStack Security groups allow ingress from 0.0.0.0:0 to port 22 (tcp / udp) misconfiguration detec","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openstack-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"mg4RehKfgZ85N8NCDlkP","title":"OpenStack Security groups allow ingress from 0.0.0.0:0 to port 3389 (tcp / udp) misconfiguration det","pathname":"/appsec-rules/iac-security/public-exposure/appsec-openstack-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"GUgTAvgq6s3seFHHBg9a","title":"HTTPS url not used with Ansible uri misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-ansible-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"MmztLaXtebeg3R2EStNd","title":"HTTPS url not used with Ansible get_url module misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-ansible-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"KYMd9bxYFx5I64AKXaGA","title":"AWS Network ACL is not in use misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"4eBO6SRsPRnVTbP1PgKG","title":"Security Groups are not attached to EC2 instances or ENIs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"p7qyHZh2FZhlqlrSPyrk","title":"S3 Bucket does not have public access blocks misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"NI2kmrBkwCJxIhHjVwID","title":"Amazon EMR clusters' security groups are open to the world misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"rHPrevf8CBL0JTI57YfR","title":"AWS Default Security Group does not restrict all traffic misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"jBk7SsihIAeWTOwyzTrG","title":"Auto scaling groups associated with a load balancer do not use elastic load balancing health checks","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"jfMbqTDmq9hfTFS5omVZ","title":"Not all EIP addresses allocated to a VPC are attached to EC2 instances misconfiguration detected in","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"f1oGAVZM6PYQEivY0WJl","title":"ALB does not redirect HTTP requests into HTTPS ones misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"h7V00a0XT2hzNCTxYs5R","title":"Route53 A Record does not have Attached Resource misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"sMC92wadEc9FrxkrRJPA","title":"AWS Application Load Balancer (ALB) not configured with AWS Web Application Firewall v2 (AWS WAFv2)","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"HMvPog5mKfYfX00ibbDj","title":"Public API gateway not configured with AWS Web Application Firewall v2 (AWS WAFv2) misconfiguration","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"hVJOcG7kWzmMpI4mkMTV","title":"AWS CloudFront distribution does not have a strict security headers policy attached misconfiguration","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"gbciyO5iq3pDIKxC2RqO","title":"AWS Terraform sends SSM secrets to untrusted domains over HTTP misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"4Zrz3xr3V14ABVr8Zcp9","title":"Domain Name System Security Extensions (DNSSEC) signing is not enabled for Amazon Route 53 public ho","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"IG4bUU2Px7SjR8zQ4d5b","title":"AWS CloudFront web distribution with default SSL certificate misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"L3o1ueN1wEooffhfqLP2","title":"AWS route table with VPC peering overly permissive to all traffic misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"LREpoUjaMThTuTzpKBKo","title":"AWS Database Migration Service endpoint do not have SSL configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"RMwWgxNTZimwfxDXwiJF","title":"AWS API Gateway endpoints without client certificate authentication misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-51","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"PzeJyQ86RntbEkW7PF3r","title":"AWS API gateway request parameter is not validated misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-53","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"CuaEi5Ew1rASsgW6pYGd","title":"AWS CloudFront distribution is using insecure SSL protocols for HTTPS communication misconfiguration","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-54","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"yeIJJHtRawNQifCYDibm","title":"MWAA environment is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-66","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"5KNG562dKKDuQ5Ft0nID","title":"AWS CloudFront origin protocol policy does not enforce HTTPS-only misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-aws-72","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"2scYZ1cfMlMAeEN7mIIo","title":"Azure PostgreSQL Database Server 'Allow access to Azure services' enabled misconfiguration detected","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"qkmj45okE5z31VTGWInN","title":"Azure Storage account container storing activity logs is publicly accessible misconfiguration detect","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"wkJRAfZszIFqaps4q9GR","title":"Azure Spring Cloud service is not configured with virtual network misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"a9reJZfG91Wbqhs3d6Ku","title":"Azure PostgreSQL database flexible server configured with overly permissive network access misconfig","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"cbMj5eHdO9oW5LDRooCw","title":"Azure ACR HTTPS not enabled for webhook misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"P34SgjosZ87Fcn9PeTbD","title":"Azure AKS cluster Azure CNI networking not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"6wJjOF224fobdLO3sSU3","title":"Azure Virtual Network subnet is not configured with a Network Security Group misconfiguration detect","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"6pCnZ1s5BQf1y0lUCBcL","title":"Azure Key vault Private endpoint connection is not configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"JRufrjJjL897V7ztqwQq","title":"Azure Storage account is not configured with private endpoint connection misconfiguration detected i","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"N5AHwWPh8Ald9h0Wtt9C","title":"Azure SQL Server allow access to any Azure internal resources misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"b9kIYVwSOeghq9KTQNCS","title":"Azure Virtual machine configured with public IP and serial console access misconfiguration detected","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"tVbVgQmEtUvC3n81cnrN","title":"Azure PostgreSQL servers not configured with private endpoint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"qGpElOVMDLfXDxKp7aIu","title":"Azure Database for MariaDB not configured with private endpoint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"pxB5Kqo7pUTs5UULNnpS","title":"Azure Database for MySQL server not configured with private endpoint misconfiguration detected in co","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"fnK4CDyW8rYz9yEwkJur","title":"Azure SQL Database server not configured with private endpoint misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-45","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"dAeuJdn11n1SHbPxWUwc","title":"Azure Spring Cloud app end-to-end TLS is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-azure-55","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"moEJ8eYWKim7aCLFiCaU","title":"GCP KMS crypto key is anonymously accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-gcp-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"bF7hgQMsbTlYUgaIeZhd","title":"GCP Cloud KMS Key Rings are anonymously or publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-gcp-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"GlT8cwvw4E5eIY6dA7Q9","title":"GCP Container Registry repositories are anonymously or publicly accessible misconfiguration detected","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-gcp-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"7UZ1vPo9AJKZoLTlD1Kh","title":"GCP Cloud Function HTTP trigger is not secured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-gcp-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"rMZ4WsfXLErIGhNQBdRs","title":"GCP Firewall with Inbound rule overly permissive to All Traffic misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-gcp-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"bEpwLqU5iaxNYjoKSOCa","title":"Google Cloud Platform network is not ensured to define a firewall misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-gcp-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ESov1HiVNojKUowZHccc","title":"TPU v2 VM is public misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-gcp-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"MvAnwgsI4OXeZAeUwjMt","title":"IBM Cloud Application Load Balancer for VPC has public access enabled in Terraform misconfiguration","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-ibm-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"i3CQ4BKpWH3g1zUKKhOk","title":"IBM Cloud Kubernetes clusters are accessible by using public endpoint in Terraform misconfiguration","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-ibm-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"PfO1mCgGOAPQrNDcXKZM","title":"OCI Network Security Group allows all traffic on RDP port (3389) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-oci-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"R0CajP0LUUK3fKzH5nIP","title":"OCI Kubernetes Engine Cluster endpoint is not configured with Network Security Groups misconfigurati","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-oci-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"ZlsCJT1YUyIyuYgRDya2","title":"OCI Kubernetes Engine Cluster pod security policy not enforced misconfiguration detected in code","pathname":"/appsec-rules/iac-security/public-exposure/appsec2-oci-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Public Exposure"}]},{"id":"4EKJfsiG1lcWxQS4IxXP","title":"Storage","pathname":"/appsec-rules/iac-security/storage","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"}]},{"id":"0v9eZWi2XqpU7N1vdKar","title":"Alibaba Cloud OSS bucket is not encrypted with Customer Master Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-ali-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Jfgu8Q2OqtOWR4YBXR6i","title":"Alibaba Cloud disk encryption is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-ali-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"nWlY9khqhpSiDZtnaYze","title":"Alibaba Cloud Disk is not encrypted with Customer Master Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-ali-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"9jB8F4Jaj4DoCAOTIaWI","title":"Alibaba Cloud OSS bucket has versioning disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-ali-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"hZ4GOb3yqJD2DqH3lt05","title":"Alibaba Cloud OSS bucket has transfer Acceleration disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-ali-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"xtzbkcMo03x2nwWMXj9e","title":"Alibaba Cloud Transparent Data Encryption is disabled on instance misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-ali-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"RgsAd6xQIOvuEv4FRrQC","title":"Alibaba Cloud launch template data disks are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-ali-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"tuuyRObocGQDJ5YZVJ0x","title":"Alibaba Cloud MongoDB does not have transparent data encryption enabled misconfiguration detected in","pathname":"/appsec-rules/iac-security/storage/appsec-ali-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"htM6llXurOzxKtyJc5tS","title":"AWS EBS volumes are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ACbFJuGCdATVPPB7hOad","title":"AWS Elasticsearch domain Encryption for data at rest is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"xJbVYLtrB1ptiGUClYZd","title":"AWS EC2 Auto Scaling Launch Configuration is not using encrypted EBS volumes misconfiguration detect","pathname":"/appsec-rules/iac-security/storage/appsec-aws-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"lR8IXH0yEqYeiNswDSny","title":"AWS RDS DB cluster encryption is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"vW8fFYwMnos9l7nWo5h3","title":"AWS Access logging not enabled on S3 buckets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"C6v2se7qGWjVT3Z1bxNe","title":"AWS S3 buckets do not have server side encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"L3FJMy0hpZoPL7vCrvfz","title":"AWS S3 bucket ACL grants READ permission to everyone misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"0tsyrTwwyW6GNanB9f1N","title":"AWS S3 Object Versioning is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Xz3YBw6UlOZ5E1yA3I99","title":"AWS SNS topic has SSE disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"BiztiAJBD3hTWAswNAHY","title":"AWS SQS Queue not configured with server side encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"zQ5JuyZ2yABImYgtaJsx","title":"DynamoDB PITR is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"V46KG7m3HibYKn9wtKDe","title":"AWS ElastiCache Redis cluster with encryption for data at rest disabled misconfiguration detected in","pathname":"/appsec-rules/iac-security/storage/appsec-aws-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LQ3xDPy4cpXtuEBDRWxh","title":"AWS CloudTrail logs are not encrypted using Customer Master Keys (CMKs) misconfiguration detected in","pathname":"/appsec-rules/iac-security/storage/appsec-aws-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"d89qckiUCuQUlSTtd9vV","title":"AWS Elastic File System (EFS) with encryption for data at rest is disabled misconfiguration detected","pathname":"/appsec-rules/iac-security/storage/appsec-aws-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Zdtl8ekOeeeB6cssi3S9","title":"AWS Kinesis streams are not encrypted using Server Side Encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"2tfKFugmodcRD0b0kcTn","title":"Neptune storage is not securely encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"t7BFQDil6dzx4kEQBbR3","title":"AWS DAX cluster not configured with encryption at rest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-47","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"iNqABzOjUBRsUUymxoYK","title":"ECR image tags are not immutable misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-51","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"c3BVNStxes8vmdSnbbFY","title":"AWS S3 Bucket has the block public ACLs disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-53","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"AoiJm2ThrjfYG5mRVIPd","title":"AWS S3 Bucket BlockPublicPolicy is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-54","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"t5IeNlezIDYVBLsaUoX7","title":"AWS S3 bucket IgnorePublicAcls is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-55","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"mz6P2vPe0IUmU6sAKOhX","title":"AWS S3 bucket RestrictPublicBucket is not set to True misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-56","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"lwVMf0Wx2m0ygaMhTgyG","title":"AWS S3 Bucket has an ACL defined which allows public WRITE access misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-57","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"omreaiF3YssBFBcRIiSi","title":"AWS EKS cluster does not have secrets encryption enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-58","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"tfjiHapLZEN55Gi7wMHQ","title":"AWS Redshift instances are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-64","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"10OTPQCWMDE4knzNUOET","title":"AWS S3 bucket policy overly permissive to any principal misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-70","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ygIDyQw7W15JzeN9iq55","title":"DocumentDB is not encrypted at rest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-74","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"htuKO9lRHrEEnejKHa9W","title":"Athena Database is not encrypted at rest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-77","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"oZOMKw4TzVk3KHwJjQE5","title":"CodeBuild project encryption is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-78","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"RmpqOT7xPwP6XoL7QRxW","title":"AWS MSK cluster encryption in transit is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-81","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"1zKEbHPQEFBTG5BRj23G","title":"Athena workgroup does not prevent disabling encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-82","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"fx0mVMjJiz7eHDWJw6YF","title":"DocDB TLS is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-90","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"1HqoEN4pVFsqjogoFM8D","title":"S3 bucket policy allows lockout all but root user misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-93","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"VoiCoGJqgPIikLSDfM5O","title":"Glue Data Catalog encryption is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-94","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"sdLfrMWspgu8lwSVRZvy","title":"Not all data stored in Aurora is securely encrypted at rest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-96","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"wjkuEp6EF71yxsPiwZ2I","title":"EFS volumes in ECS task definitions do not have encryption in transit enabled misconfiguration detec","pathname":"/appsec-rules/iac-security/storage/appsec-aws-97","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"CZOJJ7RQSdWfvG239FgF","title":"AWS Glue security configuration encryption is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-99","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"nyRrx6f6NXVaBrNPes0x","title":"DocDB does not have audit logs enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-104","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"FA1zEf4CJZpN1Tzh0qtB","title":"AWS Redshift does not have require_ssl configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-105","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"wp3rLZBYxEJt9koukqhW","title":"AWS EBS volume region with encryption is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-106","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"1o8iFokpB1hAaVJ954Br","title":"Session Manager data is not encrypted in transit misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-112","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"7KGeL01pIysCZS2OeqNj","title":"AWS DynamoDB encrypted using AWS owned CMK instead of AWS managed CMK misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec-aws-119","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"eayUdLPcueGTf2YEHuDi","title":"AWS RDS instance without Automatic Backup setting misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-133","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LDXtsMzVhkkLuNwIRq2f","title":"AWS ElastiCache Redis cluster is not configured with automatic backup misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec-aws-134","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LV9GmfHB2bPPnrQugA2O","title":"EC2 EBS is not optimized misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-135","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"cy0GlXPy2ZDF01MrcFjt","title":"Unencrypted ECR repositories misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-136","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Eph9Ex3FsOUE39fDCmYa","title":"AWS RDS cluster delete protection is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-139","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Lm3QXUyFbbW1pBg0wnL7","title":"Unencrypted RDS global clusters misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-140","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ROIEyyphHe2NMdwWOpSn","title":"Redshift clusters version upgrade is not default misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-141","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"xZLh0h8XPrJvzaUn78d8","title":"AWS Redshift Cluster not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-142","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NRmiI2QWzibwy48jbpbp","title":"S3 bucket lock configuration disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-143","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"lKSBjQIUkGzqPnj2wZzq","title":"S3 bucket cross-region replication disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-144","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"TjNyFBXZ1WGewmMqkltS","title":"S3 buckets are not encrypted with KMS misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-145","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"FOVaQRtiwxE1DgfN0w5l","title":"AWS RDS DB snapshot is not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-146","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"dA3hWCkPBLE3zFv4wAii","title":"CodeBuild projects are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-147","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"pCfv5IC1QxhKbikAy8HH","title":"AWS Secrets Manager secret not encrypted by Customer Managed Key (CMK) misconfiguration detected in","pathname":"/appsec-rules/iac-security/storage/appsec-aws-149","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"JRt8PrPqkvpJH3t0Gzmz","title":"Workspace user volumes are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-155","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"d1wySSbfYEYaDCD2Hp1Q","title":"Workspace root volumes are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-156","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"e5JkOdXOjZCKD28cEjHU","title":"RDS instances do not have Multi-AZ enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-157","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"dqMADUPndjlGsHObkBHu","title":"Athena Workgroup is not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-159","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"le27Kg6dNddqiTMWId0R","title":"Timestream database is not encrypted with KMS CMK misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-160","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"D9AW2w5R0KjLlEaV4dJh","title":"Dynamodb point in time recovery is not enabled for global tables misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-165","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"dvhM63YSAdHEmPcsuxyU","title":"Backup Vault is not encrypted at rest using KMS CMK misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-166","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"tx55CnI7lEOzQjCFjGKn","title":"QLDB ledger permissions mode is not set to STANDARD misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-170","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"cNcD6vlxUNz4hXPum4zA","title":"AWS EMR cluster is not configured with SSE KMS for data at rest encryption (Amazon S3 with EMRFS) mi","pathname":"/appsec-rules/iac-security/storage/appsec-aws-171","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"j6GM6f674EaCD8ObDSOE","title":"AWS QLDB ledger has deletion protection is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-172","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"TMvKHngX8ADWQ0FdEn1G","title":"AWS Lambda encryption settings environmental variable is not set properly misconfiguration detected","pathname":"/appsec-rules/iac-security/storage/appsec-aws-173","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Vvcg1YeNId62poYORBHP","title":"AWS Kinesis Video Stream not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-177","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"bdYLPfz5DJsU4NcjJQMn","title":"AWS fx ontap file system not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-178","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"FQrh0FQjJ2Jani6Wvq1f","title":"AWS FSX Windows filesystem not encrypted using Customer Managed Key misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/storage/appsec-aws-179","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LK21SLDckRqYrtwmxtqk","title":"AWS Image Builder component not encrypted using Customer Managed Key misconfiguration detected in co","pathname":"/appsec-rules/iac-security/storage/appsec-aws-180","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"roraIh0XLOGpNLqqw3F4","title":"AWS S3 Object Copy not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-181","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"qOKAQKqoGNCFf8Bx9lzc","title":"AWS Doc DB not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-182","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"tZToNOn4YzScqd39Ogf0","title":"AWS EBS Snapshot Copy not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-183","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"KgZFyDYwPVJJPbwvazfs","title":"AWS Elastic File System (EFS) is not encrypted using Customer Managed Key misconfiguration detected","pathname":"/appsec-rules/iac-security/storage/appsec-aws-184","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Mm1SohIYZrL6UFGxQ4qN","title":"AWS Kinesis streams encryption is using default KMS keys instead of Customer's Managed Master Keys m","pathname":"/appsec-rules/iac-security/storage/appsec-aws-185","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"5c7YtbiH5FQtno7LJjRC","title":"AWS S3 bucket Object not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-186","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"vl23Geqwo280r5AbRggK","title":"AWS EBS Volume not encrypted using Customer Managed Key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-189","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"dn4E71yLLAB6qKSbZbKi","title":"AWS lustre file system not configured with CMK key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-190","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"z7QX3IlWSyzAmvmhdouz","title":"AWS Elasticache replication group not configured with CMK key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-191","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ovl2seRCqdYklTUQJwIQ","title":"AWS Glue component is not associated with a security configuration misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-195","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"nXEH54ucQXO6IUUCbiJG","title":"AWS Image Builder Distribution Configuration is not encrypting AMI by Key Management Service (KMS) u","pathname":"/appsec-rules/iac-security/storage/appsec-aws-199","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"0hvO71lPogZqW0fcifo0","title":"AWS Image Recipe EBS Disk are not encrypted using a Customer Managed Key (CMK) misconfiguration dete","pathname":"/appsec-rules/iac-security/storage/appsec-aws-200","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"sySEtWE1e9IAm1gCUGBX","title":"AWS MemoryDB is not encrypted at rest by AWS' Key Management Service KMS using CMKs misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-aws-201","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"EtwsubN1I4z7pnMvDrvZ","title":"AWS MemoryDB data is not encrypted in transit misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-202","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"F95wEUggL6noZ6ADxLKm","title":"AWS FSX openzfs is not encrypted by AWS' Key Management Service (KMS) using a Customer Managed Key (","pathname":"/appsec-rules/iac-security/storage/appsec-aws-203","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"HYFCzaj1zziLeAXIk1GP","title":"AWS AMIs are not encrypted by Key Management Service (KMS) using Customer Managed Keys (CMKs) miscon","pathname":"/appsec-rules/iac-security/storage/appsec-aws-204","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"PYZvK4LrvmiLXK7MzNxm","title":"AWS MQ Broker is not encrypted by Customer Managed Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-209","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"84nPKMsSkeycAjnWEwQm","title":"AWS RDS does not use a modern CaCert misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-211","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"1fnHmZ9zU36xk31aORr0","title":"AWS EBS Volume is not encrypted by Key Management Service (KMS) using a Customer Managed Key (CMK) m","pathname":"/appsec-rules/iac-security/storage/appsec-aws-212","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NQRiwRAr5w6ruTddlxKU","title":"AWS Appsync API Cache is not encrypted at rest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-214","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"p0cJb2zMFVXfUrcsy8jH","title":"AWS Appsync API Cache is not encrypted in transit misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-215","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NIh4rUcKoaMS4gNy80n9","title":"AWS CodePipeline artifactStore is not encrypted by Key Management Service (KMS) using a Customer Man","pathname":"/appsec-rules/iac-security/storage/appsec-aws-219","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"CcjNCJcxF6F8lNbfV43d","title":"AWS Code Artifact Domain is not encrypted by KMS using a Customer Managed Key (CMK) misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-aws-221","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ZqBqmte2RPCidnbc2MQT","title":"AWS copied AMIs are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-235","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"wKNdOcv7OieguMc9cJpo","title":"AWS AMI copying does not use a Customer Managed Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-236","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LfK87UUMUcUJWNswb3r8","title":"AWS Kinesis Firehose's delivery stream is not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-240","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"OCxRayzs3xH8TJkTP6Bo","title":"AWS Kinesis Firehose Delivery Streams are not encrypted with CMK misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-241","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"aAeeAFFZvFofVTzBa388","title":"AWS replicated backups are not encrypted at rest by Key Management Service (KMS) using a Customer Ma","pathname":"/appsec-rules/iac-security/storage/appsec-aws-245","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"79AiKKZLuGp4U901nCMM","title":"AWS RDS Cluster activity streams are not encrypted by Key Management Service (KMS) using Customer Ma","pathname":"/appsec-rules/iac-security/storage/appsec-aws-246","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Q1n13GOYxK5AMbpQAxcq","title":"AWS all data stored in the Elasticsearch domain is not encrypted using a Customer Managed Key (CMK)","pathname":"/appsec-rules/iac-security/storage/appsec-aws-247","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"uvEmyRQVKi4wJQTWNq0p","title":"AWS RDS PostgreSQL exposed to local file read vulnerability misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-250","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NTr2QQ2ZWLXp7zHqG075","title":"AWS DLM cross-region events are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-253","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"OWOA3Hi0YDTI6SC3Zaer","title":"AWS DLM cross-region events are not encrypted with a Customer Managed Key (CMK) misconfiguration det","pathname":"/appsec-rules/iac-security/storage/appsec-aws-254","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"cBltms1ZsOc3aaVN6FoH","title":"AWS DLM-cross region schedules are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-255","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"iPkXwimw60JhdbbYXlFW","title":"AWS DLM cross-region schedules are not encrypted using a Customer Managed Key (CMK) misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-aws-256","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"DnCKsotFLMjEbi8SmRt8","title":"AWS App Flow flow does not use Customer Managed Keys (CMKs) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-263","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"K9RtqoD0OC1NWv46VDyK","title":"AWS App Flow connector profile does not use Customer Managed Keys (CMKs) misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec-aws-264","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"oNmvG55FhTMytmfUdtBK","title":"AWS Keyspace Table does not use Customer Managed Keys (CMKs) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-265","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"vlShoh3vSFL4bUGmXpwB","title":"AWS RDS DB snapshot does not use Customer Managed Keys (CMKs) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-266","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"TZaBnFazTconOvTk9WLQ","title":"Comprehend Entity Recognizer's model is not encrypted by KMS using a customer managed Key (CMK) misc","pathname":"/appsec-rules/iac-security/storage/appsec-aws-267","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"DSnq10N0KbPWTurAx9s9","title":"Comprehend Entity Recognizer's volume is not encrypted by KMS using a customer managed Key (CMK) mis","pathname":"/appsec-rules/iac-security/storage/appsec-aws-268","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"TFKlIBbMnqPLayfNP3xK","title":"Connect Instance Kinesis Video Stream Storage Config is not using CMK for encryption misconfiguratio","pathname":"/appsec-rules/iac-security/storage/appsec-aws-269","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Qa2PG3rW7bYZxxem7wyB","title":"The Connect Instance S3 Storage Configuration utilizes Customer Managed Key. misconfiguration detect","pathname":"/appsec-rules/iac-security/storage/appsec-aws-270","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"aeLuB2WP4U6WRUu3JSlR","title":"DynamoDB table replica does not use CMK KMS encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-271","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"v7Zo71CHqI6qfTgQGpH2","title":"MemoryDB snapshot is not encrypted by KMS using a customer managed Key (CMK) misconfiguration detect","pathname":"/appsec-rules/iac-security/storage/appsec-aws-278","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"VnigCbHjVmlzfeE0He1K","title":"Neptune snapshot is not securely encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-279","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"HgNQPLZdPa0ss41zPeVu","title":"Neptune snapshot is encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in","pathname":"/appsec-rules/iac-security/storage/appsec-aws-280","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"vZZBrHjcZsg8nnDDCQ1R","title":"RedShift snapshot copy is not encrypted by KMS using a customer managed Key (CMK). misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-aws-281","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"xNlYgcbaK8FEczNlNGSN","title":"Redshift Serverless namespace is not encrypted by KMS using a customer managed key (CMK) misconfigur","pathname":"/appsec-rules/iac-security/storage/appsec-aws-282","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"iVfknvOU70sGQJmcpXxI","title":"DocDB Global Cluster is not encrypted at rest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-292","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"xlRKV9rQ4jvZjR8aah6k","title":"AWS database instances do not have deletion protection enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-293","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"P9uQjiARltvXWy19YIHJ","title":"CloudTrail Event Data Store does not use Customer Managed Keys (CMKs) misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec-aws-294","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"L3Msv3fnKC956N1WyvKR","title":"DataSync Location Object Storage exposes secrets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-295","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"L12XbKsKHHpk95KLBnSW","title":"DMS endpoint is not using a Customer Managed Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-296","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"KSoavkUEnAlkrtF5zCBi","title":"EventBridge Scheduler Schedule is not using a Customer Managed Key (CMK) misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec-aws-297","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ZN0RPrjtku9hWZUAfR8G","title":"The DMS S3 does not use a Customer Managed Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-298","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"qaQtEnxm64I31Em77OtA","title":"S3 lifecycle configuration does not set a period for aborting failed uploads misconfiguration detect","pathname":"/appsec-rules/iac-security/storage/appsec-aws-300","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"kO6R8vsjDDTc0I9kUUiL","title":"Secrets Manager secrets are not rotated within 90 days misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-304","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"FHnIww0eggQ8lkZjyPzo","title":"CodeBuild S3 logs are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-311","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"9yLQ06zbzpYr5EgT0xTc","title":"RDS Aurora Clusters do not have backtracking enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-326","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"pYmhJE7tzLNxXYl9wtx3","title":"AWS RDS DB cluster is encrypted using default KMS key instead of CMK misconfiguration detected in co","pathname":"/appsec-rules/iac-security/storage/appsec-aws-327","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"1R58ZqhaSSf4Qt1gl4aJ","title":"EFS Access Points are not enforcing a root directory misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-329","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"5uczDTMgNpwvdCJF1yk6","title":"User identity should be enforced by EFS access points misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-330","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"7v4Oe3mBWqhmqiHprpDr","title":"SSM parameters are not utilizing KMS CMK. misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-337","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"G85zjosHhnhwjpbOv99g","title":"Amazon Redshift clusters do not have automatic snapshots enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-343","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"FA3HzMTVAuIA6Hj5V9eU","title":"Network firewall encryption does not use a CMK misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-345","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Lnpmb47DqZSkRWj8eIhy","title":"Network Firewall Policy does not define an encryption configuration that uses a CMK misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-aws-346","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"X8QxUWptpLWuQQjd66BL","title":"Neptune is not encrypted with KMS using a customer managed Key (CMK) misconfiguration detected in co","pathname":"/appsec-rules/iac-security/storage/appsec-aws-347","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"XtFhzD40CQZL2kVnfhpa","title":"AWS EMR cluster is not enabled with local disk encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-349","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"YXQ6RUZBBbo00NkVQWOH","title":"Security configuration of the EMR Cluster does not ensure the encryption of EBS disks misconfigurati","pathname":"/appsec-rules/iac-security/storage/appsec-aws-350","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"egOcilurkci3jVPEezbP","title":"AWS EMR cluster is not enabled with data encryption in transit misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-351","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NUNBpFqPUKVkZXm9xGwk","title":"RDS Performance Insights are not encrypted using KMS CMKs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-354","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"1615bGL0i6PyhgjHXBKd","title":"AWS DocumentDB clusters have backup retention period less than 7 days misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec-aws-360","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"F3XNnb6OX8V6RHMVcbl6","title":"AWS Neptune DB clusters have backup retention period less than 7 days misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec-aws-361","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"w1T3IqCbFrqIrSDJRUEi","title":"Clusters of Neptune DB do not replicate tags to snapshots misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-362","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"z1lU9TwzyJYZCp7fNREv","title":"Bedrock Agent not encrypted with Customer Master Key (CMK) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-373","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"KrU0Mi10f2HDEpqVADds","title":"AWS S3 bucket has global view ACL permissions enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-375","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"uF6wTcru6qca0HElHrpm","title":"AWS CodeGuru Reviewer repository association does not use a Customer Managed Key (CMK) misconfigurat","pathname":"/appsec-rules/iac-security/storage/appsec-aws-381","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"VoEFJAQQGoPaLWK77TOy","title":"Not all data stored in the EBS snapshot is securely encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-aws-custom-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"TQkayoNkAgFjML8aWaDu","title":"Azure VM data disk is not encrypted with ADE/CMK misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"QLklyOGlM8GxpNIsKIS2","title":"Azure Storage Account without Secure transfer enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"2rQxTMMIcCJdOIilEW1N","title":"Azure PostgreSQL database server with log checkpoints parameter disabled misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec-azure-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NQ5YcncPvFmtPaHutcJ1","title":"Azure PostgreSQL database server with log connections parameter disabled misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec-azure-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"EiBNlYsi5Uzpz1w4mC28","title":"Azure PostgreSQL database server with connection throttling parameter is disabled misconfiguration d","pathname":"/appsec-rules/iac-security/storage/appsec-azure-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"yHdMRGyPRgVPPxwqc4Ft","title":"Azure Storage Account 'Trusted Microsoft Services' access not enabled misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec-azure-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"u75rTDZCNecgwEWj1sA1","title":"Azure Key Vault Keys does not have expiration date misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Zfh2VwRvvPNbweTsjW4L","title":"Azure Key Vault secrets does not have expiration date misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"3EVLvQ6GCXpYKDoC9PHi","title":"Azure Key Vault is not recoverable misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Xvy9j2sAZ7KOW1pirDtC","title":"Storage Account name does not follow naming rules misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"FVrmW0VHsi1U9iq6wr67","title":"Azure Storage Account using insecure TLS version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"1Wp3sImAjZNuZCWwUSmF","title":"MSSQL is not using the latest version of TLS encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-52","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"179UXd5yNAJmYXUc5m4u","title":"Azure Automation account variables are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-73","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Yo0pyRwmhB1CLDrbg5fF","title":"Azure Data Explorer cluster disk encryption is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-74","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Lrg0iewgTBEgt13slIZf","title":"Azure Data Explorer cluster double encryption is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-75","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"mEruQ8h8I0ha1sLWVhLn","title":"Azure Batch account does not use key vault to encrypt data misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-76","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"s34Fvi7txRl5V8eeZyy0","title":"App services do not use Azure files misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-88","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"GchY6SV85Qh8f5mOB8GO","title":"Not only SSL are enabled for cache for Redis misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-91","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"BuiZmQLSTMiZA6dKJLkS","title":"Managed disks do not use a specific set of disk encryption sets for customer-managed key encryption","pathname":"/appsec-rules/iac-security/storage/appsec-azure-93","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LrM9lnwF600QLquHYRGs","title":"My SQL server disables geo-redundant backups misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-94","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"20Bk6cdokvIOqKT5tA2s","title":"MySQL server disables infrastructure encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-96","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"6nwGuLZInD3aE0OuOlRp","title":"Virtual machine scale sets do not have encryption at host enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-97","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"BRM3ASpPmA1v0aN4orDU","title":"Cosmos DB Accounts do not have CMKs encrypting data at rest misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-100","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"pJ7GNCPR3JU22D1JoYOj","title":"PostgreSQL server enables geo-redundant backups misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-102","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NpziA0jcX868MiNLF04I","title":"Unencrypted Data Lake Store accounts misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-105","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"0h1o9D30vQs6lDLE6MT5","title":"Azure Key Vault Purge protection is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-110","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"CtQeZGXZIZvhzLQ0AgWr","title":"Key vault does not enable soft-delete misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-111","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"6iNOoBthZltFac2kL4kX","title":"Key vault key is not backed by HSM misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-112","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"gYQlWKtAHBEquSwclnr1","title":"Key vault secrets do not have content_type set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-114","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"JYkqqoTcLUXOaoorfmNf","title":"Azure AKS cluster is not configured with disk encryption set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-117","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"hm0mePxpIYx4AFSTzRxV","title":"MariaDB server does not enable geo-redundant backups misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-129","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"iB4OxKJMNC27hMK8LTKb","title":"PostgreSQL server does not enable infrastructure encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-130","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"4zVRdt5Biz4A8jzIsbda","title":"Azure Cosmos DB key based authentication is enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-132","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"SIhrq0ijjsFy3czc9nmL","title":"Azure PostgreSQL Flexible Server does not enable geo-redundant backups misconfiguration detected in","pathname":"/appsec-rules/iac-security/storage/appsec-azure-136","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Jf1eljw1tWY7H9Pw2ZfM","title":"Azure PostgreSQL does not use the latest version of TLS encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-147","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"mnopvFDMsNcPxOOYxsG5","title":"Azure Windows VM does not enable encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-151","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ZLfY416u5ySE3XfEvs5U","title":"Geo-Replicated Not Enabled for Azure Container Registry (ACR) misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-165","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"xs4UYXsqHxnogNDH1OfD","title":"Azure Container Registry (ACR) Does Not Have a Quarantine Policy Enabled misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec-azure-166","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"DGo0nqp7M1uBUpoXY4sF","title":"Azure Container Registry (ACR) Doesn't Have a Retention Policy Set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-167","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"GCIOC3KGrIlg28WKAAbL","title":"AKS Secrets Store Without Auto-Rotation misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-172","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"9SMM0fMQ5l2CHB54YaSl","title":"Azure Data Explorer without SLA misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-180","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ez5NGCqAln25SdSy0fHB","title":"App Configuration Encryption Block Not Set misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-186","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"7IeZh2GIhOmWPT7rWD4V","title":"App Configuration Without Purge Protection Enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-187","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"KG62cSCLpSpHynief5iJ","title":"Azure Service Bus Doesn't Use Double Encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-199","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"XnWjaQhpebKW0He9gDBL","title":"Azure Service Bus Doesn't Use Customer-Managed Key Encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-201","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"XM51hJJZ9Po8yZDleCdi","title":"Azure Storage Accounts Without Proper Replication misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-206","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"11eorVY60Ijl6WSb1bxa","title":"Azure Cognitive Search Without SLA Index Updates misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-208","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"gRjIUc3oyPv4fj851NHC","title":"Azure Cognitive Search Without SLA for Search Index Queries misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-209","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"ymB4PLgNMQ3p60AgUgJi","title":"App Service Plan is not zone redundant misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-225","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"hr14RIsLSYkswvCw9vR8","title":"AKS cluster not encrypting temp disks, caches, and data flows misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-227","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"CrfZUGnlP2qkRJhcWGDt","title":"Azure Event Hub Namespace is not zone redundant misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-228","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"mYpYlztKUBFtw4OIATMw","title":"Azure SQL Database Namespace is not zone redundant misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-229","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"EZk9jSsolYwijLktUJuR","title":"Standard Replication is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-230","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"5XRtZmhzjV1FjXBBhaoG","title":"App Service Environment is not zone redundant misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-231","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"NXfNY7wFjV2MR3VjraOG","title":"Azure Container Registry (ACR) not zone redundant misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-azure-233","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"sVPc8KJjxlMGEzv5aAXH","title":"GCP SQL database instance does not have backup configuration enabled misconfiguration detected in co","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"jLtGiH3Qoj2433SKexKs","title":"GCP cloud storage bucket with uniform bucket-level access disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"czaOZym28liazNknVkss","title":"GCP VM disks not encrypted with Customer-Supplied Encryption Keys (CSEK) misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"XQBDI9qPOM4eCH9vHAU9","title":"Boot disks for instances do not use CSEKs misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"u4OXPzntRz0iI8ZJDdpQ","title":"GCP KMS Symmetric key not rotating in every 90 days misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"bMscH6MyZRp3CrfZbdGQ","title":"GCP MySQL instance with local_infile database flag is not disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-50","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"zVpxKrJRmd13iJHc5dIe","title":"GCP SQL Server instance database flag 'cross db ownership chaining' is enabled misconfiguration dete","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-58","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"tFT0qX91byTfIsQTxknD","title":"GCP SQL Server instance database flag 'contained database authentication' is enabled misconfiguratio","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-59","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Lxa10Mis9cM1p0864E6K","title":"GCP Storage Bucket does not have Access and Storage Logging enabled misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-62","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"7ee0kjXCNV4rAIY513Gw","title":"GCP storage bucket is logging to itself misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-63","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"vkdspTBd7xqXd5ic7Fsq","title":"GCP Cloud storage does not have versioning enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-78","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"DSjn1JnKzdCvLL5ytZwX","title":"GCP Big Query Tables are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguratio","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-80","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Ks9xTGV9UgkUrii7lYZZ","title":"GCP Big Query Datasets are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfigurat","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-81","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"KsAd1NI84ncDz6pTnmXi","title":"GCP KMS keys are not protected from deletion misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-82","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"rHJAoVpzTSzFueEXkVo9","title":"GCP Pub/Sub Topics are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-83","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"jHZQvmKrqarpsByXEA04","title":"GCP Artifact Registry repositories are not encrypted with Customer Supplied Encryption Keys (CSEK) m","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-84","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"WRO6YfZIIXWTkPOUamsW","title":"GCP Big Table Instances are not encrypted with Customer Supplied Encryption Keys (CSEKs) misconfigur","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-85","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"RR7dG5rqw5T0LqbxDJqh","title":"GCP data flow jobs are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-90","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"VPVigebkwoXXYP22JN0e","title":"GCP Dataproc Cluster not configured with Customer-Managed Encryption Key (CMEK) misconfiguration det","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-91","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"a4qyoPSZvZ6UceWYUiqS","title":"GCP Spanner Database is not encrypted with Customer Supplied Encryption Keys (CSEKs) misconfiguratio","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-93","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"yA4k2rCi8a53ZregBukH","title":"GCP Memorystore for Redis does not use intransit encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-97","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"r21mufYqA3qhoCV7AJVs","title":"Deletion protection for Spanner Database is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-119","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"JyTrx0GVOLfLkfEeAXA7","title":"Spanner Database does not have drop protection enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-120","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"QRBxo6LCaxRIRKEmhf2U","title":"BigQuery tables do not have deletion protection enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-121","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"S03qmeQ2mcIvYqQtYQpM","title":"Big Table Instances do not have deletion protection enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-gcp-122","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"5XnVlUo1GhyBbAznUPLj","title":"GitHub Actions Environment Secrets defined in Terraform are not encrypted misconfiguration detected","pathname":"/appsec-rules/iac-security/storage/appsec-git-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"aoGNlVmcqH7L7PHCH4cs","title":"Gitlab project defined in Terraform does not prevent secrets misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-glb-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"jBn3OmUED5tqMZhOMTD6","title":"The --etcd-certfile and --etcd-keyfile arguments are not set appropriately misconfiguration detected","pathname":"/appsec-rules/iac-security/storage/appsec-k8s-99","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"yHDbK86e8vEcjY8qdBad","title":"Encryption providers are not appropriately configured misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-k8s-104","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"PS3cexEDmGJVdYcsoV8x","title":"The --cert-file and --key-file arguments are not set appropriately misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-k8s-116","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"HkUxuBRkEEK2lmt7qVW5","title":"The --peer-cert-file and --peer-key-file arguments are not set appropriately misconfiguration detect","pathname":"/appsec-rules/iac-security/storage/appsec-k8s-119","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"sw4YumUVoMyiqgKBONL9","title":"OCI Block Storage Block Volume does not have backup enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-oci-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"XJdjLWwlU5TGHYCPzdTR","title":"OCI Block Storage Block Volumes are not encrypted with a Customer Managed Key (CMK) misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec-oci-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"DZwn68Wppy5so5SJ1BVZ","title":"OCI Object Storage bucket does not emit object events misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-oci-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"AiE6JqkumbpdKDIcMIa1","title":"OCI Object Storage Bucket has object Versioning disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-oci-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"18E3uhycS7HMErOa0mF6","title":"OCI Object Storage Bucket is not encrypted with a Customer Managed Key (CMK) misconfiguration detect","pathname":"/appsec-rules/iac-security/storage/appsec-oci-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"7MKwOVk87cuvQTGBed86","title":"OCI Object Storage bucket is publicly accessible misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec-oci-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"jVyNIEQqPHm8eChwz9Bi","title":"OCI File Storage File Systems are not encrypted with a Customer Managed Key (CMK) misconfiguration d","pathname":"/appsec-rules/iac-security/storage/appsec-oci-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"eiw4kVpjzIav6r2akGRZ","title":"Not only encrypted EBS volumes are attached to EC2 instances misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"RjKkGggjqQyadTT4TDnP","title":"RDS clusters do not have an AWS Backup backup plan misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"CM0FVdzhQ4OZa1uobsAs","title":"EBS does not have an AWS Backup backup plan misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"HpME9NkAuh0ugtCDSgB1","title":"AWS DynamoDB table Auto Scaling not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"o8kxjv3fWPczRdwgd13B","title":"Amazon EFS does not have an AWS Backup backup plan misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"6swJ1Fh2S3GB7rn9QqiY","title":"AWS SSM Parameter is not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"wpMIQWwbyo67PZtTksjW","title":"AWS ElastiCache Redis cluster with Multi-AZ Automatic Failover feature set to disabled misconfigurat","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-50","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"TyFfiX6IdegQs6Ues9Jl","title":"AWS EMR cluster is not configured with security configuration misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-55","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"lH5B5orVTpHdu2DOMoqa","title":"AWS Secret Manager Automatic Key Rotation is not enabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-57","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"MxPU7nN038b6h4h0QOYW","title":"AWS Neptune cluster deletion protection is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-58","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LSm7xlhGyigdnmdxdmG9","title":"AWS S3 bucket access control lists (ACLs) in use misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-65","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"3xDOF4ywgCVFVDxvbsS7","title":"AWS RDS database instance not configured with encryption in transit misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-69","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"FfRkCEZ27edRBCfu3GyL","title":"AWS SQS queue encryption using default KMS key instead of CMK misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-aws-73","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"GfbODHiVHe2H87MnCdOW","title":"Storage for critical data are not encrypted with Customer Managed Key misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"vf9bKTPI9jLjEqAnu8Ea","title":"Azure Data Explorer encryption at rest does not use a customer-managed key misconfiguration detected","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"GAUCLkkr1fFeF0O0gMLp","title":"Virtual Machines are not backed up using Azure Backup misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"KZV0A9dPMUW2lwkiyOel","title":"Unattached disks are not encrypted misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"Fh729p5NA4cDX7JMbZfZ","title":"Azure data factories are not encrypted with a customer-managed key misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"kJvgwtz4su6hbZOKd2qg","title":"MySQL server does not enable customer-managed key for encryption misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"jMxrdZrgg10kXkMbNQV7","title":"PostgreSQL server does not enable customer-managed key for encryption misconfiguration detected in c","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"fgVj2lwSvChXWrh7MOB9","title":"Azure Storage account Encryption CMKs Disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"2B1mOK9Ht8w7YjLvjlLa","title":"Azure SQL database Transparent Data Encryption (TDE) encryption disabled misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"LIEYPKyM6i4ksY56ItFO","title":"Azure MariaDB database server not using latest TLS version misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"HbnaMmZ5YvMRMXcX1svs","title":"Azure Storage account soft delete is disabled misconfiguration detected in code","pathname":"/appsec-rules/iac-security/storage/appsec2-azure-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"xmqeENWEhD0RM5bxzTlU","title":"GCP SQL MySQL DB instance point-in-time recovery backup (Binary logs) is not enabled misconfiguratio","pathname":"/appsec-rules/iac-security/storage/appsec2-gcp-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"wTCbQYamO8Fg0zJQ9TXp","title":"Vertex AI instance disks not encrypted with a Customer Managed Key (CMK) misconfiguration detected i","pathname":"/appsec-rules/iac-security/storage/appsec2-gcp-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"sgEPIGKremJ8OlwHAQlq","title":"Document AI Processors not encrypted with a Customer Managed Key (CMK) misconfiguration detected in","pathname":"/appsec-rules/iac-security/storage/appsec2-gcp-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"4A3ZrUuyWpwVo1IoF9R2","title":"Document AI Warehouse Location is not configured to use a Customer Managed Key (CMK) misconfiguratio","pathname":"/appsec-rules/iac-security/storage/appsec2-gcp-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"9wIti7NHGT8Jc1zRKXUc","title":"Vertex AI workbench instance disks not encrypted with a Customer Managed Key (CMK) misconfiguration","pathname":"/appsec-rules/iac-security/storage/appsec2-gcp-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"vnWSmYlppnlplXfFM78F","title":"OCI File Storage File System access is not restricted to root users misconfiguration detected in cod","pathname":"/appsec-rules/iac-security/storage/appsec2-oci-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"yUahsnL3qdna0EEbQ4wN","title":"OCI Kubernetes Engine Cluster boot volume is not configured with in-transit data encryption misconfi","pathname":"/appsec-rules/iac-security/storage/appsec2-oci-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"IaC Security"},{"label":"Storage"}]},{"id":"jExQ0c87ZhlP8CO4QCFK","title":"CI/CD Security","pathname":"/appsec-rules/ci-cd-security","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"jTFHxqtnhJ1w9pO25P9N","title":"Artifact Integrity Validation","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"GaDbRytyxhYigEJYEDUQ","title":"Missing integrity check for downloaded executable in pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-106","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"9P8LGpd7EdC2rPAZe673","title":"Missing integrity check for downloaded executable in CircleCI pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-107","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"rP2R6Qy4hl6ZDHlSNlqN","title":"Missing integrity check for downloaded executable in GitHub Actions pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-108","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"EO7GX5GKUmniNyW9usNc","title":"Auto-merge configured in pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-118","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"nn2GevZVMPP6S3PveIL1","title":"Missing integrity check for downloaded executable in GitLab CI pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-123","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"acfuYWRPoRRO6kl5pVs4","title":"Unpinned GitHub actions","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-125","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"mAtbkIkt49cKUUzk6wJA","title":"Missing integrity check for downloaded executable in Azure Pipelines pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-189","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"ApGiVQs6Wd63pSFFdEjW","title":"Pipeline uses an unpinned container image","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-253","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"O20UV9fEOKaKbgr6MWMo","title":"CircleCI pipeline uses an unpinned container image","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-254","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"5g3DimQHHIxOGL8useQY","title":"Artifact signing operation failure detected in pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"z7nA5OhBaaB11A0h6dSw","title":"Signed image without a prior build scan found","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"cFrWVAYHh1580Xum4AFz","title":"Image signature verification failed due to untrusted public key in pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"Q5B1DTuif5xML1ceYMex","title":"Image signature verification failed due to invalid signature in pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"91CXARIwDRigsBJ3LKJp","title":"Unsigned artifact push to registry detected in pipeline","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"T5SXb7NNVxEQ81O1fcNT","title":"Invalid artifact signature detected in registry","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"GDWBgd5k2daGAgjEssaQ","title":"Unsigned image detected in registry","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"uulXAdbo4djmsOg7RMWj","title":"Image signed by an untrusted public key found","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"u2lc3CsixQDmSbo7ZzTJ","title":"Image signed by a recently removed trusted public key found","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"FLKMs3UsQGLqU7AIarmb","title":"Expired signing key found","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"gIIqRsozmHjAuZpVjWVA","title":"Key has not been rotated within the required period","pathname":"/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Artifact Integrity Validation"}]},{"id":"LrYYgMZONLihwZmMqV9D","title":"Credential Hygiene","pathname":"/appsec-rules/ci-cd-security/credential-hygiene","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"8hBhhbc9utXKARkWmSXs","title":"Jenkins credentials stored with global scope","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"jsUS3D9vtGH71mKSoQVL","title":"Variable is not scoped to an environment","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-74","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"NCtrZA1fNyag5QoPOo9d","title":"Accesses to cloud providers using insecure long-term credentials","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-75","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"ARWOdqvfagz7ZQr3vaE0","title":"GitLab CI/CD accesses cloud provider using insecure long-term credentials","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-78","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"lo4NDl03cYkAfMXzXTtB","title":"Secrets detected in pipeline's console output","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-84","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"1AsuZxCsCkn1B3bJeWVj","title":"Secrets found in console output of a CircleCI pipeline","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-85","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"ki7Vlz7geQyqIpLOrzr9","title":"CircleCI accesses cloud provider using insecure long-term credentials","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-87","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"FrYktici97xFa5SYPkL6","title":"Jenkins environment variables exposed when printed to log","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-132","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"2OE93tAn2R33cqh63UGD","title":"Secrets found in console output of a GitHub Actions pipeline","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-133","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"uMs10iceax5R1p6EFzVY","title":"Environment variables exposed when printed to log","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-134","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"8uFeTN8fvWeKg2adagCf","title":"CircleCI environment variables exposed when printed to log","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-135","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"Ufd75GlVbLXPcuU6Cv6R","title":"GitLab CI environment variables exposed when printed to log","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-136","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"8IiUp01babnjbPOvRsXd","title":"Secrets found in webhook URL","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-148","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"0V1vXjvoQ6UJ3YTOW9Eg","title":"Secrets found in GitLab webhook URL","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-149","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"aa1kwoq2Hb7iotSjtWD5","title":"Secrets found in BitBucket webhook URL","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-150","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"BSx9Ii5SZjoXDT0zFcbs","title":"GitHub Organization secret not scoped","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-178","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"I1gpjuTH1G98BStNzfXT","title":"Insecure definition of secret variable in pipeline","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-192","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"Qg04QoYPNTCOVXuwsR7o","title":"Environment variables exposed when printed to log in Azure Pipelines","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-193","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"a91cKcYITRqxkmiyCAdD","title":"Secrets found in console output of an Azure pipeline","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-242","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"MMO0XSCYVQfR24CQeZZk","title":"Unrotated GitHub Organization secrets","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-247","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"UXImdLDD1gWZG6AILUZw","title":"Unrotated repository secrets","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-248","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"dcu7295Uv0skBG16d4Mm","title":"Secrets found in logs of a GitLab CI pipeline","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-256","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"BCMZjyTZFZNMl3NjYYWM","title":"Pipeline uploads the GITHUB_TOKEN in an artifact","pathname":"/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-340","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Credential Hygiene"}]},{"id":"gibbhQ15pxa3HJ0Y8ya0","title":"Data Protection","pathname":"/appsec-rules/ci-cd-security/data-protection","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"5EBF6Fx013GCI0r7jiIx","title":"Webhooks sent over unencrypted channel detected","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"ILMNgXmxqYrec9Yv7nr3","title":"GitLab Webhooks sent over unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"GMcbCyP8SxfEvA4ZzeN8","title":"BitBucket webhooks sent over unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"0wk3ILc26iZE7CqNE08S","title":"Forking of a private repository is allowed","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"H7eLm7Z7QjiuZMNplAUa","title":"Forking of BitBucket private repository is allowed","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-20","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"LCtHVLgJiQkR9nvg8EgV","title":"Organization webhook SSL verification is disabled","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"hvV0Ii0YfCGFLg6BO9F3","title":"Force push to default branch is allowed","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"Q7baKhhq0DzVggq9IQYG","title":"BitBucket repository webhook SSL verification is disabled","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"vRtoksUuQDTFFQJZFVsz","title":"Repository webhook SSL verification is disabled","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"JArisN5qhax1y8RJUiUL","title":"Organization members can create public repositories","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"gF53jxVF1imkaZzTwDNx","title":"Project webhook SSL verification disabled","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-72","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"qL7nSzZgOmiOTz0iOMFp","title":"Force push to default branch is allowed in GitLab","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-82","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"6PZGdvn3zsfs5fWm8ny8","title":"Private repository made public","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-88","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"WFwNzUPOkn8GI8JDqzLn","title":"Certificate not verified by pipeline command","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-92","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"wl7pdwQyhXQFEmNNyBU6","title":"Pipeline commands transmit data over an unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-93","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"kPKUTjqG8xTHXt76Brsj","title":"Certificate not verified by GitHub Actions pipeline command","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-109","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"378dslXdYII96rqwVPU1","title":"Certificate not verified by CircleCI pipeline command","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-110","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"iPfqRRtaKwiEeLNnIL0c","title":"GitHub Actions pipeline commands transmit data over an unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-111","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"Z2YeKhjcvAZHJpPX1toZ","title":"CircleCI pipeline commands transmit data over an unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-112","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"exQlSmT7OMTSMw4RgUNE","title":"Certificate not verified by GitLab CI pipeline command","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-121","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"z2IVt2JJbUmZgeJoAojx","title":"GitLab CI pipeline commands transmit data over an unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-122","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"BHu8BwMGssf0QvYCanHN","title":"Forking of private repositories in the organization is allowed","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-153","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"oXQFoPGxjQROLb1Kg4S9","title":"Forking of a private GitHub repository is allowed","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-154","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"KLzSHZGDEo4pg3QeYdS3","title":"Private repository forks can lead to code leakage","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-157","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"cdM0XHz8LGFA91Ug6ekP","title":"Project service hook SSL verification is disabled","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-182","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"uqtT68YoW8SX2NGoU8tn","title":"Project service hook sent over unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-183","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"1RrhvrFk7ssQkpYpSUuT","title":"Forking of a private Azure repository is allowed","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-191","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"Kys34i2RWYjVpKO6GMEe","title":"Certificate not verified by Azure Pipelines pipeline command","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-194","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"Cnw4J0agm8OquDEwzlhi","title":"Azure Pipelines commands transmit data over an unencrypted channel","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-195","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"XFW1enV6BQnVX9GB6Tdp","title":"Public repository created","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-239","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"sfrjfdIpJR6DsowqQogh","title":"BitBucket private repository made public","pathname":"/appsec-rules/ci-cd-security/data-protection/appsec-cicd-245","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Data Protection"}]},{"id":"7hdLHUW8kGRL6d9gKcfw","title":"Dependency Chains","pathname":"/appsec-rules/ci-cd-security/dependency-chains","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"F8Zaca2X02XHlPCCpZHX","title":"Packages insecurely installed through “npm install” command in GitHub Actions pipeline","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-137","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"kUQTZ8GEofAlBCysjiMF","title":"Packages insecurely installed through “npm install” command in GitLab CI pipeline","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-139","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"hTDuBCQxUDOvBpmWR5vQ","title":"Packages insecurely installed through \"npm install\" command","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-140","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"YiZGflelMrZPrRXE8AFj","title":"Packages insecurely installed through “npm install” command in Circle CI pipeline","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-141","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"OZWytNorvuRQe9Tx7yIk","title":"Repository missing NPM lock file package-lock.json","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-158","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"7WSQyCSX6f2zSa0NSaRY","title":"Unencrypted channel used to download dependencies from NPM registry","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-159","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"NGt22YSYLWQLtNW5keDk","title":"Internal NPM package is not scoped","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-160","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"lUIXM1BA2k4crc3KufJb","title":"Secrets found in NPM dependency download URL","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-161","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"r43lum4Adi48ZOX7prvF","title":"GitLab repository missing NPM lock file","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-162","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"hL4Ltypst4cGW6i4qWSW","title":"Unencrypted channel used in GitLab repository to download dependencies from NPM registry","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-163","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"pCTxiHyBxV4hyfoBrfFJ","title":"Internal NPM package is not scoped in GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-164","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"o5ilNT2H51u0huG8a2ya","title":"Secrets found in NPM dependency download URL in GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-165","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"k2aze0QxE9jFo55mx1Zj","title":"BitBucket repository missing NPM lock file","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-166","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"IyD0Arvazi0EUydGxxy5","title":"Unencrypted channel used in BitBucket repository to download dependencies from NPM registry","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-167","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"YAK9ZT9lJHkzah2mPdJY","title":"Internal NPM package is not scoped in BitBucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-168","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"44c7y7ehc1WIYCQwMW2z","title":"Secrets found in NPM dependency download URL in BitBucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-169","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"kdo8480L3mz06Vw7hFrc","title":"Azure repository missing NPM lock file","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-170","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"sy4thmZnkJ1I6dkbzIss","title":"Unencrypted channel used in Azure repository to download dependencies from NPM registry","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-171","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"3pgke9DENSZpizM24L6I","title":"Internal NPM package is not scoped in Azure repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-172","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"BD6XCeP1l58x4c8nG71W","title":"Secrets found in NPM dependency download URL in Azure repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-173","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"A6tVOs4LoiyJUal0yyLi","title":"NPM package lock file verifies integrity with weak hash algorithm","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-174","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"rLXImcIUR8GKIxcX9xih","title":"NPM package lock file verifies integrity with weak hash algorithm (Gitlab)","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-175","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"WpEJVdsd5RwHppOBZKSa","title":"NPM package lock file verifies integrity with weak hash algorithm (BitBucket)","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-176","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"KUWTRYMrGVQNibIbQ5Ch","title":"NPM package lock file verifies in Azure repository integrity with weak hash algorithm","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-177","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"ZTkLBbFNMxlckQyw1mBl","title":"Packages insecurely installed through “npm install” command in Azure Pipelines pipeline","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-190","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"PK0NafJiVBZ1SCxMGSsv","title":"Possible Python typosquatting detected","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-200","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"vIVMmhoq6dVrJnRT4WfC","title":"Possible Python typosquatting detected in a GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-201","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"gjkJn4pZNcgCJ5mAhUFD","title":"Possible Python typosquatting detected in a Bitbucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-202","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"MX4BznyPP1vEFOKUNJVt","title":"Possible Python typosquatting detected in an Azure repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-203","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"b70TyGz2BUbwskSYaXec","title":"Missing '.npmrc' file in repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-265","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"1mn0yJXMqBFc33oHuvf1","title":"Secret exposed in proxy URL within '.npmrc' file","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-266","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"ShlpP0foCPE465CqFPVr","title":"Secret exposed in registry URL within '.npmrc' file","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-267","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"ocMLusYkK1mVeJWgVrck","title":"Deprecated package used in NPM project","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-268","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"QrHYpapLLSYELQgSKQeC","title":"Potential dependency confusion due to package name or scope available in registry","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-269","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"7FaNIr4HAhTJbjEF4n6P","title":"Unencrypted channel used by '.npmrc' file to download dependencies from proxy","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-270","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"TKz1CdA5H7H1ZlnWWNk1","title":"Unencrypted channel used by '.npmrc' file of a GitHub repository to download dependencies from regis","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-271","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"uWASBKPWePXijCXtwXvp","title":"Missing '.npmrc' file in GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-272","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"AusVFIf2e6Y0cQJhyLDj","title":"Secret exposed in proxy URL within '.npmrc' file of a Gitlab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-273","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"uDrm9Xb8xtcDXumm8M4s","title":"Secret exposed in registry URL within '.npmrc' file of a GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-274","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"KUF9N9pMC8jA2ITr1Vy5","title":"Deprecated package used in NPM project of a GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-275","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"x9mRwu9xRyYpYo88hIOe","title":"Potential dependency confusion in a GitLab repository due to package name or scope available in regi","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-276","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"vFc1crgY5KPDJMiaSaCe","title":"Unencrypted channel used by '.npmrc' file of a GitLab repository to download dependencies from proxy","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-277","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"41RefxtvdwdSVfvnv3q7","title":"Unencrypted channel used by '.npmrc' file of a GitLab repository to download dependencies from regis","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-278","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"OOR3TEXyERq75A2WcAHu","title":"Missing '.npmrc' file in Bitbucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-279","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"AEEfbGsaXrp7dPXH9ybR","title":"Secret exposed in proxy URL within '.npmrc' file of a Bitbucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-280","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"sSkI0BTd4vFYwP0GmmtO","title":"Secret exposed in registry URL within '.npmrc' file of a Bitbucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-281","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"R09sRFeBQemHaJoRxp91","title":"Deprecated package used in NPM project of a Bitbucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-282","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"yAR1JEpqji67MhezbRuj","title":"Potential dependency confusion in a Bitbucket repository due to package name or scope available in r","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-283","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"rS2vdI3quJHScZldw8c2","title":"Unencrypted channel used by '.npmrc' file of a Bitbucket repository to download dependencies from pr","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-284","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"0FGeu1qz61rRrZn8Tw8m","title":"Unencrypted channel used by '.npmrc' file of a bitbucket repository to download dependencies from re","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-285","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"LOkak1nhyVrjpXsUaIcz","title":"Missing '.npmrc' file in Azure repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-286","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"xEzCR4vZKkIwKqISTQP4","title":"Secret exposed in proxy URL within '.npmrc' file of an Azure repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-287","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"2L1CJ9BQi9pXZ8IYM476","title":"Secret exposed in registry URL within '.npmrc' file of an Azure repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-288","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"jMX1DmNugnloCQDiRUvk","title":"Deprecated package used in NPM project of an Azure repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-289","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"cnskZR2VS5nyhSPsaPdZ","title":"Potential dependency confusion in an Azure repository due to package name or scope available in regi","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-290","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"kigNAwV1rAL7f3aBpqAI","title":"Unencrypted channel used by '.npmrc' file of an Azure repository to download dependencies from proxy","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-291","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"WiPuQ2xSJSE7j5mSN9Ec","title":"Unencrypted channel used by '.npmrc' file of an Azure repository to download dependencies from regis","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-292","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"NTl0KDRw3g7NCNAimzaE","title":"NPM project contains unused dependencies","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-301","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"mFuWSUtukQHnFlBb98sT","title":"NPM project contains unused dependencies in a GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-302","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"fjL6DpWxPAu0KMeSgtlT","title":"NPM project contains unused dependencies in a Bitbucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-303","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"RDnBYZe5KferRt8TGCUK","title":"NPM project contains unused dependencies in an Azure Repos repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-304","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"YquIhAltnljiOStTobsN","title":"NPM package downloaded from git without commit hash reference","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-313","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"8rC7CDd0tbLVUVfiq30l","title":"NPM package downloaded from git without commit hash reference in a GitLab repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-314","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"4buXKdy8XoWBWq12nu13","title":"NPM package downloaded from git without commit hash reference in a Bitbucket repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-315","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"2FFUecXoJP4VKpEwOEIs","title":"NPM package downloaded from git without commit hash reference in an Azure Repos repository","pathname":"/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-316","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Dependency Chains"}]},{"id":"ASqQUXXUZaCgL06MZiHn","title":"Flow Control Mechanism","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"I1M4kUeUK9Mk9cNVt4b3","title":"Actively used repository lacks branch protection rules","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"BfDsXusMX63AjMg4JeQc","title":"Actively used GitLab repository lacks branch protection rules","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"Mm3B2FQkebvioXXK14Cb","title":"Actively used BitBucket repository lacks branch protection rules","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"IGnH7FQgLSv9lDLwd0uN","title":"Branch protection not enforced on administrators","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"Q5Q3FfKpszSQbRYDSbwF","title":"Pull request reviews not required before merging to the default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"mMDA2HhSBew0PPoB0OFM","title":"Required reviews can be bypassed using GitHub Actions","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-53","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"X2OawlSIm7TAdQSszPyk","title":"Pull request reviews in BitBucket not required before merging code to default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-68","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"Lzx3RfRQKjYxitVUx0n6","title":"Push restrictions not enforced on the default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-69","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"j6H6z5s9AU61fzzTWqeR","title":"Merge request approvals not required for default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-79","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"YpL1bJtO4PdTMoiQpXsE","title":"GitLab branch protection rule allows push to default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-83","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"8jAMnVb1RtFKV2GtskYo","title":"\"Require review from Code Owners\" Branch Protection rule was disabled","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-116","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"VJolwKywF4TIQ4r74PlP","title":"Reviews may no longer be required before merging","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-142","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"mRJ7KlwFzVleqrMlaiTN","title":"Repository does not dismiss pull request approvals on the default branch when new commits are pushed","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-152","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"Atc8NzlafpaWG07a5Ygr","title":"Pull request reviews are not required in Azure Repos before merging to the default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-179","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"IYw9f3d40GBBrettS8Ns","title":"Requestors allowed to self-approve pull requests on default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-180","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"80hS4U3ru5Y3kRh1QdQV","title":"Code owners reviews not required before merging to the default branch","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-187","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"rju496vQd2MIEk2ZvlpT","title":"Merging to default branch with outdated code allowed","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-197","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"heae1UFKawQ98Fl31BH3","title":"Azure repository does not dismiss pull request approvals on the default branch when new commits are","pathname":"/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-262","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Flow Control Mechanism"}]},{"id":"0UdWXsLvLLaO2TV92uCk","title":"Identity Access Management","pathname":"/appsec-rules/ci-cd-security/identity-access-management","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"PbzKSydiS206owoeTR39","title":"2FA is not enforced in SCM","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"C8BmN7SgWToZdRf7TW41","title":"Unrotated deploy keys","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"mCLgM04BYtZCNf2CKN5g","title":"Unrotated GitLab deploy keys","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"dI7XkNmY73YyiEMrujsZ","title":"Unrotated access keys detected","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"b5MUsVfn6Blg4slW3yYx","title":"Inactive SCM user accounts","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"JH3rfxPd9OMatSuFpkQE","title":"Jenkins provides full access to anonymous visitors","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"Ojo6RgKFrxMNsjgnJBzS","title":"Jenkins provides full access to authenticated user accounts","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"4Pv5zDtfsCzEs5T0Pq19","title":"User account is missing 2FA","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"ZtBm8FP0amjEuWDk3dkG","title":"Permissive organization base permissions","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"wnh0afYjbXZQkYO0gqkN","title":"Outside collaborators have admin access to a repository","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"YUtPeQRpx0nERjXNATaj","title":"Deploy key has a weak SSH signature","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"qMCR9LWr7tjNgZXmdlU9","title":"Weak authentication service in use","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"0X2F2k06o7EdMSqXXkTX","title":"Jenkins provides read access to anonymous visitors","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-50","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"12JcDgoO33LwRXXT2GF5","title":"No authentication is configured","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-51","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"75YwnXPM17lc8rDU3yAi","title":"Access key with a weak SSH signature was detected in SCM","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-70","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"1YrDCz9nriGY04hxwMlv","title":"Excessive user permissions to a repository","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-89","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"XdvmE8AZkUmz2wufc2f4","title":"Excessive user permissions to a project","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-95","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"NlTHxuiYo7oEWjtc7ttq","title":"Excessive user permissions to a BitBucket repository","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-96","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"KjiwEiZhWtI1Fk8lSPsF","title":"User account credentials (access token and/or SSH Keys) are inactive in GitHub","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-105","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"tVhADZanZda0Glr31u9a","title":"Any organization member can create internal repositories","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-184","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"H95n4rYNGqfoDlJiM7I8","title":"Any organization member can create private repositories","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-185","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"8iDmeg7yOpxi7xSC8K72","title":"Default branch does not require signed commits","pathname":"/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-206","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Identity Access Management"}]},{"id":"hDl0roVYn1WX8sGvGWkA","title":"Input Validation","pathname":"/appsec-rules/ci-cd-security/input-validation","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"zUMlEeKzn24vKf49QFca","title":"Pipeline vulnerable to command injection","pathname":"/appsec-rules/ci-cd-security/input-validation/appsec-cicd-138","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Input Validation"}]},{"id":"rY2BysTbbO1zvBd2UEBt","title":"Possible command injection detected in user event","pathname":"/appsec-rules/ci-cd-security/input-validation/appsec-cicd-146","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Input Validation"}]},{"id":"qodp5gZ2iydKNaqVFU6O","title":"Workflow allows command execution through the standard output stream","pathname":"/appsec-rules/ci-cd-security/input-validation/appsec-cicd-186","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Input Validation"}]},{"id":"UiUlDfW93bni7Qh4FF7J","title":"CirceCI pipeline vulnerable to command injection","pathname":"/appsec-rules/ci-cd-security/input-validation/appsec-cicd-207","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Input Validation"}]},{"id":"98YTEDfUweWMdc4DVeo6","title":"Logging And Visibility","pathname":"/appsec-rules/ci-cd-security/logging-and-visibility","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"0wXV2QUSRyMsEdelFr1r","title":"Audit log not installed on Jenkins","pathname":"/appsec-rules/ci-cd-security/logging-and-visibility/appsec-cicd-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Logging And Visibility"}]},{"id":"3mLQc9S8CIG4e6Xul0uo","title":"Pipeline Based Access Controls","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"ewfIA7qJQFH26EQenRW6","title":"Deploy keys assigned with write permissions","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"KD2TCuD7J1AE58UwF7Y6","title":"GitLab deploy keys assigned with write permissions","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"R4VKMIh5B6oNe2qll9j3","title":"All instance jobs run with high privileges","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-46","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"H1h8tTkZfbMIBgLa8AZQ","title":"Jobs are allowed to run on the Jenkins Controller","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-52","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"3HBzGIWui0umdjXKCY8A","title":"Jenkins jobs are executed with high privileges by default","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-54","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"HbWZ5IGarTHaR8Q0NgoW","title":"Jenkins jobs can be executed with high privileges","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-55","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"1VjVkWPoNKeYAMJMlzIw","title":"GitLab project job token authorized to access other projects","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-71","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"YtRTUsGsHaNVwUMR3h24","title":"Default workflow permissions in the repository set to 'read and write'","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-127","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"PI97YHnvoFxlNOUN2MDQ","title":"Default workflow permissions in the organization set to 'read and write'","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-128","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"2WPJezdjO74AbQCo7baN","title":"Excessive pipeline permissions on the repository","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-156","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"CD23teiTXwZu0ytbvsxs","title":"Project configured for group-wide access using job token","pathname":"/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-238","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Based Access Controls"}]},{"id":"Wyel98KCAI7aDNMI3K14","title":"Pipeline Configuration","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"k1vkn9WPfERD0rcBwGgo","title":"An archived GitHub action is used","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-343","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"NimCEwzUjeMX7UpdrS0R","title":"A GitHub workflow is using action with CRITICAL severity CVE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-344","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"QmedThwVu0wCwc6vlkdt","title":"A pipeline is using rejected Supply Chain Tool","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-345","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"svU2sZDyBMbvKaxhwtMd","title":"A pipeline is using an unapproved Supply Chain Tool","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-346","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"ltxiWyGQFfOOIzavrvp0","title":"Jenkins instance is using rejected plugin","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-347","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"AwgexrZar3fn5MOxGu8m","title":"Jenkins instance is using an unapproved plugin","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-348","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"2l3zTN08yeGBUJjswECs","title":"A deprecated Jenkins plugin is used on a Jenkins Instance","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-349","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"Us7x88C4bG1hrq8FuS7x","title":"A Jenkins plugin with CRITICAL severity CVE is installed on a Jenkins Instance","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-350","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"XIuY7N6mw85ebp21XHmX","title":"A pipeline is using a rejected tool within a Remote Script","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-351","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"WpRTuNo8DnclqS1R8yNP","title":"A pipeline is using an unapproved tool within a Remote Script","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-352","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"vJoeyjzAcc1mZB5nPM7c","title":"A GitHub workflow is using action with HIGH severity CVE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-355","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"ZUeJ93PRFCX0P6JVv98g","title":"A Jenkins plugin with HIGH severity CVE is installed on a Jenkins Instance","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-356","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"6wmKKgLmWZdKAURmKIME","title":"Unverified MCP Server Vendor is detected in an SCM Repository","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-357","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"F5VQuy455guSTmnWZFdm","title":"Non-Containerized MCP Server is detected in an SCM Repository","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-358","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"XhJOlsqnnQQyJt1mTrpv","title":"Unmaintained MCP Server is detected in an SCM Repository","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-359","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"soS5ZEo2anjJIaRj2LjR","title":"Archived or Deprecated MCP Server in use, detected in SCM repository","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-360","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"ySJUXQ0GSHyEESOZB1Fo","title":"MCP Server with Dangerous Capability Request is detected in SCM Repository","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-361","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"EbaPEJjCEwy3uIzGgd6m","title":"A Rejected MCP Server is in-use (recognized in SCM Repository config file)","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-362","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"uflTqif5PcINTHR2UNIW","title":"An Unapproved MCP Server is in-use (recognized in SCM Repository config file)","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-363","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"b475NLAP29Fhr67mshrc","title":"Unverified MCP Server Vendor is detected in a Pipeline","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-364","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"l10O9mXZThzHNJNJ0emC","title":"Non-Containerized MCP Server is detected in a Pipeline","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-365","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"GUvieJzaRdmEXXlWMG0v","title":"Unmaintained MCP Server is detected in a Pipeline","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-366","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"Z50gVfMGWkJwtt2fl6mH","title":"Archived or Deprecated MCP Server is detected in a Pipeline","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-367","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"i90alJ472Ah7VvIqEJsw","title":"MCP Server with Dangerous Capability Request is detected in a Pipeline","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-368","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"XaBthMzBsRV58l3GRln1","title":"Rejected MCP Server in Use in the Pipeline","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-369","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"KSJW7RLNMXp1ElUiek0Y","title":"Unapproved MCP Server in Use in the Pipeline","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-370","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"VtBYSb5jTy2sx3hwmTBW","title":"Unverified MCP Server Vendor is detected in IDE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-371","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"jm4pP7kf9M6HMvxr7QPq","title":"Non-Containerized MCP Server is detected in IDE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-372","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"e76XCCeTUzIR93asVdCA","title":"Unmaintained MCP Server is detected in IDE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-373","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"7wNXCuRoJcCW2m9jWlLo","title":"Archived or Deprecated MCP Server in Use is detected in IDE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-374","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"Q2eRnw1mdHp9lIWxQ04j","title":"MCP Server with Dangerous Capability Request is detected in IDE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-375","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"JJ204rD7fUEl2m6UiLWQ","title":"Contributor is using Rejected MCP Server in their IDE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-376","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"ITaMSfrr56qpGUY56ZSv","title":"Contributor is using an Unapproved MCP Server in their IDE","pathname":"/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-377","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Pipeline Configuration"}]},{"id":"jSJVktpfOfWFJY8FTAeW","title":"PPE","pathname":"/appsec-rules/ci-cd-security/ppe","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"FnpBPn9h2ZCQeyPTtULU","title":"Direct Poisoned Pipeline Execution","pathname":"/appsec-rules/ci-cd-security/ppe/appsec-cicd-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"PPE"}]},{"id":"fIi3QCtWwPLIlw2ckPc0","title":"Direct Poisoned Pipeline Execution by outside collaborators","pathname":"/appsec-rules/ci-cd-security/ppe/appsec-cicd-144","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"PPE"}]},{"id":"XCWfkV2AFl9Wf5DyOaZs","title":"SCM System Configuration","pathname":"/appsec-rules/ci-cd-security/scm-system-configuration","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"8lAhDVzAzOKyPuJBYOTD","title":"GitHub is using rejected Application","pathname":"/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-341","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"SCM System Configuration"}]},{"id":"fp9BNqX2L69dzunK8I7w","title":"GitHub is using an unapproved Application","pathname":"/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-342","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"SCM System Configuration"}]},{"id":"Qa8Kg4T2C2PIRckpOrDL","title":"SCM is using a rejected Webhook","pathname":"/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-353","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"SCM System Configuration"}]},{"id":"FDwtA06G6fkL4ReyrDnd","title":"SCM is using an unapproved Webhook","pathname":"/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-354","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"SCM System Configuration"}]},{"id":"ezDa3cLWEN2dplsrg4Bd","title":"System Configurations","pathname":"/appsec-rules/ci-cd-security/system-configurations","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"ZUyTkcFWXRHCuEALaMtJ","title":"Vulnerable Jenkins plugins","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-10","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"eOXyjDICRFMia9vr9CL0","title":"Vulnerable Jenkins version in use","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"yEt0RveCxC44PQSyX9VW","title":"Throttling is not enabled in SCM","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"Vb1OTVhdWRknnPgsuVeI","title":"Access to resources on the GitLab server from GitLab services is not restricted","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"zFlhEG62QMNRVvGbqvrE","title":"LDAP is configured to use an unencrypted channel","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-47","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"htFWHST9RXDYz5xr4AUD","title":"Jenkins instance traffic sent over an unencrypted channel","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-48","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"YrNXkxzlDveVCfsccgCG","title":"GitHub Actions is enabled and not used in a repository","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-60","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"02Hfhdr1c8jYR1JhCYsa","title":"Self-hosted runner group allows public repositories","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-181","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"w4pzxnt4Cf44nRMxGsiP","title":"Organization's identity not confirmed with a verified badge","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-188","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"NNF57lQUEyNr4afLhsoC","title":"Push restrictions are not enforced on the default branch in GitHub","pathname":"/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-208","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"System Configurations"}]},{"id":"wdNFrM4Pn00GLVxwGBFG","title":"Third Party Services","pathname":"/appsec-rules/ci-cd-security/third-party-services","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"}]},{"id":"A2AMF17xX0OrpHKpgcKe","title":"Excessive GitHub App permissions","pathname":"/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-97","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Third Party Services"}]},{"id":"zazh4lxWQFy6Kby4qZgK","title":"Unrestricted usage of GitHub Actions allowed in the repository","pathname":"/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-129","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Third Party Services"}]},{"id":"ooV5SeioOUDwMrRS5RK9","title":"Unrestricted usage of GitHub Actions allowed across the organization","pathname":"/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-130","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Third Party Services"}]},{"id":"qRht6kDdrwJexiunIig9","title":"Mutable orb used in the pipeline","pathname":"/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-196","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"CI/CD Security"},{"label":"Third Party Services"}]},{"id":"AfgSwcmWzBKMDEOmF04T","title":"Secrets Security","pathname":"/appsec-rules/secrets-security","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"K7t6ZVS9g2vo0Ta4UnOs","title":"GitHub repository defined in Terraform is not Private","pathname":"/appsec-rules/secrets-security/appsec-git-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"2lUFcntbNKzwhKdEPGbX","title":"Artifactory Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"nqziQSvLOQnBv5Jm6gei","title":"AWS Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"HC7SKQN2JXqkAEhsGHVr","title":"Azure Storage Account Access Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"cfOeWm03EX3tBvydVZtF","title":"Basic Auth Credential detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"wwHNUQnZmn5MTR5Kjgea","title":"Cloudant Credential detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Cp9LFTu9MtJ7rGbl4KXn","title":"Base64 High Entropy String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-6","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"TWLU2vMNT1HlBcr6tGv7","title":"IBM Cloud IAM Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-7","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Wu7VRo9hZBK7LeZOUzfe","title":"IBM COS HMAC credential detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-8","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"pDRELxH4z68uTf85jXyb","title":"JSON Web Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-9","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mTuIWiYrQiqu1RGccm9p","title":"Mailchimp Access Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-11","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"hXWFudF0pp64b8foPURZ","title":"NPM Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-12","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"licy1L95lr7gPHa17ukw","title":"Private Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-13","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"sY5CkdAbKR6Q71ohCdVX","title":"Slack Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-14","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ub4F4ZAraIWmOwSamdCJ","title":"SoftLayer Credential detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-15","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"IvJP1C5oBAzji7RQD58C","title":"Square OAuth Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-16","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"RtJJtAMbUswamxj1NHhz","title":"Stripe Access Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-17","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"4EQ3qz0FmJPxHw0XG290","title":"Twilio Access Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-18","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"nJCUvFD3i1VlBkbKxel8","title":"Hex High Entropy String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-19","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ZC8tnE5WNU5mhgyla5Aq","title":"Airtable API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-21","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"2vPheVynVBJ2BBOjSdwS","title":"Algolia Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-22","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"XnBLX5TUvy6oeeAyJl6N","title":"Alibaba Cloud Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-23","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"i1iVnziHLBT3ZPtPUgKM","title":"Asana Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-24","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ZYRbCzJh3B3Z3cf9G51U","title":"Atlassian Oauth2 Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-25","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"PBZJ8CAJKPsBVzh0OEQQ","title":"Auth0 Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-26","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"YaTNfKSM1Bp9C9MUVE4M","title":"Bitbucket Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-27","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"NZgGmhTixB2ZwXl47DEg","title":"Buildkite Agent Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-28","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"MtVsLjGQr3Ohr9Hj37Rx","title":"CircleCI Personal Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-29","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"KB0c8LTpkmND34vPfOGX","title":"Codecov API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-30","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"93vfPHpv1WA3s0zDuLTY","title":"Coinbase Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-31","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"qrO2krbKx6cnvteANJ6U","title":"Confluent Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-32","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"7JG3xUoQaRjl3ZsGi3DV","title":"Databricks Authentication Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-33","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"srbE0olkIhDIZCEuV10H","title":"DigitalOcean Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-34","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"uyk4iyKe9EVUOHXrndGT","title":"Discord Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-35","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"3DiJyFaS9r6LChVF8H0d","title":"Doppler API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-36","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"fScDaIggIk0xot6eXA16","title":"DroneCI Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-37","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EPSUHXXXnQfp9Rt196ie","title":"Dropbox App Credential detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-38","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"J8WCSnuEKgNgUm7OmsLr","title":"Dynatrace token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-39","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EACWUnQfo0l3GNA1bO2s","title":"Elastic Email Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-40","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"zGnyY13kSkfYuy0lmqnV","title":"Fastly Personal Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-41","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"wbc7tEQuEPZKUhpCn8S9","title":"FullStory API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-42","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"6VXcq9xlMA9nYK9V5mw4","title":"GitHub Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-43","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"FYIYLOPtdsejjuv0gP6L","title":"GitLab Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-44","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"8Mj1O0mnzsar7RwyGnN5","title":"Google API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-45","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Eo4YFrvNNzQHMF1BC3nb","title":"Grafana Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-46","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"tPMbDK0LwlAMxnPY8N4I","title":"Terraform Cloud API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-47","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"W1HeWOJTR3FJaHGRz0Av","title":"Heroku Platform Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-48","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"BVbLUl9K5Jtobi8K84V8","title":"HubSpot API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-49","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"nBjIF7tBZCWDyzhzGt7W","title":"Intercom Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-50","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"E1ecNumK5VDqzn0YsOt8","title":"Jira Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-51","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"gLI6IAIXaovCodqPm77d","title":"LaunchDarkly Personal Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-52","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"xhwCOEgoHAluWkicuelu","title":"Netlify Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-53","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"kOPAZ4jc0mRPBnXuJoI0","title":"New Relic Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-54","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"PJM25cwygxbm7j9YDP5i","title":"Notion Integration Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-55","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"muENAMb7mNbcRV253zp1","title":"Okta Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-56","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0Y66cc1PV6z5q9gsrVNZ","title":"PagerDuty Authorization Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-57","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"AhugPyAr4N1fbGpWU1ib","title":"PlanetScale Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-58","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"tFp12wT6q5ZINI1E2hO4","title":"Postman API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-59","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"uEWKZSgZfWt5pNPxGnca","title":"Pulumi Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-60","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"F9jRuyuoU5mXcM0NPQ4I","title":"Python Package Index Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-61","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"668NXNucnCP3keAEuYp2","title":"RapidAPI Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-62","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ufjy2ILDqBa0tAEyqVzS","title":"Readme API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-63","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"FjuIV2rDLA9Te79mBpQh","title":"RubyGems API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-64","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"SGDMAREKFnVdfDRQpnvs","title":"Sentry Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-65","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ogMl3kOhLxoPirhfUFCd","title":"Splunk User Credential detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-66","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Ueo1Tmk96OhaEBYlL1xH","title":"Sumo Logic Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-67","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"e6PjAiXTslLYQE1UFsnE","title":"Telegram Bot Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-68","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Oah05dCRjg0RyPVSs5hI","title":"Travis Personal Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-69","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0mkJkTr7r5HvHmOBnNtx","title":"Typeform API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-70","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"czqqU0bu9smHPBBYzb37","title":"Vault Unseal Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-71","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"1StsT1glKr2gWJl5fbxv","title":"Yandex Predictor API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-72","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"uVj5D2xlFg3Rnj1MDMhw","title":"Cloudflare API Credential detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-73","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"PlvLKkKNUMvuqb8V6Rsu","title":"Vercel API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-74","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"9C7W21erJJ1Lz8JKB3vm","title":"Webflow API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-75","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Ll1Y1MeRlW0rzahu7P2q","title":"Scalr API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-76","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"NfWAQTL3V72mwniFwEmT","title":"MongoDB Connection String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-77","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"5c3sAg47kwl5mcw07Wgh","title":"Braintree Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-78","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"7eJg7q3bJFnKx1YdDfPS","title":"GCP Service Account Auth Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-79","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"9S3Rxo2nVdFFbKzZXSE4","title":"Random High Entropy String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-80","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jOwp7wImAkW4cUwwecTq","title":"Braintree Payments Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-81","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"AasMbNHb4DB8D2u8YnuV","title":"AWS MWS Auth Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-82","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"2iuSaEiEoIpOWJ5sdvkN","title":"PayPal Token ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-83","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"iHKSlzMqRYRlLz8DVHKL","title":"PayPal Token Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-84","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"OHgeYS5ZLzqPaEU9FSxv","title":"Braintree Payments Id detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-85","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EjvYtcF95pz6rDuf6XnQ","title":"SonarQube Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-86","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"FcOOqeEelBJjoxsf1qsg","title":"SendGrid Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-87","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"GAQo6bD6eiIiDG4XL0Fd","title":"Firebase Cloud Messaging API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-88","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jRxSpe3BZzKX0qTTiE8m","title":"Docker Swarm Join Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-89","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"U4Pag6GIdi3VDLeQPMhg","title":"Shopify Generic App Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-90","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"8FATD6zIUpVkzqTKZrFX","title":"Mapbox Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-91","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"4GVFbWQ4sMjEjFoRXQwO","title":"PubNub Subscription Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-92","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"pgtZV8fLsOxekJqvYFUl","title":"PubNub Publish Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-93","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"vHl6NTIj2gO4Q0Hp0Ojo","title":"Mailgun Primary Account API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-94","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mCQd1OApj6frRri7bnm5","title":"SendinBlue Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-95","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"a6CRSCB03VrIFUlpz1Ud","title":"Crates API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-96","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"wuVndpR7iMCBZPQWa8tQ","title":"Shopify Private App Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-97","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"tg5kc73CDzO7yLfCvm4Y","title":"Flutterwave API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-98","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"CrZyiGXiMGyUFGBWSry0","title":"NuGet API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-99","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"AGs7qo6aapQZqj53Ej3Y","title":"Checkout.com API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-100","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0Qj2ljRumaUoi9PcYGCW","title":"Square Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-101","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"4W8sHWg2dZ8FVBYO5wsp","title":"Square Access Token V2 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-102","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ZbxbCgLjpzuE31NhVsoe","title":"Typeform Personal Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-103","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"tQOvqan2dSLJNeEUoJ1R","title":"Mailgun Domain Sending Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-104","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"giScT0ZGgj60rDd47r2N","title":"Frame IO Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-105","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"eRYlwFARaUdyZFe3SLgD","title":"Clojars Deploy Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-106","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"CutDvavU4Imuk5mMliAL","title":"OpenAI API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-107","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"tGq0mVcDLtEYv9o7vRks","title":"Samsara API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-108","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"99t2uDpbV9ZLqR2bruGO","title":"Anthropic API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-109","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"WmmpTCOI21vY54VujBPC","title":"Hugging Face token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-110","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"eraqh9PNzWDkP9g6KSR2","title":"Microsoft Teams webhook detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-111","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"kjWaw4LWNAU3nkYgMTKa","title":"Azure Functions HTTP Trigger Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-112","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"r8cIkH7mCaM7zRvN0Okh","title":"MonkeyLearn API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-113","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"hYeFa2nPadPDDmKXZN3j","title":"Clarifai API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-114","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"WguxJ91whPNBDHoER1Vz","title":"Azure Machine Learning web service API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-115","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"rZOZcI6K8lQIaBi64mst","title":"MongoDB Atlas Keys Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-116","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"4JFSBQ02JySqFq3jj1gw","title":"MongoDB Atlas Keys ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-117","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"rI143myd5mpkdbAFm8fp","title":"Customer.io Track Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-118","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"r8DT2DdwzZun2cKlLAiP","title":"Databricks Authentication Token With Hostname detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-119","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"eVqhDnQ0tHBKAvh6Hn5r","title":"GitGuardian Public Monitoring API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-121","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"F8ZEgVnv0IG0fMqVpDsr","title":"Mandrill API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-122","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Skw7iMNKqhxFtXLsz7oG","title":"Elastic Cloud Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-123","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0T43GOaZBe16KLJrFepp","title":"OpenWeatherMap Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-124","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"IdnV0aCz2zOpKJtoXPWi","title":"Mailjet Keys ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-125","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"xpaltBh9UH9WBFUogslI","title":"Mailjet Keys Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-126","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Iddaz9uJi38a8ssqZqlK","title":"Pusher Channels Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-127","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ZfnsT2PnwnsgVIa2gtJx","title":"Pusher Channels Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-128","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"rGRtC2JKdN8MLbRIM7dC","title":"LinkedIn OAuth2 Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-129","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"KsGLAHZmXHjVlKoUr7J6","title":"LinkedIn OAuth2 Secrets detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-130","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"bza4qOOEBfJ6LBkx1yPC","title":"WeChat App User ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-131","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"xTDsBzYbNWWH7PwGkJPH","title":"WeChat App Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-132","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0Yh9SMK87YK7EUrmAgjI","title":"Webex App Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-133","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"nb3ufzdbSaplgQIEl776","title":"Webex App Secrets detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-134","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lOK9sqsat1LdD0Jb0jT5","title":"Lacework API Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-135","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"IsibzADCmWGbzMgFK0rO","title":"Lacework API Secrets detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-136","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"5Y8U4We3XSj96ADwSHmf","title":"Zendesk Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-137","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"PDGNhqlgXkjXCLFG9BI2","title":"Zoom API JWT Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-138","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"w4aEFciS9bPEXy4cozrT","title":"Zoom API JWT Secrets detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-139","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EGV63taDTqX6UHxTBaYF","title":"Zoom API Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-141","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"8bd3oWVyPFfxRZxEDCh4","title":"Zoom API Secrets detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-142","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yf1yL8gPaIY4yjpYr2A4","title":"Contentful Content Delivery API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-143","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jTgP9lD3UWxUfVAahM32","title":"MariaDB Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-144","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"5BIH4UjLSuVLgVb9XMZ1","title":"AWS SES client secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-145","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"DM5Vgjx5e3Ts8sHXj0B9","title":"reCAPTCHA key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-146","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yy9B4POIYsFjuBTu7YtB","title":"Adobe API ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-147","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"hSUeumihzAk4Hq0JVvqv","title":"Adobe API Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-148","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yP6uAesxrNXYQFrJ53e4","title":"DB2 Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-149","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"B1Ore2vWweWC3mI2LB8F","title":"Pingdom Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-150","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"5xmp84V1g8j8S4HuycRT","title":"Redis Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-151","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"7rNi8NFrerilDR4vtAMM","title":"Coveralls Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-152","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"t0FaIK40FdtvCt1K4UQv","title":"Azure Active Directory Client Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-153","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Zyju1uVC3FUczjNUX4ss","title":"DataDog Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-154","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"IaES1WX4QLxu3HOzZaTW","title":"GitHub OAuth App Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-155","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"RvQXB2O1SCH76bVjE7Er","title":"GitHub OAuth App Client ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-156","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"DodSkFXk4DN2hn4ff4vJ","title":"LDAP Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-157","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Tsa3Eb9vwmCdGPTFN2st","title":"MySQL User Name detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-158","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"nlDp7PaLOwkkDpdmKeHE","title":"MySQL Password detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-159","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Kw1UXNArPeKGpP2h2zGt","title":"FTP User Name detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-162","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"M7Dx4Z4RfKUAjT6sdUEq","title":"FTP Password detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-163","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lvPZEAFTA3yQajHAH3fw","title":"AMQP User Name detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-164","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"r0wr1XoG8PCvkRTLXLLF","title":"AMQP Password detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-165","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"LoPxh8ShqnZNaeHIsmNQ","title":"Stripe Webhook Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-166","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"P8WXZJyx9VXz2rlpN9oa","title":"Rails Secret Key Base detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-167","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"aL3Cn974DhJ6ikfNYbYO","title":"Salesforce Refresh Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-168","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"loqni004sC1jqa7VacGv","title":"Azure Service Management Certificate detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-169","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"MbJTvTviLhxLK3WCjdAP","title":"Codeclimate key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-170","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"nlhVuNcjHDeU0QWS5oEJ","title":"Docker Swarm Unlock Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-171","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ziumtQNGI0VobllsEzIp","title":"Facebook Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-172","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"qD7SdzQfQvueaA4nhlH6","title":"Putty Private Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-173","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"SunVh0Kt4HRGuXm6bUD5","title":"Tableau Personal Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-174","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"SXJqCVcmWFpizotDmv2G","title":"Zillow Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-175","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"HBKEgRaDiOzrh464Y9CA","title":"Line Messaging OAuth2 Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-176","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yUmtyYyEhN5DNzcSDKyd","title":"Google Bard API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-177","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"HpWqmlnyr9aAhZbcUHf6","title":"Azure Subscription Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-178","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Q2sjDMalixK4nNjn1i7K","title":"Authentication Tuple detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-179","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"VBmuQxLufyXzaYlFC2HD","title":"Okta Keys Client Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-180","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"TYlcqhh9ZQyjAteFinAL","title":"Generic Terraform Variable Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-181","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"qWPuWrlycFBrVb4CJ6TR","title":"SMTP credentials Password detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-182","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mzHrjsaTfCVNgbidSMic","title":"SMTP credentials - Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-183","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"omrXZZFBBWhisYOFWMxw","title":"Yahoo OAuth2 Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-184","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"6ot0smTUvNbWy8LJXy9a","title":"Eventbrite OAuth2 Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-185","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"dvaS2t2f7wr15wpLFiAw","title":"Octopus Deploy API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-191","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"J6GRatBfSWzNQC42DG3b","title":"Bearer token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-192","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"MbLSP0t8T8BNRwtWj5xH","title":"Django secret key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-194","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"FFfva3eUI4WNNrXYCfV5","title":"Salesforce OAuth2 ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-195","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"t2Yr0iYzI0xqW9swvLp0","title":"Salesforce OAuth2 secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-196","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0YnRDhIoliCKZ4b9tWyZ","title":"Azure DevOps personal access token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-197","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"wN0ozStocY9Dz0oNOv3O","title":"Splunk authentication token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-198","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"GsGU05QcIYnLO9xL0BAx","title":"HashiCorp Vault token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-199","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"xFM8qH9djeJ2IiOgHxew","title":"Kubernetes cluster credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-200","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"D4p52Fd2vU6RgFsKowPx","title":"Jira basic authentication credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-201","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lpjRvDtg0kb0XhcZV1PH","title":"Neo4j credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-202","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"kyNjLIvLup3wIJnqtrsm","title":"Keycloak API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-203","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"3zZjsJmLhPDzjLgCIcvZ","title":"Oracle credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-204","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EY6zPjYazu242NZnbDt1","title":"Thycotic Secret Server credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-205","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"pG3SLkvbMccyVfM7W2ta","title":"Gemfury access token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-206","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"IzwZBgCGvN2RwVnOfhEF","title":"Zoho OAuth2 keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-207","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"f02W7dKROJysG3qfut2Z","title":"Zoom SDK keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-208","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ZLKFDUQ0n7WAseKT1Ww2","title":"Cloudera model key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-209","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"31cVd3tzzU6dZcybOL9J","title":"Akamai API client secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-210","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"TRQLtyCnbw7bGdfei83t","title":"Generic database assignment detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-211","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"9NVQrlEnJFtQoaGfPMEn","title":"Generic CLI key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-212","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"sDrSKmPGwrUlWNFR2FnE","title":"Akamai API client token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-213","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"6YD36JoHjGdavQ6DIKNR","title":"ODBC connection string detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-214","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0UAzU4xr3TMT1Prohsqp","title":"Sauce Labs keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-215","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"YFnvBLy8WNW9o3nD00F8","title":"OVH keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-216","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"c8fXAQqmuwvro1YUlWCU","title":"PingIdentity keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-217","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ux57B4xJjkNT1kYza4In","title":"Slack Application secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-218","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"xeCeVFUlmPXTUPeAqNOe","title":"Slack Application ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-219","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"cfK4LUvWbs0TsL09IvMz","title":"Grafana service account token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-220","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Tt3P3XodtKQKb0ZX9ZsX","title":"Redis server password detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-221","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"gtVOK9OXJbESMKcqG2R1","title":"Slack signing secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-222","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"98gAS9j41TSTjwRIs3Be","title":"SSH Password detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-223","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ZKbccNfsT0RlkQGBUuC3","title":"Encrypted Private Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-224","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yPXqiPvBxF7C1XGBwJkX","title":"Duo key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-225","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"77j5cMrOzW0h5z5UySAb","title":"Slack bot token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-226","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lOQcgJxFdqr2UlsC6fqm","title":"Slack application credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-227","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mwDut8QXOg1a7p0YtVs7","title":"Base64 AWS SES keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-228","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"DrssULpiAYUIbA5liGnE","title":"Base64 AWS IAM Secret Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-229","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"v2Qh2tCJp6OxpcwG7Rod","title":"Slack app token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-230","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ur9m0dshtUNyVWfDMDGO","title":"Razorpay API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-231","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mWbKBCp3gsfUsLHO6NlE","title":"PGP Private Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-232","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"4kdH4tmtcSjtiRe8dxcF","title":"Twitter access keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-233","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"IIuoy8Z7fqJzIBp2Szkk","title":"Base64 basic authentication detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-234","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"zqzuIvRSupPltJrtVqRV","title":"GitHub App Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-235","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"J89q1bpZ6aIg9tm2zI5g","title":"Snowflake credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-236","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"s4gISkLJEtlyRDNq3xob","title":"Azure OpenAI API endpoint detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-237","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"e0oPGsEuw4KRjBcJgCaJ","title":"Azure OpenAI API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-238","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"NJdLCnFUNNia8yt0uQhK","title":"Fernet key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-239","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"PLKKLO2IFST8oQ1w5Dj0","title":"New Relic APM license key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-240","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"esW73upEgUZ3JpOFQRDf","title":"NX Cloud token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-241","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"afBiVuHXNDoCPEsueb5u","title":"Plaid access token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-242","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"WbZQqKffOT94bTSlBwbc","title":"Redshift credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-243","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"QAK2ODt10lu6W4FlHGV0","title":"Replicate user access token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-244","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lN643VNU06Hl7CRCHC2V","title":"Solr credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-245","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jwCwYlcSbY0ZMzEiFdZj","title":"Discord OAuth2 secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-246","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"BrZejjhsK6Fw67gCU0rk","title":"Kubernetes Docker secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-247","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"erYa5IJ9noKu1FjxxjJ5","title":"Sourcegraph access token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-248","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"9cHAt8hqihfnoOP6k9NB","title":"Workato API key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-249","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"tOM52NEtI0fqrAy6LOmg","title":"Google OAuth2 secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-250","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"qKEL6ajiK3T4jbxcjp3V","title":"DigitalOcean Spaces secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-251","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"WADIdPsvC7hyd4zb6tPJ","title":"DigitalOcean Spaces connection string detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-252","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"efegpCWgsfhVzHfCyPD9","title":"LaunchDarkly SDK key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-253","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"29bbdTZVN3x4hITNkAtt","title":"Zapier webhook url detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-254","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"tnJhwE1xpeymkpReGd6M","title":"GitLab enterprise server key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-255","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"P96LKvxa9L1tAhT6WfdE","title":"Rails Master Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-256","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"8Xq8XIcJq0TS9oyelxfi","title":"PubNub Secret Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-257","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"72skLrV1suEDLmwB2eR2","title":"Shopify Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-258","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"sxMORhXGIgwRCgh0JVJx","title":"New Relic Agent Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-259","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"DekPPqsOS4iVziUwtbHY","title":"New Relic API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-260","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mRgvGqBqeTRz7FHFbpeW","title":"HashiCorp Vault Unseal Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-261","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"28FgamVVJW1uRWHlGr6C","title":"Slack Webhook URL detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-262","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"M1ejW5KZCn9tgGzLyNaV","title":"Samsara API token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-263","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"5RPvhkjQ6XDUYdNpbPNc","title":"Dropbox Key token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-264","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"gWn4uwnYdl00NgI2t5GG","title":"Figma Personal Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-265","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"S0e1LZgCS1SvsZS1DnXI","title":"Azure Functions App Key Header detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-266","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"C4nqUrs34GcyLuVeYSI1","title":"Azure Functions App Key Query Parameter detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-267","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"c858kXx6a8KxcMxbqH4m","title":"Jenkins API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-268","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"PVfDDFtoXHyfGmm7dYeL","title":"Nessus Agent Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-269","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"eeZMZCS7EF2sWFQ6ZrOm","title":"VISA Basic Authentication Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-270","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"MTKKsc4jSLxBrh98WMhB","title":"OpenAI Project API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-271","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"F0ovv2qlg8vNdsZBBpgI","title":"Midtrans API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-272","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"zSudojRVk9dnXZG58Flx","title":"Base64 Midtrans API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-273","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jF04PxnCsSOp0UKmtUjd","title":"Atlassian Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-274","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ciSQ1y5Lp8B73VSjD65a","title":"New Relic Insights Query Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-275","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mn6BzKIJCWPl1qByTu6X","title":"ASPNet Validation Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-276","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"VHuzcSXVs2I0hLuTMmr4","title":"ASPNet Decryption Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-277","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0Wra5xwx76WFIw3txNeB","title":"InfluxDB Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-278","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"XqveCS5MgpJsFQ7Kbdmo","title":"New Relic Insights Insert Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-279","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"kmd5g6qlH6KNucODqyEq","title":"Prefixed New Relic Insights Insert Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-280","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0DwMdThxqeNMKmG0LNmd","title":"MSSQL Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-281","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"5cR90LcsXDjycD3LYFbe","title":"MSSQL Connection String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-282","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"M9vberpgfFy2e1uRTUD5","title":"Cloudinary API Key URL detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-283","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"SqoRlhGxH9Uw3Oy1lVEk","title":"Cloudinary API Key Config detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-284","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"UJQKwlSCqFGe88dxqixP","title":"Google OAuth2 token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-285","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"pzjWMtNmDCgFabTdASAw","title":"Freshdesk API Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-286","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"MvTPVKVE4tiY2EX9VZY0","title":"Grafana Cloud API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-287","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"N9UO9Vr0xLmxgKXc1laj","title":"Base64 AWS IAM Access Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-288","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"BsJzTP6IQZhQa6cquptF","title":"Aiven API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-289","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"SbjugsBVx49mVMin05nv","title":"Anthropic Admin Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-290","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"CFiirqYpgy96LNFs5d3O","title":"CircleCI Project Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-291","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"SIXrTppCg1Xta1UeHCzu","title":"Tencent Cloud Secret ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-292","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"eHFEa49skJfRMVrFxHhL","title":"Azure API Management Repository Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-293","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"BVeZMT4o2aV3rztjnMNL","title":"Azure API Management Subscription Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-294","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"S9bH8LCfey3jrR4EIzqQ","title":"Azure App Configuration Connection String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-295","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"uWs98ATXvMAsfBCQNuro","title":"Azure Communication Services Connection String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-296","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"uddgpfcrTHxttndGMU3q","title":"Azure Batch Key Identifiable detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-297","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"xSGvBeZk0Cw58Jda7v3n","title":"Azure Cosmosdb Key Identifiable detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-298","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"vAKYDcUeITwj241359S8","title":"Azure SignalR Connection String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-299","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"QjPDfOFKzWLJJSVFB20a","title":"Azure Entra ID Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-300","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"DgnEMRmWWoLXq4tvqsWV","title":"Azure Search Admin Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-301","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EJEz0w5n0Sr8dgraEbzz","title":"EasyPost API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-303","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"22EDOIdlYpG3lEy2u5e8","title":"MongoDB credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-304","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"G03onXQmW4BqeOjstf2g","title":"Trendmicro Cloudone Apikey v2 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-305","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"aGyw65p9gNZkI669pCCi","title":"Slack Configuration Refresh Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-306","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"I5mWDyPKfhgFOuMzuTSQ","title":"DigitalOcean OAuth Application Token v1 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-307","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"UgHvcz99dSeyNBcRwAl3","title":"DigitalOcean Personal Access Token v1 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-308","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"x1Gnskr4WcdwGQJjW8e2","title":"DigitalOcean Refresh Token v1 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-309","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Vv33ycMsQe5GFwfU7mmE","title":"FTP Credentials Assignment detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-310","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"oCl8AgRvrMM3H9zNobDr","title":"Amqp Assignment detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-311","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lm4Oot2v8viQbPuYEpGD","title":"Sourcegraph Access Token v1 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-312","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"x0V1OvUe8JCjPr5Ahfns","title":"Sourcegraph Access Token v3 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-313","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jvu9oBjxpTvr0bocr6Nn","title":"Dropbox Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-314","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lKX3W6jbH2e4ExYFIZsP","title":"PostgreSQL Connection String detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-315","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"B1TwNDlk5IxEKJwXJyK3","title":"Slack Workflow Webhook URL detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-316","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"BjI1ckgIBkG6VRdyLqYl","title":"Google OAuth2 ID detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-317","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"kkPVAS7j6SA0IczuWZF2","title":"HashiCorp Vault Batch Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-318","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"5MxALmA940TWhM5x11dp","title":"HashiCorp Vault Recovery token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-319","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"C7bEhiZG3HM55w8Q73O8","title":"Groq API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-320","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"qqeGdeEhgiQkYAXVwBJA","title":"Artifactory Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-321","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"lrXnJpiP6nfOjVfdAlxP","title":"Google OAuth Refresh token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-322","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"3uP9rqgXfxYG974iq0DS","title":"GitLab Deploy Token was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-323","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EWeCHsUu2gTXsBeddC2P","title":"GitLab Runner Authentication Token was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-324","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"s7o4efuTNL9UgXfJiXg6","title":"GitGuardian Internal Monitoring Key was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-325","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"rGgZjMP0X9IULISLOnhq","title":"Shippo API token was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-326","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"7sisEJlKMX9Kq0k4DUbe","title":"Infracost API Key was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-327","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Zbi2EProqpGTm3uxMaUg","title":"Vapi API Key was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-328","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yeQohIF1s8ZWk5xF6hNu","title":"Brave Search API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-329","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"Mp8dITAoXG8lExe3lk3a","title":"Dify API Key was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-330","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ZvA7KxIGkhfSFIfBWVlO","title":"Linear Personal API key was detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-331","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"2SyV4XykXjLcrFQxyhMS","title":"Trendmicro Cloudone Apikey v1 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-332","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"qgYt2FL5yqIInkPD44lm","title":"Airtable API Key v1 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-333","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"fKNfFQGR2sbV0A9AF90o","title":"Gitlab Personal Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-334","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"9OQW0bjiuYMCABPeVI6c","title":"Artifactory Reference Token With Host detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-336","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"J2zK2Okv0l5vh4gCe7Ni","title":"New Relic API Service Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-337","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ItIBr3XPj57D6AYVfejx","title":"Artifactory Basic Auth Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-338","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"oO8LtpljhHQn5ztFFXUR","title":"Datadog Secret detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-339","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"ossn9iz9mZq0glStTWXf","title":"Hashicorp Vault AppRole Authentication detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-340","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"AhfEpDxBHHSnvKIry1rU","title":"Snowflake Connector Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-341","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"9wDwjCU1kHM9Vo77IEPo","title":"Artifactory Reference Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-342","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"60rTdn3lKz9bua8ZFhjh","title":"Azure Logic App Shared Access Signature detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-343","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"FBRTMNMCWMdMObNnIoAZ","title":"Gitlab Trigger Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-344","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"RwgwoXy4wRTxo0Rd53ml","title":"Laravel App Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-345","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jqvSBsh3eS30oHRjKEsg","title":"Langfuse Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-346","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"pJqQfZdZthTaZMQnN4m8","title":"Alchemy API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-347","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"7ubUvl3agWhQu1M9dWT3","title":"Alchemy API Key V2 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-348","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"i2rL66SeY4SFgtW2gbHD","title":"Azure DevOps Personal Access Token with Organization detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-349","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"7dN40C4gYWf3SSWewrdF","title":"Azure Event Grid Access Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-350","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"93HoUfCYWmRhnChCv0G4","title":"ASP.NET Decryption Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-351","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"3iDXX5fFPdhfSFT7ADMj","title":"Firecrawl API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-352","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"vdv7S9xOvveQK2ms5pBr","title":"GitLab Feature Flags Client Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-353","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"PedC1WqMxsyYxfECK5OI","title":"IBM API Connect credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-354","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"9HxlowBHqVqN33Ntq2bo","title":"IBM COS HMAC credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-355","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"LfPsXZJP45nu0WMCrcpy","title":"Checkout.com Sandbox API Secret Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-356","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"WELPAzjGEGNKdb9UVI2X","title":"Contributed Systems Sidekiq API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-357","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"TQywazmBIYQ56PNjMdRH","title":"Duffel API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-358","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0kJWTMbpMgiVJMG0FCl6","title":"Elliptic Curve Private Key Base64 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-359","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"w5EFu7NC9oMJeYPYlVEV","title":"Elliptic Curve Private Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-360","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"xVTlSuVMr5TTIAS3jUyM","title":"Okta OAuth 2.0 Client Credentials with Host detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-361","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"axPYQ9I8kzVd4VDusFJd","title":"Llama Cloud API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-362","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"E0rQVaVXV9viBegnQt16","title":"OpenAI Project API Key V2 detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-363","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"FzdcSz7w3ywHFxhMA1qq","title":"OpenRouter API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-364","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yCcCW0XRJT27fQMgHDBD","title":"PayPal OAuth2 Keys detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-365","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"kpH9vsa0t8lk7OeRvmkQ","title":"VirusTotal API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-366","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"dZlz1of3Qb4oqxgnUCmk","title":"Ubidots API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-367","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"GcxTjvzYEFmpVndqn3bz","title":"Resend API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-368","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"sHj62kLSpSMP5jCFz0bp","title":"Cursor API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-369","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EWdhG1sP53pNpFbX2ETe","title":"E2B API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-370","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"za7J67HeyKMmjZjjfPXH","title":"GitLab Runner Registration Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-371","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"CfTxtd3xnmB6SEKfveR9","title":"PostHog Private API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-372","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"zOYyuCJnuyeJd8X3hlCg","title":"PostHog Public API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-373","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"EAe4dw9OE3ht08WxCDqx","title":"Clerk Secret Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-374","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"2HPzXQgu4YhJeIibrotb","title":"Mercado Pago Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-375","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"jz5dXrQLfHt9ocehgoBr","title":"Discord Webhook URL detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-376","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"yuIwyuGUNT8VJMpYhDvG","title":"GitHub Fine-Grained Personal Access Token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-377","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"OSRKVHlbeGASOg12rKAm","title":"Anthropic API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-378","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"nEfkbx2xtvcEv89KTVNx","title":"Oracle Credentials detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-379","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"TgPqTqAckPwI0mVkAj45","title":"Azure SAS URL detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-382","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0z5wIwWqotBKGxnYzuez","title":"Coveo API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-383","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"0f9dqv4KyVNGpRvPNWVI","title":"Elasticsearch API Key detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-384","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"DyFQ1mA8H9dTOPBYz2TO","title":"Zoho OAuth token detected in code","pathname":"/appsec-rules/secrets-security/appsec-secret-385","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Secrets Security"}]},{"id":"mRuG9bLowOwQ077eSSxa","title":"SAST","pathname":"/appsec-rules/sast","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"t8gtZJgb2yC9bJfv6Ik4","title":"3rd party security weakness found in code","pathname":"/appsec-rules/sast/appsec-sast-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"SAST"}]},{"id":"LmmhOOOQWTQopC2gY6TF","title":"Vulnerabilities","pathname":"/appsec-rules/vulnerabilities","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"YbEgwdxkp0rcFD1Q0GtY","title":"Vulnerability found in code","pathname":"/appsec-rules/vulnerabilities/appsec-vul-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Vulnerabilities"}]},{"id":"3u93dDV852TxZ5MFnq5P","title":"Vulnerability found in code","pathname":"/appsec-rules/vulnerabilities/appsec-vul-2","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Vulnerabilities"}]},{"id":"d4pZYLe9XDLk3XLNiR8N","title":"License Compliance","pathname":"/appsec-rules/license-compliance","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"t8I3eu6X55f7PX3JwWIq","title":"Weak copyleft license found in code","pathname":"/appsec-rules/license-compliance/appsec-lic-3","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"License Compliance"}]},{"id":"7aJjCzjJKJvSpB0hPyuj","title":"Strong copyleft license found in code","pathname":"/appsec-rules/license-compliance/appsec-lic-4","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"License Compliance"}]},{"id":"5kxAVWEUVGGIcjsIQwYm","title":"Non permissive license found in code","pathname":"/appsec-rules/license-compliance/appsec-lic-5","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"License Compliance"}]},{"id":"PfJqXolFN1B6mQapCWGN","title":"Malicious Packages","pathname":"/appsec-rules/malicious-packages","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"}]},{"id":"ids82sexhkIugIMdlA98","title":"Malicious open-source package detected in code","pathname":"/appsec-rules/malicious-packages/appsec-mal-1","siteSpaceId":"sitesp_sv57o","description":"","breadcrumbs":[{"label":"Alerts & Rules","icon":"alarm-clock"},{"label":"AppSec Rules","icon":"alarm-clock"},{"label":"Malicious Packages"}]},{"id":"hf5SrBp26EEDZPH6p0Me","title":"Discovery Catalog","pathname":"/discovery-catalog","siteSpaceId":"sitesp_6PeY2","description":"","breadcrumbs":[{"label":"Catalogs","icon":"album-collection"},{"label":"Discovery Catalog","icon":"album-collection"}]},{"id":"a969285fdd611b85dd841936dc24e2cc6ae76906","title":"Alibaba Cloud Services","pathname":"/discovery-catalog/readme/alibaba-cloud","siteSpaceId":"sitesp_6PeY2","description":"","breadcrumbs":[{"label":"Catalogs","icon":"album-collection"},{"label":"Discovery Catalog","icon":"album-collection"},{"label":"Discovery Catalog"}]},{"id":"69a839101537d9ac713e824c325945b533060e74","title":"AWS Services","pathname":"/discovery-catalog/readme/aws","siteSpaceId":"sitesp_6PeY2","description":"","breadcrumbs":[{"label":"Catalogs","icon":"album-collection"},{"label":"Discovery Catalog","icon":"album-collection"},{"label":"Discovery Catalog"}]},{"id":"0c629bcedb5d71f7557887b50b1b4452079c8a97","title":"Azure Services","pathname":"/discovery-catalog/readme/azure","siteSpaceId":"sitesp_6PeY2","description":"","breadcrumbs":[{"label":"Catalogs","icon":"album-collection"},{"label":"Discovery Catalog","icon":"album-collection"},{"label":"Discovery Catalog"}]},{"id":"e38cd77bd8af1e1567179c346e3bd19111249abd","title":"GCP Services","pathname":"/discovery-catalog/readme/gcp","siteSpaceId":"sitesp_6PeY2","description":"","breadcrumbs":[{"label":"Catalogs","icon":"album-collection"},{"label":"Discovery Catalog","icon":"album-collection"},{"label":"Discovery Catalog"}]},{"id":"62c6b8194f40b6502748b916f2e23486bfdf1cb9","title":"OCI Services","pathname":"/discovery-catalog/readme/oci","siteSpaceId":"sitesp_6PeY2","description":"","breadcrumbs":[{"label":"Catalogs","icon":"album-collection"},{"label":"Discovery Catalog","icon":"album-collection"},{"label":"Discovery Catalog"}]},{"id":"19e700c74e4c0984a1b2d3074326022b51398bc3","title":"Event-based Asset Ingestion (EAI)","pathname":"/discovery-catalog/readme/eai","siteSpaceId":"sitesp_6PeY2","description":"","breadcrumbs":[{"label":"Catalogs","icon":"album-collection"},{"label":"Discovery Catalog","icon":"album-collection"},{"label":"Discovery Catalog"}]},{"id":"H5fiXk7gVY8PkJrOTlmx","title":"Cortex Compliance","pathname":"/compliance","siteSpaceId":"sitesp_4Yy9A","description":"Access compliance dashboards, reports, certifications, and marketplace content packs.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Compliance","icon":"circle-share-nodes"}]},{"id":"genDTUfGG3QPktuIfxmk","title":"About the Cortex Gateway","pathname":"/gateway-guide","siteSpaceId":"sitesp_gfPzq","description":"Learn how Cortex Gateway centrally manages tenants, users, roles, and user groups.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"zbiSUtlv8R7XGpUqPMX2","title":"Activate a tenant","pathname":"/gateway-guide/activate-a-tenant","siteSpaceId":"sitesp_gfPzq","description":"Learn how to activate your Cortex tenant.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"s8vJauhKCizf4cAhd3Fj","title":"Activate Cortex XDR tenant","pathname":"/gateway-guide/activate-a-tenant/activate-cortex-xdr-tenant","siteSpaceId":"sitesp_gfPzq","description":"Learn how to activate your Cortex XDR tenant.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"Activate a tenant"}]},{"id":"FKVZOHPNo4810G19QyiJ","title":"Activate Cortex XSIAM tenant","pathname":"/gateway-guide/activate-a-tenant/activate-cortex-xsiam-tenant","siteSpaceId":"sitesp_gfPzq","description":"Learn how to activate your Cortex XSIAM tenant.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"Activate a tenant"}]},{"id":"CKmwX936T2qLU2XxwUnl","title":"Activate Cortex XSOAR tenant","pathname":"/gateway-guide/activate-a-tenant/activate-cortex-xsoar-tenant","siteSpaceId":"sitesp_gfPzq","description":"Learn how to activate your Cortex XSOAR tenant.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"Activate a tenant"}]},{"id":"nUQBMR4uxcO2EQWIRA21","title":"Activate Cortex AgentiX","pathname":"/gateway-guide/activate-a-tenant/activate-cortex-agentix","siteSpaceId":"sitesp_gfPzq","description":"Activate a Cortex AgentiX tenant through Cortex Gateway and configure its name, region, and subdomain.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"Activate a tenant"}]},{"id":"ZxA16OwccQllqv2ppEms","title":"Users and roles in Cortex","pathname":"/gateway-guide/users-and-roles-in-cortex","siteSpaceId":"sitesp_gfPzq","description":"Set up and configure roles and user groups in the Cortex tenant and Cortex Gateway. Configure authentication and manage users.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"7j4ZfuqAOATwo7ZBjeM8","title":"User management","pathname":"/gateway-guide/user-management","siteSpaceId":"sitesp_gfPzq","description":"Manage users in Cortex Gateway or the Cortex tenant.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"cJSHiFucclAlSBrPbziC","title":"Manage users in Cortex Gateway","pathname":"/gateway-guide/user-management/manage-users-in-cortex-gateway","siteSpaceId":"sitesp_gfPzq","description":"Add user roles, disable users, hide users, and deactivate users in Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"User management"}]},{"id":"h8lmFRm5bQZft2m4JVSh","title":"FedRAMP security configuration for top-level admin accounts","pathname":"/gateway-guide/fedramp-security-configuration-for-top-level-admin-accounts","siteSpaceId":"sitesp_gfPzq","description":"Configure FedRAMP administrative roles, privileged access, and security controls in Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"rxvKBxEKRdds5zRlIkB8","title":"Roles management","pathname":"/gateway-guide/roles-management","siteSpaceId":"sitesp_gfPzq","description":"Configure roles in the Cortex tenant or Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"eGGSRTYv9y3UQfim7Ldk","title":"Next steps","pathname":"/gateway-guide/roles-management/next-steps","siteSpaceId":"sitesp_gfPzq","description":"Configure roles in the Cortex tenant or Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"Roles management"}]},{"id":"FYmmjyDg1TuO1qZbvozI","title":"Predefined roles in Cortex Gateway","pathname":"/gateway-guide/roles-management/predefined-roles-in-cortex-gateway","siteSpaceId":"sitesp_gfPzq","description":"Review the predefined roles in the Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"Roles management"}]},{"id":"49KG8tVycfE1NuyEFzjl","title":"Manage roles in Cortex Gateway","pathname":"/gateway-guide/roles-management/manage-roles-in-cortex-gateway","siteSpaceId":"sitesp_gfPzq","description":"View, create, edit, and delete roles in Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"},{"label":"Roles management"}]},{"id":"iC4RCUXxePq12ZTOQUHP","title":"User group management","pathname":"/gateway-guide/user-group-management","siteSpaceId":"sitesp_gfPzq","description":"Create user groups, and assign roles and users to further refine your requirements, in Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"VB6rNg4vob8IUAYWVXyB","title":"Egress configurations","pathname":"/gateway-guide/egress-configurations","siteSpaceId":"sitesp_gfPzq","description":"Configure, approve, and manage tenant egress paths for external services in Cortex Gateway.","breadcrumbs":[{"label":"Compliance & Connectivity","icon":"circle-share-nodes"},{"label":"Gateway Guide","icon":"circle-share-nodes"}]},{"id":"7FVIE67LhNmDNdcTJpne","title":"Cortex Commands Overview","pathname":"/cortex-commands-guide","siteSpaceId":"sitesp_ChZCa","description":"Use Cortex commands to investigate, respond, and manage Cortex platform data.","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"AIH5LapjigmP8PM3Val4","title":"Action Commands","pathname":"/cortex-commands-guide/action-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"CTvmkSZa0qO00ShvvD2D","title":"Analytics Commands","pathname":"/cortex-commands-guide/analytics-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"K4jFRj34V2lvj2APCSdR","title":"API Keys Commands","pathname":"/cortex-commands-guide/api-keys-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"CECuN58BV2hkL6Yg2aeZ","title":"AppSec Commands","pathname":"/cortex-commands-guide/appsec-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"IlNDIZNfATOtnTV1NMQ6","title":"Asset Commands","pathname":"/cortex-commands-guide/asset-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"cIOD2FpjLLq9oKJOfcoJ","title":"Audit Commands","pathname":"/cortex-commands-guide/audit-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"6dbskhZlcls5hkfzeDHl","title":"BIOC Commands","pathname":"/cortex-commands-guide/bioc-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"Sw5OBVKxyucFGEgZ4Fdm","title":"Case Commands","pathname":"/cortex-commands-guide/case-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"aJoIk2w93U3cyz09XMgT","title":"Correlation Rule Commands","pathname":"/cortex-commands-guide/correlation-rule-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"pILoDsgDuH5Sur2klOaI","title":"Coverage Commands","pathname":"/cortex-commands-guide/coverage-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"kWeuSPIb0pPvivx5e5O2","title":"Dataset Commands","pathname":"/cortex-commands-guide/dataset-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"q9k51myfdRkPGPLeIBmt","title":"Distribution Commands","pathname":"/cortex-commands-guide/distribution-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"8sCFy2Wk4oKklGHzeEXc","title":"Endpoint Commands","pathname":"/cortex-commands-guide/endpoint-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"QF4peKrh68izBG0AXQ3I","title":"Exceptions Commands","pathname":"/cortex-commands-guide/exceptions-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"TdVYKXD0gX92dX5UqiiB","title":"Exclusions Commands","pathname":"/cortex-commands-guide/exclusions-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"xXeU6fcsdrlHeA8MAcRd","title":"File Commands","pathname":"/cortex-commands-guide/file-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"NSgl0mpmqnS7MPcMdiLd","title":"Findings Commands","pathname":"/cortex-commands-guide/findings-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"iYKvCSbWR6j7VvxPiFIW","title":"Groups Commands","pathname":"/cortex-commands-guide/groups-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"HpTkq7Y51oZ2A9fBKoTa","title":"Hash Exceptions Commands","pathname":"/cortex-commands-guide/hash-exceptions-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"TtwAfn0nfg94Mqlm7Gyv","title":"Indicators Commands","pathname":"/cortex-commands-guide/indicators-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"DpuEGM6dtBXJpREakHYV","title":"Issues Commands","pathname":"/cortex-commands-guide/issues-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"1Pwl6JOZGjucUzmPnH3K","title":"Playbooks Commands","pathname":"/cortex-commands-guide/playbooks-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"wwbVg0zRp4odRypjIEgC","title":"RCS Commands","pathname":"/cortex-commands-guide/rcs-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"ASuopRdPrCXdSFmgNqW3","title":"Risk Commands","pathname":"/cortex-commands-guide/risk-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"5GbJaO6wK4Ylj8vtbYsR","title":"Scanner Commands","pathname":"/cortex-commands-guide/scanner-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"aVInRODoV8MfA0UQCOnf","title":"Script Commands","pathname":"/cortex-commands-guide/script-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"18jPA3URPKutQIXL9WoS","title":"System Commands","pathname":"/cortex-commands-guide/system-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"kyNe4llnVQWUi5TjvGc7","title":"Timeline Commands","pathname":"/cortex-commands-guide/timeline-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"53iYXNNlsdAGONUzfWyj","title":"Triage Commands","pathname":"/cortex-commands-guide/triage-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"h4KhzgqMW4IhNk0Z2FYH","title":"User Commands","pathname":"/cortex-commands-guide/user-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"VClqO8RO0SYDglAlbCO6","title":"Vulnerability Commands","pathname":"/cortex-commands-guide/vulnerability-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"R6FWCUIyLwFpzlSNc6Jc","title":"War Room Commands","pathname":"/cortex-commands-guide/war-room-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"3i0XtlbAvGDqxreTNber","title":"XQL Commands","pathname":"/cortex-commands-guide/xql-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"PUNDi5czJ52QTmtAilGI","title":"XQL Library Commands","pathname":"/cortex-commands-guide/xql-library-commands","siteSpaceId":"sitesp_ChZCa","breadcrumbs":[{"label":"Cortex Commands","icon":"rectangle-terminal"},{"label":"Cortex Commands Guide","icon":"rectangle-terminal"}]},{"id":"QiIXKgT5cM5aSAxP6BdK","title":"Get started with MCP integration development","pathname":"/mcp-integration-contributor-guide","siteSpaceId":"sitesp_VaIzh","breadcrumbs":[{"label":"Integrations","icon":"plug"},{"label":"MCP Integration Contributor Guide","icon":"mcp"}]},{"id":"i5eil3HZ3Es8K1JT5cID","title":"Required MCP commands","pathname":"/mcp-integration-contributor-guide/required-mcp-commands","siteSpaceId":"sitesp_VaIzh","breadcrumbs":[{"label":"Integrations","icon":"plug"},{"label":"MCP Integration Contributor Guide","icon":"mcp"}]},{"id":"vdCx54rBDa9dQZPM1vep","title":"MCPApiModule","pathname":"/mcp-integration-contributor-guide/mcpapimodule","siteSpaceId":"sitesp_VaIzh","breadcrumbs":[{"label":"Integrations","icon":"plug"},{"label":"MCP Integration Contributor Guide","icon":"mcp"}]},{"id":"oBJHPlM9R7WNo0zbP68o","title":"Python implementation","pathname":"/mcp-integration-contributor-guide/python-implementation","siteSpaceId":"sitesp_VaIzh","breadcrumbs":[{"label":"Integrations","icon":"plug"},{"label":"MCP Integration Contributor Guide","icon":"mcp"}]},{"id":"kiuePBssFWh2HaOMM0g7","title":"Authentication patterns","pathname":"/mcp-integration-contributor-guide/authentication-patterns","siteSpaceId":"sitesp_VaIzh","breadcrumbs":[{"label":"Integrations","icon":"plug"},{"label":"MCP Integration Contributor Guide","icon":"mcp"}]},{"id":"6R4zo22XTw2Np6W0LM3F","title":"Vendor-specific customizations","pathname":"/mcp-integration-contributor-guide/vendor-specific-customizations","siteSpaceId":"sitesp_VaIzh","breadcrumbs":[{"label":"Integrations","icon":"plug"},{"label":"MCP Integration Contributor Guide","icon":"mcp"}]},{"id":"DQmlTjQzI6cvvJTS8pMC","title":"Test your integration","pathname":"/mcp-integration-contributor-guide/test-your-integration","siteSpaceId":"sitesp_VaIzh","breadcrumbs":[{"label":"Integrations","icon":"plug"},{"label":"MCP Integration Contributor Guide","icon":"mcp"}]},{"id":"vw10LQ67NyTQlu5jIywm","title":"GCP Manual Onboarding","pathname":"/google-cloud-platform-manual-onboarding","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"}]},{"id":"RMLvaAAmoctVbtlnU10F","title":"GCP Manual Onboarding Guide - Project Scope","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"}]},{"id":"L2lT1ttVm78HhMjiPIFP","title":"Overview of the Onboarding Process","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/overview-of-the-onboarding-process","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"9FVSOYeE5Or9os2GlSDn","title":"Prerequisites","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/prerequisites","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"8d9CwWuOHR6Zuf7JreFs","title":"Phase 1: GCP onboarding wizard","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/phase-1-gcp-onboarding-wizard","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"bLsA7CFg6cleTUFldShP","title":"Phase 2: Platform service accounts","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/phase-2-platform-service-accounts","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"Gl9CqZSamM7ZY1IV1Ssa","title":"Phase 3: Scanner Service Account","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/phase-3-scanner-service-account","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"w1cyGrBC9TflBWrlV3Rr","title":"Phase 4: Audit Logs","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/phase-4-audit-logs","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"gHfVsxmf3spHDOHUMuK7","title":"Phase 5: Complete the GCP onboarding wizard in Cortex","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/phase-5-complete-the-gcp-onboarding-wizard-in-cortex","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"gcMul9gDmEqFeKXGEqPf","title":"Manage configuration changes","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/manage-configuration-changes","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"hnAGTTNtdVWCzczwAzqW","title":"Configuration values reference","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-project-scope/configuration-values-reference","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Project Scope"}]},{"id":"6UqSXPkJ0xAeRfFXy4Su","title":"GCP Manual Onboarding Guide - Folder Scope","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"}]},{"id":"cVETPuejkzcReNJ0zZB7","title":"Overview of the onboarding process","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/overview-of-the-onboarding-process","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"AfGX9PEgHyOdnhfujmAO","title":"Prerequisites","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/prerequisites","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"sum8slSwB9fG4wSBhHwe","title":"Phase 1: GCP onboarding wizard","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/phase-1-gcp-onboarding-wizard","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"wPrFGqJxP78lGDva4iuj","title":"Phase 2: Platform service accounts","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/phase-2-platform-service-accounts","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"ygby75xfieDLmk0RdTEu","title":"Phase 3: Scanner Service Account","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/phase-3-scanner-service-account","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"974LqXgBla0tzOKYJBIH","title":"Phase 4: Audit Logs","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/phase-4-audit-logs","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"z2J5IWBZRCw50bh642z2","title":"Phase 5: Complete the GCP onboarding wizard in Cortex","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/phase-5-complete-the-gcp-onboarding-wizard-in-cortex","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"JnCR2sKx2wmloou8XonP","title":"Manage configuration changes","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/manage-configuration-changes","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"dqmljIa34fWENSPL5flV","title":"Configuration values reference","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-folder-scope/configuration-values-reference","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Folder Scope"}]},{"id":"DvFbFLMk1aJkTm3lktEl","title":"GCP Manual Onboarding Guide - Organization Scope","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"}]},{"id":"TjuYEJQ0OtkRuLhOeCag","title":"Overview of the onboarding process","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/overview-of-the-onboarding-process","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"ENUVjriHN89G7GQJe0ir","title":"Prerequisites","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/prerequisites","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"HETu6kscqD3V2EmIogos","title":"Phase 1: GCP onboarding wizard","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/phase-1-gcp-onboarding-wizard","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"Ec9TYnZvsCKiyeQdARc1","title":"Phase 2: Platform service accounts","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/phase-2-platform-service-accounts","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"ibz8un6kvfPjIRuRgK5y","title":"Phase 3: Scanner Service Account","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/phase-3-scanner-service-account","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"mAfLh9ygJZ7WIFdMCjrF","title":"Phase 4: Audit Logs","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/phase-4-audit-logs","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"qoGLkGSnC2eGqaW1KPqf","title":"Phase 5: Complete the GCP onboarding wizard in Cortex","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/phase-5-complete-the-gcp-onboarding-wizard-in-cortex","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"oaI9qwG52HkritvH0Q30","title":"Manage configuration changes","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/manage-configuration-changes","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"jxmhNNDtjTZq5ubUkjEg","title":"Configuration values reference","pathname":"/google-cloud-platform-manual-onboarding/gcp-manual-onboarding/gcp-manual-onboarding-guide-organization-scope/configuration-values-reference","siteSpaceId":"sitesp_HAoQl","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Google Cloud Platform Manual Onboarding"},{"label":"GCP Manual Onboarding"},{"label":"GCP Manual Onboarding Guide - Organization Scope"}]},{"id":"93G4hFq2qdrlqLHtONgY","title":"AWS Manual Onboarding Guide","pathname":"/amazon-web-services-manual-onboarding","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"}]},{"id":"CsQCSjAmGcJrpO9zPA6Y","title":"Overview of the Onboarding Process","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/overview-of-the-onboarding-process","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"sVsXobgBuyXpjuWhFFnt","title":"Prerequisites","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/prerequisites","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"WIVy5j4u1A6wjsipBbMP","title":"Target AWS Resources Overview","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/target-aws-resources-overview","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"4cEjsjCEAZjafV3NuWUG","title":"Phase 1: Create AWS cloud instance in Cortex","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/phase-1-create-aws-cloud-instance-in-cortex","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"8dCBnJ5F9qbq8LhBO6RT","title":"Phase 2: Provision the AWS resources","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/phase-2-provision-the-aws-resources","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"wAUspSIa6lBEvabMgg6H","title":"Phase 3: Complete the onboarding wizard in Cortex","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/phase-3-complete-the-onboarding-wizard-in-cortex","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"UEiBwYROBkUJdG2GDZV4","title":"Manage configuration changes","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/manage-configuration-changes","siteSpaceId":"sitesp_r5NoH","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"UV1YmawimJmRBWtmpZTz","title":"Offboarding and resource decommissioning (optional)","pathname":"/amazon-web-services-manual-onboarding/aws-manual-onboarding-guide/offboarding-and-resource-decommissioning-optional","siteSpaceId":"sitesp_r5NoH","description":"To decommission all manually created resources, remove them in the reverse order that they were created (Step 2.7 → Step 2.1):","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Amazon Web Services Manual Onboarding"},{"label":"AWS Manual Onboarding Guide"}]},{"id":"MiHk1AiMhmpfbcFrrNAx","title":"Azure Manual Onboarding Guide","pathname":"/microsoft-azure-manual-onboarding","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"}]},{"id":"tYqbcyiZd7E0D1A0hPzm","title":"Azure Manual Onboarding: Subscription Scope","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"}]},{"id":"svYCDXB8uqjX1NJl2yqE","title":"Prerequisites","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/prerequisites","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"nRaI9ZSC8UNUZw83jlb5","title":"Phase 1: Create Azure cloud instance in Cortex","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/phase-1-create-azure-cloud-instance-in-cortex","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"GROUkKQe7E5dN0xRiBnR","title":"Phase 2: Platform Identity and Base Role","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/phase-2-platform-identity-and-base-role","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"JgRvTNf2O4JLdwj1LBhC","title":"Phase 3: Create security capability roles","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/phase-3-create-security-capability-roles","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"fz1n6pwbV2AKwnxOuCf5","title":"Phase 4: Audit Logs","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/phase-4-audit-logs","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"oae5ZBRhyyRAPyiwThIa","title":"Phase 5: Complete the Azure onboarding wizard in Cortex","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/phase-5-complete-the-azure-onboarding-wizard-in-cortex","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"R7kWPcIe7S5PMsqQXtKL","title":"Configuration values reference","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/configuration-values-reference","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"I8FIuytPytdGI5MqsgnX","title":"Offboarding and resource decommissioning (optional)","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-subscription-scope/offboarding-and-resource-decommissioning-optional","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Subscription Scope"}]},{"id":"pUN2gHRuV5PoNPauWQ5R","title":"Azure Manual Onboarding: Management group or tenant scope","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"}]},{"id":"xI6uE9UrCtfp7YTPwrdy","title":"Prerequisites","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/prerequisites","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]},{"id":"s6hGBh9UqAGhdp1fJo7r","title":"Phase 1: Create Azure cloud instance in Cortex","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/phase-1-create-azure-cloud-instance-in-cortex","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]},{"id":"gTFBfAkD3agBIJL138VE","title":"Phase 2: Platform Identity and Base Role","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/phase-2-platform-identity-and-base-role","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]},{"id":"SQoEA0MDi8tfH1rQKrIy","title":"Phase 3: Create security capability roles","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/phase-3-create-security-capability-roles","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]},{"id":"Z4soEZKhB1icpaAD69e1","title":"Phase 4: Audit Logs","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/phase-4-audit-logs","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]},{"id":"qA5jNk05XJEiGxtOIcxt","title":"Phase 5: Complete the Azure onboarding wizard in Cortex","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/phase-5-complete-the-azure-onboarding-wizard-in-cortex","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]},{"id":"I4TQeFnpCTcdSlTXOI5d","title":"Reference: Summary of resources created","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/reference-summary-of-resources-created","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]},{"id":"GX1cafVOK1pd6Kb0tD3K","title":"Offboarding and resource decommissioning (optional)","pathname":"/microsoft-azure-manual-onboarding/azure-manual-onboarding-guide/azure-manual-onboarding-management-group-or-tenant-scope/offboarding-and-resource-decommissioning-optional","siteSpaceId":"sitesp_gfwYQ","breadcrumbs":[{"label":"Manual Cloud Onboarding","icon":"display-arrow-down"},{"label":"Microsoft Azure Manual Onboarding"},{"label":"Azure Manual Onboarding Guide"},{"label":"Azure Manual Onboarding: Management group or tenant scope"}]}]}